DeadCorpse | 10.10.2014 17:40 | Der MBAM Log ist ein paar Tage älter da ich bereits einen test gemacht hatte, der jetzige hat nichts weiter gefunden. Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Suchlauf Datum: 06.10.2014
Suchlauf-Zeit: 14:01:22
Logdatei: mbam.txt
Administrator: Ja
Version: 2.00.2.1012
Malware Datenbank: v2014.10.06.03
Rootkit Datenbank: v2014.09.19.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Self-protection: Deaktiviert
Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Hyrican
Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 377282
Verstrichene Zeit: 1 Std, 56 Min, 31 Sek
Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Warnen
PUM: Aktiviert
Prozesse: 0
(No malicious items detected)
Module: 0
(No malicious items detected)
Registrierungsschlüssel: 105
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\APPID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}, In Quarantäne, [b9c25db4d6a634024dc76868bb4741bf],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{35C1605E-438B-4D64-AAB1-8885F097A9B1}, In Quarantäne, [b9c25db4d6a634024dc76868bb4741bf],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{35C1605E-438B-4D64-AAB1-8885F097A9B1}, In Quarantäne, [b9c25db4d6a634024dc76868bb4741bf],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}, In Quarantäne, [b9c25db4d6a634024dc76868bb4741bf],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{291BCCC1-6890-484a-89D3-318C928DAC1B}, In Quarantäne, [99e2f8196d0f34027b9824ac9f6330d0],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\esrv.BabylonESrvc.1, In Quarantäne, [99e2f8196d0f34027b9824ac9f6330d0],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\esrv.BabylonESrvc, In Quarantäne, [99e2f8196d0f34027b9824ac9f6330d0],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.BabylonESrvc, In Quarantäne, [99e2f8196d0f34027b9824ac9f6330d0],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.BabylonESrvc.1, In Quarantäne, [99e2f8196d0f34027b9824ac9f6330d0],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}, In Quarantäne, [7209f41d4b314aec0512d5fb57abe818],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\b, In Quarantäne, [7209f41d4b314aec0512d5fb57abe818],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\b, In Quarantäne, [7209f41d4b314aec0512d5fb57abe818],
PUP.Optional.WebCheck.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E155F23C-9931-47c6-A619-20E6FCA86D75}, In Quarantäne, [de9d36dbc6b6b2843c5ceaab8e740df3],
PUP.Optional.WebCheck.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{F905535E-9C87-4a3f-8A3E-4E3B54C461C5}, In Quarantäne, [de9d36dbc6b6b2843c5ceaab8e740df3],
PUP.Optional.WebCheck.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{F905535E-9C87-4a3f-8A3E-4E3B54C461C5}, In Quarantäne, [de9d36dbc6b6b2843c5ceaab8e740df3],
PUP.Optional.WebCheck.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{E155F23C-9931-47C6-A619-20E6FCA86D75}, In Quarantäne, [de9d36dbc6b6b2843c5ceaab8e740df3],
PUP.Optional.WebCheck.A, HKLM\SOFTWARE\CLASSES\GutscheinCodes.GutscheinCodesBHO, In Quarantäne, [de9d36dbc6b6b2843c5ceaab8e740df3],
PUP.Optional.WebCheck.A, HKLM\SOFTWARE\CLASSES\GutscheinCodes.GutscheinCodesBHO.1, In Quarantäne, [de9d36dbc6b6b2843c5ceaab8e740df3],
PUP.Optional.WebCheck.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\GutscheinCodes.GutscheinCodesBHO, In Quarantäne, [de9d36dbc6b6b2843c5ceaab8e740df3],
PUP.Optional.WebCheck.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\GutscheinCodes.GutscheinCodesBHO.1, In Quarantäne, [de9d36dbc6b6b2843c5ceaab8e740df3],
PUP.Optional.WebCheck.A, HKU\S-1-5-21-3411245652-3336226874-965968342-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{E155F23C-9931-47C6-A619-20E6FCA86D75}, In Quarantäne, [de9d36dbc6b6b2843c5ceaab8e740df3],
PUP.Optional.WebCheck.A, HKU\S-1-5-21-3411245652-3336226874-965968342-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{E155F23C-9931-47C6-A619-20E6FCA86D75}, In Quarantäne, [de9d36dbc6b6b2843c5ceaab8e740df3],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}, In Quarantäne, [007bea2789f374c29f461284996940c0],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{D372567D-67C1-4B29-B3F0-159B52B3E967}, In Quarantäne, [007bea2789f374c29f461284996940c0],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}, In Quarantäne, [007bea2789f374c29f461284996940c0],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{1AD27395-1659-4DFF-A319-2CFA243861A5}, In Quarantäne, [007bea2789f374c29f461284996940c0],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}, In Quarantäne, [007bea2789f374c29f461284996940c0],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{1AD27395-1659-4DFF-A319-2CFA243861A5}, In Quarantäne, [007bea2789f374c29f461284996940c0],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{D372567D-67C1-4B29-B3F0-159B52B3E967}, In Quarantäne, [007bea2789f374c29f461284996940c0],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\CLASSES\YontooIEClient.Layers.1, In Quarantäne, [007bea2789f374c29f461284996940c0],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\CLASSES\YontooIEClient.Layers, In Quarantäne, [007bea2789f374c29f461284996940c0],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\YontooIEClient.Layers, In Quarantäne, [007bea2789f374c29f461284996940c0],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}, In Quarantäne, [007bea2789f374c29f461284996940c0],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\YontooIEClient.Layers.1, In Quarantäne, [007bea2789f374c29f461284996940c0],
PUP.Optional.Yontoo.A, HKU\S-1-5-21-3411245652-3336226874-965968342-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}, In Quarantäne, [007bea2789f374c29f461284996940c0],
PUP.Optional.Yontoo.A, HKU\S-1-5-21-3411245652-3336226874-965968342-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}, In Quarantäne, [007bea2789f374c29f461284996940c0],
PUP.Optional.Yontoo.A, HKU\S-1-5-21-3411245652-3336226874-965968342-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}, In Quarantäne, [007bea2789f374c29f461284996940c0],
PUP.Optional.Yontoo.A, HKU\S-1-5-21-3411245652-3336226874-965968342-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}, In Quarantäne, [007bea2789f374c29f461284996940c0],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{6E8BF012-2C85-4834-B10A-1B31AF173D70}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{706D4A4B-184A-4434-B331-296B07493D2D}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{8BE10F21-185F-4CA0-B789-9921674C3993}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{94C0B25D-3359-4B10-B227-F96A77DB773F}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B173667F-8395-4317-8DD6-45AD1FE00047}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B32672B3-F656-46E0-B584-FE61C0BB6037}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{BFE569F7-646C-4512-969B-9BE3E580D393}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C2996524-2187-441F-A398-CD6CB6B3D020}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E047E227-5342-4D94-80F7-CFB154BF55BD}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{706D4A4B-184A-4434-B331-296B07493D2D}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{8BE10F21-185F-4CA0-B789-9921674C3993}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{94C0B25D-3359-4B10-B227-F96A77DB773F}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B173667F-8395-4317-8DD6-45AD1FE00047}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B32672B3-F656-46E0-B584-FE61C0BB6037}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{BFE569F7-646C-4512-969B-9BE3E580D393}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C2996524-2187-441F-A398-CD6CB6B3D020}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E047E227-5342-4D94-80F7-CFB154BF55BD}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{6E8BF012-2C85-4834-B10A-1B31AF173D70}, In Quarantäne, [d5a6f41d215b7fb73ed7a62a7c86629e],
PUP.Optional.OutBrowse, HKLM\SOFTWARE\CLASSES\TYPELIB\{DCABB943-792E-44C4-9029-ECBEE6265AF9}, In Quarantäne, [c1ba8b86cbb1191d307debafda289b65],
PUP.Optional.OutBrowse, HKLM\SOFTWARE\CLASSES\INTERFACE\{3408AC0D-510E-4808-8F7B-6B70B1F88534}, In Quarantäne, [c1ba8b86cbb1191d307debafda289b65],
PUP.Optional.OutBrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3408AC0D-510E-4808-8F7B-6B70B1F88534}, In Quarantäne, [c1ba8b86cbb1191d307debafda289b65],
PUP.Optional.OutBrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{DCABB943-792E-44C4-9029-ECBEE6265AF9}, In Quarantäne, [c1ba8b86cbb1191d307debafda289b65],
PUP.Optional.Babylon.A, HKU\S-1-5-21-3411245652-3336226874-965968342-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, In Quarantäne, [ceadb958dd9f3df9576775204cb6be42],
PUP.Optional.Babylon.A, HKU\S-1-5-21-3411245652-3336226874-965968342-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}, In Quarantäne, [ceadb958dd9f3df9576775204cb6be42],
PUP.Optional.SweetPacks.A, HKU\S-1-5-21-3411245652-3336226874-965968342-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EEE6C360-6118-11DC-9C72-001320C79847}, In Quarantäne, [c4b7759c05774aec1e88f1e159a94bb5],
PUP.Optional.SweetPacks.A, HKU\S-1-5-21-3411245652-3336226874-965968342-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EEE6C360-6118-11DC-9C72-001320C79847}, In Quarantäne, [c4b7759c05774aec1e88f1e159a94bb5],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EEE6C360-6118-11DC-9C72-001320C79847}, In Quarantäne, [c4b7759c05774aec1e88f1e159a94bb5],
PUP.Optional.ConduitTB.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{30F9B915-B755-4826-820B-08FBA6BD249D}, In Quarantäne, [1665c051c6b63df9e68d0e8a1de559a7],
PUP.Optional.ConduitTB.A, HKU\S-1-5-21-3411245652-3336226874-965968342-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{30F9B915-B755-4826-820B-08FBA6BD249D}, In Quarantäne, [1665c051c6b63df9e68d0e8a1de559a7],
PUP.Optional.ConduitTB.A, HKU\S-1-5-21-3411245652-3336226874-965968342-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{30F9B915-B755-4826-820B-08FBA6BD249D}, In Quarantäne, [1665c051c6b63df9e68d0e8a1de559a7],
PUP.Optional.ConduitTB.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{30F9B915-B755-4826-820B-08FBA6BD249D}, In Quarantäne, [1665c051c6b63df9e68d0e8a1de559a7],
PUP.Optional.ConduitTB.A, HKU\S-1-5-21-3411245652-3336226874-965968342-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{30F9B915-B755-4826-820B-08FBA6BD249D}, In Quarantäne, [1665c051c6b63df9e68d0e8a1de559a7],
PUP.Optional.ConduitTB.A, HKU\S-1-5-21-3411245652-3336226874-965968342-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{30F9B915-B755-4826-820B-08FBA6BD249D}, In Quarantäne, [1665c051c6b63df9e68d0e8a1de559a7],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}, In Quarantäne, [1d5e67aa601c49ed898de4ec48ba6d93],
PUP.Optional.SilentInstall.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{924C3DC2-8E4E-432E-F973-9A2174A39774}, In Quarantäne, [cfaccc45f488af870102e3ec11f1cd33],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\CLASSES\YontooIEClient.Api, In Quarantäne, [562534dd6517b5815ecdc85abf44d52b],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\CLASSES\YontooIEClient.Api.1, In Quarantäne, [5e1dd8392c50da5c989326fc40c3758b],
PUP.Optional.BetterSurf.A, HKLM\SOFTWARE\CLASSES\APPID\YontooIEClient.DLL, In Quarantäne, [ec8f848df38972c48d9f8e943ac923dd],
PUP.Optional.Babylon.A, HKLM\SOFTWARE\WOW6432NODE\BabylonToolbar, In Quarantäne, [6c0fdf327b01b680c275dc807391d729],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, In Quarantäne, [7902e928b4c871c558ed96aff1126e92],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\YontooIEClient.Api, In Quarantäne, [4b30f120e29aa4920a21d34f4bb8bd43],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\YontooIEClient.Api.1, In Quarantäne, [a1da3fd2fb8161d588a35bc7f3107789],
PUP.Optional.BetterSurf.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\YontooIEClient.DLL, In Quarantäne, [aecd2ae7542839fdc96349d97291ad53],
PUP.Optional.WebCheck.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dacechnliklhcacondhhkkfobapdopee, In Quarantäne, [d9a20d04146875c170e914f9c93a46ba],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\niapdbllcanepiiimjjndipklodoedlc, In Quarantäne, [f487030e3646a88e1c403cf17e8559a7],
PUP.Optional.1ClickDownLoader.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\pmlghpafmmnmmkjdhacccolfgnkiboco, In Quarantäne, [1f5cf21f99e3d561f4ffd8536b98a45c],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\SWEETIM, In Quarantäne, [e2992de414688fa7c6d0ea7130d4af51],
PUP.Optional.BabylonToolBar.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BabylonToolbar, In Quarantäne, [4635ed24f8845dd91c349cc2be465ba5],
PUP.Optional.1ClickDownload.A, HKU\S-1-5-21-3411245652-3336226874-965968342-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\1ClickDownload, In Quarantäne, [ccafb25f225a0e284faef06b52b2bb45],
PUP.Optional.BabylonToolBar.A, HKU\S-1-5-21-3411245652-3336226874-965968342-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BabylonToolbar, In Quarantäne, [0477848dacd082b4eb65a8b610f4669a],
Malware.Trace, HKU\S-1-5-21-3411245652-3336226874-965968342-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DC3_FEXEC, In Quarantäne, [c4b7e52cc8b47eb81321f5f201025ba5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3411245652-3336226874-965968342-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, In Quarantäne, [d2a909086f0d4cea35b8016d5ca8a15f],
PUP.Optional.DVDVideoSoftTB.A, HKU\S-1-5-21-3411245652-3336226874-965968342-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\nikpibnbobmbdbheedjfogjlikpgpnhp, In Quarantäne, [f7845ab794e87abc3cbe1bf4a55ed32d],
PUP.Optional.Softonic.A, HKU\S-1-5-21-3411245652-3336226874-965968342-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, In Quarantäne, [3d3e8f823547e254f89458db53b09e62],
PUP.Optional.SweetIM.A, HKU\S-1-5-21-3411245652-3336226874-965968342-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SWEETIM, In Quarantäne, [f685ee238def2e081e77312a917319e7],
Registrierungswerte: 7
PUP.Optional.ConduitTB.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{30F9B915-B755-4826-820B-08FBA6BD249D}, Conduit Engine, In Quarantäne, [1665c051c6b63df9e68d0e8a1de559a7]
PUP.Optional.ConduitTB.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{30F9B915-B755-4826-820B-08FBA6BD249D}, In Quarantäne, [f685e72ae19b0b2b6211e0b88b7740c0],
Trojan.Agent, HKU\S-1-5-21-3411245652-3336226874-965968342-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|HKCU, C:\Users\Hyrican\AppData\Roaming\WinDir\Svchost.exe, In Quarantäne, [4734947d225ad660bfdeea0557ac1ae6]
PUP.Optional.WebCheck.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{52b0f3db-f988-4788-b9dc-861d016f4487}, C:\Program Files (x86)\Web Check\WebCheck.xpi, In Quarantäne, [e596be533d3f4ee800b608156e95f50b]
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\SWEETIM|simapp_id, 11111111, In Quarantäne, [e2992de414688fa7c6d0ea7130d4af51]
PUP.Optional.SweetIM.A, HKU\S-1-5-21-3411245652-3336226874-965968342-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SWEETIM|simapp_id, 11111111, In Quarantäne, [f685ee238def2e081e77312a917319e7]
Trojan.Agent, HKU\S-1-5-21-3411245652-3336226874-965968342-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|HKCU, C:\Users\Administrator\AppData\Roaming\WinDir\Svchost.exe, In Quarantäne, [cead070a2359b97d7ba5fa60d42f2ad6]
Registrierungsdaten: 0
(No malicious items detected)
Ordner: 43
PUP.Optional.DownloadGuide.A, C:\Users\Hyrican\AppData\Local\DownloadGuide, In Quarantäne, [a7d427ea621aa393e21aed78bf4521df],
PUP.Optional.OpenCandy, C:\Users\Hyrican\AppData\Roaming\OpenCandy, In Quarantäne, [5b2063ae502c1e18aeeff4ee9b670cf4],
PUP.Optional.OpenCandy, C:\Users\Hyrican\AppData\Roaming\OpenCandy\1ABD29D2005F4052B43435FBB106660E, In Quarantäne, [5b2063ae502c1e18aeeff4ee9b670cf4],
PUP.Optional.OpenCandy, C:\Users\Hyrican\AppData\Roaming\OpenCandy\8371CC2EB3A94E0F81A39869000B9025, In Quarantäne, [5b2063ae502c1e18aeeff4ee9b670cf4],
PUP.Optional.OpenCandy, C:\Users\Hyrican\AppData\Roaming\OpenCandy\OpenCandy_DCF7A44E3FC64AFCA4F411EA0CD116FA, In Quarantäne, [5b2063ae502c1e18aeeff4ee9b670cf4],
PUP.Optional.Conduit.A, C:\Users\Hyrican\AppData\Local\Temp\CT3326313, In Quarantäne, [3348dd34e29ad85e72a1bc275ca6b54b],
PUP.Optional.1ClickDownLoader.A, C:\Users\Hyrican\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco, In Quarantäne, [9edd819080fc54e257dc1bccb34fab55],
PUP.Optional.1ClickDownLoader.A, C:\Users\Hyrican\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.9_0, In Quarantäne, [9edd819080fc54e257dc1bccb34fab55],
PUP.Optional.1ClickDownLoader.A, C:\Users\Hyrican\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.9_0\html, In Quarantäne, [9edd819080fc54e257dc1bccb34fab55],
PUP.Optional.1ClickDownLoader.A, C:\Users\Hyrican\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.9_0\images, In Quarantäne, [9edd819080fc54e257dc1bccb34fab55],
PUP.Optional.1ClickDownLoader.A, C:\Users\Hyrican\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.9_0\js, In Quarantäne, [9edd819080fc54e257dc1bccb34fab55],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\defaults, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\defaults\preferences, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\locale, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\addon-kit, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\addon-kit\data, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\addon-kit\lib, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\data, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\content, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\dom, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\event, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\events, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\tabs, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\traits, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\utils, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\window, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\windows, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\oneclickdownloader, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\oneclickdownloader\data, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\oneclickdownloader\lib, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\oneclickdownloader\tests, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\content, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\defaults, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\defaults\preferences, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\locale, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\locale\en-US, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\META-INF, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\skin, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
Dateien: 186
Adware.Agent, C:\ProgramData\InstallMate\{FA304269-B55C-48EF-AA04-FD7E21D3609F}\Custom.dll, In Quarantäne, [ff7c0c05ccb0a6904f622938738e1ee2],
PUP.Optional.SilentInstall.A, C:\ProgramData\saafe ssaVea\uninstall.exe, In Quarantäne, [2556b55cbbc16accc7cf93888978718f],
Hacktool.CheatEngine, C:\Users\Hyrican\Desktop\Neues Textdokument.rar, In Quarantäne, [e893ab66aece4ceabf88ce6cf01050b0],
Hacktool.CheatEngine, C:\Users\Hyrican\Desktop\Sins of a Solar Empire Rebellion V1.0.1.0 Trainer +8 MrAntiFun.EXE, In Quarantäne, [2655cb46592390a667e09e9cec1416ea],
Trojan.Agent, C:\Windows\SysWOW64\Neuz.exe, In Quarantäne, [1d5e828f750787af34472100e21e5ca4],
Hacktool.CheatEngine, C:\Users\Hyrican\AppData\Local\Temp\wz36ea\Sins of a Solar Empire Rebellion V1.0.1.0 Trainer +8 MrAntiFun.EXE, In Quarantäne, [205bf021cbb1033374d356e4bf412ed2],
PUP.Optional.BundleInstaller.A, C:\Users\Hyrican\Downloads\FreeFileViewerSetup.exe, In Quarantäne, [4833e22f017ba39356f8d8bd29d813ed],
PUP.Optional.Conduit.A, C:\Users\Hyrican\Downloads\SpilgamesAirStrike2_12817.exe, In Quarantäne, [80fb5eb3215b73c37d2bf4517789aa56],
PUP.Optional.AdLyrics.A, C:\Users\Hyrican\AppData\Local\DownloadGuide\addlyrics.exe, In Quarantäne, [accfe22f235940f63bd5af935ca934cc],
PUP.Optional.CrossRider, C:\Users\Hyrican\AppData\Local\DownloadGuide\plus-hd-3-8.exe, In Quarantäne, [5823977a631957df5893cc6824ddb44c],
Trojan.Agent, C:\Users\Hyrican\AppData\Roaming\WinDir\Svchost.exe, In Quarantäne, [4734947d225ad660bfdeea0557ac1ae6],
PUP.Optional.DownloadGuide.A, C:\Users\Hyrican\AppData\Local\DownloadGuide\amazon.ico, In Quarantäne, [a7d427ea621aa393e21aed78bf4521df],
PUP.Optional.DownloadGuide.A, C:\Users\Hyrican\AppData\Local\DownloadGuide\PaperBall_Setup_recommendation.exe, In Quarantäne, [a7d427ea621aa393e21aed78bf4521df],
PUP.Optional.DownloadGuide.A, C:\Users\Hyrican\AppData\Local\DownloadGuide\strongvault.exe, In Quarantäne, [a7d427ea621aa393e21aed78bf4521df],
PUP.Optional.DownloadGuide.A, C:\Users\Hyrican\AppData\Local\DownloadGuide\youtube-dlm_Setup_product-website_en-US.exe, In Quarantäne, [a7d427ea621aa393e21aed78bf4521df],
PUP.Optional.OpenCandy, C:\Users\Hyrican\AppData\Roaming\OpenCandy\1ABD29D2005F4052B43435FBB106660E\5472.ico, In Quarantäne, [5b2063ae502c1e18aeeff4ee9b670cf4],
PUP.Optional.OpenCandy, C:\Users\Hyrican\AppData\Roaming\OpenCandy\1ABD29D2005F4052B43435FBB106660E\EBB77268-338F-4C6A-8590-AD88FED26F4A, In Quarantäne, [5b2063ae502c1e18aeeff4ee9b670cf4],
PUP.Optional.OpenCandy, C:\Users\Hyrican\AppData\Roaming\OpenCandy\8371CC2EB3A94E0F81A39869000B9025\5472.ico, In Quarantäne, [5b2063ae502c1e18aeeff4ee9b670cf4],
PUP.Optional.OpenCandy, C:\Users\Hyrican\AppData\Roaming\OpenCandy\8371CC2EB3A94E0F81A39869000B9025\EBB77268-338F-4C6A-8590-AD88FED26F4A, In Quarantäne, [5b2063ae502c1e18aeeff4ee9b670cf4],
PUP.Optional.OpenCandy, C:\Users\Hyrican\AppData\Roaming\OpenCandy\OpenCandy_DCF7A44E3FC64AFCA4F411EA0CD116FA\2359.ico, In Quarantäne, [5b2063ae502c1e18aeeff4ee9b670cf4],
PUP.Optional.OpenCandy, C:\Users\Hyrican\AppData\Roaming\OpenCandy\OpenCandy_DCF7A44E3FC64AFCA4F411EA0CD116FA\avg-800341.exe, In Quarantäne, [5b2063ae502c1e18aeeff4ee9b670cf4],
PUP.Optional.OpenCandy, C:\Users\Hyrican\AppData\Roaming\OpenCandy\OpenCandy_DCF7A44E3FC64AFCA4F411EA0CD116FA\EBB77268-338F-4C6A-8590-AD88FED26F4A, In Quarantäne, [5b2063ae502c1e18aeeff4ee9b670cf4],
PUP.Optional.1ClickDownLoader.A, C:\Users\Hyrican\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.9_0\manifest.json, In Quarantäne, [9edd819080fc54e257dc1bccb34fab55],
PUP.Optional.1ClickDownLoader.A, C:\Users\Hyrican\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.9_0\html\background.html, In Quarantäne, [9edd819080fc54e257dc1bccb34fab55],
PUP.Optional.1ClickDownLoader.A, C:\Users\Hyrican\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.9_0\images\icon.16.png, In Quarantäne, [9edd819080fc54e257dc1bccb34fab55],
PUP.Optional.1ClickDownLoader.A, C:\Users\Hyrican\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.9_0\images\icon.48.png, In Quarantäne, [9edd819080fc54e257dc1bccb34fab55],
PUP.Optional.1ClickDownLoader.A, C:\Users\Hyrican\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.9_0\js\background.js, In Quarantäne, [9edd819080fc54e257dc1bccb34fab55],
PUP.Optional.1ClickDownLoader.A, C:\Users\Hyrican\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.9_0\js\dt.txt, In Quarantäne, [9edd819080fc54e257dc1bccb34fab55],
PUP.Optional.1ClickDownLoader.A, C:\Users\Hyrican\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.9_0\js\ex.js, In Quarantäne, [9edd819080fc54e257dc1bccb34fab55],
PUP.Optional.1ClickDownLoader.A, C:\Users\Hyrican\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.9_0\js\jquery.js, In Quarantäne, [9edd819080fc54e257dc1bccb34fab55],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\bootstrap.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\harness-options.json, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\icon.png, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\icon64.png, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\install.rdf, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\locales.json, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\defaults\preferences\prefs.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\locale\en-GB.json, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\locale\eo.json, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\locale\fr-FR.json, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\addon-kit\data\index.html, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\addon-kit\data\moz_favicon.ico, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\addon-kit\data\pagemod-css-include-file.css, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\addon-kit\data\test-context-menu.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\addon-kit\data\test-page-mod.html, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\addon-kit\data\test-page-worker.html, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\addon-kit\data\test-page-worker.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\addon-kit\data\test.html, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\addon-kit\lib\context-menu.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\addon-kit\lib\page-mod.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\addon-kit\lib\page-worker.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\addon-kit\lib\request.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\addon-kit\lib\simple-storage.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\addon-kit\lib\tabs.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\addon-kit\lib\windows.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\data\content-proxy.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\data\test-content-symbiont.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\data\test-message-manager.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\data\test-trusted-document.html, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\data\worker.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\api-utils.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\base.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\byte-streams.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\channel.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\collection.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\content.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\cortex.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\cuddlefish.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\environment.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\errors.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\events.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\file.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\functional.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\globals!.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\hidden-frame.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\light-traits.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\list.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\match-pattern.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\memory.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\message-manager.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\namespace.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\observer-service.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\plain-text-console.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\preferences-service.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\process.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\querystring.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\runtime.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\sandbox.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\self!.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\system.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\text-streams.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\timer.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\traceback.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\traits.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\unload.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\url.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\uuid.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\window-utils.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\xhr.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\xpcom.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\xul-app.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\content\loader.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\content\symbiont.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\content\worker.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\dom\events.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\event\core.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\event\target.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\events\assembler.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\tabs\events.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\tabs\observer.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\tabs\tab.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\tabs\utils.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\traits\core.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\utils\data.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\utils\object.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\utils\registry.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\utils\thumbnail.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\window\utils.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\windows\dom.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\windows\loader.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\windows\observer.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\windows\tabs.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\oneclickdownloader\data\background.html, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\oneclickdownloader\data\bg.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\oneclickdownloader\data\dt.txt, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\oneclickdownloader\data\ex.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\oneclickdownloader\data\jquery.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.1ClickDownload.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\OneClickDownload@OneClickDownload.com\resources\oneclickdownloader\lib\main.js, In Quarantäne, [8eeda36eafcd0c2a9658a83f857d0ff1],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\build.sh, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\chrome.manifest, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\config_build.sh, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\install.rdf, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\readme.txt, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\content\about.xul, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\content\firefoxOverlay.xul, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\content\options.xul, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\content\overlay.js, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\content\y2layers.jpg, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\defaults\preferences\y2layers.js, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\locale\en-US\about.dtd, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\locale\en-US\prefwindow.dtd, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\locale\en-US\y2layers.dtd, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\locale\en-US\y2layers.properties, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\META-INF\manifest.mf, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\META-INF\zigbert.rsa, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\META-INF\zigbert.sf, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\skin\overlay.css, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.Yontoo.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\extensions\plugin@yontoo.com\skin\toolbar-button.png, In Quarantäne, [106b16fb314b38fee09b7870689af50b],
PUP.Optional.CrossRider.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.crossrider.bic", "14131dbf9d02fe8f3a23b4b1dd9a5a5e");), Ersetzt,[6714ab66245832046ab828203acb03fd]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.aflt", "babsst");), Ersetzt,[3d3e37dabbc1270f87ab54f48184f010]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.babTrack", "affID=100842");), Ersetzt,[aad125ec493347ef939f4800c63f2fd1]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.bbDpng", 24);), Ersetzt,[7ffcba57067693a370c2a5a35ea70cf4]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.dfltLng", "en");), Ersetzt,[89f2ff12ea922d09102205431de8b14f]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.dfltSrch", true);), Ersetzt,[85f6030e47357eb8141e0d3b699ca759]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.firstRun", false);), Ersetzt,[afcc9879512bbb7bd35f4bfd3ec740c0]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.hmpg", true);), Ersetzt,[037823ee8cf084b2e54d78d00104639d]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.id", "f0191c30000000000000001c4affb31b");), Ersetzt,[8af18988621ae05652e0ef5965a0fb05]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.instlDay", "15209");), Ersetzt,[81facc45d0ac83b3a58d8abe10f53fc1]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.instlRef", "sst");), Ersetzt,[37442ae7dba1a98d2a08113715f020e0]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.keyWordUrl", "hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=f0191c30000000000000001c4affb31b&tlver=1.4.35.10&affID=100842");), Ersetzt,[bac13dd497e5e452c36f4bfde61f19e7]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.lastDP", 24);), Ersetzt,[2952e829344835014de5390fe61f1ae6]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.4.35.1015:50:01");), Ersetzt,[8eed5fb25d1f0531e94964e4dd289967]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");), Ersetzt,[1269d63b522a8da979b956f21ce925db]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.prtnrId", "babylon");), Ersetzt,[8af117fa82fa96a031010444867f817f]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.ptch_0717", true);), Ersetzt,[abd0e62b0d6f79bdf2409fa98f76728e]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.smplGrp", "none");), Ersetzt,[3c3f27eaceae67cf36fc81c73dc8b64a]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.srcExt", "ss");), Ersetzt,[daa1729ff8840135cf6317317b8a37c9]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.srchPrvdr", "Search the web (Babylon)");), Ersetzt,[0873df32b8c4f442b87acc7c42c3af51]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.tlbrId", "base");), Ersetzt,[accf2ee34537a690cf63ee5aec1921df]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.vrsn", "1.4.35.10");), Ersetzt,[2d4ea36ec1bbdb5b5ad8a1a7996c5ca4]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.vrsnTs", "1.4.35.1015:50:01");), Ersetzt,[aecd53be2a520c2ab77b3315e91c8080]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.aflt", "babsst");), Ersetzt,[4f2c48c9ceae48ee3cf64800af562cd4]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.babExt", "");), Ersetzt,[116a20f185f781b544eedf699570e818]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.babTrack", "affID=112555&tt=2912_6");), Ersetzt,[94e731e06517da5c2f03390f4db85ea2]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.hardId", "f0191c3000000000000000e04c42168e");), Ersetzt,[a9d2a8692b510234250db890e61f22de]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.id", "f0191c3000000000000000e04c42168e");), Ersetzt,[81fa44cdfa822f078fa3a1a79a6bec14]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.instlDay", "15543");), Ersetzt,[0f6c729f7b011e18f53d5fe90df804fc]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.instlRef", "sst");), Ersetzt,[017a828f245881b5230fff497b8a04fc]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");), Ersetzt,[0e6d5bb6f28a989ed45e2a1e7d884cb4]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");), Ersetzt,[bcbfea275527d95de052de6af312b14f]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.smplGrp", "none");), Ersetzt,[7b003ad72755a5919a9894b463a2ef11]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.srcExt", "ss");), Ersetzt,[9cdfb9587a020531072b89bf44c1d22e]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.tlbrId", "base");), Ersetzt,[fc7fed24720a063082b0c385b154bd43]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");), Ersetzt,[88f30f02e09cce68270b74d4d13438c8]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1711:36:24");), Ersetzt,[7dfefa17de9e2f0756dc4404dd28cd33]
PUP.Optional.Babylon.A, C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");), Ersetzt,[2d4e69a87dffc670b082e662a65f6d93]
Physische Sektoren: 0
(No malicious items detected)
(end) Hier Adwcleaner Code:
# AdwCleaner v3.311 - Bericht erstellt am 06/10/2014 um 21:00:15
# Aktualisiert 30/09/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Hyrican - HYRICAN-PC
# Gestartet von : C:\Users\Hyrican\Downloads\adwcleaner_3.311.exe
# Option : Suchen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Datei Gefunden : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
Datei Gefunden : C:\Users\Hyrican\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
Datei Gefunden : C:\Users\Hyrican\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
Datei Gefunden : C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\user.js
Ordner Gefunden : C:\Program Files (x86)\1ClickDownload
Ordner Gefunden : C:\Program Files (x86)\AVG Secure Search
Ordner Gefunden : C:\Program Files (x86)\AVG Security Toolbar
Ordner Gefunden : C:\Program Files (x86)\Common Files\AVG Secure Search
Ordner Gefunden : C:\Program Files (x86)\Free Video Converter
Ordner Gefunden : C:\Program Files (x86)\SoftwareUpdater
Ordner Gefunden : C:\Program Files\Babylon
Ordner Gefunden : C:\ProgramData\AlawarWrapper
Ordner Gefunden : C:\ProgramData\AVG Secure Search
Ordner Gefunden : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\saafe ssaVea
Ordner Gefunden : C:\ProgramData\saafe ssaVea
Ordner Gefunden : C:\ProgramData\StarApp
Ordner Gefunden : C:\ProgramData\Tarma Installer
Ordner Gefunden : C:\ProgramData\Trymedia
Ordner Gefunden : C:\Users\Hyrican\AppData\Local\AlawarWrapper
Ordner Gefunden : C:\Users\Hyrican\AppData\Local\AVG Secure Search
Ordner Gefunden : C:\Users\Hyrican\AppData\Local\Google\Chrome\User Data\Default\Extensions\eolaihphklpfbofmnobenghdgjdibnco
Ordner Gefunden : C:\Users\Hyrican\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Ordner Gefunden : C:\Users\Hyrican\AppData\Local\OpenCandy
Ordner Gefunden : C:\Users\Hyrican\AppData\Local\Software Updater
Ordner Gefunden : C:\Users\Hyrican\AppData\Local\Software_Updater
Ordner Gefunden : C:\Users\Hyrican\AppData\Local\SoftwareUpdater
Ordner Gefunden : C:\Users\Hyrican\AppData\Local\Temp\AVG Secure Search
Ordner Gefunden : C:\Users\Hyrican\AppData\Local\Temp\BabylonToolbar
Ordner Gefunden : C:\Users\Hyrican\AppData\Local\Temp\hotspot shield
Ordner Gefunden : C:\Users\Hyrican\AppData\Local\Temp\OCS
Ordner Gefunden : C:\Users\Hyrican\AppData\LocalLow\AVG Secure Search
Ordner Gefunden : C:\Users\Hyrican\AppData\LocalLow\BittorrentBar_DE
Ordner Gefunden : C:\Users\Hyrican\AppData\LocalLow\Conduit
Ordner Gefunden : C:\Users\Hyrican\AppData\LocalLow\ConduitEngine
Ordner Gefunden : C:\Users\Hyrican\AppData\LocalLow\GutscheinCodes
Ordner Gefunden : C:\Users\Hyrican\AppData\Roaming\BabylonToolbar
Ordner Gefunden : C:\Users\Hyrican\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gefunden : C:\Users\Hyrican\AppData\Roaming\YourFileDownloader
Ordner Gefunden : C:\Users\Public\Documents\AlawarWrapper
***** [ Tasks ] *****
Task Gefunden : Software Updater Ui
Task Gefunden : Software Updater
Task Gefunden : Your File Updater
Task Gefunden : YourFile Update
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gefunden : HKCU\Software\anchorfree
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\BittorrentBar_DE
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\conduitEngine
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\conduitEngine
Schlüssel Gefunden : HKCU\Software\AppDataLow\Toolbar
Schlüssel Gefunden : HKCU\Software\AVG Secure Search
Schlüssel Gefunden : HKCU\Software\Bitberry
Schlüssel Gefunden : HKCU\Software\Classes\pokki
Schlüssel Gefunden : HKCU\Software\Conduit
Schlüssel Gefunden : HKCU\Software\InstalledThirdPartyPrograms
Schlüssel Gefunden : HKCU\Software\Microsoft\Babylon
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Schlüssel Gefunden : HKCU\Software\OCS
Schlüssel Gefunden : HKCU\Software\Softonic
Schlüssel Gefunden : HKCU\Software\YourFileDownloader
Schlüssel Gefunden : [x64] HKCU\Software\anchorfree
Schlüssel Gefunden : [x64] HKCU\Software\AVG Secure Search
Schlüssel Gefunden : [x64] HKCU\Software\Bitberry
Schlüssel Gefunden : [x64] HKCU\Software\Conduit
Schlüssel Gefunden : [x64] HKCU\Software\InstalledThirdPartyPrograms
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Babylon
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gefunden : [x64] HKCU\Software\OCS
Schlüssel Gefunden : [x64] HKCU\Software\Softonic
Schlüssel Gefunden : [x64] HKCU\Software\YourFileDownloader
Schlüssel Gefunden : HKLM\SOFTWARE\AVG Secure Search
Schlüssel Gefunden : HKLM\SOFTWARE\AVG Security Toolbar
Schlüssel Gefunden : HKLM\SOFTWARE\BittorrentBar_DE
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{59279625-EFF0-4F55-98F0-51EDDD800DD9}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\BabylonHelper.EXE
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\GutscheinCodes.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{A43DE495-3D00-47D4-9D2C-303115707939}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Conduit.Engine
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\escort.escortIEPane
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Installer\Features\3192AA38321C641458DBDAF83979D193
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Installer\Products\3192AA38321C641458DBDAF83979D193
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Toolbar.CT2849855
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{E69D4A59-73DE-4E38-9FB3-740EC4D9060D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Wow6432Node\AppID\GutscheinCodes.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Conduit
Schlüssel Gefunden : HKLM\SOFTWARE\conduitEngine
Schlüssel Gefunden : HKLM\SOFTWARE\conduitEngine
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6BF6DDF0-FF52-479B-AAD3-D5F3A4D9C61F}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{82404B19-489E-4932-A4AD-C48FAD4971CC}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_gamespy-arcade_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_gamespy-arcade_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_mdk-murder-death-kill_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_mdk-murder-death-kill_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bittorrent_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_bittorrent_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_process-tamer_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_process-tamer_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\YourFile_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\YourFile_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\YourFileUpdater_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\YourFileUpdater_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{FA44AE29-02B7-4241-B875-4D3E2A8EBE61}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Schlüssel Gefunden : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Schlüssel Gefunden : HKLM\SOFTWARE\YourFileDownloader
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{A75BE48D-BF58-4A8B-B96C-F9A09DFB9844}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\InstalledThirdPartyPrograms
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B2468513CA2D6943A1A233CD3F88CE7
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3192AA38321C641458DBDAF83979D193
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Tarma Installer
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{64EAD72B-FFD4-4E01-AA3A-4C71665D73E4}]
Wert Gefunden : HKCU\Software\Mozilla\Firefox\Extensions [Avg@toolbar]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{64EAD72B-FFD4-4E01-AA3A-4C71665D73E4}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{64EAD72B-FFD4-4E01-AA3A-4C71665D73E4}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Wert Gefunden : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}]
Wert Gefunden : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
Wert Gefunden : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17239
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://isearch.avg.com/?cid={40AF989C-0092-441B-A937-1D0453B3F02A}&mid=15703d05d59f47d180d9d1550c1b5ae8-94111bb5affa4e730c98ee544cf4a60371c42a18&lang=en&ds=tg027&pr=sa&d=2011-09-20 14:34:34&v=13.2.0.5&sap=hp
Einstellung Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs] - hxxp://isearch.avg.com/tab?cid={40AF989C-0092-441B-A937-1D0453B3F02A}&mid=15703d05d59f47d180d9d1550c1b5ae8-94111bb5affa4e730c98ee544cf4a60371c42a18&lang=en&ds=tg027&pr=sa&d=2011-09-20 14:34:34&v=9.0.0.22&sap=nt
-\\ Mozilla Firefox v32.0.3 (x86 de)
[ Datei : C:\Users\Hyrican\AppData\Roaming\Mozilla\Firefox\Profiles\1aaltssf.default\prefs.js ]
Zeile gefunden : user_pref("avg.install.installDirPath", "C:\\ProgramData\\AVG Secure Search\\FireFoxExt\\18.1.9.799");
Zeile gefunden : user_pref("avg.userPreferences.URLBarFocus.whiteList", "bing\\.com|google\\.\\w+|yahoo\\.\\w+|gmail\\.\\w+|hotmail\\.\\w+|live\\.\\w+|isearch\\.avg\\.com|mysearch\\.avg\\.com");
Zeile gefunden : user_pref("browser.search.order.1", "Search the web (Babylon)");
Zeile gefunden : user_pref("extensions.51e0667d4c687.scode", "if(window.self==window.top){var script=document.createElement(\"script\");script.type=\"text/javascript\";script.src=\"//cdncache-a.akamaihd.net/loaders/15[...]
Zeile gefunden : user_pref("extentions.y2layers.defaultEnableAppsList", "twittube,ezLooker,pagerage,buzzdock,toprelatedtopics,YontooNewOffers");
Zeile gefunden : user_pref("extentions.y2layers.installId", "68e89f23-5844-4d00-a5a7-053a1e8e8885");
-\\ Google Chrome v37.0.2062.124
[ Datei : C:\Users\Hyrican\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [22279 octets] - [06/10/2014 21:00:15]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [22340 octets] ########## Der Rest kommt gleich
Hier die JRT Logs Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.2 (10.09.2014:1)
OS: Windows 7 Home Premium x64
Ran by Hyrican on 10.10.2014 at 16:39:13,41
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8DA04D15-6AB2-4E6F-95EB-E53B59F84001}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{8DA04D15-6AB2-4E6F-95EB-E53B59F84001}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8DA04D15-6AB2-4E6F-95EB-E53B59F84001}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{8DA04D15-6AB2-4E6F-95EB-E53B59F84001}
~~~ Files
~~~ Folders
Successfully deleted: [Folder] C:\ProgramData\FastStone Image Viewer
Successfully deleted: [Folder] "C:\Users\Hyrican\AppData\Roaming\getrighttogo"
Successfully deleted: [Folder] "C:\Users\Hyrican\AppData\Roaming\thinstall"
Successfully deleted: [Folder] "C:\Users\Hyrican\appdata\local\thinstall"
Successfully deleted: [Folder] "C:\ai_recyclebin"
Successfully deleted: [Folder] "C:\windows\syswow64\ai_recyclebin"
Successfully deleted: [Empty Folder] C:\Users\Hyrican\appdata\local\{08805FC4-8957-476D-AF6F-462312588858}
~~~ FireFox
Successfully deleted: [File] C:\user.js
Emptied folder: C:\Users\Hyrican\AppData\Roaming\mozilla\firefox\profiles\1aaltssf.default\minidumps [418 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 10.10.2014 at 16:52:00,99
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |