Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Windows 7: TR/BProtector.Gen gefunden (https://www.trojaner-board.de/151909-windows-7-tr-bprotector-gen-gefunden.html)

Sascha84 02.04.2014 10:07

Windows 7: TR/BProtector.Gen gefunden
 
Hallo,

auf meinem Laptop hat AntiVir angeschlagen und den im Titel erwähnten Trojaner gefunden.
Könnt Ihr mir bitte helfen diesen wieder loszuwerden?

Hier alle notwendigen LOGS:

FRST

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by *** (administrator) on ***-PC on 02-04-2014 10:17:55
Running from C:\Users\***\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Systweak) C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
() C:\Program Files (x86)\Tor\tor.exe
() C:\QuickStartUtil\VAWinService.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
() C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe
() C:\QuickStartUtil\VAWinAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Just Develop It) C:\Program Files (x86)\MyPC Backup\BackupStack.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1212048 2012-06-07] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2907448 2012-07-13] (Synaptics Incorporated)
HKLM\...\Run: [SynLenovoGestureMgr] - C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [665400 2012-07-13] (Synaptics)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\btvstack.exe [1022592 2012-04-28] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\athbttray.exe [801920 2012-04-28] (Atheros Commnucations)
HKLM\...\Run: [UpdatePRCShortCut] - "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-27] (Intel Corporation)
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331_STI.EXE
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-06-06] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Intelligent Touchpad] - C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe [291272 2011-12-08] ()
HKLM-x32\...\Run: [VAWinAgent] - C:\QuickStartUtil\VAWinAgent.exe [45480 2012-06-04] ()
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31072 2008-10-25] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3500470793-3010870698-2953549641-1000\...\MountPoints2: {43da9052-a2bd-11e2-a0bd-74e543c281d2} - E:\SETUP.EXE
AppInit_DLLs: c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll => C:\ProgramData\BitGuard\2.7.1832.68\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\loader.dll [1958880 2013-11-18] ()
AppInit_DLLs:  c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll => c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll File Not Found
Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&CUI=UN21027430952571123&UM=2&ctid=CT3281675
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page =
SearchScopes: HKCU - DefaultScope {961278E3-DD21-4CA0-9854-530FD0117667} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3281675&CUI=UN21027430952571123&UM=2
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENN
SearchScopes: HKCU - {961278E3-DD21-4CA0-9854-530FD0117667} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3281675&CUI=UN21027430952571123&UM=2
BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

FireFox:
========
FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\lepkhuzj.default
FF user.js: detected! => C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\lepkhuzj.default\user.js
FF NewTab: hxxp://www.searchgol.com/?affID=121562&babsrc=NT_ss&mntrId=86D174E543C281D2
FF SearchEngineOrder.1: Search Gol
FF Homepage: hxxp://www.google.de/
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&SearchSource=2&CUI=UN24361450632449824&UM=2&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\lepkhuzj.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\lepkhuzj.default\searchplugins\BrowserProtect.xml
FF SearchPlugin: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\lepkhuzj.default\searchplugins\searchgol.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [32808 2013-06-19] (Just Develop It)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-21] (Intel Corporation)
R2 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-09-05] ()
R2 VideAceWindowsService; C:\QuickStartUtil\VAWinService.exe [91464 2011-03-25] ()
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [163456 2012-04-28] (Atheros)
S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [X]

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)
R3 LAD; C:\Windows\System32\DRIVERS\LAD.sys [8192 2012-01-13] (TODO: <Company name>)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [27960 2012-07-13] (Synaptics Incorporated)
U3 BcmSqlStartupSvc;
U2 CLKMSVC10_3A60B698;
U2 CLKMSVC10_C3B3B687;
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
U2 DriverService;
U2 iATAgentService;
U2 idealife Update Service;
U3 IGRS;
U2 IviRegMgr;
U2 Oasis2Service;
U2 PCCarerService;
U2 ReadyComm.DirectRouter;
U2 RichVideo;
U2 RtLedService;
U2 SeaPort;
U2 SoftwareService;
U3 SQLWriter;
S3 vm331avs; System32\Drivers\vm331avs.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-02 10:17 - 2014-04-02 10:18 - 00012467 _____ () C:\Users\***\Downloads\FRST.txt
2014-04-02 10:17 - 2014-04-02 10:17 - 02157056 _____ (Farbar) C:\Users\***\Downloads\FRST64.exe
2014-04-02 10:17 - 2014-04-02 10:17 - 00000000 ____D () C:\FRST
2014-04-02 10:16 - 2014-04-02 10:16 - 00000472 _____ () C:\Users\***\Downloads\defogger_disable.log
2014-04-02 10:16 - 2014-04-02 10:16 - 00000000 _____ () C:\Users\***\defogger_reenable
2014-04-02 10:15 - 2014-04-02 10:16 - 00050477 _____ () C:\Users\***\Downloads\Defogger.exe
2014-03-31 20:39 - 2014-03-31 20:39 - 00280768 _____ () C:\Windows\Minidump\033114-17487-01.dmp
2014-03-31 18:03 - 2014-03-31 18:03 - 00280768 _____ () C:\Windows\Minidump\033114-15912-01.dmp
2014-03-30 21:56 - 2014-03-30 21:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-27 20:07 - 2014-03-31 20:39 - 546198181 _____ () C:\Windows\MEMORY.DMP
2014-03-27 20:07 - 2014-03-31 20:39 - 00000000 ____D () C:\Windows\Minidump
2014-03-27 20:07 - 2014-03-27 20:07 - 00280768 _____ () C:\Windows\Minidump\032714-14554-01.dmp
2014-03-19 21:52 - 2014-03-21 19:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-16 20:45 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-16 20:45 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-16 20:45 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-16 20:45 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-16 20:45 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-16 20:45 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-16 20:45 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-16 20:45 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-16 20:45 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-16 20:45 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-16 20:45 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-16 20:45 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-16 20:45 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-16 20:45 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-16 20:45 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-16 20:45 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-16 20:45 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-16 20:45 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-16 20:45 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-16 20:45 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-16 20:45 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-16 20:45 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-16 20:45 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-16 20:45 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-16 20:45 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-16 20:45 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-16 20:45 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-16 20:45 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-16 20:45 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-16 20:45 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-16 20:45 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-16 20:45 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-16 20:45 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-16 20:45 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-16 20:45 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-16 20:45 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-16 20:45 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-16 20:45 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-16 20:45 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-16 20:45 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-16 20:45 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-16 20:45 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-16 20:45 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-16 20:45 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-16 20:45 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-16 20:45 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-16 20:45 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-16 20:45 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll

==================== One Month Modified Files and Folders =======

2014-04-02 10:18 - 2014-04-02 10:17 - 00012467 _____ () C:\Users\***\Downloads\FRST.txt
2014-04-02 10:17 - 2014-04-02 10:17 - 02157056 _____ (Farbar) C:\Users\***\Downloads\FRST64.exe
2014-04-02 10:17 - 2014-04-02 10:17 - 00000000 ____D () C:\FRST
2014-04-02 10:16 - 2014-04-02 10:16 - 00000472 _____ () C:\Users\***\Downloads\defogger_disable.log
2014-04-02 10:16 - 2014-04-02 10:16 - 00000000 _____ () C:\Users\***\defogger_reenable
2014-04-02 10:16 - 2014-04-02 10:15 - 00050477 _____ () C:\Users\***\Downloads\Defogger.exe
2014-04-02 10:16 - 2013-03-12 19:23 - 00000000 ____D () C:\Users\***
2014-04-02 10:16 - 2012-08-08 13:35 - 00699666 _____ () C:\Windows\system32\perfh007.dat
2014-04-02 10:16 - 2012-08-08 13:35 - 00149774 _____ () C:\Windows\system32\perfc007.dat
2014-04-02 10:16 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-02 10:15 - 2012-08-08 03:55 - 01347797 _____ () C:\Windows\WindowsUpdate.log
2014-04-02 10:11 - 2013-04-14 22:12 - 00003120 _____ () C:\Windows\System32\Tasks\Advanced System Protector_startup
2014-04-02 10:11 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-02 10:10 - 2009-07-14 06:51 - 00080160 _____ () C:\Windows\setupact.log
2014-04-01 16:43 - 2009-07-14 06:45 - 00031840 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-01 16:43 - 2009-07-14 06:45 - 00031840 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-31 22:11 - 2013-03-12 20:29 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-31 20:39 - 2014-03-31 20:39 - 00280768 _____ () C:\Windows\Minidump\033114-17487-01.dmp
2014-03-31 20:39 - 2014-03-27 20:07 - 546198181 _____ () C:\Windows\MEMORY.DMP
2014-03-31 20:39 - 2014-03-27 20:07 - 00000000 ____D () C:\Windows\Minidump
2014-03-31 20:38 - 2013-04-11 19:30 - 00000000 ____D () C:\Users\***\Documents\***
2014-03-31 20:38 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-31 18:03 - 2014-03-31 18:03 - 00280768 _____ () C:\Windows\Minidump\033114-15912-01.dmp
2014-03-31 18:03 - 2013-03-12 19:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-30 21:57 - 2014-03-30 21:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-27 20:07 - 2014-03-27 20:07 - 00280768 _____ () C:\Windows\Minidump\032714-14554-01.dmp
2014-03-24 22:48 - 2013-09-19 21:50 - 00000000 ____D () C:\Users\***\Desktop\Musik
2014-03-24 21:08 - 2013-03-12 20:24 - 00000000 ____D () C:\Users\***\Documents\Musik
2014-03-21 19:41 - 2014-03-19 21:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-17 21:25 - 2013-04-14 22:44 - 00000000 ____D () C:\Users\***\AppData\Local\CrashDumps
2014-03-17 21:19 - 2009-07-14 06:45 - 00427544 _____ () C:\Windows\system32\FNTCACHE.DAT

Some content of TEMP:
====================
C:\Users\***\AppData\Local\Temp\AskSLib.dll
C:\Users\***\AppData\Local\Temp\avgnt.exe
C:\Users\***\AppData\Local\Temp\BackupSetup.exe
C:\Users\***\AppData\Local\Temp\DeleteVF.exe
C:\Users\***\AppData\Local\Temp\ose00000.exe
C:\Users\***\AppData\Local\Temp\SPStub.exe
C:\Users\***\AppData\Local\Temp\tbentr.dll
C:\Users\***\AppData\Local\Temp\uninstall.exe
C:\Users\***\AppData\Local\Temp\vcredist_x64.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-31 18:23

==================== End Of Log ============================

Addition:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by *** at 2014-04-02 10:19:00
Running from C:\Users\***\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}) (Version:  - Microsoft)
2007 Microsoft Office Suite Service Pack 2 (SP2) (x32 Version:  - Microsoft) Hidden
Adobe Flash Player 11 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 11.7.700.224 - Adobe Systems Incorporated)
Adobe Reader X (10.1.1) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.1 - Adobe Systems Incorporated)
Advanced System Protector (HKLM-x32\...\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1) (Version: 2.1.1000.10494 - Systweak Software) <==== ATTENTION
Atheros Bluetooth Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.4.0.135 - Atheros)
Atheros WLAN Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Atheros)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
BitGuard (HKLM-x32\...\{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693}) (Version:  - MediaTechSoft Inc.) <==== ATTENTION
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.8000.13 - Dolby Laboratories Inc)
Free YouTube to MP3 Converter version 3.12.0.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.0.128 - DVDVideoSoft Ltd.)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.3.1427 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version:  - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2712 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.1.0.1006 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.225 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
Intelligent Touchpad (HKLM-x32\...\{FDB0A81A-1173-4B15-BEA4-89FEA0474F17}) (Version: 1.00.0108 - Lenovo)
LenovoDrv_x64 (HKLM\...\{83E68458-AF28-4CA4-8AFC-595A10307290}) (Version: 1.0.00 - Lenovo)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6425.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.50401.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.30319 - Microsoft Corporation) Hidden
Mozilla Firefox 27.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.4.0 - Mozilla)
Mozilla Thunderbird 24.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.4.0 (x86 de)) (Version: 24.4.0 - Mozilla)
MyPC Backup  (HKLM\...\MyPC Backup) (Version:  - MyPC Backup) <==== ATTENTION
QuickStart (HKLM-x32\...\InstallShield_{36B0DC39-3282-40EB-8587-B875CE46C3A7}) (Version: 3.3.2.33 - VideACE Co.)
QuickStart (x32 Version: 3.3.2.33 - VideACE Co.) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.54.309.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6657 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7601.39019 - Realtek Semiconductor Corp.)
RegClean Pro (HKLM-x32\...\RegClean Pro_is1) (Version: 6.21 - Systweak Inc) <==== ATTENTION
searchgol toolbar  (HKLM-x32\...\searchgol) (Version: 1.8.16.19 - searchgol) <==== ATTENTION
SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.49.86082 - SugarSync, Inc.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.5.2 - Synaptics Incorporated)
Update for Microsoft Office Word 2007 (KB974631) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{1D53FB73-9826-4541-B2E0-A239C6EBA718}) (Version:  - Microsoft)
Update for Microsoft Office Word 2007 (KB974631) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{34726474-50D6-49FC-B8AC-35411459D27A}) (Version:  - Microsoft)
Windows Driver Package - Lenovo Corporation (LAD) System  (01/13/2012 1.0.0.2) (HKLM\...\5E61CDC4058A17FE9BE3046B1846F3118CD618B1) (Version: 01/13/2012 1.0.0.2 - Lenovo Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)

==================== Restore Points  =========================

21-02-2014 16:46:33 Geplanter Prüfpunkt
01-03-2014 21:13:11 Geplanter Prüfpunkt
09-03-2014 18:39:17 Geplanter Prüfpunkt
16-03-2014 19:10:25 Geplanter Prüfpunkt
16-03-2014 21:58:57 Windows Update
31-03-2014 16:30:58 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {165DF033-C4FA-4CCC-AF6D-229978439CE3} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe
Task: {167876FA-BF12-49CC-B65B-C804F15C0A03} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtect <==== ATTENTION
Task: {19B5F073-1532-44E6-B949-259C9CAC470F} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [2013-02-28] (Systweak Inc) <==== ATTENTION
Task: {1FF85DB8-1559-4201-BAAB-02C64A743F46} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: {3AF2A0FA-2B9E-4F16-9E0C-504EC89E203B} - System32\Tasks\RegClean Pro_DEFAULT => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [2013-02-28] (Systweak Inc) <==== ATTENTION
Task: {5140FDF7-A600-4CBB-A119-30F6D742C28E} - System32\Tasks\Advanced System Protector_startup => C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe [2013-04-01] (Systweak) <==== ATTENTION
Task: {7CC68EC2-4A75-4161-8EB7-6DFA29146B96} - System32\Tasks\AdobeFlashPlayerUpdate => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\RegClean Pro_DEFAULT.job => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe <==== ATTENTION
Task: C:\Windows\Tasks\RegClean Pro_UPDATES.job => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2013-11-21 23:06 - 2013-11-18 16:32 - 01958880 _____ () C:\ProgramData\BitGuard\2.7.1832.68\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\loader.dll
2013-09-05 18:37 - 2013-09-05 18:37 - 03233806 _____ () C:\Program Files (x86)\Tor\tor.exe
2011-03-25 17:55 - 2011-03-25 17:55 - 00091464 _____ () C:\QuickStartUtil\VAWinService.exe
2012-05-08 04:54 - 2012-03-27 02:33 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-08-08 04:48 - 2011-12-08 11:12 - 00291272 _____ () C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe
2012-06-04 13:04 - 2012-06-04 13:04 - 00045480 _____ () C:\QuickStartUtil\VAWinAgent.exe
2010-04-18 15:32 - 2010-04-18 15:32 - 01102336 _____ () C:\Program Files (x86)\MyPC Backup\x64\System.Data.SQLite.dll
2013-03-12 19:56 - 2012-12-18 10:31 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-04-14 22:12 - 2013-01-10 15:01 - 00886272 _____ () C:\Program Files (x86)\Advanced System Protector\System.Data.SQLite.dll
2013-04-14 22:12 - 2013-04-01 12:00 - 01730928 _____ () C:\Program Files (x86)\Advanced System Protector\aspsys.dll
2011-03-25 17:55 - 2011-03-25 17:55 - 00157000 _____ () C:\QuickStartUtil\libexpat.dll
2011-03-25 17:55 - 2011-03-25 17:55 - 00061768 _____ () C:\QuickStartUtil\netProfileDatabase.DLL
2014-03-30 21:56 - 2014-03-30 21:57 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-06-11 21:11 - 2013-06-11 21:11 - 16033160 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll
2014-02-16 18:40 - 2014-02-16 18:40 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\00a0b4a9df6e4abf30ae2af3624a77ce\IsdiInterop.ni.dll
2012-08-08 04:20 - 2012-02-01 16:25 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-08-08 04:07 - 2012-02-21 12:09 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/02/2014 10:12:46 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/01/2014 04:36:26 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/31/2014 08:41:27 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/31/2014 06:04:57 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/31/2014 05:59:13 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/30/2014 07:30:07 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/28/2014 00:20:11 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/27/2014 11:45:32 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/27/2014 08:09:24 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/27/2014 06:59:57 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (04/02/2014 10:12:22 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom

Error: (04/02/2014 10:11:05 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (04/01/2014 04:36:00 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom

Error: (04/01/2014 04:34:41 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (03/31/2014 08:40:49 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom

Error: (03/31/2014 08:39:58 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (03/31/2014 08:39:51 PM) (Source: BugCheck) (User: )
Description: 0x000000f4 (0x0000000000000003, 0xfffffa8007402770, 0xfffffa8007402a50, 0xfffff800033de7b0)C:\Windows\MEMORY.DMP033114-17487-01

Error: (03/31/2014 08:39:41 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎31.‎03.‎2014 um 20:38:19 unerwartet heruntergefahren.

Error: (03/31/2014 06:04:19 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom

Error: (03/31/2014 06:03:27 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2


Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Percentage of memory in use: 41%
Total physical RAM: 3996.36 MB
Available physical RAM: 2319.04 MB
Total Pagefile: 7990.9 MB
Available Pagefile: 5941.55 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (Windows7_OS) (Fixed) (Total:420.56 GB) (Free:377.97 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (LENOVO) (Fixed) (Total:25.47 GB) (Free:21.74 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: A7FB6F4D)

Partition: GPT Partition Type.

==================== End Of Log ============================

GMER:

Code:

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-04-02 10:54:49
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0 WDC_WD50 rev.02.0 465,76GB
Running: Gmer-19357.exe; Driver: C:\Users\***\AppData\Local\Temp\agdoypob.sys


---- User code sections - GMER 2.1 ----

.text  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[2452] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69  0000000075011465 2 bytes [01, 75]
.text  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[2452] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000750114bb 2 bytes [01, 75]
.text  ...                                                                                                                            * 2
.text  C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69      0000000075011465 2 bytes [01, 75]
.text  C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155      00000000750114bb 2 bytes [01, 75]
.text  ...                                                                                                                            * 2

---- Registry - GMER 2.1 ----

Reg    HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\74e543c281d2                                                   
Reg    HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\74e543c281d2 (not active ControlSet)                               

---- EOF - GMER 2.1 ----

Vielen Dank schonmal!

cosinus 02.04.2014 10:09

Hallo und :hallo:

Zitat:

Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6425.1000 - Microsoft Corporation)
Enterprise MS-Office? :wtf: Aus welcher Quelle stammt das? Gewerbich genutzer Rechner?


Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!





Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Sascha84 02.04.2014 10:17

Hi,

ich habe die Office-Version vor ein paar Jahren von meinem Chef bekommen und seitdem nutze ich sie auch privat (ich hoffe das ist erlaubt?).

Ich habe die letzten 7 Tage keine Virenscans durchgeführt tut mir leid.

Vielen Dank, dass Du mir hilfst!

cosinus 02.04.2014 11:33

Adware/Junkware/Toolbars entfernen


1. Schritt: Malwarebytes Anti-Malware

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.




2. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).



3. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




4. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Sascha84 02.04.2014 12:46

Im Anhang die Logs!

cosinus 02.04.2014 13:16

Nicht in Anhängen posten!! Auch wenn das Board den Hinweis gibt, das erschwert uns massvis das Auswerten!

Sascha84 02.04.2014 14:08

okay dann teile ich es in 2 Posts auf:

MBAM:

Code:

Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 02.04.2014
Suchlauf-Zeit: 13:16:54
Logdatei: MBAM.txt
Administrator: Ja

Version: 2.00.0.1000
Malware Datenbank: v2014.04.02.03
Rootkit Datenbank: v2014.03.27.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: ***

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 239944
Verstrichene Zeit: 25 Min, 26 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 1
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe, 2496, Löschen bei Neustart, [a85837c9f9079d63bcba6916f310ad53]

Module: 7
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\aspsys.dll, Löschen bei Neustart, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Microsoft.Win32.TaskScheduler.DLL, Löschen bei Neustart, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\System.Data.SQLite.dll, Löschen bei Neustart, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\unrar.dll, Löschen bei Neustart, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Xceed.Compression.dll, Löschen bei Neustart, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Xceed.FileSystem.dll, Löschen bei Neustart, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Xceed.Zip.dll, Löschen bei Neustart, [a85837c9f9079d63bcba6916f310ad53],

Registrierungsschlüssel: 52
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{840A13FF-B464-4782-9C96-AAF3092E55DD}, In Quarantäne, [37c9867ad927649c3ac54ef228da817f],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{88AF4F6A-C6B7-4229-9275-824E98BF97F9}, In Quarantäne, [37c9867ad927649c3ac54ef228da817f],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{88AF4F6A-C6B7-4229-9275-824E98BF97F9}, In Quarantäne, [37c9867ad927649c3ac54ef228da817f],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\CLASSES\esrv.searchgolESrvc.1, In Quarantäne, [37c9867ad927649c3ac54ef228da817f],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\CLASSES\esrv.searchgolESrvc, In Quarantäne, [37c9867ad927649c3ac54ef228da817f],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.searchgolESrvc, In Quarantäne, [37c9867ad927649c3ac54ef228da817f],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.searchgolESrvc.1, In Quarantäne, [37c9867ad927649c3ac54ef228da817f],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{105F25A9-C42F-48A6-998D-0494E8AE336A}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{3860D897-7DCD-473C-9744-B21DB133AB20}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4B62762D-AA67-4312-A5BF-91BCB7A4720A}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{506DD7C6-B05D-43CE-81FF-AA05E11DBDFD}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{6D3C9858-2674-46E1-9112-107340758481}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{79C9FA6C-352A-49BA-89BA-85077BC35DC3}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{909112FE-C4A2-4990-A499-E58867D55B15}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{9BEEB5A2-8B02-465A-904D-FE5A447F59EB}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B618C19D-A418-4586-80C6-09DBDA9C748E}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B68B00A0-95B9-4162-BA45-7A1113317DA9}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{BFE45A8B-650C-4E99-A3F4-CC6A2874893B}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E413D78F-283C-45F1-9992-8EF7D55A4933}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E7C2FDF1-1635-41B4-8207-C1684B6807D7}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{F9F5A267-FA5A-4CA3-8BE5-4C1EEAD01011}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3860D897-7DCD-473C-9744-B21DB133AB20}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4B62762D-AA67-4312-A5BF-91BCB7A4720A}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{506DD7C6-B05D-43CE-81FF-AA05E11DBDFD}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{6D3C9858-2674-46E1-9112-107340758481}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{79C9FA6C-352A-49BA-89BA-85077BC35DC3}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{909112FE-C4A2-4990-A499-E58867D55B15}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{9BEEB5A2-8B02-465A-904D-FE5A447F59EB}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B618C19D-A418-4586-80C6-09DBDA9C748E}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B68B00A0-95B9-4162-BA45-7A1113317DA9}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{BFE45A8B-650C-4E99-A3F4-CC6A2874893B}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E413D78F-283C-45F1-9992-8EF7D55A4933}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E7C2FDF1-1635-41B4-8207-C1684B6807D7}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{F9F5A267-FA5A-4CA3-8BE5-4C1EEAD01011}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{105F25A9-C42F-48A6-998D-0494E8AE336A}, In Quarantäne, [aa56936d5aa678883dc01927fc060af6],
PUP.Optional.AdvancedSystemProtector.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\IEXPLORE.EXE, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\IEXPLORE.EXE, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.RegCleanPro.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\RegClean Pro_is1, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\searchgol, In Quarantäne, [57a9a55b5aa6817f9d97f296e41f52ae],
PUP.Optional.DataMngr.A, HKU\S-1-5-21-3500470793-3010870698-2953549641-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, Löschen bei Neustart, [4db36997936dc23e6f4e265a9e65e020],
PUP.Optional.SearchGolTB.A, HKU\S-1-5-21-3500470793-3010870698-2953549641-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\searchgol, Löschen bei Neustart, [49b7eb154cb49c64de542662c43feb15],
PUP.Optional.PriceGong.A, HKU\S-1-5-21-3500470793-3010870698-2953549641-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, Löschen bei Neustart, [629ea858cf31e41ccc19a0c4669c38c8],
PUP.Optional.Babylon.A, HKU\S-1-5-21-3500470793-3010870698-2953549641-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BABSOLUTION\Updater, Löschen bei Neustart, [45bb639dfc042ad68c3b6f124eb556aa],
PUP.Optional.Conduit.A, HKU\S-1-5-21-3500470793-3010870698-2953549641-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CONDUIT\FF, Löschen bei Neustart, [1de355ab649cdf218edf2d59f310847c],
PUP.Optional.BProtector.A, HKU\S-1-5-21-3500470793-3010870698-2953549641-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\bProtectSettings, Löschen bei Neustart, [25db936dbc44fb0533e887fd03006c94],
PUP.Optional.AdvancedSystemProtector.A, HKU\S-1-5-21-3500470793-3010870698-2953549641-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\Advanced System Protector, Löschen bei Neustart, [aa565ca4867acf316e327610f211c63a],
PUP.Optional.RegCleanerPro.A, HKU\S-1-5-21-3500470793-3010870698-2953549641-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\RegClean Pro, Löschen bei Neustart, [4ab6867a738dd32d584a62247192bb45],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{9448AC19-EB62-46D5-B7DA-B059A7DB466A}, In Quarantäne, [21df728edb254bb51dbc470baf5341bf],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\CLASSES\s, In Quarantäne, [21df728edb254bb51dbc470baf5341bf],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\s, In Quarantäne, [21df728edb254bb51dbc470baf5341bf],
PUP.Optional.SearchGolTB.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\searchgol, In Quarantäne, [21df728edb254bb51dbc470baf5341bf],

Registrierungswerte: 1
PUP.BProtector, HKU\S-1-5-21-3500470793-3010870698-2953549641-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, Löschen bei Neustart, [7d83a85838c8e8183b84cdb31ee58080],

Registrierungsdaten: 2
Rogue.InternetSecurityEssentials, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|AppInit_DLLs, c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll, Gut: (), Schlecht: (c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll),Ersetzt,[a35d728e3fc109f7e28b53039769d12f]
PUP.Optional.Conduit, HKU\S-1-5-21-3500470793-3010870698-2953549641-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://search.conduit.com?SearchSource=10&CUI=UN21027430952571123&UM=2&ctid=CT3281675, Gut: (hxxp://www.google.com), Schlecht: (hxxp://search.conduit.com?SearchSource=10&CUI=UN21027430952571123&UM=2&ctid=CT3281675),Löschen bei Neustart,[df210af6a65ad32d3ec19f7044c0b749]

Ordner: 28
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector, Löschen bei Neustart, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\clamunpack, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Troubleshooter, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\2.1.1000.10494, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\signatures, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\2.1.1000.10486, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\2.1.1000.10494, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.OpenCandy, C:\Users\***\AppData\Roaming\OpenCandy, In Quarantäne, [36ca25dba060ab558c8e203239c9bc44],
PUP.Optional.OpenCandy, C:\Users\***\AppData\Roaming\OpenCandy\D70218EC0F664315B51CDC831F3AB576, In Quarantäne, [36ca25dba060ab558c8e203239c9bc44],
PUP.Optional.OpenCandy, C:\Users\***\AppData\Roaming\OpenCandy\ECD7C95957EE4FB39D3833A859981460, In Quarantäne, [36ca25dba060ab558c8e203239c9bc44],
PUP.Optional.FileScout.A, C:\Users\***\AppData\Roaming\File Scout, In Quarantäne, [aa561fe1ec1443bd51e1c19159a97987],
PUP.Optional.Conduit.A, C:\Users\***\AppData\Local\Temp\ct3281675, In Quarantäne, [f808a85828d854ac7e144a08fb072dd3],
PUP.Optional.Conduit.A, C:\Users\***\AppData\Local\Temp\ct3281675\xpi, In Quarantäne, [f808a85828d854ac7e144a08fb072dd3],
PUP.Optional.Conduit.A, C:\Users\***\AppData\Local\Temp\ct3281675\xpi\defaults, In Quarantäne, [f808a85828d854ac7e144a08fb072dd3],
PUP.Optional.Conduit.A, C:\Users\***\AppData\Local\Temp\ct3281675\xpi\defaults\preferences, In Quarantäne, [f808a85828d854ac7e144a08fb072dd3],
PUP.Optional.RegCleanerPro.A, C:\Users\***\AppData\Roaming\Systweak\RegClean Pro, In Quarantäne, [16eaf10f669a5ca47424064c4bb71de3],
PUP.Optional.RegCleanerPro.A, C:\Users\***\AppData\Roaming\Systweak\RegClean Pro\Version 6.1, In Quarantäne, [16eaf10f669a5ca47424064c4bb71de3],
PUP.Optional.RegCleanerPro.A, C:\Users\***\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\Partial Backups, In Quarantäne, [16eaf10f669a5ca47424064c4bb71de3],
PUP.Optional.SearchGolTB.A, C:\Program Files (x86)\searchgol\searchgol, In Quarantäne, [21df728edb254bb51dbc470baf5341bf],
PUP.Optional.SearchGolTB.A, C:\Program Files (x86)\searchgol\searchgol\1.8.16.19, In Quarantäne, [21df728edb254bb51dbc470baf5341bf],
PUP.Optional.SearchGolTB.A, C:\Users\***\AppData\Local\Temp\mt_ffx\searchgol, In Quarantäne, [13ed14ecfe02e91738a20151738fb749],
PUP.Optional.SearchGolTB.A, C:\Users\***\AppData\Local\Temp\mt_ffx\searchgol\searchgol, In Quarantäne, [13ed14ecfe02e91738a20151738fb749],
PUP.Optional.SearchGolTB.A, C:\Users\***\AppData\Local\Temp\mt_ffx\searchgol\searchgol\1.8.16.19, In Quarantäne, [13ed14ecfe02e91738a20151738fb749],

Dateien: 512
Rogue.InternetSecurityEssentials, C:\ProgramData\BitGuard\2.7.1832.68\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\loader.dll, Löschen bei Neustart, [a35d728e3fc109f7e28b53039769d12f],
PUP.Optional.SearchGolTB.A, C:\Program Files (x86)\searchgol\searchgol\1.8.16.19\searchgolsrv.exe, In Quarantäne, [37c9867ad927649c3ac54ef228da817f],
PUP.Optional.FileScout.A, C:\Users\***\AppData\Roaming\File Scout\filescout.exe, In Quarantäne, [718f649c24dcfc04855708f7b24e60a0],
PUP.Optional.Delta.A, C:\Users\***\AppData\Roaming\OpenCandy\D70218EC0F664315B51CDC831F3AB576\DeltaTB.exe, In Quarantäne, [09f715ebaf51e11f1156679813ed60a0],
PUP.Optional.PerformerSoft.A, C:\Users\***\AppData\Local\Temp\18FF.tmp, In Quarantäne, [a35df10f58a810f08a1d67a70ef322de],
PUP.Optional.PerformerSoft.A, C:\Users\***\AppData\Local\Temp\1D15.tmp, In Quarantäne, [e51b56aac43c1be55b4c3dd157aaee12],
PUP.Optional.Babylon.A, C:\Users\***\AppData\Local\Temp\4F0C.tmp, In Quarantäne, [0000d32d8c742dd3fa2650cec43c6997],
PUP.Optional.RegCleanerPro, C:\Users\***\AppData\Local\Temp\kzhAdjwM.exe.part, In Quarantäne, [f90724dcc93728d86a857a88c8399070],
PUP.Optional.Conduit.A, C:\Users\***\AppData\Local\Temp\5E36.tmp, In Quarantäne, [7b8526da827edc242ac69c7cd92844bc],
PUP.Optional.PerformerSoft.A, C:\Users\***\AppData\Local\Temp\5AED.tmp, In Quarantäne, [41bf4cb440c0a15f96116ea05ba604fc],
PUP.Optional.Conduit.A, C:\Users\***\AppData\Local\Temp\SPStub.exe, In Quarantäne, [1be54fb142be42be325b8391d62bb34d],
PUP.Optional.Conduit.A, C:\Users\***\AppData\Local\Temp\ct3281675\ffLogic.exe, In Quarantäne, [cb3529d7d12fea1694f99e76ef1220e0],
PUP.Optional.Conduit.A, C:\Users\***\AppData\Local\Temp\ct3281675\ieLogic.exe, In Quarantäne, [07f9aa56bf41d927b8d56aaaec157c84],
PUP.Optional.Conduit.A, C:\Users\***\AppData\Local\Temp\ct3281675\spff.exe, In Quarantäne, [23dd847c619f46ba4f3e1cf85aa7e41c],
PUP.Optional.Conduit.A, C:\Users\***\AppData\Local\Temp\ct3281675\statisticsStub.exe, In Quarantäne, [bb45a35d649c817f769c3fc0ad5312ee],
PUP.Optional.Babylon.A, C:\Users\***\AppData\Local\Temp\683ECD12-BAB0-7891-8DCE-3F953074D735\Latest\BExternal.dll, In Quarantäne, [9d6353ad7d83e02068778d95ec14639d],
PUP.Optional.Babylon.A, C:\Users\***\AppData\Local\Temp\683ECD12-BAB0-7891-8DCE-3F953074D735\Latest\CrxInstaller.dum, In Quarantäne, [7e82758b26da19e730e846cbaa57ca36],
PUP.Optional.SearchGolTB.A, C:\Users\***\AppData\Local\Temp\683ECD12-BAB0-7891-8DCE-3F953074D735\Latest\MyBabylonTB.exe, In Quarantäne, [52aed12fb34d37c98b671206b84907f9],
PUP.Optional.Babylon.A, C:\Users\***\AppData\Local\Temp\683ECD12-BAB0-7891-8DCE-3F953074D735\Latest\Setup.exe, In Quarantäne, [8a76f10f14ec29d7cd6023fdd927c937],
PUP.Optional.MusicToolbar.A, C:\Users\***\Downloads\BearShareSetup-r1116-n-bf.exe, In Quarantäne, [06fafb05e818b848bb9752c1c63ba15f],
PUP.Optional.Bandoo.A, C:\Users\***\Downloads\jZipSetup-r230-n-bf.exe, In Quarantäne, [01fff30dd7293fc15386210308f8b749],
PUP.Optional.Koyote.A, C:\Users\***\Downloads\FreeVideoConverterSetup-r135-n-bf(1).exe, In Quarantäne, [c040b14fef115ca44aca023618e9728e],
PUP.Optional.Koyote.A, C:\Users\***\Downloads\FreeVideoConverterSetup-r135-n-bf.exe, In Quarantäne, [a45c9e62da260ef242d2003814ed3fc1],
PUP.Optional.Babylon.A, C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\lepkhuzj.default\searchplugins\babylon.xml, In Quarantäne, [ea162bd59a666898d4683b2402002dd3],
PUP.Optional.BProtector.A, C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\lepkhuzj.default\bProtector_extensions.sqlite, In Quarantäne, [748cf907cb358f71f853f56a5da5f907],
PUP.Optional.BProtector.A, C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\lepkhuzj.default\bprotector_prefs.js, In Quarantäne, [14ecc53baa5647b9ed5ffd625ba79868],
PUP.Optional.SearchGol.A, C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\lepkhuzj.default\searchplugins\searchgol.xml, In Quarantäne, [f010c937a06037c98c8f322e6c963dc3],
PUP.Optional.PCPerformer.A, C:\Windows\System32\roboot64.exe, In Quarantäne, [9d63f20e827e7d83aab0cd978d75a15f],
PUP.Optional.RegCleanerPro.J, C:\Windows\Tasks\RegClean Pro_UPDATES.job, In Quarantäne, [ca361ce459a7d0306b989dd06b97ce32],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\loading_withWhiteBG.avi, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\norwegian_asp_NO.ini, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe, Löschen bei Neustart, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe.config, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\AppResource.dll, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\asp.ico, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\AspManager.exe, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\aspsys.dll, Löschen bei Neustart, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\categories.ini, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Chinese_asp_ZH-CN.ini, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Communication.dll, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\danish_asp_DA.ini, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\dutch_asp_NL.ini, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\eng_asp_en.ini, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\filetypehelper.exe, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Finnish_asp_FI.ini, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\french_asp_FR.ini, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\german_asp_DE.ini, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Interop.IWshRuntimeLibrary.dll, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\italian_asp_IT.ini, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\japanese_asp_JA.ini, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Microsoft.Win32.TaskScheduler.DLL, Löschen bei Neustart, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\portuguese_asp_PT-BR.ini, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\russian_asp_ru.ini, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\scandll.dll, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\spanish_asp_ES.ini, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\swedish_asp_SV.ini, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\System.Core.dll, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\System.Data.SQLite.dll, Löschen bei Neustart, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\unins000.dat, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\unins000.exe, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\unins000.msg, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\unrar.dll, Löschen bei Neustart, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Xceed.Compression.dll, Löschen bei Neustart, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Xceed.Compression.Formats.dll, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Xceed.FileSystem.dll, Löschen bei Neustart, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Xceed.Zip.dll, Löschen bei Neustart, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\clamunpack\clamscan.exe, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\clamunpack\libclamav.dll, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\clamunpack\readme.txt, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Troubleshooter\asp-fixer.com, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Troubleshooter\asp-fixer.exe, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Troubleshooter\asp-fixer.pif, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Troubleshooter\asp-fixer.scr, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Troubleshooter\ASP-Troubleshooter.chm, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Troubleshooter\firefox.com, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Troubleshooter\iexplore.exe, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\Advanced System Protector\Troubleshooter\iexplore.lnk, In Quarantäne, [a85837c9f9079d63bcba6916f310ad53],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\TraditionalCn_rcp_zh-tw.ini, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\install_left_image.bmp, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Chinese_rcp.ini, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\CleanSchedule.exe, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Cloud_Backup_Setup.exe, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Cloud_Backup_Setup_Intl.exe, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Danish_rcp.ini, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Dutch_rcp.ini, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\eng_rcp.ini, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Finnish_rcp_fi.ini, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\French_rcp.ini, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\German_rcp.ini, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\greek_rcp_el.ini, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\isxdl.dll, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Italian_rcp.ini, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Japanese_rcp.ini, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\korean_rcp_ko.ini, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Norwegian_rcp.ini, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\polish_rcp_pl.ini, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\portugese_rcp_pt.ini, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Portuguese_rcp.ini, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\RCPUninstall.exe, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\RegCleanPro.dll, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\russian_rcp_ru.ini, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Spanish_rcp.ini, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\Swedish_rcp.ini, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\systweakasp.exe, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\turkish_rcp_tr.ini, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\unins000.dat, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\unins000.exe, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\unins000.msg, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RegClean Pro\xmllite.dll, In Quarantäne, [57a9a85842be7090ee89106f748fd62a],
PUP.Optional.RegCleanPro.A, C:\Windows\Tasks\RegClean Pro_DEFAULT.job, In Quarantäne, [9b65768a9a6669972d4bbfc0ba49946c],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\AddonSafelist, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\log.xslt, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\signatures\completedatabase.db, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\signatures\Cookies.bin, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\signatures\DigSign.bin, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\signatures\FilePaths.bin, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\signatures\FileSignature.bin, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\signatures\Folders.bin, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\signatures\Md5.bin, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\signatures\Registry.bin, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\signatures\SetupSign.bin, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\signatures\StrSetupSign.bin, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1300mupdate.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1301update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1302update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1303update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1304update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1305update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1306update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1307update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1308update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1309update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1310update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1311update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1312update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1313update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1314update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1315update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1316update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1317update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1318update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1319update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1320update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1321update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1322update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1323update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1324update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1325update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1326update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1327update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1328update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1329update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1330update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1331update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1332update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1333update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1334update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1335update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1336update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1337update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1338update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1339update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1340update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1341update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1342update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1343update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1344update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1345update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1346update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1347update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1348update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1349update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1350update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1351update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1352update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1353update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1354update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1355update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1356update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1357update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1358update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1359update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1360update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1361update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1362update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1363update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1364update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1365update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1366update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1367update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1368update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1369update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1370update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1371update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1372update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1373update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1374update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1375update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1376update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1377update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1378update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1379update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1380update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1381update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1382update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1383update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1384update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1385update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1386update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1387update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1388update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1389update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1390update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1391update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1392update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1393update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1394update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1395update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1396update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1397update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1398update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1399update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1400update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1401update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1402update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1403update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1404update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1405update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1406update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1407update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1408update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1409update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1410update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1411update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1412update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1413update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1414update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1415update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1416update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1417update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1418update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1419update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1420update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1421update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1422update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1423update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1424update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1425update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1426update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1427update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1428update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1429update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1430update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1431update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1432update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1433update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1434update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1435update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1436update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1437update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1438update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1439update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1440update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1441update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1442update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1443update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1444update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1445update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1446update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1447update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1448update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1449update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1450update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1451update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1452update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1453update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1454update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1455update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1456update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1457update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1458update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1459update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1460update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1461update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1462update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1463update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1464update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1465update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1466update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1467update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1468update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1469update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1470update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1471update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1472update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1473update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1474update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1475update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1476update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1477update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1478update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1479update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1480update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1489mupdate.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1490update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1491update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1492update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1493update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1545completedatabase.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1587mupdate.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1588update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1589update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1590update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1591update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1592update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1593update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1594update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1595update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1596update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1597update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1598update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1599update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1600update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1601update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1602update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1603update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1604update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1605update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1606update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1607update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1608update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1609update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1610update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1611update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1612update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1613update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1614update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1615update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1616update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1617update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1618update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1619update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1620update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1621update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1622update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1623update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1624update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1625update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1626update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1627update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1628update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1636mupdate.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1637update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1638update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1639update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1640update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1641update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1642update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1643update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1644update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1645update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1646update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1647update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1648update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1649update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1650update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1651update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1652update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1653update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1654update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1655update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1656update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1657update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1658update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1659update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1660update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1661update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1662update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1663update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1664update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1665update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1666update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1667update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1668update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1669update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1670update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1671update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1672update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1673update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1674update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1675update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1676update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1677update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1678update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1679update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1680update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1681update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1682update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1683update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1684update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1685update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1686update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1687update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1688update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1689update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1690update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1691update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1692update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1693update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1694update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1695update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1696update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1697update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1698update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1699update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1700update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1701update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1702update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1703update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1704update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1705update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1706update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1707update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1708update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1709update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1710update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1711update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1712update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1713update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1714update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1715update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1716update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1717update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1718update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1719update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1720update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1721update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1722update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1723update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1724update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1725update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1726update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1727update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1728update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1729update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1730update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1731update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1732update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1733update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1734update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1735update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1736update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1737update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1738update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\1739update.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System Protector\updates\914completedatabase.zip, In Quarantäne, [08f8c33d7987ff01ed08df72c83aff01],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\ASPStartupManagerErrorLog.txt, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\QDetail.db, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Settings.db, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Update.ini, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\2.1.1000.10486\ASPLog.txt, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\2.1.1000.10494\ASPLog.txt, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_12-06-13_10-35-24.xml, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_09-06-13_11-09-42.xml, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_10-06-13_09-02-18.xml, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_10-06-13_09-49-13.xml, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_11-06-13_07-19-01.xml, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_11-06-13_09-00-01.xml, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_11-06-13_09-47-18.xml, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_12-06-13_08-51-22.xml, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_12-06-13_09-54-30.xml, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_13-06-13_05-39-05.xml, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_14-04-13_10-18-35.xml, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_16-06-13_08-35-03.xml, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_16-06-13_09-26-04.xml, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_16-06-13_10-39-35.xml, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_17-03-14_08-33-11.xml, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_18-06-13_08-37-21.xml, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_18-06-13_09-20-09.xml, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_18-06-13_10-22-53.xml, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_19-06-13_10-32-21.xml, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_25-01-14_09-36-14.xml, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\***\AppData\Roaming\Systweak\Advanced System Protector\Logs\SMLog.xml, In Quarantäne, [b54b5aa6f808857b5f96143dd42ecc34],
PUP.Optional.OpenCandy, C:\Users\***\AppData\Roaming\OpenCandy\D70218EC0F664315B51CDC831F3AB576\5472.ico, In Quarantäne, [36ca25dba060ab558c8e203239c9bc44],
PUP.Optional.OpenCandy, C:\Users\***\AppData\Roaming\OpenCandy\D70218EC0F664315B51CDC831F3AB576\EBB77268-338F-4C6A-8590-AD88FED26F4A, In Quarantäne, [36ca25dba060ab558c8e203239c9bc44],
PUP.Optional.OpenCandy, C:\Users\***\AppData\Roaming\OpenCandy\D70218EC0F664315B51CDC831F3AB576\OCBrowserHelper_1.0.6.124.exe, In Quarantäne, [36ca25dba060ab558c8e203239c9bc44],
PUP.Optional.OpenCandy, C:\Users\***\AppData\Roaming\OpenCandy\ECD7C95957EE4FB39D3833A859981460\5260.ico, In Quarantäne, [36ca25dba060ab558c8e203239c9bc44],
PUP.Optional.OpenCandy, C:\Users\***\AppData\Roaming\OpenCandy\ECD7C95957EE4FB39D3833A859981460\conduitinstaller.exe, In Quarantäne, [36ca25dba060ab558c8e203239c9bc44],
PUP.Optional.OpenCandy, C:\Users\***\AppData\Roaming\OpenCandy\ECD7C95957EE4FB39D3833A859981460\EBB77268-338F-4C6A-8590-AD88FED26F4A, In Quarantäne, [36ca25dba060ab558c8e203239c9bc44],
PUP.Optional.OpenCandy, C:\Users\***\AppData\Roaming\OpenCandy\ECD7C95957EE4FB39D3833A859981460\OCBrowserHelper_1.0.5.112.dll, In Quarantäne, [36ca25dba060ab558c8e203239c9bc44],
PUP.Optional.FileScout.A, C:\Users\***\AppData\Roaming\File Scout\uninst.exe, In Quarantäne, [aa561fe1ec1443bd51e1c19159a97987],
PUP.Optional.Conduit.A, C:\Users\***\AppData\Local\Temp\ct3281675\conduit.xml, In Quarantäne, [f808a85828d854ac7e144a08fb072dd3],
PUP.Optional.Conduit.A, C:\Users\***\AppData\Local\Temp\ct3281675\CT3281675.xpi, In Quarantäne, [f808a85828d854ac7e144a08fb072dd3],
PUP.Optional.Conduit.A, C:\Users\***\AppData\Local\Temp\ct3281675\setup.ini.txt, In Quarantäne, [f808a85828d854ac7e144a08fb072dd3],
PUP.Optional.Conduit.A, C:\Users\***\AppData\Local\Temp\ct3281675\version.txt, In Quarantäne, [f808a85828d854ac7e144a08fb072dd3],
PUP.Optional.Conduit.A, C:\Users\***\AppData\Local\Temp\ct3281675\xpi\install.rdf, In Quarantäne, [f808a85828d854ac7e144a08fb072dd3],
PUP.Optional.Conduit.A, C:\Users\***\AppData\Local\Temp\ct3281675\xpi\defaults\preferences\defaults.js, In Quarantäne, [f808a85828d854ac7e144a08fb072dd3],
PUP.Optional.RegCleanerPro.A, C:\Users\***\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\ExcludeList.rcp, In Quarantäne, [16eaf10f669a5ca47424064c4bb71de3],
PUP.Optional.RegCleanerPro.A, C:\Users\***\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\German_rcp.dat, In Quarantäne, [16eaf10f669a5ca47424064c4bb71de3],
PUP.Optional.RegCleanerPro.A, C:\Users\***\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_01-26-2014.log, In Quarantäne, [16eaf10f669a5ca47424064c4bb71de3],
PUP.Optional.RegCleanerPro.A, C:\Users\***\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_01-29-2014.log, In Quarantäne, [16eaf10f669a5ca47424064c4bb71de3],
PUP.Optional.RegCleanerPro.A, C:\Users\***\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_02-09-2014.log, In Quarantäne, [16eaf10f669a5ca47424064c4bb71de3],
PUP.Optional.RegCleanerPro.A, C:\Users\***\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_02-19-2014.log, In Quarantäne, [16eaf10f669a5ca47424064c4bb71de3],
PUP.Optional.RegCleanerPro.A, C:\Users\***\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_02-26-2014.log, In Quarantäne, [16eaf10f669a5ca47424064c4bb71de3],
PUP.Optional.RegCleanerPro.A, C:\Users\***\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_03-02-2014.log, In Quarantäne, [16eaf10f669a5ca47424064c4bb71de3],
PUP.Optional.RegCleanerPro.A, C:\Users\***\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\results.rcp, In Quarantäne, [16eaf10f669a5ca47424064c4bb71de3],
PUP.Optional.RegCleanerPro.A, C:\Users\***\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\TempHLList.rcp, In Quarantäne, [16eaf10f669a5ca47424064c4bb71de3],
PUP.Optional.RegCleanerPro.A, C:\Users\***\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\Partial Backups\00000001.rmx, In Quarantäne, [16eaf10f669a5ca47424064c4bb71de3],
PUP.Optional.RegCleanerPro.A, C:\Users\***\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\Partial Backups\00000001.rxb, In Quarantäne, [16eaf10f669a5ca47424064c4bb71de3],
PUP.Optional.SearchGolTB.A, C:\Program Files (x86)\searchgol\searchgol\1.8.16.19\searchgolEng.dll, In Quarantäne, [21df728edb254bb51dbc470baf5341bf],
PUP.Optional.SearchGolTB.A, C:\Program Files (x86)\searchgol\searchgol\1.8.16.19\uninstall.exe, In Quarantäne, [21df728edb254bb51dbc470baf5341bf],

Physische Sektoren: 0
(No malicious items detected)


(end)

ADW:

Code:

# AdwCleaner v3.023 - Bericht erstellt am 02/04/2014 um 13:27:02
# Aktualisiert 01/04/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : *** - ***-PC
# Gestartet von : C:\Users\***\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****

Dienst Gelöscht : BackupStack

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\BitGuard
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\ProgramData\Systweak
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro
Ordner Gelöscht : C:\Program Files (x86)\Conduit
Ordner Gelöscht : C:\Program Files (x86)\MyPC Backup
Ordner Gelöscht : C:\Program Files (x86)\searchgol
Ordner Gelöscht : C:\Users\***\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\***\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\***\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\***\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\***\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\***\AppData\Roaming\SearchProtect
Ordner Gelöscht : C:\Users\***\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Ordner Gelöscht : C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Users\***\AppData\Local\Temp\Uninstall.exe
Datei Gelöscht : C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
Datei Gelöscht : C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\lepkhuzj.default\searchplugins\BrowserProtect.xml
Datei Gelöscht : C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\lepkhuzj.default\user.js
Datei Gelöscht : C:\Windows\System32\Tasks\Advanced System Protector_startup
Datei Gelöscht : C:\Windows\System32\Tasks\BrowserProtect

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\*\shell\filescout
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\systweakasp_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\systweakasp_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
Schlüssel Gelöscht : HKCU\Software\5308ad8b73bea46
Schlüssel Gelöscht : HKLM\SOFTWARE\5308ad8b73bea46
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT3281675
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4277F7CF-0000-46CF-BA49-D624465C4BAB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{88AF4F6A-C6B7-4229-9275-824E98BF97F9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E44A1809-4D10-4AB8-B343-3326B64C7CDD}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8C5CBB76-7379-4490-AA5B-B037C0A36381}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\distromatic
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16521


-\\ Mozilla Firefox v27.0.1 (de)

[ Datei : C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\lepkhuzj.default\prefs.js ]

Zeile gelöscht : user_pref("CT3281675_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1368731440843,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Zeile gelöscht : user_pref("Smartbar.ConduitHomepagesList", "");
Zeile gelöscht : user_pref("Smartbar.ConduitSearchEngineList", "entrusted Customized Web Search");
Zeile gelöscht : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&SearchSource=2&CUI=UN24361450632449824&UM=2&q=");
Zeile gelöscht : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "");
Zeile gelöscht : user_pref("Smartbar.keywordURLSelectedCTID", "CT3281675");
Zeile gelöscht : user_pref("avg.install.userHPSettings", "hxxp://www.searchgol.com/?affID=121562&babsrc=HP_ss&mntrId=86D174E543C281D2");
Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://www.searchgol.com/?affID=121562&babsrc=NT_ss&mntrId=86D174E543C281D2");
Zeile gelöscht : user_pref("browser.search.defaultthis.engineName", "entrusted Customized Web Search");
Zeile gelöscht : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&CUI=UN24361450632449824&UM=2&SearchSource=3&q={searchTerms}");
Zeile gelöscht : user_pref("extensions.searchgol.admin", false);
Zeile gelöscht : user_pref("extensions.searchgol.aflt", "babsst");
Zeile gelöscht : user_pref("extensions.searchgol.appId", "{4277F7CF-0000-46CF-BA49-D624465C4BAB}");
Zeile gelöscht : user_pref("extensions.searchgol.autoRvrt", "false");
Zeile gelöscht : user_pref("extensions.searchgol.dfltLng", "en");
Zeile gelöscht : user_pref("extensions.searchgol.excTlbr", false);
Zeile gelöscht : user_pref("extensions.searchgol.ffxUnstlRst", false);
Zeile gelöscht : user_pref("extensions.searchgol.id", "86d1376700000000000074e543c281d2");
Zeile gelöscht : user_pref("extensions.searchgol.instlDay", "15806");
Zeile gelöscht : user_pref("extensions.searchgol.instlRef", "sst");
Zeile gelöscht : user_pref("extensions.searchgol.newTab", false);
Zeile gelöscht : user_pref("extensions.searchgol.prdct", "searchgol");
Zeile gelöscht : user_pref("extensions.searchgol.prtnrId", "searchgol");
Zeile gelöscht : user_pref("extensions.searchgol.rvrt", "false");
Zeile gelöscht : user_pref("extensions.searchgol.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.searchgol.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.searchgol.tlbrSrchUrl", "");
Zeile gelöscht : user_pref("extensions.searchgol.vrsn", "1.8.16.19");
Zeile gelöscht : user_pref("extensions.searchgol.vrsnTs", "1.8.16.1917:40:18");
Zeile gelöscht : user_pref("extensions.searchgol.vrsni", "1.8.16.19");
Zeile gelöscht : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&SearchSource=2&CUI=UN24361450632449824&UM=2&q=");
Zeile gelöscht : user_pref("smartBar.searchInNewTabOwner", "CT3281675");
Zeile gelöscht : user_pref("smartbar.machineId", "IQA05GE7UCRBXDZFHSEZ7UEJENXTK7ALZYQA87DKOY4H9GNC9ULQCHC6WZ8X7GXBW1HRODNYMDCSAPZ5IESNOG");

*************************

AdwCleaner[R0].txt - [9413 octets] - [02/04/2014 13:25:19]
AdwCleaner[S0].txt - [9027 octets] - [02/04/2014 13:27:02]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [9087 octets] ##########


Sascha84 02.04.2014 14:11

JRT:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows 7 Home Premium x64
Ran by Michi on 02.04.2014 at 13:30:33,37
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3500470793-3010870698-2953549641-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{961278E3-DD21-4CA0-9854-530FD0117667}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Program Files (x86)\mypc backup"



~~~ FireFox

Emptied folder: C:\Users\Michi\AppData\Roaming\mozilla\firefox\profiles\lepkhuzj.default\minidumps [80 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 02.04.2014 at 13:38:09,49
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST


FRST Logfile:

FRST Logfile:
Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by *** (administrator) on ***-PC on 02-04-2014 13:38:58
Running from C:\Users\***\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
() C:\Program Files (x86)\Tor\tor.exe
() C:\QuickStartUtil\VAWinService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
() C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe
() C:\QuickStartUtil\VAWinAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1212048 2012-06-07] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2907448 2012-07-13] (Synaptics Incorporated)
HKLM\...\Run: [SynLenovoGestureMgr] - C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [665400 2012-07-13] (Synaptics)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\btvstack.exe [1022592 2012-04-28] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\athbttray.exe [801920 2012-04-28] (Atheros Commnucations)
HKLM\...\Run: [UpdatePRCShortCut] - "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-27] (Intel Corporation)
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331_STI.EXE
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-06-06] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Intelligent Touchpad] - C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe [291272 2011-12-08] ()
HKLM-x32\...\Run: [VAWinAgent] - C:\QuickStartUtil\VAWinAgent.exe [45480 2012-06-04] ()
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31072 2008-10-25] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3500470793-3010870698-2953549641-1000\...\MountPoints2: {43da9052-a2bd-11e2-a0bd-74e543c281d2} - E:\SETUP.EXE
AppInit_DLLs: c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll => c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll File Not Found

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENN
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

FireFox:
========
FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\lepkhuzj.default
FF SearchEngineOrder.1: Search Gol
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-21] (Intel Corporation)
R2 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-09-05] ()
R2 VideAceWindowsService; C:\QuickStartUtil\VAWinService.exe [91464 2011-03-25] ()
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [163456 2012-04-28] (Atheros)
S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [X]

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)
R3 LAD; C:\Windows\System32\DRIVERS\LAD.sys [8192 2012-01-13] (TODO: <Company name>)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [27960 2012-07-13] (Synaptics Incorporated)
U3 BcmSqlStartupSvc;
U2 CLKMSVC10_3A60B698;
U2 CLKMSVC10_C3B3B687;
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
U2 DriverService;
U2 iATAgentService;
U2 idealife Update Service;
U3 IGRS;
U2 IviRegMgr;
U2 Oasis2Service;
U2 PCCarerService;
U2 ReadyComm.DirectRouter;
U2 RichVideo;
U2 RtLedService;
U2 SeaPort;
U2 SoftwareService;
U3 SQLWriter;
S3 vm331avs; System32\Drivers\vm331avs.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-02 13:38 - 2014-04-02 13:38 - 00001163 _____ () C:\Users\***\Desktop\JRT.txt
2014-04-02 13:30 - 2014-04-02 13:30 - 01038974 _____ (Thisisu) C:\Users\***\Downloads\JRT.exe
2014-04-02 13:30 - 2014-04-02 13:30 - 00000000 ____D () C:\Windows\ERUNT
2014-04-02 13:29 - 2014-04-02 13:29 - 00009179 _____ () C:\Users\***\Desktop\AdwCleaner[S0].txt
2014-04-02 13:25 - 2014-04-02 13:27 - 00000000 ____D () C:\AdwCleaner
2014-04-02 13:24 - 2014-04-02 13:24 - 01426178 _____ () C:\Users\***\Downloads\adwcleaner.exe
2014-04-02 13:16 - 2014-04-02 13:22 - 00099960 _____ () C:\Users\***\Desktop\MBAM.txt
2014-04-02 12:49 - 2014-04-02 13:20 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-02 12:46 - 2014-04-02 12:46 - 00001117 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-04-02 12:46 - 2014-04-02 12:46 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-02 12:46 - 2014-04-02 12:46 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-04-02 12:46 - 2014-03-05 09:26 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-02 12:46 - 2014-03-05 09:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-02 12:46 - 2014-03-05 09:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-02 12:45 - 2014-04-02 12:45 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\***\Downloads\mbam-setup-2.0.0.1000.exe
2014-04-02 10:54 - 2014-04-02 10:54 - 00001609 _____ () C:\Users\***\Desktop\GMER.log
2014-04-02 10:41 - 2014-04-02 10:41 - 00280768 _____ () C:\Windows\Minidump\040214-17815-01.dmp
2014-04-02 10:21 - 2014-04-02 10:21 - 00380416 _____ () C:\Users\***\Desktop\Gmer-19357.exe
2014-04-02 10:20 - 2014-04-02 13:18 - 00023359 _____ () C:\Users\***\Desktop\FRST.txt
2014-04-02 10:20 - 2014-04-02 13:18 - 00018203 _____ () C:\Users\***\Desktop\Addition.txt
2014-04-02 10:19 - 2014-04-02 10:19 - 00018207 _____ () C:\Users\***\Downloads\Addition.txt
2014-04-02 10:17 - 2014-04-02 13:38 - 00009664 _____ () C:\Users\***\Downloads\FRST.txt
2014-04-02 10:17 - 2014-04-02 13:38 - 00000000 ____D () C:\FRST
2014-04-02 10:17 - 2014-04-02 10:17 - 02157056 _____ (Farbar) C:\Users\***\Downloads\FRST64.exe
2014-04-02 10:16 - 2014-04-02 10:16 - 00000472 _____ () C:\Users\***\Desktop\defogger_disable.log
2014-04-02 10:16 - 2014-04-02 10:16 - 00000000 _____ () C:\Users\***\defogger_reenable
2014-04-02 10:15 - 2014-04-02 10:16 - 00050477 _____ () C:\Users\***\Downloads\Defogger.exe
2014-03-31 20:39 - 2014-03-31 20:39 - 00280768 _____ () C:\Windows\Minidump\033114-17487-01.dmp
2014-03-31 18:03 - 2014-03-31 18:03 - 00280768 _____ () C:\Windows\Minidump\033114-15912-01.dmp
2014-03-30 21:56 - 2014-03-30 21:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-27 20:07 - 2014-04-02 10:41 - 525652197 _____ () C:\Windows\MEMORY.DMP
2014-03-27 20:07 - 2014-04-02 10:41 - 00000000 ____D () C:\Windows\Minidump
2014-03-27 20:07 - 2014-03-27 20:07 - 00280768 _____ () C:\Windows\Minidump\032714-14554-01.dmp
2014-03-19 21:52 - 2014-03-21 19:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-16 20:45 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-16 20:45 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-16 20:45 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-16 20:45 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-16 20:45 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-16 20:45 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-16 20:45 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-16 20:45 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-16 20:45 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-16 20:45 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-16 20:45 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-16 20:45 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-16 20:45 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-16 20:45 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-16 20:45 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-16 20:45 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-16 20:45 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-16 20:45 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-16 20:45 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-16 20:45 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-16 20:45 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-16 20:45 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-16 20:45 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-16 20:45 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-16 20:45 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-16 20:45 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-16 20:45 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-16 20:45 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-16 20:45 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-16 20:45 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-16 20:45 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-16 20:45 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-16 20:45 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-16 20:45 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-16 20:45 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-16 20:45 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-16 20:45 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-16 20:45 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-16 20:45 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-16 20:45 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-16 20:45 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-16 20:45 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-16 20:45 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-16 20:45 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-16 20:45 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-16 20:45 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-16 20:45 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-16 20:45 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll

==================== One Month Modified Files and Folders =======

2014-04-02 13:39 - 2014-04-02 10:17 - 00009664 _____ () C:\Users\***\Downloads\FRST.txt
2014-04-02 13:38 - 2014-04-02 13:38 - 00001163 _____ () C:\Users\***\Desktop\JRT.txt
2014-04-02 13:38 - 2014-04-02 10:17 - 00000000 ____D () C:\FRST
2014-04-02 13:36 - 2009-07-14 06:45 - 00031840 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-02 13:36 - 2009-07-14 06:45 - 00031840 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-02 13:34 - 2012-08-08 13:35 - 00699666 _____ () C:\Windows\system32\perfh007.dat
2014-04-02 13:34 - 2012-08-08 13:35 - 00149774 _____ () C:\Windows\system32\perfc007.dat
2014-04-02 13:34 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-02 13:30 - 2014-04-02 13:30 - 01038974 _____ (Thisisu) C:\Users\***\Downloads\JRT.exe
2014-04-02 13:30 - 2014-04-02 13:30 - 00000000 ____D () C:\Windows\ERUNT
2014-04-02 13:29 - 2014-04-02 13:29 - 00009179 _____ () C:\Users\***\Desktop\AdwCleaner[S0].txt
2014-04-02 13:27 - 2014-04-02 13:25 - 00000000 ____D () C:\AdwCleaner
2014-04-02 13:27 - 2013-03-12 19:26 - 00000000 ___RD () C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-02 13:27 - 2012-08-08 03:55 - 01379597 _____ () C:\Windows\WindowsUpdate.log
2014-04-02 13:27 - 2010-11-21 05:47 - 00493196 _____ () C:\Windows\PFRO.log
2014-04-02 13:27 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-02 13:27 - 2009-07-14 06:51 - 00080328 _____ () C:\Windows\setupact.log
2014-04-02 13:24 - 2014-04-02 13:24 - 01426178 _____ () C:\Users\***\Downloads\adwcleaner.exe
2014-04-02 13:22 - 2014-04-02 13:16 - 00099960 _____ () C:\Users\***\Desktop\MBAM.txt
2014-04-02 13:20 - 2014-04-02 12:49 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-02 13:18 - 2014-04-02 10:20 - 00023359 _____ () C:\Users\***\Desktop\FRST.txt
2014-04-02 13:18 - 2014-04-02 10:20 - 00018203 _____ () C:\Users\***\Desktop\Addition.txt
2014-04-02 13:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help
2014-04-02 13:11 - 2013-03-12 20:29 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-02 12:46 - 2014-04-02 12:46 - 00001117 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-04-02 12:46 - 2014-04-02 12:46 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-02 12:46 - 2014-04-02 12:46 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-04-02 12:45 - 2014-04-02 12:45 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\***\Downloads\mbam-setup-2.0.0.1000.exe
2014-04-02 10:54 - 2014-04-02 10:54 - 00001609 _____ () C:\Users\***\Desktop\GMER.log
2014-04-02 10:41 - 2014-04-02 10:41 - 00280768 _____ () C:\Windows\Minidump\040214-17815-01.dmp
2014-04-02 10:41 - 2014-03-27 20:07 - 525652197 _____ () C:\Windows\MEMORY.DMP
2014-04-02 10:41 - 2014-03-27 20:07 - 00000000 ____D () C:\Windows\Minidump
2014-04-02 10:21 - 2014-04-02 10:21 - 00380416 _____ () C:\Users\***\Desktop\Gmer-19357.exe
2014-04-02 10:19 - 2014-04-02 10:19 - 00018207 _____ () C:\Users\***\Downloads\Addition.txt
2014-04-02 10:17 - 2014-04-02 10:17 - 02157056 _____ (Farbar) C:\Users\***\Downloads\FRST64.exe
2014-04-02 10:16 - 2014-04-02 10:16 - 00000472 _____ () C:\Users\***\Desktop\defogger_disable.log
2014-04-02 10:16 - 2014-04-02 10:16 - 00000000 _____ () C:\Users\***\defogger_reenable
2014-04-02 10:16 - 2014-04-02 10:15 - 00050477 _____ () C:\Users\***\Downloads\Defogger.exe
2014-04-02 10:16 - 2013-03-12 19:23 - 00000000 ____D () C:\Users\***
2014-03-31 20:39 - 2014-03-31 20:39 - 00280768 _____ () C:\Windows\Minidump\033114-17487-01.dmp
2014-03-31 20:38 - 2013-04-11 19:30 - 00000000 ____D () C:\Users\***\Documents\***
2014-03-31 20:38 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-31 18:03 - 2014-03-31 18:03 - 00280768 _____ () C:\Windows\Minidump\033114-15912-01.dmp
2014-03-31 18:03 - 2013-03-12 19:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-30 21:57 - 2014-03-30 21:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-27 20:07 - 2014-03-27 20:07 - 00280768 _____ () C:\Windows\Minidump\032714-14554-01.dmp
2014-03-24 22:48 - 2013-09-19 21:50 - 00000000 ____D () C:\Users\***\Desktop\Musik
2014-03-24 21:08 - 2013-03-12 20:24 - 00000000 ____D () C:\Users\***\Documents\Musik
2014-03-21 19:41 - 2014-03-19 21:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-17 21:25 - 2013-04-14 22:44 - 00000000 ____D () C:\Users\***\AppData\Local\CrashDumps
2014-03-17 21:19 - 2009-07-14 06:45 - 00427544 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-05 09:26 - 2014-04-02 12:46 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-05 09:26 - 2014-04-02 12:46 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-03-05 09:26 - 2014-04-02 12:46 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

Some content of TEMP:
====================
C:\Users\***\AppData\Local\Temp\AskSLib.dll
C:\Users\***\AppData\Local\Temp\avgnt.exe
C:\Users\***\AppData\Local\Temp\BackupSetup.exe
C:\Users\***\AppData\Local\Temp\DeleteVF.exe
C:\Users\***\AppData\Local\Temp\ose00000.exe
C:\Users\***\AppData\Local\Temp\Quarantine.exe
C:\Users\***\AppData\Local\Temp\tbentr.dll
C:\Users\***\AppData\Local\Temp\vcredist_x64.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-31 18:23

==================== End Of Log ============================

--- --- ---

--- --- ---

cosinus 02.04.2014 15:26

Neues Additions-Log? Wenn nicht erstellt: FRST starten, Haken bei additions setzen und neu scannen

Sascha84 02.04.2014 16:06

Additions:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by *** at 2014-04-02 17:05:35
Running from C:\Users\***\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}) (Version:  - Microsoft)
2007 Microsoft Office Suite Service Pack 2 (SP2) (x32 Version:  - Microsoft) Hidden
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
Adobe Flash Player 11 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 11.7.700.224 - Adobe Systems Incorporated)
Adobe Reader X (10.1.1) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.1 - Adobe Systems Incorporated)
Atheros Bluetooth Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.4.0.135 - Atheros)
Atheros WLAN Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Atheros)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.8000.13 - Dolby Laboratories Inc)
Free YouTube to MP3 Converter version 3.12.0.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.0.128 - DVDVideoSoft Ltd.)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.3.1427 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version:  - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2712 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.1.0.1006 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.225 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
Intelligent Touchpad (HKLM-x32\...\{FDB0A81A-1173-4B15-BEA4-89FEA0474F17}) (Version: 1.00.0108 - Lenovo)
LenovoDrv_x64 (HKLM\...\{83E68458-AF28-4CA4-8AFC-595A10307290}) (Version: 1.0.00 - Lenovo)
Malwarebytes Anti-Malware Version 2.00.0.1000 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.00.0.1000 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6425.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.50401.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.30319 - Microsoft Corporation) Hidden
Mozilla Firefox 27.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.4.0 - Mozilla)
Mozilla Thunderbird 24.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.4.0 (x86 de)) (Version: 24.4.0 - Mozilla)
QuickStart (HKLM-x32\...\InstallShield_{36B0DC39-3282-40EB-8587-B875CE46C3A7}) (Version: 3.3.2.33 - VideACE Co.)
QuickStart (x32 Version: 3.3.2.33 - VideACE Co.) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.54.309.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6657 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7601.39019 - Realtek Semiconductor Corp.)
SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.49.86082 - SugarSync, Inc.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.5.2 - Synaptics Incorporated)
Update for Microsoft Office Word 2007 (KB974631) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{1D53FB73-9826-4541-B2E0-A239C6EBA718}) (Version:  - Microsoft)
Update for Microsoft Office Word 2007 (KB974631) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{34726474-50D6-49FC-B8AC-35411459D27A}) (Version:  - Microsoft)
Windows Driver Package - Lenovo Corporation (LAD) System  (01/13/2012 1.0.0.2) (HKLM\...\5E61CDC4058A17FE9BE3046B1846F3118CD618B1) (Version: 01/13/2012 1.0.0.2 - Lenovo Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)

==================== Restore Points  =========================

21-02-2014 16:46:33 Geplanter Prüfpunkt
01-03-2014 21:13:11 Geplanter Prüfpunkt
09-03-2014 18:39:17 Geplanter Prüfpunkt
16-03-2014 19:10:25 Geplanter Prüfpunkt
16-03-2014 21:58:57 Windows Update
31-03-2014 16:30:58 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {165DF033-C4FA-4CCC-AF6D-229978439CE3} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe
Task: {167876FA-BF12-49CC-B65B-C804F15C0A03} - \BrowserProtect No Task File
Task: {1FF85DB8-1559-4201-BAAB-02C64A743F46} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: {5E600295-A40C-4B2C-94E4-97E5508FF0F4} - \Advanced System Protector_startup No Task File
Task: {7CC68EC2-4A75-4161-8EB7-6DFA29146B96} - System32\Tasks\AdobeFlashPlayerUpdate => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2012-05-08 04:54 - 2012-03-27 02:33 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-09-05 18:37 - 2013-09-05 18:37 - 03233806 _____ () C:\Program Files (x86)\Tor\tor.exe
2011-03-25 17:55 - 2011-03-25 17:55 - 00091464 _____ () C:\QuickStartUtil\VAWinService.exe
2012-08-08 04:48 - 2011-12-08 11:12 - 00291272 _____ () C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe
2012-06-04 13:04 - 2012-06-04 13:04 - 00045480 _____ () C:\QuickStartUtil\VAWinAgent.exe
2013-03-12 19:56 - 2012-12-18 10:31 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2011-03-25 17:55 - 2011-03-25 17:55 - 00157000 _____ () C:\QuickStartUtil\libexpat.dll
2011-03-25 17:55 - 2011-03-25 17:55 - 00061768 _____ () C:\QuickStartUtil\netProfileDatabase.DLL
2014-02-16 18:40 - 2014-02-16 18:40 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\00a0b4a9df6e4abf30ae2af3624a77ce\IsdiInterop.ni.dll
2012-08-08 04:20 - 2012-02-01 16:25 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-08-08 04:07 - 2012-02-21 12:09 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-03-30 21:56 - 2014-03-30 21:57 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============
Error: (04/02/2014 01:57:20 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}


Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Percentage of memory in use: 39%
Total physical RAM: 3996.36 MB
Available physical RAM: 2423.4 MB
Total Pagefile: 7990.9 MB
Available Pagefile: 6099.61 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Windows7_OS) (Fixed) (Total:420.56 GB) (Free:376.72 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (LENOVO) (Fixed) (Total:25.47 GB) (Free:21.74 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: A7FB6F4D)

Partition: GPT Partition Type.

==================== End Of Log ============================


cosinus 02.04.2014 21:32

Ok, Kontrollscan bitte mit mbam und eset:

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset



Alle Zeitangaben in WEZ +1. Es ist jetzt 19:30 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55