Trojaner-Board - Windows 7: E-Mail vom falschen DHL-Absender samt Anhang geöffnet

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Windows 7: E-Mail vom falschen DHL-Absender samt Anhang geöffnet (https://www.trojaner-board.de/166756-windows-7-e-mail-falschen-dhl-absender-samt-anhang-geoeffnet.html)

Patroklos91

07.05.2015 21:14

Windows 7: E-Mail vom falschen DHL-Absender samt Anhang geöffnet

Am vergangenen Abend habe ich eine vermeintliche Mail vom Absender DHL sowie deren Anhang geöffnet. Ich habe seitdem keine Einschränkungen am PC festgestellt, bin aufgrund der Nachrichtenlage zu diesen Mails aber beunruhigt.
Für eure Hilfe möchte ich euch daher bereits Vorraus einen großen Dank aussprechen!
Ach ja: Von diesem Freitag-Mittag bis kommenden Montag-Abend werde ich leider nicht antworten oder reagieren können.

Zwei Fragen noch meinerseits:
1. Mein PC bezieht Internet über W-Lan und es befinden sich noch drei weitere Rechner in der Wohnung. Inwiefern sind diese Computer über Netzwerkkommunikation ebenfalls bedroht bzw. bereits infiziert?

2. Die "Anweisung zum Re-enable" bekomme ich von euch, richtig?

Hier folgen nun die Logs - neben den in der Anleitung vorgegeben habe ich unten die Logs von Malware und Avira, mit denen ich heute Suchdurchläufe gemacht habe, angefügt.
Nochmal vielen Dank!

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-05-2015 01

Ran by Jonas ***** (administrator) on ZUKUNFT on 07-05-2015 21:02:07

Running from C:\ProgrammeJonas

Loaded Profiles: Jonas ***** (Available profiles: Jonas *****)

Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: FF)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe

(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Avira Operations GmbH & Co. KG) C:\ProgramData\Avira\Antivirus\TEMP\SELFUPDATE\update.exe

(Avira Operations GmbH & Co. KG) C:\ProgramData\Avira\Antivirus\TEMP\SELFUPDATE\updrgui.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

(Renesas Electronics Corporation) C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe

(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe

(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

() C:\Program Files\ownCloud\owncloud.exe

(Geek Software GmbH) C:\ProgrammeJonas\PDF24\pdf24.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(6 Wunderkinder GmbH) C:\Program Files\Wunderlist2\Wunderlist.exe

(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe

(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin

(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe

(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe

(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe

() C:\ProgrammeJonas\Defogger.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9288296 2010-06-14] (Realtek Semiconductor)

HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-05-27] (Advanced Micro Devices, Inc.)

HKLM\...\Run: [NUSB3MON] => C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)

HKLM\...\Run: [CLMLServer] => C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-11-02] (CyberLink)

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)

HKLM\...\Run: [hpqSRMon] => C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [150016 2008-08-20] (Hewlett-Packard)

HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)

HKLM\...\Run: [] => [X]

HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2011-11-02] (Apple Inc.)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [421736 2012-01-16] (Apple Inc.)

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [726320 2015-04-01] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [ownCloud] => C:\Program Files\ownCloud\owncloud.exe [1253540 2013-04-22] ()

HKLM\...\Run: [PDFPrint] => C:\ProgrammeJonas\PDF24\pdf24.exe [193568 2014-11-28] (Geek Software GmbH)

HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [129272 2015-03-16] (Avira Operations GmbH & Co. KG)

HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\...\Run: [msnmsgr] => "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\...\Run: [Wunderlist] => C:\Program Files\Wunderlist2\Wunderlist.exe [13021792 2013-12-02] (6 Wunderkinder GmbH)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2011-03-25]

ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk [2014-10-01]

ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files\WISO\Steuersoftware 2014\mshaktuell.exe ()

Startup: C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk [2010-11-28]

ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

SearchScopes: HKLM -> DefaultScope value is missing.

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08] (Adobe Systems Incorporated)

BHO: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-05-14] (Microsoft Corporation)

Toolbar: HKLM - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll [2011-06-24] (TerraTec Electronic GmbH)

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab

DPF: {CAFEEFAC-0018-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab

Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2000-11-06] (Microsoft Corporation)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-31] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Jonas *****\AppData\Roaming\Mozilla\Firefox\Profiles\d240w4qq.default-1389057727826

FF NewTab:  www.google.de

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [2010-08-18] (Adobe Systems, Inc.)

FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2011-11-14] ()

FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-04] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-04] (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)

FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-04-17] (Microsoft Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2013-05-08] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-1471510115-2474919708-3564051268-1001: @lightspark.github.com/Lightspark;version=1 -> C:\Program Files\Lightspark 0.5.3-git\nplightsparkplugin.dll No File

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2013-05-08] (Adobe Systems Inc.)

FF Extension: 20-20 3D Viewer - IKEA - C:\Users\Jonas *****\AppData\Roaming\Mozilla\Firefox\Profiles\d240w4qq.default-1389057727826\Extensions\2020Player_IKEA@2020Technologies.com [2014-03-21]

FF Extension: Adblock Plus - C:\Users\Jonas *****\AppData\Roaming\Mozilla\Firefox\Profiles\d240w4qq.default-1389057727826\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-08]

FF HKLM\...\Firefox\Extensions: [ext@flash-Enhancer.com] - C:\Program Files\AmiExt\flashEnhancer\ff

FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-04-11]
 

Chrome: 

=======

CHR StartupUrls: Default -> "hxxp://www.google.com"

CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll No File

CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\42.0.2311.90\gcswf32.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll No File

CHR Plugin: (Remoting Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\42.0.2311.90\ppGoogleNaClPluginChrome.dll No File

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\42.0.2311.90\pdf.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Java Deployment Toolkit 6.0.300.12) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U30) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File

CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File

CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

CHR Plugin: (Windows LiveÂ® Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File

CHR Profile: C:\Users\Jonas *****\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Avanquest App'-Anwendungsleiste) - C:\Users\Jonas *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg [2012-08-27]

CHR Extension: (Google Wallet) - C:\Users\Jonas *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-26]

CHR HKLM\...\Chrome\Extension: [ckjhoplcbnkhgnnahfbcdmganjhpcceg] - C:\Users\JONASR~1\AppData\Local\Temp\ckjhoplcbnkhgnnahfbcdmganjhpcceg.crx [2012-03-03]
 

========================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [815920 2015-04-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1004280 2015-04-01] (Avira Operations GmbH & Co. KG)

R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [201008 2015-03-16] (Avira Operations GmbH & Co. KG)

S3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S3 AF15BDA; C:\Windows\System32\DRIVERS\AF15BDA.sys [489408 2009-11-05] (ITETech                  )

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105864 2015-03-12] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2015-03-12] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-29] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37896 2015-03-12] (Avira Operations GmbH & Co. KG)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2015-05-07] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-04-14] (Malwarebytes Corporation)

R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [64904 2010-04-27] (Renesas Electronics Corporation)

R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [146568 2010-04-27] (Renesas Electronics Corporation)

S3 RTL2832UBDA; C:\Windows\System32\drivers\RTL2832UBDA.sys [189184 2012-01-09] (REALTEK SEMICONDUCTOR Corp.)

S3 RTL2832UUSB; C:\Windows\System32\Drivers\RTL2832UUSB.sys [33536 2012-01-09] (REALTEK SEMICONDUCTOR Corp.)

S3 RTL2832U_IRHID; C:\Windows\System32\DRIVERS\RTL2832U_IRHID.sys [43392 2012-01-09] (Realtek)

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-04-07] (Avira GmbH)

S3 Profos; \??\C:\Program Files\BullGuard Ltd\BullGuard\antirootkit\profos.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-05-07 21:01 - 2015-05-07 21:02 - 00000000 ____D () C:\FRST

2015-05-07 20:58 - 2015-05-07 20:58 - 00000000 _____ () C:\Users\Jonas *****\defogger_reenable

2015-05-07 18:56 - 2015-05-07 20:37 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-05-07 18:55 - 2015-05-07 20:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-05-07 18:55 - 2015-05-07 20:34 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware

2015-05-07 18:55 - 2015-04-14 09:37 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-05-07 18:55 - 2015-04-14 09:37 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-04-28 16:10 - 2015-04-28 16:10 - 00008862 _____ () C:\Users\Jonas *****\.recently-used.xbel

2015-04-16 03:44 - 2015-04-16 03:44 - 00000000 __SHD () C:\found.000

2015-04-15 10:38 - 2015-03-23 05:06 - 00860160 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-04-15 10:38 - 2015-03-23 05:06 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-04-15 10:38 - 2015-03-23 05:06 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-04-15 10:38 - 2015-03-23 05:06 - 00331264 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-04-15 10:38 - 2015-03-23 05:06 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-04-15 10:38 - 2015-03-23 05:06 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-04-15 10:38 - 2015-03-23 05:06 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-04-15 10:38 - 2015-03-23 04:59 - 00896000 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-04-15 10:37 - 2015-04-02 01:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-04-15 10:37 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2015-04-15 10:37 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-04-15 10:37 - 2015-03-17 07:01 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-04-15 10:37 - 2015-03-17 07:01 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-04-15 10:37 - 2015-03-17 06:59 - 01306112 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-04-15 10:37 - 2015-03-17 06:56 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-04-15 10:37 - 2015-03-17 06:56 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-04-15 10:37 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-04-15 10:37 - 2015-03-17 06:56 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-04-15 10:37 - 2015-03-17 06:56 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-04-15 10:37 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-04-15 10:37 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-04-15 10:37 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-04-15 10:37 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-04-15 10:37 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-04-15 10:37 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-04-15 10:37 - 2015-03-13 05:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-04-15 10:37 - 2015-03-13 05:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-04-15 10:37 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-04-15 10:37 - 2015-03-13 05:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-04-15 10:37 - 2015-03-13 05:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-04-15 10:37 - 2015-03-13 05:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-04-15 10:37 - 2015-03-13 05:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-04-15 10:37 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-04-15 10:37 - 2015-03-13 05:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-04-15 10:37 - 2015-03-13 05:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-04-15 10:37 - 2015-03-13 05:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-04-15 10:37 - 2015-03-13 05:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-04-15 10:37 - 2015-03-13 05:16 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-04-15 10:37 - 2015-03-13 05:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-04-15 10:37 - 2015-03-13 05:09 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-04-15 10:37 - 2015-03-13 05:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-04-15 10:37 - 2015-03-13 05:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-04-15 10:37 - 2015-03-13 04:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-04-15 10:37 - 2015-03-13 04:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-04-15 10:37 - 2015-03-13 04:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-04-15 10:37 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-04-15 10:37 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-04-15 10:37 - 2015-03-13 04:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-04-15 10:37 - 2015-03-13 04:43 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-04-15 10:37 - 2015-03-13 04:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-04-15 10:37 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-04-15 10:37 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-04-15 10:37 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-04-15 10:37 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-04-15 10:37 - 2015-03-05 06:06 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-04-15 10:37 - 2015-03-04 06:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys

2015-04-15 10:37 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll

2015-04-15 10:36 - 2015-03-25 05:00 - 03088384 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-04-15 10:36 - 2015-03-25 05:00 - 02020864 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-04-15 10:36 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-04-15 10:36 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-04-15 10:36 - 2015-03-25 05:00 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-04-15 10:36 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-04-15 10:36 - 2015-03-25 05:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-04-15 10:36 - 2015-03-25 05:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-04-15 10:36 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-04-15 10:36 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-04-15 10:36 - 2015-03-25 05:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-04-15 10:35 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-04-15 10:35 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-04-15 10:35 - 2015-02-25 05:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys

2015-04-11 21:32 - 2015-04-28 16:07 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2015-04-07 09:38 - 2015-04-07 09:38 - 00001106 _____ () C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wunderlist.lnk

2015-04-07 09:38 - 2015-04-07 09:38 - 00001098 _____ () C:\Users\Jonas *****\Desktop\Wunderlist.lnk

2015-04-07 09:38 - 2015-04-07 09:38 - 00000000 ____D () C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wunderlist

2015-04-07 09:37 - 2015-04-07 09:37 - 40494256 _____ () C:\Users\Jonas *****\Downloads\Wunderlist-Setup.exe

2015-04-07 03:01 - 2015-04-07 03:02 - 00000000 ___SD () C:\Windows\system32\GWX
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-05-07 21:02 - 2013-05-08 14:16 - 00687104 ____H () C:\Users\Jonas *****\Documents\.csync_journal.db.ctmp

2015-05-07 21:02 - 2013-05-08 14:16 - 00687104 ____H () C:\Users\Jonas *****\Documents\.csync_journal.db

2015-05-07 21:02 - 2010-11-28 15:15 - 00000000 ____D () C:\ProgrammeJonas

2015-05-07 20:58 - 2010-11-25 22:19 - 00000000 ____D () C:\Users\Jonas *****

2015-05-07 20:56 - 2012-08-06 19:08 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-05-07 20:37 - 2009-07-14 06:34 - 00018512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-05-07 20:37 - 2009-07-14 06:34 - 00018512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-05-07 20:34 - 2014-01-06 12:33 - 00001068 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-05-07 20:18 - 2010-11-25 22:14 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-05-07 19:48 - 2010-11-25 22:14 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-05-07 19:42 - 2010-11-26 05:51 - 01429624 _____ () C:\Windows\WindowsUpdate.log

2015-05-07 19:36 - 2010-08-30 11:48 - 00318964 _____ () C:\Windows\PFRO.log

2015-05-07 19:36 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-05-07 19:36 - 2009-07-14 06:39 - 00129875 _____ () C:\Windows\setupact.log

2015-05-07 18:57 - 2015-01-15 23:11 - 00000000 ____D () C:\Users\Jonas *****\AppData\Local\Wunderlist

2015-05-07 18:55 - 2014-01-06 12:33 - 00000000 ____D () C:\Users\Jonas *****\AppData\Roaming\Malwarebytes

2015-05-07 18:55 - 2014-01-06 12:33 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-05-07 18:55 - 2014-01-06 12:33 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware

2015-05-07 18:52 - 2014-01-05 14:22 - 00000000 ____D () C:\ProgramData\Updater

2015-05-04 20:46 - 2014-04-03 10:19 - 00000000 ____D () C:\Users\Jonas *****\Desktop\Christina

2015-05-01 09:40 - 2010-11-25 22:14 - 00002125 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2015-04-29 10:41 - 2010-08-28 02:49 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-04-28 16:11 - 2011-12-14 11:53 - 00000000 ____D () C:\Users\Jonas *****\.gimp-2.6

2015-04-28 16:10 - 2010-12-07 22:31 - 00000000 ____D () C:\Users\Jonas *****\AppData\Roaming\gtk-2.0

2015-04-28 16:07 - 2012-07-07 01:19 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service

2015-04-28 16:07 - 2009-07-14 06:53 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2015-04-22 13:47 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\AppCompat

2015-04-20 15:22 - 2011-01-10 00:59 - 00000000 ____D () C:\Users\Jonas *****\Documents\Studium

2015-04-20 11:32 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache

2015-04-20 10:39 - 2014-06-25 01:22 - 00000000 ____D () C:\Users\Jonas *****\Documents\Bilder

2015-04-16 03:54 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET

2015-04-16 03:35 - 2014-12-11 04:30 - 00000000 ____D () C:\Windows\system32\appraiser

2015-04-16 03:35 - 2014-05-07 03:02 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-04-16 03:35 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE

2015-04-16 03:19 - 2013-07-21 03:01 - 00000000 ____D () C:\Windows\system32\MRT

2015-04-16 03:06 - 2010-08-30 18:47 - 125832184 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-04-15 11:57 - 2012-05-03 17:23 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2015-04-15 11:57 - 2011-05-15 22:19 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2015-04-14 09:37 - 2014-01-06 12:33 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-04-10 10:16 - 2013-11-16 20:44 - 00000000 ____D () C:\ProgramData\Package Cache

2015-04-10 10:16 - 2013-04-07 11:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-04-10 10:16 - 2013-04-07 11:24 - 00000000 ____D () C:\Program Files\Avira
 

==================== Files in the root of some directories =======
 

2012-02-13 17:10 - 2012-02-13 17:10 - 0000085 ___SH () C:\ProgramData\.zreglib

2014-05-29 00:36 - 2014-09-18 01:22 - 0002097 _____ () C:\ProgramData\flcd_proxy.log

2011-12-13 14:19 - 2011-12-13 14:25 - 0000355 _____ () C:\ProgramData\hpzinstall.log
 

Some content of TEMP:

====================

C:\Users\Jonas *****\AppData\Local\Temp\AutoRun.exe

C:\Users\Jonas *****\AppData\Local\Temp\AutoRunGUI.dll

C:\Users\Jonas *****\AppData\Local\Temp\avgnt.exe

C:\Users\Jonas *****\AppData\Local\Temp\conduitcbi.exe

C:\Users\Jonas *****\AppData\Local\Temp\dInstall.exe

C:\Users\Jonas *****\AppData\Local\Temp\htmllite.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna1073641812190778766.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna1185527157742964876.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna1276106599147048213.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna1893174376098530207.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna2020353360928496932.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna2025237670452794424.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna2046720042216359828.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna2172709133664520690.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna2512698828130703502.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna2792498471994590643.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna2834361094025418355.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna2949567750573929976.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna3002922126623524111.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna3040308465313835017.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna3412468569707160191.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna3643392798884008587.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna38318708594354581.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna3881206486951935315.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna4012055542383306725.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna4366729164591216225.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna4525886986067790480.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna500308783186734465.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna5084496301472374557.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna5216179386882267933.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna5279464177802058598.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna5426906761126012010.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna5656096163683743591.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna5798048651696063470.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna6002804168364047915.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna6218573632163746381.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna6323957631504888686.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna6344572161285112669.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna634875124451846475.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna6713533327705549808.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna6817909701625994584.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna7182303321022941133.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna785400149776830332.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna7906596334756237456.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna7942269207787477200.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna8135096155061655243.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna8162413641251088470.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna8291277447303430361.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna8409213596804889146.dll

C:\Users\Jonas *****\AppData\Local\Temp\jna8952341875103493298.dll

C:\Users\Jonas *****\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe

C:\Users\Jonas *****\AppData\Local\Temp\jre-6u30-windows-i586-iftw-rv.exe

C:\Users\Jonas *****\AppData\Local\Temp\jre-6u39-windows-i586-iftw.exe

C:\Users\Jonas *****\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe

C:\Users\Jonas *****\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe

C:\Users\Jonas *****\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe

C:\Users\Jonas *****\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe

C:\Users\Jonas *****\AppData\Local\Temp\jre-8u31-windows-au.exe

C:\Users\Jonas *****\AppData\Local\Temp\msvcp70.dll

C:\Users\Jonas *****\AppData\Local\Temp\msvcr70.dll

C:\Users\Jonas *****\AppData\Local\Temp\pdf24-creator-update.exe

C:\Users\Jonas *****\AppData\Local\Temp\Quarantine.exe

C:\Users\Jonas *****\AppData\Local\Temp\setup.exe

C:\Users\Jonas *****\AppData\Local\Temp\StellarPhoenixWindowsDataRecovery-Home_PPCS.exe

C:\Users\Jonas *****\AppData\Local\Temp\Wunderlist-Bridge.exe

C:\Users\Jonas *****\AppData\Local\Temp\Wunderlist-Setup2.3.0.31.exe

C:\Users\Jonas *****\AppData\Local\Temp\{688EC707-C557-4B0F-B8F6-098FB2230D34}-31.0.1650.57_30.0.1599.101_chrome_updater.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-05-04 15:52
 

==================== End Of Log ============================

--- --- ---

FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 06-05-2015 01

Ran by Jonas ***** at 2015-05-07 21:03:09

Running from C:\ProgrammeJonas

Boot Mode: Normal

==========================================================
 
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-1471510115-2474919708-3564051268-500 - Administrator - Disabled)

Gast (S-1-5-21-1471510115-2474919708-3564051268-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1471510115-2474919708-3564051268-1002 - Limited - Enabled)

Jonas ***** (S-1-5-21-1471510115-2474919708-3564051268-1001 - Administrator - Enabled) => C:\Users\Jonas *****
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 15.0.0.249 - Adobe Systems Incorporated)

Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Reader 9.5.5 MUI (HKLM\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.5.5 - Adobe Systems Incorporated)

Adobe Shockwave Player 11.5 (HKLM\...\Adobe Shockwave Player) (Version: 11.5.8.612 - Adobe Systems, Inc.)

Anki (HKLM\...\Anki) (Version:  - )

Apple Application Support (HKLM\...\{343666E2-A059-48AC-AD67-230BF74E2DB2}) (Version: 2.1.6 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{8153ED9A-C94A-426E-9880-5E6775C08B62}) (Version: 4.0.0.97 - Apple Inc.)

Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ATI Catalyst Install Manager (HKLM\...\{BE4AE3A7-190D-BCB8-A953-A708C9E8E8AA}) (Version: 3.0.778.0 - ATI Technologies, Inc.)

Avira (HKLM\...\{b5675cc4-ab8b-4945-8c1d-4c5479556d6a}) (Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG)

Avira (Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG) Hidden

Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.9.504 - Avira Operations GmbH & Co. KG)

BlueJ 3.0.4 (HKLM\...\BlueJ_is1) (Version:  - La Trobe University)

Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)

BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden

ccc-core-static (Version: 2010.0527.1242.20909 - ATI) Hidden

CdCreate AM Testversion (HKLM\...\{98667FC9-D57F-11DD-B64E-93631AE7A456}) (Version: 2.80.0000 - Galerie Fuchstal)

Cinergy T Stick RC V86.001.1129.2011 (HKLM\...\Cinergy T Stick RC) (Version: 86.001.1129.2011 - )

Cinergy T USB XXS V2.03.03.29 (HKLM\...\Cinergy T USB XXS) (Version: 2.03.03.29 - )

Cinergy T-Stick MKII V9.06.3.01 (HKLM\...\Cinergy T-Stick MKII) (Version: 9.06.3.01 - )

CorelDRAW Essentials 4 - Content (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Draw (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Filters (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - ICA (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - IPM - No VBA (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang BR (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang DE (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang EN (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang ES (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang FR (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang IT (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang NL (Version: 4.0 - Uw bedrijfsnaam) Hidden

CorelDRAW Essentials 4 - PHOTO-PAINT (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Windows Shell Extension (HKLM\...\_{CF0ADC18-6D8F-4353-8EAA-DF45456B7853}) (Version:  - Corel Corporation)

CorelDRAW Essentials 4 - Windows Shell Extension (Version: 1.1 - Corel Corporation) Hidden

CorelDRAW Essentials 4 (HKLM\...\_{C0237AA4-1BFB-46EA-860D-7B0EB365CA13}) (Version:  - Corel Corporation)

CorelDRAW Essentials 4 (Version: 4.0 - Corel Corporation) Hidden

CyberLink LabelPrint (HKLM\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2515 - CyberLink Corp.)

CyberLink Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.)

CyberLink PowerDVD Copy (HKLM\...\InstallShield_{E3D04529-6EDB-11D8-A372-0050BAE317E1}) (Version: 1.5.1306 - CyberLink Corp.)

Destinations (Version: 130.0.0.0 - Hewlett-Packard) Hidden

DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden

ElsterFormular (HKLM\...\ElsterFormular) (Version: 15.3.14949 - Landesfinanzdirektion Thüringen)

FIFA 2003 (HKLM\...\{6A1DC8D4-9FA4-43C3-00B3-5993B4BBE7D4}) (Version:  - )

Funkyplot 1.1.0-pre1 (HKLM\...\Funkyplot_is1) (Version:  - LOGICIEL)

gedit 2.28.3 (HKLM\...\gedit_is1) (Version: 2.28.3 - GNOME)

GIMP 2.6.11 (HKLM\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)

Google Chrome (HKLM\...\Google Chrome) (Version: 42.0.2311.135 - Google Inc.)

Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden

GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden

GPL Ghostscript (HKLM\...\GPL Ghostscript 9.05) (Version: 9.05 - Artifex Software Inc.)

GSview 5.0 (HKLM\...\GSview 5.0) (Version: 5.0 - Ghostgum Software Pty Ltd)

HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)

HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)

HP Scanjet G4000 Series (HKLM\...\{10297E58-2DFE-478B-9A1D-4B14E4E79CDF}) (Version: 13.0 - HP)

HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)

HP Update (HKLM\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)

hpg4000 (Version: 13.0.0.0 - Ihr Firmenname) Hidden

HPPhotosmartEssential (Version: 2.04.0000 - Hewlett-Packard) Hidden

HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden

Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)

iTunes (HKLM\...\{F6D6B258-E3CA-4AAC-965A-68D3E3140A8C}) (Version: 10.5.3.3 - Apple Inc.)

Java 8 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)

Java DB 10.5.3.0 (HKLM\...\{00BA866C-F2A2-4BB9-A308-3DFA695B6F7C}) (Version: 10.5.3.0 - Sun Microsystems, Inc)

Java(TM) SE Development Kit 6 Update 23 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0160230}) (Version: 1.6.0.230 - Oracle)

Junk Mail filter update (Version: 14.0.8117.416 - Microsoft Corporation) Hidden

Kalenderchen 6 (HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\...\Kalenderchen 6) (Version:  - )

Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)

MATLAB R2009b (HKLM\...\MatlabR2009b) (Version: 7.9 - The MathWorks, Inc.)

Media Markt Fotoservice 4.4 (HKLM\...\Media Markt Fotoservice_is1) (Version:  - )

Medion Home Cinema (HKLM\...\InstallShield_{AB770FDE-8087-4C98-9A85-BD64262C104C}) (Version: 6.0.0000 - CyberLink Corp.)

Medion Home Cinema (Version: 6.0.0000 - CyberLink Corp.) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office XP Developer - German (HKLM\...\Microsoft Office XP Developer - German) (Version:  - )

Microsoft Office XP Professional mit FrontPage (HKLM\...\{90280407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.6626.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [DEU] (HKLM\...\{BAC80EF3-E106-4AEA-8C57-F217F9BC7358}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

MiKTeX 2.9 (HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org)

MOD 10.0 Baseline (English-x86-CD) (Version: 7.00.9177 - Microsoft) Hidden

Mozilla Firefox 37.0.2 (x86 de) (HKLM\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 35.0.1 - Mozilla)

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)

OpenOffice.org 3.2 (HKLM\...\{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}) (Version: 3.2.9502 - OpenOffice.org)

ownCloud (HKLM\...\ownCloud) (Version: 1.2.5 - ownCloud, Inc)

PDF24 Creator 6.9.2 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)

PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)

Project64 1.6 (HKLM\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)

R for Windows 3.1.1 (HKLM\...\R for Windows 3.1.1_is1) (Version: 3.1.1 - R Core Team)

Realtek Ethernet Controller Driver For Windows 7 (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.21.531.2010 - Realtek)

Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6136 - Realtek Semiconductor Corp.)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.4.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.0.4.0 - Renesas Electronics Corporation) Hidden

RStudio (HKLM\...\RStudio) (Version: 0.98.983 - RStudio)

Scan (Version: 13.0.0.0 - Hewlett-Packard) Hidden

SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden

Spelling Dictionaries Support For Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)

Stellar Phoenix Windows Data Recovery-Home (HKLM\...\Stellar Phoenix Windows Data Recovery-Home_is1) (Version: 4.2.0.0 - Stellar Information Systems Ltd)

TerraTec Home Cinema (HKLM\...\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}) (Version: 6.25.6 - )

Texmaker (HKLM\...\Texmaker) (Version:  - )

TIPP10 Version 2.1.0 (HKLM\...\TIPP10_is1) (Version:  - (c) 2006-2011, Tom Thielicke IT Solutions)

TmNationsForever (HKLM\...\TmNationsForever_is1) (Version:  - Nadeo)

Updater (HKLM\...\{D54E3D9F-FEB8-4D2D-A138-B69A5C80080B}) (Version: 2.6.53 - Creative Island Media, LLC) <==== ATTENTION

WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden

Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)

WinRAR 4.00 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.00.0 - win.rar GmbH)

WISO Mein Geld 2011 Professional (HKLM\...\WISO Mein Geld 2011 Professional) (Version:  - Buhl Data Service GmbH)

WISO Mein Geld 2011 Professional (Version: 12.00.02.0024 - Buhl Data Service GmbH) Hidden

WISO Steuer-Sparbuch 2014 (HKLM\...\{F03AAE28-2598-4490-AB26-2B35A0E58828}) (Version: 21.08.8679 - Buhl Data Service GmbH)

Wunderlist (HKLM\...\{1ca68332-4ba1-4943-9010-eaa1aa45b492}) (Version: 2.3.0.31 - 6 Wunderkinder GmbH)

Wunderlist (Version: 2.3.0.31 - 6 Wunderkinder GmbH) Hidden
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 

21-04-2015 09:45:33 Windows Update

24-04-2015 10:03:27 Windows Update

28-04-2015 09:21:01 Windows Update

01-05-2015 09:48:43 Windows Update

06-05-2015 01:37:00 Windows Update
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {25841487-1C33-40BF-8120-5494E99B5656} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {3212333B-1F16-4C10-98F4-7C75FAA9E40A} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)

Task: {4FB622F1-A454-4F6B-BEB4-F71C1A08B1D9} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {51216052-0F20-4386-B40C-C710038DBAD8} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {59D093B0-92DA-42A3-A9BF-2B349A2CB79F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)

Task: {61F13637-483C-42D4-927C-F8099A17FB78} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)

Task: {6F151318-12A0-4D00-8F09-2EC27733568C} - System32\Tasks\{422FC7C0-2347-4491-A45A-99E34858989B} => pcalua.exe -a C:\Windows\LargoWinchInst\SetupUbi.exe -c -uninstall Largo

Task: {8A6329B5-0F52-4A46-8FEF-B34930A60984} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)

Task: {D0B8CBAD-B240-4E45-A1BD-7AFF085A8504} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {D67732B8-E5A2-4676-A3D6-7F013BF6DAFC} - System32\Tasks\{B86A33F0-D926-4927-A51E-BF2C8D32A885} => pcalua.exe -a C:\WINDOWS\ISUN0407.EXE -c -f"c:\program files\Uninst.isu" -c"c:\program files\Uninst.dll"
 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) ==============
 

2008-09-08 11:19 - 2008-09-08 11:19 - 00022723 _____ () C:\Windows\System32\cl31cl3.dll

2011-11-02 00:26 - 2011-11-02 00:26 - 00087912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2011-11-02 00:26 - 2011-11-02 00:26 - 01242472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2014-10-16 03:50 - 2014-10-16 03:50 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\3d576cbc4ffc5ad06fd61510c5d8f326\IsdiInterop.ni.dll

2010-08-30 20:04 - 2010-03-04 05:08 - 00058880 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

2009-11-02 23:20 - 2009-11-02 23:20 - 00619816 ____N () C:\Program Files\CyberLink\Power2Go\CLMediaLibrary.dll

2009-11-02 23:23 - 2009-11-02 23:23 - 00013096 ____N () C:\Program Files\CyberLink\Power2Go\CLMLSvcPS.dll

2013-04-22 17:00 - 2013-04-22 17:00 - 01253540 _____ () C:\Program Files\ownCloud\owncloud.exe

2012-12-21 15:27 - 2012-12-21 15:27 - 00106700 _____ () C:\Program Files\ownCloud\zlib1.dll

2012-12-22 03:16 - 2012-12-22 03:16 - 00120916 _____ () C:\Program Files\ownCloud\libgcc_s_sjlj-1.dll

2012-12-22 03:16 - 2012-12-22 03:16 - 00864381 _____ () C:\Program Files\ownCloud\libstdc++-6.dll

2012-12-21 15:32 - 2012-12-21 15:32 - 00176680 _____ () C:\Program Files\ownCloud\libpng15-15.dll

2013-04-22 16:58 - 2013-04-22 16:58 - 00816147 _____ () C:\Program Files\ownCloud\libowncloudsync.dll

2013-02-21 16:59 - 2013-02-21 16:59 - 00074118 _____ () C:\Program Files\ownCloud\libqtkeychain.dll

2013-04-22 16:56 - 2013-04-22 16:56 - 00834505 _____ () C:\Program Files\ownCloud\libocsync.dll

2012-12-21 22:13 - 2012-12-21 22:13 - 00038291 _____ () C:\Program Files\ownCloud\libdl.dll

2013-02-04 23:07 - 2013-02-04 23:07 - 00044685 _____ () C:\Program Files\ownCloud\libiniparser.dll

2012-12-21 20:02 - 2012-12-21 20:02 - 00567611 _____ () C:\Program Files\ownCloud\libsqlite3-0.dll

2015-01-09 12:24 - 2015-01-09 12:24 - 01166336 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ReactiveUI\1a96a8c1c19e0195d67a9950d1f4d527\ReactiveUI.ni.dll

2015-01-09 12:24 - 2015-01-09 12:24 - 00027136 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Wunderkinde6f42a4a9#\bcb87239e984b283cc128a55e9bc3aaf\Wunderkinder.Wunderlist.Data.Realtime.ni.dll

2015-01-09 12:24 - 2015-01-09 12:24 - 00376320 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Akavache.Portable\47d6f1dd3d6ffb3bc16647055208cdfb\Akavache.Portable.ni.dll

2015-01-09 12:24 - 2015-01-09 12:24 - 00039424 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Wunderkinded9c6edae#\af819191c1a5d188230c5ce0bfb68220\Wunderkinder.Wunderlist.Presentation.ni.dll

2010-05-04 16:36 - 2010-05-04 16:36 - 00970752 _____ () C:\Program Files\OpenOffice.org 3\program\libxml2.dll

2010-05-27 21:40 - 2010-05-27 21:40 - 00270336 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll

2015-04-15 11:57 - 2015-04-15 11:57 - 16863920 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll

2015-05-07 20:27 - 2015-05-07 20:27 - 00050477 _____ () C:\ProgrammeJonas\Defogger.exe
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BsScanner => ""="Service"
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== Internet Explorer trusted/restricted ===============
 

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.2.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 
 

==================== FirewallRules (whitelisted) ===============
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

FirewallRules: [TCP Query User{DC794C29-32CC-4974-9400-D80C6A3F4F00}C:\programmejonas\taxi raser\taxi raser.exe] => (Block) C:\programmejonas\taxi raser\taxi raser.exe

FirewallRules: [UDP Query User{1A82D905-EDDA-463E-89AB-1F7EB5A51EEA}C:\programmejonas\taxi raser\taxi raser.exe] => (Block) C:\programmejonas\taxi raser\taxi raser.exe

FirewallRules: [TCP Query User{ED38330D-DEB7-453D-91AA-4ADF5A6425CD}C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe] => (Block) C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe

FirewallRules: [UDP Query User{84894ECA-9CB8-4F76-8845-B3B5AF85FC23}C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe] => (Block) C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe

FirewallRules: [{FF002A04-FA73-4000-A11C-3BEE45B6CE28}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe

FirewallRules: [{5231EEC6-9410-4F31-9391-6AF6F00D3A25}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe

FirewallRules: [{C2518630-9012-4A03-8418-6D8580618524}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe

FirewallRules: [{55FBD93D-AB58-449B-B772-578D8BC5EBCB}] => (Allow) C:\Program Files\common files\hp\digital imaging\bin\hpqphotocrm.exe

FirewallRules: [{3FDB65D5-AD0B-4628-9FDC-5CD0E939A126}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe

FirewallRules: [{ED88D7B2-7241-4E41-8DED-87E6BF922CE4}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe

FirewallRules: [{E9AEA340-D6A4-4EEB-838E-C3D45E8ACEF9}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe

FirewallRules: [{17F8A429-7A05-4077-A934-3D180CA8968C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe

FirewallRules: [{30FF85D6-7CE6-4ED9-8099-FC43AE8A56F6}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

FirewallRules: [{83DEC76E-9F83-4302-AEE7-96E03014CFE7}] => (Allow) C:\Program Files\HP\hp software update\hpwucli.exe

FirewallRules: [{5AEA1869-BACB-4F1F-815D-4C453A802D9E}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\CinergyDvr.exe

FirewallRules: [{B963AE06-7617-43F6-AAA9-9D6E092FDF78}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\CinergyDvr.exe

FirewallRules: [{F1D9C10F-7210-40A8-B8D5-AE7D4FA53A4C}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe

FirewallRules: [{826F9D84-EE9C-49CC-BF6D-5467E0572A2E}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe

FirewallRules: [{DC5B8CE3-C71D-491B-9C1B-BAAD08A5FBF8}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\InstTool.exe

FirewallRules: [{227EE136-2668-475D-AAFA-0E0C18E3A910}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\InstTool.exe

FirewallRules: [{5ADE8544-17EB-4B32-B973-F37F7FB9292F}] => (Allow) C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe

FirewallRules: [{B928DD33-32A6-4558-9B6C-1E6C138C5798}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{8822F8D9-2068-4F15-B96B-27337BB85C81}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{CB9381BD-BA39-4C0D-9201-806A3BD36C15}] => (Allow) C:\Program Files\iTunes\iTunes.exe

FirewallRules: [{45F8B089-9F2A-4C01-8EAE-4346F8C007DA}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\InstTool.exe

FirewallRules: [{AAEE0B9D-1D90-4D0F-A441-2A5050AF960D}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\InstTool.exe

FirewallRules: [{4EB951AF-E1B3-4857-A07E-EA1B78E57990}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\CinergyDvr.exe

FirewallRules: [{6C1E7793-6B0E-4208-9D2B-BBAFC15BA223}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\CinergyDvr.exe

FirewallRules: [{A9F559C6-EA9A-4A99-9BBD-4FBCBC447E5B}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe

FirewallRules: [{2CABA8DC-F77E-4B3A-91C4-E4C3D671D6D4}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe

FirewallRules: [TCP Query User{E1F4401C-95BD-402C-9DB4-9F80F23C836A}C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe] => (Allow) C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe

FirewallRules: [UDP Query User{A919A04F-22E9-4F1C-B419-581BF64F03CA}C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe] => (Allow) C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe

FirewallRules: [TCP Query User{B018C01A-B6F6-45E0-A11C-3B0811DA2F0C}C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe] => (Block) C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe

FirewallRules: [UDP Query User{7A80BBCD-6AE9-4145-80D3-60AF268FC900}C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe] => (Block) C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe

FirewallRules: [TCP Query User{BE522805-BD65-4391-A54F-89CA1E987E64}C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe] => (Allow) C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe

FirewallRules: [UDP Query User{16FD6222-9F6C-43C5-907F-58406A0F91CE}C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe] => (Allow) C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe

FirewallRules: [{E2A31A10-9C22-4670-8319-E3C537BD8719}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

FirewallRules: [TCP Query User{C8B0BC7D-986C-40EF-8960-5DEAE2708BD1}C:\program files\tmnationsforever\tmforever.exe] => (Block) C:\program files\tmnationsforever\tmforever.exe

FirewallRules: [UDP Query User{D840C2DE-7340-4F8B-ADED-9D4E8A1AB6F2}C:\program files\tmnationsforever\tmforever.exe] => (Block) C:\program files\tmnationsforever\tmforever.exe

FirewallRules: [{4A03E388-E847-4603-85B5-7A21F6E5B28C}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{955432A8-C4B0-44C3-A0B0-2230049D6B4C}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [TCP Query User{1F81D1E8-5D16-4DD7-8E17-410EB255B372}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{EFDBDE91-E0F8-470B-AA2F-750FACF6BFFC}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe

FirewallRules: [{63714984-330D-47F1-B9C1-E747482F129A}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (05/07/2015 06:30:12 PM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1".

Die abhängige Assemblierung "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (05/07/2015 06:29:33 PM) (Source: SideBySide) (EventID: 59) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.

Ungültige XML-Syntax.
 

Error: (05/07/2015 03:04:56 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm WINWORD.EXE, Version 10.0.6866.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 45c
 

Startzeit: 01d088c62fad3a6f
 

Endzeit: 12
 

Anwendungspfad: C:\PROGRA~1\MICROS~3\Office10\WINWORD.EXE
 

Berichts-ID: 9797493f-f4b9-11e4-9162-6c626d8fb072
 

Error: (05/07/2015 01:29:48 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 345231
 

Error: (05/07/2015 01:29:48 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 345231
 

Error: (05/07/2015 01:29:48 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (05/07/2015 01:24:18 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 15210
 

Error: (05/07/2015 01:24:18 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 15210
 

Error: (05/07/2015 01:24:18 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (05/07/2015 01:24:17 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 14196
 
 

System errors:

=============

Error: (04/28/2015 09:45:29 AM) (Source: Server) (EventID: 2505) (User: )

Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{9A295CD5-A244-421C-A8EF-9E3A343737CB} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.
 

Error: (04/15/2015 08:57:38 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.
 

Error: (04/14/2015 11:23:53 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.

Führen Sie auf dem Volume "Boot" den Befehl "chkdsk" aus.
 

Error: (04/14/2015 06:57:48 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
 

Error: (04/14/2015 06:57:45 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
 

Error: (04/12/2015 07:19:23 PM) (Source: Server) (EventID: 2505) (User: )

Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{9A295CD5-A244-421C-A8EF-9E3A343737CB} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.
 

Error: (04/08/2015 11:01:30 AM) (Source: Server) (EventID: 2505) (User: )

Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{9A295CD5-A244-421C-A8EF-9E3A343737CB} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.
 

Error: (04/07/2015 00:52:01 PM) (Source: Server) (EventID: 2505) (User: )

Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{9A295CD5-A244-421C-A8EF-9E3A343737CB} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.
 

Error: (04/07/2015 09:17:17 AM) (Source: Server) (EventID: 2505) (User: )

Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{9A295CD5-A244-421C-A8EF-9E3A343737CB} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.
 

Error: (04/01/2015 09:45:45 AM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
 
 

Microsoft Office Sessions:

=========================

Error: (05/07/2015 06:30:12 PM) (Source: SideBySide) (EventID: 33) (User: )

Description: Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files\OpenOffice.org 3\Basis\program\python-core-2.6.1\lib\distutils\command\wininst-9.0-amd64.exe
 

Error: (05/07/2015 06:29:33 PM) (Source: SideBySide) (EventID: 59) (User: )

Description: C:\Program Files\Microsoft\Search Enhancement Pack\Search Box Extension\SrchBxEx.dllC:\Program Files\Microsoft\Search Enhancement Pack\Search Box Extension\SrchBxEx.dll2
 

Error: (05/07/2015 03:04:56 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: WINWORD.EXE10.0.6866.045c01d088c62fad3a6f12C:\PROGRA~1\MICROS~3\Office10\WINWORD.EXE9797493f-f4b9-11e4-9162-6c626d8fb072
 

Error: (05/07/2015 01:29:48 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 345231
 

Error: (05/07/2015 01:29:48 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 345231
 

Error: (05/07/2015 01:29:48 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (05/07/2015 01:24:18 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 15210
 

Error: (05/07/2015 01:24:18 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 15210
 

Error: (05/07/2015 01:24:18 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (05/07/2015 01:24:17 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 14196
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i3 CPU 550 @ 3.20GHz

Percentage of memory in use: 53%

Total physical RAM: 3063.11 MB

Available physical RAM: 1414.05 MB

Total Pagefile: 6124.52 MB

Available Pagefile: 3883.68 MB

Total Virtual: 2047.88 MB

Available Virtual: 1895.2 MB
 

==================== Drives ================================
 

Drive c: (Boot) (Fixed) (Total:1356.17 GB) (Free:1077.39 GB) NTFS

Drive d: (Recover) (Fixed) (Total:40 GB) (Free:20.99 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 1397.3 GB) (Disk ID: 2BD2C32A)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=1356.2 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=40 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=1 GB) - (Type=12)
 

==================== End Of Log ============================

--- --- ---

Code:

GMER Logfile:
 

        Code:


        
GMER 2.1.19357 - hxxp://www.gmer.net

Rootkit scan 2015-05-07 21:29:55

Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD15 rev.51.0 1397,27GB

Running: Gmer-19357.exe; Driver: C:\Users\JONASR~1\AppData\Local\Temp\pwldypog.sys
 
 

---- System - GMER 2.1 ----
 

SSDT   8FC53AEE                                                                                     ZwCreateSection

SSDT   8FC53AC6                                                                                     ZwCreateSymbolicLinkObject

SSDT   8FC53ACB                                                                                     ZwLoadDriver

SSDT   8FC53AC1                                                                                     ZwOpenSection

SSDT   8FC53AF8                                                                                     ZwRequestWaitReplyPort

SSDT   8FC53AF3                                                                                     ZwSetContextThread

SSDT   8FC53AFD                                                                                     ZwSetSecurityObject

SSDT   8FC53AD0                                                                                     ZwSetSystemInformation

SSDT   8FC53B02                                                                                     ZwSystemDebugControl

SSDT   8FC53A8F                                                                                     ZwTerminateProcess

SSDT   8FC53A8A                                                                                     ZwWriteVirtualMemory
 

---- Kernel code sections - GMER 2.1 ----
 

.text  ntkrnlpa.exe!ZwRequestWaitReplyPort + 1499                                                   82E5B9F5 1 Byte  [06]

.text  ntkrnlpa.exe!KiDispatchInterrupt + 5A2                                                       82E95992 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}

.text  ntkrnlpa.exe!KeRemoveQueueEx + 11F7                                                          82E9CCDC 4 Bytes  [EE, 3A, C5, 8F]

.text  ntkrnlpa.exe!KeRemoveQueueEx + 11FF                                                          82E9CCE4 4 Bytes  [C6, 3A, C5, 8F]

.text  ntkrnlpa.exe!KeRemoveQueueEx + 1313                                                          82E9CDF8 4 Bytes  [CB, 3A, C5, 8F]

.text  ntkrnlpa.exe!KeRemoveQueueEx + 13AF                                                          82E9CE94 4 Bytes  [C1, 3A, C5, 8F]

.text  ntkrnlpa.exe!KeRemoveQueueEx + 1553                                                          82E9D038 4 Bytes  [F8, 3A, C5, 8F]

.text  ...                                                                                          

?      System32\drivers\etdiut.sys                                                                  Das System kann den angegebenen Pfad nicht finden. !

.text  C:\Windows\system32\DRIVERS\atikmdag.sys                                                     section is writeable [0x91A0F000, 0x2FBAB4, 0xE8000020]
 

---- Registry - GMER 2.1 ----
 

Reg    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\System\Active           

Reg    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CIT\System\Active@46C54BC5  804
 

---- Disk sectors - GMER 2.1 ----
 

Disk   \Device\Harddisk0\DR0                                                                        unknown MBR code
 

---- EOF - GMER 2.1 ----

 
--- --- ---

Code:



Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlauf Datum: 07.05.2015

Suchlauf-Zeit: 18:56:48

Logdatei: Malwarebytes Anti-Malware Logdatei.txt

Administrator: Ja
 

Version: 2.00.4.1028

Malware Datenbank: v2015.05.07.03

Rootkit Datenbank: v2015.04.21.01

Lizenz: Testversion

Malware Schutz: Aktiviert

Bösartiger Webseiten Schutz: Aktiviert

Selbstschutz: Deaktiviert
 

Betriebssystem: Windows 7 Service Pack 1

CPU: x86

Dateisystem: NTFS

Benutzer: Jonas RÃ¶hm
 

Suchlauf-Art: Bedrohungs-Suchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 339184

Verstrichene Zeit: 24 Min, 58 Sek
 

Speicher: Aktiviert

Autostart: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Heuristik: Aktiviert

PUP: Warnen

PUM: Aktiviert
 

Prozesse: 0

(Keine schädliche Elemente gefunden)
 

Module: 0

(Keine schädliche Elemente gefunden)
 

Registrierungsschlüssel: 1

PUP.Optional.ReMarkit.A, HKU\S-1-5-21-1471510115-2474919708-3564051268-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Re_markit, Löschen bei Neustart, [2aa50e820882b3836eb841ac2ad9e020], 
 

Registrierungswerte: 0

(Keine schädliche Elemente gefunden)
 

Registrierungsdaten: 0

(Keine schädliche Elemente gefunden)
 

Ordner: 6

PUP.Optional.Searchagent, C:\ProgramData\RHelpers, In Quarantäne, [e6e9ddb309810f27e3434f4ebf44a25e], 

PUP.Optional.FlashEnhancer.A, C:\Users\Jonas RÃ¶hm\AppData\Local\Temp\flashEnhancer1, In Quarantäne, [aa25256b2c5eae88d88af2adb2511ce4], 

PUP.Optional.FlashEnhancer.A, C:\Users\Jonas RÃ¶hm\AppData\Local\Temp\flashEnhancer1\Install, In Quarantäne, [aa25256b2c5eae88d88af2adb2511ce4], 

PUP.Optional.Softonic.A, C:\Users\Jonas RÃ¶hm\AppData\Local\Temp\mt_ffx\Softonic, In Quarantäne, [c30ce3ad2f5b70c60881287afe058977], 

PUP.Optional.Softonic.A, C:\Users\Jonas RÃ¶hm\AppData\Local\Temp\mt_ffx\Softonic\softonic, In Quarantäne, [c30ce3ad2f5b70c60881287afe058977], 

PUP.Optional.Softonic.A, C:\Users\Jonas RÃ¶hm\AppData\Local\Temp\mt_ffx\Softonic\softonic\1.5.11.5, In Quarantäne, [c30ce3ad2f5b70c60881287afe058977], 
 

Dateien: 3

PUP.Optional.Softonic.A, C:\$RECYCLE.BIN\S-1-5-21-1471510115-2474919708-3564051268-1001\$RJ4HWJ0.exe, In Quarantäne, [5c734e42810967cf300a39c4e1201ee2], 

PUP.Optional.SkyTech.A, C:\Users\Jonas RÃ¶hm\AppData\Local\Temp\fullpackage_temp1388924412\QQBrowserFrame.dll, In Quarantäne, [b619f7990e7c2412217fae587092bc44], 

PUP.Optional.FlashEnhancer.A, C:\Users\Jonas RÃ¶hm\AppData\Local\Temp\flashEnhancer1\Install\Lightspark-0.5.3-win32.exe, In Quarantäne, [aa25256b2c5eae88d88af2adb2511ce4], 
 

Physische Sektoren: 0

(Keine schädliche Elemente gefunden)
 
 

(end)

Code:



Exportierte Ereignisse:
 

07.05.2015 18:52 [System-Scanner] Malware gefunden

      Die Datei 'C:\ProgramData\Updater\Uninstall.exe'

      enthielt einen Virus oder unerwünschtes Programm 'ADWARE/Adware.Gen' [adware].

      Durchgeführte Aktion(en):

      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '48141930.qua' 

      verschoben!
 

07.05.2015 18:52 [System-Scanner] Malware gefunden

      Die Datei 'C:\Users\Jonas 

      *****\AppData\Local\Temp\fullpackage_temp1388924412\tmp\desk365.exe'

      enthielt einen Virus oder unerwünschtes Programm 'ADWARE/Adware.Gen' [adware].

      Durchgeführte Aktion(en):

      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '50893686.qua' 

      verschoben!

deeprybka

07.05.2015 21:48

:hallo:

Mein Name ist Jürgen und ich werde Dir bei Deinem Problem behilflich sein. Zusammen schaffen wir das...:abklatsch:

Bitte arbeite alle Schritte der Reihe nach ab.
Lese die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem.
Führe bitte nur Scans durch, zu denen Du von mir aufgefordert wurdest.
Bitte kein Crossposting (posten in mehreren Foren).
Installiere oder deinstalliere während der Bereinigung keine Software, außer Du wurdest dazu aufgefordert.
Speichere alle unsere Tools auf dem Desktop ab. Link: So ladet Ihr unsere Tools richtig
Poste die Logfiles direkt in Deinen Thread in Code-Tags.
Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 24 Stunden nichts von mir liest, dann schreibe mir bitte eine PM.

Hinweis:
Ich kann Dir niemals eine Garantie geben, dass wir alle schädlichen Dateien finden werden.
Eine Formatierung ist meist der schnellere und immer der sicherste Weg, aber auch nur bei wirklicher Malware empfehlenswert.
Adware & Co. können wir sehr gut entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Du mein clean :daumenhoc bekommst.

Los geht's:

Hast Du den Email-Anhang noch?

Schritt 1
Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Patroklos91

07.05.2015 22:38

TDSS Killer ausgeführt

Hi Jürgen,

vielen Dank für deine Hilfe!
Den PDF-Anhang habe ich einmal geöffnet und dann im Unverstand auf den darin enthaltenen Web-Link geklickt. Es hat sich daraufhin aber keine Website aufgebaut und ich habe den Anhang daraufhin wieder geschlossen. Die Mail samt Anhang ist nun im Papierkorb meines Mailpostfachs.

Hier der Inhalt des Log-Files:

Code:



23:26:44.0250 0x17c0  TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04

23:28:31.0518 0x17c0  ============================================================

23:28:31.0518 0x17c0  Current date / time: 2015/05/07 23:28:31.0518

23:28:31.0518 0x17c0  SystemInfo:

23:28:31.0518 0x17c0  

23:28:31.0518 0x17c0  OS Version: 6.1.7601 ServicePack: 1.0

23:28:31.0518 0x17c0  Product type: Workstation

23:28:31.0518 0x17c0  ComputerName: ZUKUNFT

23:28:31.0518 0x17c0  UserName: Jonas Röhm

23:28:31.0518 0x17c0  Windows directory: C:\Windows

23:28:31.0518 0x17c0  System windows directory: C:\Windows

23:28:31.0518 0x17c0  Processor architecture: Intel x86

23:28:31.0518 0x17c0  Number of processors: 4

23:28:31.0518 0x17c0  Page size: 0x1000

23:28:31.0518 0x17c0  Boot type: Normal boot

23:28:31.0518 0x17c0  ============================================================

23:28:32.0891 0x17c0  KLMD registered as C:\Windows\system32\drivers\76162457.sys

23:28:33.0500 0x17c0  System UUID: {C6A945E6-73D5-0FCB-3362-83AD22DEE480}

23:28:34.0888 0x17c0  Drive \Device\Harddisk0\DR0 - Size: 0x15D50F66000 ( 1397.27 Gb ), SectorSize: 0x200, Cylinders: 0x2C881, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050

23:28:34.0935 0x17c0  ============================================================

23:28:34.0935 0x17c0  \Device\Harddisk0\DR0:

23:28:34.0935 0x17c0  MBR partitions:

23:28:34.0935 0x17c0  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000

23:28:34.0935 0x17c0  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0xA9854800

23:28:34.0935 0x17c0  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0xA9887000, BlocksNum 0x5000000

23:28:34.0935 0x17c0  ============================================================

23:28:34.0966 0x17c0  C: <-> \Device\Harddisk0\DR0\Partition2

23:28:35.0013 0x17c0  D: <-> \Device\Harddisk0\DR0\Partition3

23:28:35.0028 0x17c0  ============================================================

23:28:35.0028 0x17c0  Initialize success

23:28:35.0028 0x17c0  ============================================================

23:29:31.0893 0x0ef4  ============================================================

23:29:31.0893 0x0ef4  Scan started

23:29:31.0893 0x0ef4  Mode: Manual; SigCheck; TDLFS; 

23:29:31.0893 0x0ef4  ============================================================

23:29:31.0893 0x0ef4  KSN ping started

23:29:34.0638 0x0ef4  KSN ping finished: true

23:29:36.0885 0x0ef4  ================ Scan system memory ========================

23:29:36.0885 0x0ef4  System memory - ok

23:29:36.0885 0x0ef4  ================ Scan services =============================

23:29:37.0025 0x0ef4  [ 1B133875B8AA8AC48969BD3458AFE9F5, 01753BDD47F3F9BC0E0D23A069B9C56D4AE6A6B6295BC19B95AE245D25B12744 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys

23:29:37.0306 0x0ef4  1394ohci - ok

23:29:37.0353 0x0ef4  [ CEA80C80BED809AA0DA6FEBC04733349, AE69C142DC2210A4AE657C23CEA4A6E7CB32C4F4EBA039414123CAC52157509B ] ACPI            C:\Windows\system32\drivers\ACPI.sys

23:29:37.0399 0x0ef4  ACPI - ok

23:29:37.0431 0x0ef4  [ 1EFBC664ABFF416D1D07DB115DCB264F, BF94D069D692140B792DBF4FD3CB0127D27C26CC5BFB6B0C28A8B6346767EE58 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys

23:29:37.0524 0x0ef4  AcpiPmi - ok

23:29:37.0618 0x0ef4  [ B04A4810C6CC205F9DC72DC22E4AB236, 547321F5C28C80D4818372D65E2A33D4BAC593015DD6613B24586FE4B4A95D5D ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

23:29:37.0633 0x0ef4  AdobeFlashPlayerUpdateSvc - ok

23:29:37.0711 0x0ef4  [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF48485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys

23:29:37.0789 0x0ef4  adp94xx - ok

23:29:37.0867 0x0ef4  [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB44C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys

23:29:37.0961 0x0ef4  adpahci - ok

23:29:38.0008 0x0ef4  [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376DA9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys

23:29:38.0055 0x0ef4  adpu320 - ok

23:29:38.0101 0x0ef4  [ 8B5EEFEEC1E6D1A72A06C526628AD161, 026CDF4C96F4D493E7BABF79A14C4B0B5ADCCEF0B081FFFA2E3B243B2414167F ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

23:29:38.0179 0x0ef4  AeLookupSvc - ok

23:29:38.0242 0x0ef4  [ 4706A9CAEEAF149AD2857D0A0B57F177, EF3D209D38F5D000E89C2C7DBDD65D55E337789A141CDC81F9361B83E8F5234D ] AF15BDA         C:\Windows\system32\DRIVERS\AF15BDA.sys

23:29:38.0413 0x0ef4  AF15BDA - ok

23:29:38.0491 0x0ef4  [ D0B388DA1D111A34366E04EB4A5DD156, 60D226F027F4025CC032CAFF73A80FAFB5FA75445654FDCF80CA8C0419C6E938 ] AFD             C:\Windows\system32\drivers\afd.sys

23:29:38.0710 0x0ef4  AFD - ok

23:29:38.0741 0x0ef4  [ 507812C3054C21CEF746B6EE3D04DD6E, D7E59350AC338AD229E3D10C76E32AE16D120311B263714A9CD94AB538633B0E ] agp440          C:\Windows\system32\drivers\agp440.sys

23:29:38.0803 0x0ef4  agp440 - ok

23:29:38.0835 0x0ef4  [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx         C:\Windows\system32\DRIVERS\djsvs.sys

23:29:38.0881 0x0ef4  aic78xx - ok

23:29:38.0944 0x0ef4  [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG             C:\Windows\System32\alg.exe

23:29:39.0023 0x0ef4  ALG - ok

23:29:39.0038 0x0ef4  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide          C:\Windows\system32\drivers\aliide.sys

23:29:39.0085 0x0ef4  aliide - ok

23:29:39.0132 0x0ef4  [ 60201AD353105D8C6796C1B69E6C49F0, 604D6D6C2CCED6461DEFDCD030B153F643F242EC7FF958333D3747E01E9364FA ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe

23:29:39.0210 0x0ef4  AMD External Events Utility - ok

23:29:39.0226 0x0ef4  [ 3C6600A0696E90A463771C7422E23AB5, 370B33DC1C25B981628A318BAE434A78A5F0A0DA93C2896DC7A3D7B87AE1A5E7 ] amdagp          C:\Windows\system32\drivers\amdagp.sys

23:29:39.0272 0x0ef4  amdagp - ok

23:29:39.0335 0x0ef4  [ CD5914170297126B6266860198D1D4F0, 2239FCBD1A7EC27CE4F10DA36AE6BD6CCB87E5128C82CA71B84BFE5AF5602A60 ] amdide          C:\Windows\system32\drivers\amdide.sys

23:29:39.0382 0x0ef4  amdide - ok

23:29:39.0413 0x0ef4  [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys

23:29:39.0506 0x0ef4  AmdK8 - ok

23:29:39.0834 0x0ef4  [ 51610B74A9A1D84DC86FCE1019BEAFF4, F5DBB2FA37830931AE2C66A8E2FB6BE3E94EED1978C626A78FECFA158C78B0EB ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys

23:29:40.0520 0x0ef4  amdkmdag - ok

23:29:40.0567 0x0ef4  [ CD1D86AB81EECE67D7BD6F7EF9786CCC, D48DADCDBFF5A7628A26F35B2CB2AA65FFFFE1AE95A4E274B4E312472650FA7C ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys

23:29:40.0598 0x0ef4  amdkmdap - ok

23:29:40.0598 0x0ef4  [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys

23:29:40.0676 0x0ef4  AmdPPM - ok

23:29:40.0708 0x0ef4  [ D320BF87125326F996D4904FE24300FC, F767D8C5C58D57202905D829F7AE1B1FF33937F407FDCE4C90E32A6638F27416 ] amdsata         C:\Windows\system32\drivers\amdsata.sys

23:29:40.0754 0x0ef4  amdsata - ok

23:29:40.0786 0x0ef4  [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys

23:29:40.0832 0x0ef4  amdsbs - ok

23:29:40.0864 0x0ef4  [ 46387FB17B086D16DEA267D5BE23A2F2, 8B8AC61B91F154B4EB5CC6DECB5FCCEBA8B42EFE94859947136AD06681EA8ED0 ] amdxata         C:\Windows\system32\drivers\amdxata.sys

23:29:40.0910 0x0ef4  amdxata - ok

23:29:41.0035 0x0ef4  [ 62A6B0A393591878A1E00224EA698AD7, 691B6E248D0682477543455B67E85C768A4A53A92139E153320ED4E4CED1E010 ] AntiVirMailService C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe

23:29:41.0160 0x0ef4  AntiVirMailService - ok

23:29:41.0238 0x0ef4  [ F36D18EF1E66F92094AD89D17BEF007C, A5C793B340311CB7A301B77316E1976E3CD7CA9470CE5F1062CB003BCD4C155C ] AntiVirSchedulerService C:\Program Files\Avira\AntiVir Desktop\sched.exe

23:29:41.0269 0x0ef4  AntiVirSchedulerService - ok

23:29:41.0363 0x0ef4  [ F36D18EF1E66F92094AD89D17BEF007C, A5C793B340311CB7A301B77316E1976E3CD7CA9470CE5F1062CB003BCD4C155C ] AntiVirService  C:\Program Files\Avira\AntiVir Desktop\avguard.exe

23:29:41.0394 0x0ef4  AntiVirService - ok

23:29:41.0488 0x0ef4  [ 5B7924A162A604B43FFBEE9384ABE77B, 1A1A836C145BAD330EDC778D4FD18CE737EB10E4B22AE8A39CDDBAAC36B0FF11 ] AntiVirWebService C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe

23:29:41.0534 0x0ef4  AntiVirWebService - ok

23:29:41.0597 0x0ef4  [ 81F97D8F8B3FB94A451CC6F7CF8B2965, 8DEBA4E47E1016D69740C0BB7CDD23852D86E0D42C1C1EA5A847ECB115C38CB1 ] AppID           C:\Windows\system32\drivers\appid.sys

23:29:41.0690 0x0ef4  AppID - ok

23:29:41.0706 0x0ef4  [ F5090F8FA6757C58E17BAEAA86093636, 5E14CF3032DF5801240F45C59AA93962EA41AA5648A0C6458D16D9B9D95A131F ] AppIDSvc        C:\Windows\System32\appidsvc.dll

23:29:41.0768 0x0ef4  AppIDSvc - ok

23:29:41.0784 0x0ef4  [ EACFDF31921F51C097629F1F3C9129B4, 24138755D823E69760579ECBD672421192457CDC9941B2BC499C2D34D83E86C3 ] Appinfo         C:\Windows\System32\appinfo.dll

23:29:41.0878 0x0ef4  Appinfo - ok

23:29:41.0956 0x0ef4  [ 3DEBBECF665DCDDE3A95D9B902010817, F56F4A7A36FAF5FC2306E108A24E75E13EE1F2D1002D9CB71E3327A55F8694CE ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

23:29:42.0002 0x0ef4  Apple Mobile Device - ok

23:29:42.0018 0x0ef4  [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc             C:\Windows\system32\DRIVERS\arc.sys

23:29:42.0065 0x0ef4  arc - ok

23:29:42.0080 0x0ef4  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2921672858C291054220BADE291044343778216F6BA ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys

23:29:42.0127 0x0ef4  arcsas - ok

23:29:42.0236 0x0ef4  [ 9D768C43FEF254DD50B1DBF8AD5C4C0B, A50854EA5C08605133B8BB4DFDC6090357C5665314AA72E0BFA1E07D4E451F09 ] aspnet_state    C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe

23:29:42.0330 0x0ef4  aspnet_state - ok

23:29:42.0361 0x0ef4  [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A934E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

23:29:42.0502 0x0ef4  AsyncMac - ok

23:29:42.0533 0x0ef4  [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi           C:\Windows\system32\drivers\atapi.sys

23:29:42.0564 0x0ef4  atapi - ok

23:29:42.0611 0x0ef4  [ 8DF873D0587596C1D35A9CECECC61DA1, 41974FCA452CE48C5A6040BF99D1AC9A1C13FF38DF341443CCE2D2ABBC4C9453 ] AtiHdmiService  C:\Windows\system32\drivers\AtiHdmi.sys

23:29:42.0658 0x0ef4  AtiHdmiService - ok

23:29:42.0720 0x0ef4  [ C1619A13B10CAC5038BF7129F57D8DE3, 9F71EA6C844650658938E68CCC1383F92D37C68E46E08461A8351491185BA791 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

23:29:42.0782 0x0ef4  AudioEndpointBuilder - ok

23:29:42.0829 0x0ef4  [ C1619A13B10CAC5038BF7129F57D8DE3, 9F71EA6C844650658938E68CCC1383F92D37C68E46E08461A8351491185BA791 ] Audiosrv        C:\Windows\System32\Audiosrv.dll

23:29:42.0876 0x0ef4  Audiosrv - ok

23:29:42.0907 0x0ef4  [ AF5DA81B19AFA730F1E5246AD81D140A, 532951071F56896A3B5D47874C14D996C8620EA02F87D4BA21B083EC804FB166 ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys

23:29:42.0954 0x0ef4  avgntflt - ok

23:29:43.0048 0x0ef4  [ A5674637BCA212D9FE136ADFA04C9857, 95F3632EBB041C539816D285EBE1F379D46A4187379C69D4683D9F4DECBDB80C ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys

23:29:43.0079 0x0ef4  avipbb - ok

23:29:43.0141 0x0ef4  [ 0D32033DCB359FD98B4C3513EF849FE6, 5870D67526BC29D888DAF8DBAB04B1E97ED5C7C51484ED400A5E65D0EB61576A ] Avira.OE.ServiceHost C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe

23:29:43.0172 0x0ef4  Avira.OE.ServiceHost - ok

23:29:43.0188 0x0ef4  [ D8C712305F73CD34D1B344810E522728, 49A474FF6CA44E8427D7A8290B47395125B0148AF384CF2B3B1FA495A4718CBA ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys

23:29:43.0219 0x0ef4  avkmgr - ok

23:29:43.0266 0x0ef4  [ 3303FB85532093FC6723632B5947E8C4, F8301069A8EAD7303CAE5B7CAE3F119747E7B7B4402178018EB5254087238A42 ] avnetflt        C:\Windows\system32\DRIVERS\avnetflt.sys

23:29:43.0297 0x0ef4  avnetflt - ok

23:29:43.0328 0x0ef4  [ 6E30D02AAC9CAC84F421622E3A2F6178, 229DC527C1D6C778BCA2C855A2A6F6D2C4B0F4F6DE56C886B3AAD26E3347952C ] AxInstSV        C:\Windows\System32\AxInstSV.dll

23:29:43.0453 0x0ef4  AxInstSV - ok

23:29:43.0484 0x0ef4  [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286EA5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbdx.sys

23:29:43.0578 0x0ef4  b06bdrv - ok

23:29:43.0609 0x0ef4  [ BD8869EB9CDE6BBE4508D869929869EE, F4363A12EBFDBB89C69FD59B22F9EE05BADA07D477A1DF2DE01F59D6EE496543 ] b57nd60x        C:\Windows\system32\DRIVERS\b57nd60x.sys

23:29:43.0703 0x0ef4  b57nd60x - ok

23:29:43.0734 0x0ef4  [ EE1E9C3BB8228AE423DD38DB69128E71, ED54FD9795F3A4D32F02BED6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC          C:\Windows\System32\bdesvc.dll

23:29:43.0859 0x0ef4  BDESVC - ok

23:29:43.0874 0x0ef4  [ 505506526A9D467307B3C393DEDAF858, 8AD6F1492E357F57CF42261497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep            C:\Windows\system32\drivers\Beep.sys

23:29:43.0937 0x0ef4  Beep - ok

23:29:43.0999 0x0ef4  [ 1E2BAC209D184BB851E1A187D8A29136, 53933C938DA5126986FFF2918C1F522ABE93ABAB460AE32E4453161C2F7B68DF ] BFE             C:\Windows\System32\bfe.dll

23:29:44.0108 0x0ef4  BFE - ok

23:29:44.0140 0x0ef4  [ E585445D5021971FAE10393F0F1C3961, 178C008A9A0A6BFDA65EB0B98C510271360AD4474F22F13594F5EB60AA4E1CF5 ] BITS            C:\Windows\System32\qmgr.dll

23:29:44.0327 0x0ef4  BITS - ok

23:29:44.0374 0x0ef4  [ 2287078ED48FCFC477B05B20CF38F36F, 55BCA6174E6034A8D61CBE4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys

23:29:44.0436 0x0ef4  blbdrive - ok

23:29:44.0498 0x0ef4  [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A, 10F21999FF6B1D410EBF280F7F27DEACA5289739CF12F4293B614B8FC6C88DCC ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe

23:29:44.0545 0x0ef4  Bonjour Service - ok

23:29:44.0561 0x0ef4  [ 8F2DA3028D5FCBD1A060A3DE64CD6506, E234672E9CFE1A95AD2E78E306E41E010B870221E6EBBC0E2B0BE2FA5CE0CD76 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

23:29:44.0654 0x0ef4  bowser - ok

23:29:44.0670 0x0ef4  [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys

23:29:44.0748 0x0ef4  BrFiltLo - ok

23:29:44.0779 0x0ef4  [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys

23:29:44.0842 0x0ef4  BrFiltUp - ok

23:29:44.0888 0x0ef4  [ 3DAA727B5B0A45039B0E1C9A211B8400, 903B51E75F0C503A0E255120F53BF51B047B219FEC1E15F2F1D02DDD562FC73B ] Browser         C:\Windows\System32\browser.dll

23:29:44.0966 0x0ef4  Browser - ok

23:29:44.0998 0x0ef4  [ 845B8CE732E67F3B4133164868C666EA, 9309B094CD9B5EBC46295A5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

23:29:45.0122 0x0ef4  Brserid - ok

23:29:45.0138 0x0ef4  [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

23:29:45.0200 0x0ef4  BrSerWdm - ok

23:29:45.0216 0x0ef4  [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

23:29:45.0294 0x0ef4  BrUsbMdm - ok

23:29:45.0310 0x0ef4  [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

23:29:45.0372 0x0ef4  BrUsbSer - ok

23:29:45.0403 0x0ef4  [ ED3DF7C56CE0084EB2034432FC56565A, B5B75E002E7BC0209582C635CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys

23:29:45.0450 0x0ef4  BTHMODEM - ok

23:29:45.0481 0x0ef4  [ 1DF19C96EEF6C29D1C3E1A8678E07190, 1F4BB161FF3A1C5B1465BB52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv         C:\Windows\system32\bthserv.dll

23:29:45.0559 0x0ef4  bthserv - ok

23:29:45.0590 0x0ef4  [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A02584E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

23:29:45.0668 0x0ef4  cdfs - ok

23:29:45.0700 0x0ef4  [ BE167ED0FDB9C1FA1133953C18D5A6C9, E26A851CA13E7300F977E5B20FA5D25FD0E1442AB6AD5DB58BBDB2DAAD87027C ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

23:29:45.0778 0x0ef4  cdrom - ok

23:29:45.0809 0x0ef4  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] CertPropSvc     C:\Windows\System32\certprop.dll

23:29:45.0887 0x0ef4  CertPropSvc - ok

23:29:45.0934 0x0ef4  [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys

23:29:45.0980 0x0ef4  circlass - ok

23:29:46.0012 0x0ef4  [ 33A60554882FDF59CDA3E1806370BBA1, 3DE5451E1CB84AAEBD03F54BEFC670C401447B4881A8B022748B6ECF0F500F01 ] CLFS            C:\Windows\system32\CLFS.sys

23:29:46.0074 0x0ef4  CLFS - ok

23:29:46.0121 0x0ef4  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

23:29:46.0168 0x0ef4  clr_optimization_v2.0.50727_32 - ok

23:29:46.0214 0x0ef4  [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

23:29:46.0308 0x0ef4  clr_optimization_v4.0.30319_32 - ok

23:29:46.0324 0x0ef4  [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys

23:29:46.0386 0x0ef4  CmBatt - ok

23:29:46.0417 0x0ef4  [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide          C:\Windows\system32\drivers\cmdide.sys

23:29:46.0464 0x0ef4  cmdide - ok

23:29:46.0511 0x0ef4  [ 3051724F223EA48968B19567DE2A81F4, DCC27DE1B2B35866FC6DBDE95A368E7D0D346B6C3F31D0BACA63DD39B0A8874E ] CNG             C:\Windows\system32\Drivers\cng.sys

23:29:46.0589 0x0ef4  CNG - ok

23:29:46.0620 0x0ef4  [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA34B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys

23:29:46.0651 0x0ef4  Compbatt - ok

23:29:46.0667 0x0ef4  [ CBE8C58A8579CFE5FCCF809E6F114E89, AC083A1C649EBA18C59FCC1772D0784B10E2B8C63094E3C14388E147DBC3F6DF ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys

23:29:46.0745 0x0ef4  CompositeBus - ok

23:29:46.0745 0x0ef4  COMSysApp - ok

23:29:46.0776 0x0ef4  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys

23:29:46.0823 0x0ef4  crcdisk - ok

23:29:46.0854 0x0ef4  [ 49474B3E37969AF4B5C076F42B623AFF, BDA6B57E9B60EF1B67C74099263D33A367AAA035667239F76AB8B268FD3E8F23 ] CryptSvc        C:\Windows\system32\cryptsvc.dll

23:29:46.0901 0x0ef4  CryptSvc - ok

23:29:46.0963 0x0ef4  [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] DcomLaunch      C:\Windows\system32\rpcss.dll

23:29:47.0041 0x0ef4  DcomLaunch - ok

23:29:47.0088 0x0ef4  [ 8D6E10A2D9A5EED59562D9B82CF804E1, 888F9650F4E872BA8F4E0C27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc       C:\Windows\System32\defragsvc.dll

23:29:47.0182 0x0ef4  defragsvc - ok

23:29:47.0228 0x0ef4  [ F024449C97EC1E464AAFFDA18593DB88, 7EF1E241892E098A472BCA14C724DFF1AACCF190954AF1C4A38B6D542CC74BD2 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

23:29:47.0322 0x0ef4  DfsC - ok

23:29:47.0369 0x0ef4  [ E9E01EB683C132F7FA27CD607B8A2B63, 4D9037B458C522874619143A4176BCED42472C68933E6E83D37B67242706F3C4 ] Dhcp            C:\Windows\system32\dhcpcore.dll

23:29:47.0447 0x0ef4  Dhcp - ok

23:29:47.0462 0x0ef4  [ 1A050B0274BFB3890703D490F330C0DA, 79D74F4679A2EE040FAAF4D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache        C:\Windows\system32\drivers\discache.sys

23:29:47.0540 0x0ef4  discache - ok

23:29:47.0572 0x0ef4  [ 565003F326F99802E68CA78F2A68E9FF, ABC42B24DBA4FFC411120E09278EF26AF56CCAB463B69B4BD6C530B4A07063D2 ] Disk            C:\Windows\system32\DRIVERS\disk.sys

23:29:47.0618 0x0ef4  Disk - ok

23:29:47.0665 0x0ef4  [ 33EF4861F19A0736B11314AAD9AE28D0, 4C4B84365D85758E3263B88F157D8B086B392C6F1EA5F0F3DB6BF87EF90248EC ] Dnscache        C:\Windows\System32\dnsrslvr.dll

23:29:47.0743 0x0ef4  Dnscache - ok

23:29:47.0774 0x0ef4  [ 366BA8FB4B7BB7435E3B9EACB3843F67, 65B7C61ACF34F1F0149045AA9E09A3F917A927963237A385A914D0B80551DC31 ] dot3svc         C:\Windows\System32\dot3svc.dll

23:29:47.0884 0x0ef4  dot3svc - ok

23:29:47.0946 0x0ef4  [ 8EC04CA86F1D68DA9E11952EB85973D6, 2E3FBC2D683D1274E8BC45EEEA87D43B77EDDCAAF0D453296D9FDA6B9D717071 ] DPS             C:\Windows\system32\dps.dll

23:29:48.0008 0x0ef4  DPS - ok

23:29:48.0055 0x0ef4  [ B918E7C5F9BF77202F89E1A9539F2EB4, C589A37DE50BBEF22E2DAA9682EA43147F614AA1AF7DAAA942BA5FC192313A0B ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

23:29:48.0118 0x0ef4  drmkaud - ok

23:29:48.0196 0x0ef4  [ 3583A5A8CC2E682BFFBD4630D0FEC08B, FD0F184B358FCECAA763444B414074BEF4E871EB7527D88385519FC158435C72 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

23:29:48.0289 0x0ef4  DXGKrnl - ok

23:29:48.0320 0x0ef4  [ 8600142FA91C1B96367D3300AD0F3F3A, 5713625E27DF11FAAFDA7AC79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost         C:\Windows\System32\eapsvc.dll

23:29:48.0383 0x0ef4  EapHost - ok

23:29:48.0554 0x0ef4  [ 024E1B5CAC09731E4D868E64DBFB4AB0, AB0826A74BBEE5B7A1B035861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv           C:\Windows\system32\DRIVERS\evbdx.sys

23:29:48.0882 0x0ef4  ebdrv - ok

23:29:48.0913 0x0ef4  [ 981CE3E3A653511799F4A862494B66A8, 414D975387A118535E39636413969A7D4C98A85E542A44B8FA515C8A20D6093F ] EFS             C:\Windows\System32\lsass.exe

23:29:49.0022 0x0ef4  EFS - ok

23:29:49.0100 0x0ef4  [ A8C362018EFC87BEB013EE28F29C0863, 07971C681FBD391C0BA0172618AF8AD77520182207F1C57F134B34D6A113857F ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

23:29:49.0241 0x0ef4  ehRecvr - ok

23:29:49.0256 0x0ef4  [ D389BFF34F80CAEDE417BF9D1507996A, 12859B9925D7A4631DE61A820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched         C:\Windows\ehome\ehsched.exe

23:29:49.0334 0x0ef4  ehSched - ok

23:29:49.0381 0x0ef4  [ 0ED67910C8C326796FAA00B2BF6D9D3C, 97FAA7627A162B0AEC15545E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys

23:29:49.0444 0x0ef4  elxstor - ok

23:29:49.0475 0x0ef4  [ 8FC3208352DD3912C94367A206AB3F11, 69B65C12BDADD4B730508674B1B77C5496612B4ACCC447DB9AFE49ADEA8CBF02 ] ErrDev          C:\Windows\system32\drivers\errdev.sys

23:29:49.0522 0x0ef4  ErrDev - ok

23:29:49.0553 0x0ef4  [ F6916EFC29D9953D5D0DF06882AE8E16, ED41893960018D5EC2F7829B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem     C:\Windows\system32\es.dll

23:29:49.0646 0x0ef4  EventSystem - ok

23:29:49.0678 0x0ef4  [ 2DC9108D74081149CC8B651D3A26207F, 75CB47923A867DDAC512701CE71DFCFC340FC3A2E27F4255D0836A1FBC463176 ] exfat           C:\Windows\system32\drivers\exfat.sys

23:29:49.0771 0x0ef4  exfat - ok

23:29:49.0802 0x0ef4  [ 7E0AB74553476622FB6AE36F73D97D35, 41463A255FDA1D550B3385EC7C73ABC343B1BBBE9CEE4DF9F2A8B3E7338C4947 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

23:29:49.0896 0x0ef4  fastfat - ok

23:29:49.0958 0x0ef4  [ 967EA5B213E9984CBE270205DF37755B, 43153E23210B03FAE16897D62D55B8742F834EDC695F8401EAB5DE307F62602D ] Fax             C:\Windows\system32\fxssvc.exe

23:29:50.0099 0x0ef4  Fax - ok

23:29:50.0130 0x0ef4  [ E817A017F82DF2A1F8CFDBDA29388B29, 4CC9320A21E6FEA2D16C48D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

23:29:50.0161 0x0ef4  fdc - ok

23:29:50.0192 0x0ef4  [ F3222C893BD2F5821A0179E5C71E88FB, A85B947249DBB986358CCD4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost         C:\Windows\system32\fdPHost.dll

23:29:50.0255 0x0ef4  fdPHost - ok

23:29:50.0286 0x0ef4  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B, 0E76C29D2A974A3F2FBFCB63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub        C:\Windows\system32\fdrespub.dll

23:29:50.0364 0x0ef4  FDResPub - ok

23:29:50.0380 0x0ef4  [ 6CF00369C97F3CF563BE99BE983D13D8, F65F35324A2FB9DFB533B1C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

23:29:50.0426 0x0ef4  FileInfo - ok

23:29:50.0458 0x0ef4  [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FEAAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

23:29:50.0551 0x0ef4  Filetrace - ok

23:29:50.0567 0x0ef4  [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

23:29:50.0614 0x0ef4  flpydisk - ok

23:29:50.0645 0x0ef4  [ 7520EC808E0C35E0EE6F841294316653, 6EC65511B4838A7172A8F89E35C2F9DF4F0BFCE3BE12EDA790F3EB567102FF67 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

23:29:50.0692 0x0ef4  FltMgr - ok

23:29:50.0785 0x0ef4  [ E12C4928B32ACE04610259647F072635, B71B9C2DF45F33C4DAC88435129B08B0BCDBBE82E8C3AD0A95F00137CC8B619F ] FontCache       C:\Windows\system32\FntCache.dll

23:29:50.0957 0x0ef4  FontCache - ok

23:29:50.0988 0x0ef4  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

23:29:51.0050 0x0ef4  FontCache3.0.0.0 - ok

23:29:51.0082 0x0ef4  [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141FD70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

23:29:51.0144 0x0ef4  FsDepends - ok

23:29:51.0160 0x0ef4  [ 7DAE5EBCC80E45D3253F4923DC424D05, 8A2C4D5591509B0B0A44583520617A9AE34F32BB6E68A012A7D7870ED24F703A ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

23:29:51.0206 0x0ef4  Fs_Rec - ok

23:29:51.0253 0x0ef4  [ E306A24D9694C724FA2491278BF50FDB, 1D246B9C28550640EACBF8CF9DC980FD75106B92832D392FEBEF0C7012353091 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

23:29:51.0316 0x0ef4  fvevol - ok

23:29:51.0347 0x0ef4  [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC3344D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys

23:29:51.0394 0x0ef4  gagp30kx - ok

23:29:51.0425 0x0ef4  [ 8182FF89C65E4D38B2DE4BB0FB18564E, 2ACFA64D48BF7D25641EC5819C8722144284B8A8E071BF297C1881B07EEAFE88 ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys

23:29:51.0456 0x0ef4  GEARAspiWDM - ok

23:29:51.0518 0x0ef4  [ E897EAF5ED6BA41E081060C9B447A673, A428DC68516F19C6C53A8B62E4BDB2587E70FB751B9D77700B6B147D347DA157 ] gpsvc           C:\Windows\System32\gpsvc.dll

23:29:51.0612 0x0ef4  gpsvc - ok

23:29:51.0706 0x0ef4  [ 51508F0C2476177E50C31B0BBFBF1BDB, 3F62A05181D54711180C8727AC66D624AFA7FC816A4ACC4DC0CFCF2D2DBE7F87 ] gupdate         C:\Program Files\Google\Update\GoogleUpdate.exe

23:29:51.0721 0x0ef4  gupdate - ok

23:29:51.0737 0x0ef4  [ 51508F0C2476177E50C31B0BBFBF1BDB, 3F62A05181D54711180C8727AC66D624AFA7FC816A4ACC4DC0CFCF2D2DBE7F87 ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe

23:29:51.0768 0x0ef4  gupdatem - ok

23:29:51.0784 0x0ef4  [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

23:29:51.0877 0x0ef4  hcw85cir - ok

23:29:51.0908 0x0ef4  [ A5EF29D5315111C80A5C1ABAD14C8972, A181DA72E946F121C3F4A19438C547B0BFD15138AB1DB5465945EC89DF1F6B0A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

23:29:51.0986 0x0ef4  HdAudAddService - ok

23:29:52.0018 0x0ef4  [ 9036377B8A6C15DC2EEC53E489D159B5, 1E56D2ACFE92E6DF96D755B05C63D580EED82C210F075C8623E138BEE6BCD41B ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys

23:29:52.0064 0x0ef4  HDAudBus - ok

23:29:52.0096 0x0ef4  [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A6092D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys

23:29:52.0158 0x0ef4  HidBatt - ok

23:29:52.0205 0x0ef4  [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420DB0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys

23:29:52.0267 0x0ef4  HidBth - ok

23:29:52.0298 0x0ef4  [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys

23:29:52.0361 0x0ef4  HidIr - ok

23:29:52.0423 0x0ef4  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29AA5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv         C:\Windows\system32\hidserv.dll

23:29:52.0517 0x0ef4  hidserv - ok

23:29:52.0548 0x0ef4  [ 10C19F8290891AF023EAEC0832E1EB4D, E208553029488A6EE2F5216CC9FE5F93E9931A94C0D0625253BB159E30642853 ] HidUsb          C:\Windows\system32\drivers\hidusb.sys

23:29:52.0642 0x0ef4  HidUsb - ok

23:29:52.0673 0x0ef4  [ 196B4E3F4CCCC24AF836CE58FACBB699, 7A2E1F603A073421FA0987EFB96647F1F0F2D4E0C82AA62EBC041585DA811DAF ] hkmsvc          C:\Windows\system32\kmsvc.dll

23:29:52.0782 0x0ef4  hkmsvc - ok

23:29:52.0813 0x0ef4  [ 6658F4404DE03D75FE3BA09F7ABA6A30, E51D9C1580A283EB862F09B73AAE1B647DD683A53F3DD99834222F12DD15E40F ] HomeGroupListener C:\Windows\system32\ListSvc.dll

23:29:52.0938 0x0ef4  HomeGroupListener - ok

23:29:52.0985 0x0ef4  [ DBC02D918FFF1CAD628ACBE0C0EAA8E8, 02121800D9062692C102475876AE8143EBE46D855E8328B8CDCFE6A2F0D19696 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

23:29:53.0032 0x0ef4  HomeGroupProvider - ok

23:29:53.0110 0x0ef4  [ 0A3C6AA4A9FC38C20BA4EAC2C3351C05, 7B3F117C1D606DDA7623BEC0BFBC362C33A12213E899F049AC56A55826984134 ] hpqcxs08        C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll

23:29:53.0156 0x0ef4  hpqcxs08 - detected UnsignedFile.Multi.Generic ( 1 )

23:29:55.0808 0x0ef4  Detect skipped due to KSN trusted

23:29:55.0808 0x0ef4  hpqcxs08 - ok

23:29:55.0855 0x0ef4  [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

23:29:55.0902 0x0ef4  HpSAMD - ok

23:29:55.0980 0x0ef4  [ 487569E5DA56A5A432FF8AF6D3599CF9, 7C974D8379C60B4F69A20B01876C49181B0A63AC318C4BD0A21DABFF27A15C9D ] HTTP            C:\Windows\system32\drivers\HTTP.sys

23:29:56.0105 0x0ef4  HTTP - ok

23:29:56.0136 0x0ef4  [ 0C4E035C7F105F1299258C90886C64C5, CFB4FBE7B28058E6D3E6E508CF3C1645F6AAE0AFEB4C5364835B9C42311DF0D4 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

23:29:56.0183 0x0ef4  hwpolicy - ok

23:29:56.0214 0x0ef4  [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C37773F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys

23:29:56.0292 0x0ef4  i8042prt - ok

23:29:56.0354 0x0ef4  [ 26541A068572F650A2FA490726FE81BE, 9D6EF745731D45C4482274BE9C56300BBE8843D6C182F0E5C621AB121DBE371E ] iaStor          C:\Windows\system32\DRIVERS\iaStor.sys

23:29:56.0386 0x0ef4  iaStor - ok

23:29:56.0464 0x0ef4  [ 31A0E93CDF29007D6C6FFFB632F375ED, CA464928E9868B9A09C324DBBC8DA41A01C5C486B43578FC695250D523DE555B ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

23:29:56.0495 0x0ef4  IAStorDataMgrSvc - ok

23:29:56.0526 0x0ef4  [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E, 72870092A80C6DAE0105025B0ED8B607E98BA81E59298364A7FE4C9C56C68FF0 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

23:29:56.0588 0x0ef4  iaStorV - ok

23:29:56.0698 0x0ef4  [ 3E9213A2A050BF429E91898C90F8B4E3, D80ABE5691087661B19F01927B631CB8C5291120B814B6F863F046E0D643E9E4 ] idsvc           C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

23:29:56.0854 0x0ef4  idsvc - ok

23:29:56.0869 0x0ef4  IEEtwCollectorService - ok

23:29:56.0885 0x0ef4  [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE342FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys

23:29:56.0916 0x0ef4  iirsp - ok

23:29:56.0994 0x0ef4  [ B9C54120F46392100478F58F374E5709, A28EE8B0988F580D5984E815FC78DF41B169260814234AA0E453375542D0957B ] IKEEXT          C:\Windows\System32\ikeext.dll

23:29:57.0072 0x0ef4  IKEEXT - ok

23:29:57.0275 0x0ef4  [ 4BE85CF5831A41104C2DDED55FBC3565, D5052C717710579A31E030CFFCA59B3632591FDDD2CE237C68276AE58783BD6F ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys

23:29:57.0602 0x0ef4  IntcAzAudAddService - ok

23:29:57.0634 0x0ef4  [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide        C:\Windows\system32\drivers\intelide.sys

23:29:57.0680 0x0ef4  intelide - ok

23:29:57.0727 0x0ef4  [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

23:29:57.0790 0x0ef4  intelppm - ok

23:29:57.0821 0x0ef4  [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

23:29:57.0914 0x0ef4  IPBusEnum - ok

23:29:57.0946 0x0ef4  [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

23:29:58.0024 0x0ef4  IpFilterDriver - ok

23:29:58.0086 0x0ef4  [ 58F67245D041FBE7AF88F4EAF79DF0FA, 67468D6A46FF4D87AD321BFEA42F2FC843D09AA292A119C76D4D795D06028F96 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

23:29:58.0195 0x0ef4  iphlpsvc - ok

23:29:58.0226 0x0ef4  [ 4BD7134618C1D2A27466A099062547BF, 20284ABEF4433A59E2981F4143CAEC67DC990864FE0B9E3DC70EE0B88539E964 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys

23:29:58.0289 0x0ef4  IPMIDRV - ok

23:29:58.0320 0x0ef4  [ A5FA468D67ABCDAA36264E463A7BB0CD, EDB828D596E43372F97DAE1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

23:29:58.0414 0x0ef4  IPNAT - ok

23:29:58.0492 0x0ef4  [ 49918803B661367023BF325CF602AFDC, 2821451FD31EAFCB5D3081998756F7274B4C2594E9A378EEE5C1D5D92C1FC58C ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe

23:29:58.0554 0x0ef4  iPod Service - ok

23:29:58.0570 0x0ef4  [ 42996CFF20A3084A56017B7902307E9F, 688176DAB91BE569280E4822E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM          C:\Windows\system32\drivers\irenum.sys

23:29:58.0679 0x0ef4  IRENUM - ok

23:29:58.0694 0x0ef4  [ 1F32BB6B38F62F7DF1A7AB7292638A35, 86522358680FBB1CEBC56B4D139290689BB0F71A3EC78CE883E4D75D0B37586F ] isapnp          C:\Windows\system32\drivers\isapnp.sys

23:29:58.0741 0x0ef4  isapnp - ok

23:29:58.0788 0x0ef4  [ EB34CE31FABD4DC4343FD2AD16D2CAF9, D21C91227A15DA89ECF522345D0AB80B3B7FC24A230596DABDB8BD3B7554CE8C ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys

23:29:58.0850 0x0ef4  iScsiPrt - ok

23:29:58.0882 0x0ef4  [ ADEF52CA1AEAE82B50DF86B56413107E, A3AE1E96B04AC81665ABBD3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

23:29:58.0928 0x0ef4  kbdclass - ok

23:29:58.0960 0x0ef4  [ 9E3CED91863E6EE98C24794D05E27A71, 90CF59F20E14E4A5A793266805E82BF7AE1F0CF4C7BAB1FD2EEF3B53C5DF770F ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

23:29:58.0991 0x0ef4  kbdhid - ok

23:29:59.0022 0x0ef4  [ 981CE3E3A653511799F4A862494B66A8, 414D975387A118535E39636413969A7D4C98A85E542A44B8FA515C8A20D6093F ] KeyIso          C:\Windows\system32\lsass.exe

23:29:59.0053 0x0ef4  KeyIso - ok

23:29:59.0084 0x0ef4  [ 746F89CE0C6569C589E6AC4D3DA82D41, 6D41311CBA8BB7C9C09C1757D7947539B67FE3EFF6299502176C673809BAEAD8 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

23:29:59.0131 0x0ef4  KSecDD - ok

23:29:59.0147 0x0ef4  [ D800E1EAF33630A1636BB21E8256AA92, D07542A242E0D52B494BE63A6A141207D0A59CF66ABEBA9CE33877594BF7BA5D ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

23:29:59.0209 0x0ef4  KSecPkg - ok

23:29:59.0256 0x0ef4  [ 89A7B9CC98D0D80C6F31B91C0A310FCD, 4583CAEEE0D50C0C7CE955E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm           C:\Windows\system32\msdtckrm.dll

23:29:59.0365 0x0ef4  KtmRm - ok

23:29:59.0412 0x0ef4  [ D64AF876D53ECA3668BB97B51B4E70AB, D5C07C019BFEAFBEDC29AB5060356A3B07449712B21B50E03378BEF04AF180F9 ] LanmanServer    C:\Windows\system32\srvsvc.dll

23:29:59.0490 0x0ef4  LanmanServer - ok

23:29:59.0521 0x0ef4  [ 58405E4F68BA8E4057C6E914F326ABA2, C3E6519A1A38F1B3597D4391E42ABFE8F1F5E86256C4B3BD876CDAD9BB68B0A6 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

23:29:59.0599 0x0ef4  LanmanWorkstation - ok

23:29:59.0630 0x0ef4  [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA039C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

23:29:59.0740 0x0ef4  lltdio - ok

23:29:59.0771 0x0ef4  [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64BE47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc         C:\Windows\System32\lltdsvc.dll

23:29:59.0880 0x0ef4  lltdsvc - ok

23:29:59.0896 0x0ef4  [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts         C:\Windows\System32\lmhsvc.dll

23:29:59.0974 0x0ef4  lmhosts - ok

23:30:00.0036 0x0ef4  [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys

23:30:00.0083 0x0ef4  LSI_FC - ok

23:30:00.0114 0x0ef4  [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys

23:30:00.0161 0x0ef4  LSI_SAS - ok

23:30:00.0176 0x0ef4  [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys

23:30:00.0223 0x0ef4  LSI_SAS2 - ok

23:30:00.0254 0x0ef4  [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys

23:30:00.0286 0x0ef4  LSI_SCSI - ok

23:30:00.0317 0x0ef4  [ 6703E366CC18D3B6E534F5CF7DF39CEE, 7396B9AF938284D99EC51206A7B2FA4A0DC10A493DCE6707818B03A7473782C4 ] luafv           C:\Windows\system32\drivers\luafv.sys

23:30:00.0395 0x0ef4  luafv - ok

23:30:00.0410 0x0ef4  [ 3C21F7E95FFCA33EF1A83AA33D9663CF, C843116969E1CDBA45AEF98B33BEDBA9200C62CDB52CD7056CE6768A1EF3A637 ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys

23:30:00.0457 0x0ef4  MBAMProtector - ok

23:30:00.0598 0x0ef4  [ 516E29AD03BDF610CC36A95AE692FE42, 09F913B169AD775FF587AE59AEC5DD2A2D8646803F48BF616C74EEC0DE3BE7A2 ] MBAMScheduler   C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe

23:30:00.0816 0x0ef4  MBAMScheduler - ok

23:30:00.0925 0x0ef4  [ 2B983F067AEE3F9EB4DF5E97F45D21D1, 0B9ED0E91FF01A5445927650113E320C3C0EA16F1401AA55A509DDBF704DF22F ] MBAMService     C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe

23:30:01.0050 0x0ef4  MBAMService - ok

23:30:01.0097 0x0ef4  [ 04B309A1A653177994630C2773E659F1, 1D9F81D2DF513FE177E5308E3DE0CE416109F87FDBD00FE7453FEB6074216C3C ] MBAMSwissArmy   C:\Windows\system32\drivers\MBAMSwissArmy.sys

23:30:01.0128 0x0ef4  MBAMSwissArmy - ok

23:30:01.0175 0x0ef4  [ 167BCE00050B19DA25065335645A3C7A, 5CD3EA3E09B4ED318AB6151F56A17B0E4C8CE32DBB77342A39DEF53908F7D2F0 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys

23:30:01.0206 0x0ef4  MBAMWebAccessControl - ok

23:30:01.0237 0x0ef4  [ BFB9EE8EE977EFE85D1A3105ABEF6DD1, D2A84EBF0C0B7A14AD432FD2EF43CC12300027AEA3FA4075659FB088AB62B588 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

23:30:01.0300 0x0ef4  Mcx2Svc - ok

23:30:01.0331 0x0ef4  [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys

23:30:01.0378 0x0ef4  megasas - ok

23:30:01.0424 0x0ef4  [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C6179161B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys

23:30:01.0471 0x0ef4  MegaSR - ok

23:30:01.0502 0x0ef4  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS           C:\Windows\system32\mmcss.dll

23:30:01.0580 0x0ef4  MMCSS - ok

23:30:01.0596 0x0ef4  [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF360862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem           C:\Windows\system32\drivers\modem.sys

23:30:01.0690 0x0ef4  Modem - ok

23:30:01.0721 0x0ef4  [ 79D10964DE86B292320E9DFE02282A23, 52714827B7EEDACA55326A4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

23:30:01.0783 0x0ef4  monitor - ok

23:30:01.0830 0x0ef4  [ FB18CC1D4C2E716B6B903B0AC0CC0609, F10CCA63493782B16DE6B96B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

23:30:01.0892 0x0ef4  mouclass - ok

23:30:01.0924 0x0ef4  [ 2C388D2CD01C9042596CF3C8F3C7B24D, B2FB72272BB01AEDA4047B57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

23:30:01.0986 0x0ef4  mouhid - ok

23:30:02.0017 0x0ef4  [ 644905A19D0F37F2233DFCE53BC4BC19, F52CB40AA0FD1EBF8CBF0F3BFB20C47142C637719840877FB93F10D085EB8C2B ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

23:30:02.0064 0x0ef4  mountmgr - ok

23:30:02.0126 0x0ef4  [ 03D14BF1DC59130002F6B8BA3AD89DB9, 1729CCD8AAF51CDB86ED67569974D0B6B1CFFA5F90EF6E6004B0D8A305D88C27 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

23:30:02.0173 0x0ef4  MozillaMaintenance - ok

23:30:02.0204 0x0ef4  [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0, D3D903EEA465D77345AAC9B9F02CDEADF4831212EA2DE4FCA33BEE26EBB47420 ] mpio            C:\Windows\system32\drivers\mpio.sys

23:30:02.0251 0x0ef4  mpio - ok

23:30:02.0282 0x0ef4  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0, 1D6DCFA0E56C3E55B6AED819176E751502F863BA0FCF4F0B3253A81D208141A2 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

23:30:02.0360 0x0ef4  mpsdrv - ok

23:30:02.0407 0x0ef4  [ 9835584E999D25004E1EE8E5F3E3B881, 71798B0CBE9AE69F1F29B845319019C69EC7F415CBABB3B87DDE92C360675021 ] MpsSvc          C:\Windows\system32\mpssvc.dll

23:30:02.0501 0x0ef4  MpsSvc - ok

23:30:02.0548 0x0ef4  [ 03F899F521D2AAED1C55008F734DF252, 4E56A51476A13F5630719018037B1F63DF9ACEA1CFE782AF04E669BD696954C5 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

23:30:02.0594 0x0ef4  MRxDAV - ok

23:30:02.0641 0x0ef4  [ 5D16C921E3671636C0EBA3BBAAC5FD25, 5BC107B95CAFC88F51FBB9F657B99944B20627A2B618F263093D7045E4FFD65C ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

23:30:02.0735 0x0ef4  mrxsmb - ok

23:30:02.0766 0x0ef4  [ 6D17A4791ACA19328C685D256349FEFC, 012AA3D84EEAAF53780D06D2D11B9727DFC3441F3FAD75BC9E751FB814403668 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

23:30:02.0828 0x0ef4  mrxsmb10 - ok

23:30:02.0844 0x0ef4  [ B81F204D146000BE76651A50670A5E9E, 78193D0F967BE9829E53F9B500342934B4B1E1F4CEFC444382959E2061BC3B17 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

23:30:02.0906 0x0ef4  mrxsmb20 - ok

23:30:02.0953 0x0ef4  [ 012C5F4E9349E711E11E0F19A8589F0A, 208B92DFCF7AD43202660FBBC9FF5E03AEDBEE38178FF3628EB74CB6CD37C584 ] msahci          C:\Windows\system32\drivers\msahci.sys

23:30:03.0000 0x0ef4  msahci - ok

23:30:03.0031 0x0ef4  [ 55055F8AD8BE27A64C831322A780A228, C2C9FD1F61302997117B1CD0835E8234405BB80084065ED05363B77868397304 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

23:30:03.0094 0x0ef4  msdsm - ok

23:30:03.0125 0x0ef4  [ E1BCE74A3BD9902B72599C0192A07E27, 5162EB623FE64E9DFEAC6CA2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC           C:\Windows\System32\msdtc.exe

23:30:03.0187 0x0ef4  MSDTC - ok

23:30:03.0218 0x0ef4  [ DAEFB28E3AF5A76ABCC2C3078C07327F, 6EB558532400B489763BAE7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs            C:\Windows\system32\drivers\Msfs.sys

23:30:03.0312 0x0ef4  Msfs - ok

23:30:03.0328 0x0ef4  [ 3E1E5767043C5AF9367F0056295E9F84, B2EDFECD3C14E4FE1BA87D9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

23:30:03.0421 0x0ef4  mshidkmdf - ok

23:30:03.0437 0x0ef4  [ 0A4E5757AE09FA9622E3158CC1AEF114, ED574E420E57374E328C7C526504ECA569C164287966F06019EC207CB17F2C54 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

23:30:03.0484 0x0ef4  msisadrv - ok

23:30:03.0562 0x0ef4  [ 90F7D9E6B6F27E1A707D4A297F077828, BEFC220EAA7307849600748842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

23:30:03.0655 0x0ef4  MSiSCSI - ok

23:30:03.0671 0x0ef4  msiserver - ok

23:30:03.0702 0x0ef4  [ 8C0860D6366AAFFB6C5BB9DF9448E631, 949C5A14E57F2D7385543C17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

23:30:03.0780 0x0ef4  MSKSSRV - ok

23:30:03.0796 0x0ef4  [ 3EA8B949F963562CEDBB549EAC0C11CE, 1B0B2F16A1790282504F3C548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

23:30:03.0858 0x0ef4  MSPCLOCK - ok

23:30:03.0874 0x0ef4  [ F456E973590D663B1073E9C463B40932, 48BA6D5580EE7B6A4C06E04772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

23:30:03.0952 0x0ef4  MSPQM - ok

23:30:03.0983 0x0ef4  [ 0E008FC4819D238C51D7C93E7B41E560, 141FCEBDD05874407EAEC35A9DCD3BB16F2A428F23E55487D6A5DBFCADBF10D2 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

23:30:04.0030 0x0ef4  MsRPC - ok

23:30:04.0061 0x0ef4  [ FC6B9FF600CC585EA38B12589BD4E246, F05DB01AE1955D2468CE6B51E51998B111CA3B0BDEED090EE6B99B625CBA564A ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys

23:30:04.0108 0x0ef4  mssmbios - ok

23:30:04.0139 0x0ef4  [ B42C6B921F61A6E55159B8BE6CD54A36, 6BB0A7BE005B8F281E551D1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

23:30:04.0217 0x0ef4  MSTEE - ok

23:30:04.0248 0x0ef4  [ 33599130F44E1F34631CEA241DE8AC84, E15B31D1AFDC8DC6D2B21D4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys

23:30:04.0279 0x0ef4  MTConfig - ok

23:30:04.0295 0x0ef4  [ 159FAD02F64E6381758C990F753BCC80, E55AB01DCFA95ECAB24A2A9656E28FF9D064BA08B3D82DC8AA42F5991BA09598 ] Mup             C:\Windows\system32\Drivers\mup.sys

23:30:04.0326 0x0ef4  Mup - ok

23:30:04.0357 0x0ef4  [ 61D57A5D7C6D9AFE10E77DAE6E1B445E, D252248532142E9E2332DA693BC51B795102CA938B568FF04981E98B19BFBC5C ] napagent        C:\Windows\system32\qagentRT.dll

23:30:04.0466 0x0ef4  napagent - ok

23:30:04.0513 0x0ef4  [ 26384429FCD85D83746F63E798AB1480, 957C115C263A4B4DC854558B43ECE632D8E2BCCB744E23A01EBA7476BA2E7FFB ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

23:30:04.0591 0x0ef4  NativeWifiP - ok

23:30:04.0654 0x0ef4  [ 8C9C922D71F1CD4DEF73F186416B7896, 15FF43CD90C7913F83B35F2E7986561584588E8A45196EBD965C3A355836A9C7 ] NDIS            C:\Windows\system32\drivers\ndis.sys

23:30:04.0732 0x0ef4  NDIS - ok

23:30:04.0747 0x0ef4  [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424BDA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

23:30:04.0825 0x0ef4  NdisCap - ok

23:30:04.0856 0x0ef4  [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

23:30:04.0934 0x0ef4  NdisTapi - ok

23:30:04.0966 0x0ef4  [ D8A65DAFB3EB41CBB622745676FCD072, 874D3C3D247C4A309DA813DB1D2EDB0037D3C489824BD5FE95B0C20699764EF7 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

23:30:05.0044 0x0ef4  Ndisuio - ok

23:30:05.0075 0x0ef4  [ 38FBE267E7E6983311179230FACB1017, CFD1CBCA59650795C030DB30E5795B37C11C736E14003AE1DAB081BA5C0C9B14 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

23:30:05.0168 0x0ef4  NdisWan - ok

23:30:05.0200 0x0ef4  [ A4BDC541E69674FBFF1A8FF00BE913F2, 18CCFD063E9870B8B6958715BC0414C4D920AE63528EA1E9D7E30F7138918FFA ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

23:30:05.0278 0x0ef4  NDProxy - ok

23:30:05.0309 0x0ef4  [ 80B275B1CE3B0E79909DB7B39AF74D51, 75B406B0D9D28239D4EB2A298419A5F78A58237D88C5FD688EF1DFFAFACCF796 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

23:30:05.0387 0x0ef4  NetBIOS - ok

23:30:05.0402 0x0ef4  [ 280122DDCF04B378EDD1AD54D71C1E54, F98B2ADE34F7E67C7C06C1D0FFB80ECBC353D044D4B4784CD952910345DC2ED0 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

23:30:05.0480 0x0ef4  NetBT - ok

23:30:05.0496 0x0ef4  [ 981CE3E3A653511799F4A862494B66A8, 414D975387A118535E39636413969A7D4C98A85E542A44B8FA515C8A20D6093F ] Netlogon        C:\Windows\system32\lsass.exe

23:30:05.0527 0x0ef4  Netlogon - ok

23:30:05.0558 0x0ef4  [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman          C:\Windows\System32\netman.dll

23:30:05.0636 0x0ef4  Netman - ok

23:30:05.0714 0x0ef4  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

23:30:05.0855 0x0ef4  NetMsmqActivator - ok

23:30:05.0917 0x0ef4  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

23:30:05.0948 0x0ef4  NetPipeActivator - ok

23:30:05.0964 0x0ef4  [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm        C:\Windows\System32\netprofm.dll

23:30:06.0058 0x0ef4  netprofm - ok

23:30:06.0058 0x0ef4  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

23:30:06.0089 0x0ef4  NetTcpActivator - ok

23:30:06.0104 0x0ef4  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

23:30:06.0136 0x0ef4  NetTcpPortSharing - ok

23:30:06.0167 0x0ef4  [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys

23:30:06.0214 0x0ef4  nfrd960 - ok

23:30:06.0245 0x0ef4  [ F115C5CD29E512F18BD7138A094B77E5, 90C2CE8B256EE9AABF674ADDE7F85E91DAF48EA368452D03C187A4AE027D4E39 ] NlaSvc          C:\Windows\System32\nlasvc.dll

23:30:06.0307 0x0ef4  NlaSvc - ok

23:30:06.0307 0x0ef4  [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

23:30:06.0416 0x0ef4  Npfs - ok

23:30:06.0416 0x0ef4  [ BA387E955E890C8A88306D9B8D06BF17, 3477BD9686C5777A93251C154512671AAA7533B18C536DF51F7B1D6D28E7F8A5 ] nsi             C:\Windows\system32\nsisvc.dll

23:30:06.0479 0x0ef4  nsi - ok

23:30:06.0479 0x0ef4  [ E9A0A4D07E53D8FEA2BB8387A3293C58, 690CAD6C4E35ECC1172A2E1FD3933DF73158B3BF42CB21244269612A53DE4D7A ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

23:30:06.0557 0x0ef4  nsiproxy - ok

23:30:06.0635 0x0ef4  [ C8DFF8D07755A66C7A4A738930F0FEAC, A2CC58312CE57988ABD976155BE91F558DCEC4C23481C6FBE64B361D511A36EA ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

23:30:06.0775 0x0ef4  Ntfs - ok

23:30:06.0806 0x0ef4  [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null            C:\Windows\system32\drivers\Null.sys

23:30:06.0869 0x0ef4  Null - ok

23:30:06.0900 0x0ef4  [ 03AD379554B50FA1802BE4EC2E291E92, DCF2B5DB1C8BDF2473E454F974EA6445C3EEC111252D859EC2EC3F6833390271 ] nusb3hub        C:\Windows\system32\DRIVERS\nusb3hub.sys

23:30:06.0931 0x0ef4  nusb3hub - ok

23:30:06.0978 0x0ef4  [ 06FE87C9D181AF5F04D192E604E10E6C, 27BBB521C68EAD123117DCD1DEA7436833EC0CFB62F6B6A5AC12E5A2996C7595 ] nusb3xhc        C:\Windows\system32\DRIVERS\nusb3xhc.sys

23:30:07.0025 0x0ef4  nusb3xhc - ok

23:30:07.0056 0x0ef4  [ B3E25EE28883877076E0E1FF877D02E0, 402B6FED6FBBF645190396DC141141EF52DD059DABD01F8AC9CF01D23664070C ] nvraid          C:\Windows\system32\drivers\nvraid.sys

23:30:07.0103 0x0ef4  nvraid - ok

23:30:07.0134 0x0ef4  [ 4380E59A170D88C4F1022EFF6719A8A4, 93EDB3F4CDBF53C9C1970DD29AB146E390695C568180847BA8903F5FBEABCFF2 ] nvstor          C:\Windows\system32\drivers\nvstor.sys

23:30:07.0181 0x0ef4  nvstor - ok

23:30:07.0196 0x0ef4  [ 5A0983915F02BAE73267CC2A041F717D, D83461D74597BF2BE042FEFCC27FCD18BF63CB8135B0666D731D50951C3468A8 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

23:30:07.0259 0x0ef4  nv_agp - ok

23:30:07.0290 0x0ef4  [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

23:30:07.0399 0x0ef4  ohci1394 - ok

23:30:07.0446 0x0ef4  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

23:30:07.0571 0x0ef4  p2pimsvc - ok

23:30:07.0602 0x0ef4  [ 59C3DDD501E39E006DAC31BF55150D91, E02B63AB7F34CF6FF3F644AF354D10004E6F50014E03172D80BD78934EF71EF1 ] p2psvc          C:\Windows\system32\p2psvc.dll

23:30:07.0696 0x0ef4  p2psvc - ok

23:30:07.0727 0x0ef4  [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport         C:\Windows\system32\DRIVERS\parport.sys

23:30:07.0774 0x0ef4  Parport - ok

23:30:07.0805 0x0ef4  [ 3F34A1B4C5F6475F320C275E63AFCE9B, 31295D5121C0C3F2085E0EEBA260EEE4CA003993C026E2F81986D19158036E6B ] partmgr         C:\Windows\system32\drivers\partmgr.sys

23:30:07.0852 0x0ef4  partmgr - ok

23:30:07.0867 0x0ef4  [ EB0A59F29C19B86479D36B35983DAADC, AC09AFE7F13BE4079D01383BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm          C:\Windows\system32\DRIVERS\parvdm.sys

23:30:07.0914 0x0ef4  Parvdm - ok

23:30:07.0945 0x0ef4  [ 52954BE460EC6C54C0ACB2B3B126FFC6, 9F9878EC5ABC74C5A8EE8E1D940F0934F081895B07D844F42F80A638FE713F7B ] PcaSvc          C:\Windows\System32\pcasvc.dll

23:30:07.0992 0x0ef4  PcaSvc - ok

23:30:08.0008 0x0ef4  [ 673E55C3498EB970088E812EA820AA8F, 1F81315664B8CBFDD569416C0ECCE4C6251F34577313A0858AB46609781303B5 ] pci             C:\Windows\system32\drivers\pci.sys

23:30:08.0039 0x0ef4  pci - ok

23:30:08.0086 0x0ef4  [ AFE86F419014DB4E5593F69FFE26CE0A, CAF36E61BE7B511D3A03A65FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide          C:\Windows\system32\drivers\pciide.sys

23:30:08.0132 0x0ef4  pciide - ok

23:30:08.0179 0x0ef4  [ F396431B31693E71E8A80687EF523506, BC614FC21E029E2497F1CCE3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys

23:30:08.0226 0x0ef4  pcmcia - ok

23:30:08.0304 0x0ef4  [ 250F6B43D2B613172035C6747AEEB19F, A91F15B133F2619912CF750E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw             C:\Windows\system32\drivers\pcw.sys

23:30:08.0335 0x0ef4  pcw - ok

23:30:08.0444 0x0ef4  [ AEBC369F7DC72AB3F5B9BDF34FA0D43F, 2A819154AC6C23E97C583D90B4D0C112188B7AE9D8D9B3F88811BFCED124E551 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

23:30:08.0554 0x0ef4  PEAUTH - ok

23:30:08.0663 0x0ef4  [ 414BBA67A3DED1D28437EB66AEB8A720, D6DF254E2615FA402044824DCD9004F579FC0DF74B90E44C99D5F0253CF8AD88 ] pla             C:\Windows\system32\pla.dll

23:30:08.0866 0x0ef4  pla - ok

23:30:08.0912 0x0ef4  [ EC7BC28D207DA09E79B3E9FAF8B232CA, A42F8F69C3CD753D787A5D558659DEA2CC306C896D75B8C82549219CF654504F ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

23:30:09.0006 0x0ef4  PlugPlay - ok

23:30:09.0022 0x0ef4  [ 63FF8572611249931EB16BB8EED6AFC8, 9732CCBCB93A7A4BEC88812B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

23:30:09.0068 0x0ef4  PNRPAutoReg - ok

23:30:09.0100 0x0ef4  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

23:30:09.0131 0x0ef4  PNRPsvc - ok

23:30:09.0178 0x0ef4  [ 53946B69BA0836BD95B03759530C81EC, 7F14A34635354CCA0F5342C8D9DF5A6AA1B94F6A508BD8834029E9BACF252920 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

23:30:09.0287 0x0ef4  PolicyAgent - ok

23:30:09.0334 0x0ef4  [ F87D30E72E03D579A5199CCB3831D6EA, B09328E89954584F97908FA5946376BA990B8C650DABCBF3CA3B08719937C694 ] Power           C:\Windows\system32\umpo.dll

23:30:09.0396 0x0ef4  Power - ok

23:30:09.0427 0x0ef4  [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

23:30:09.0505 0x0ef4  PptpMiniport - ok

23:30:09.0521 0x0ef4  [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB04007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor       C:\Windows\system32\DRIVERS\processr.sys

23:30:09.0568 0x0ef4  Processor - ok

23:30:09.0583 0x0ef4  Profos - ok

23:30:09.0630 0x0ef4  [ FD9692A3D31E021207D3C2A9DDDC2BE3, 5295EFAD9BD4B59996935A41825392C12A4C968D161BEEA37797F90AF8E54229 ] ProfSvc         C:\Windows\system32\profsvc.dll

23:30:09.0692 0x0ef4  ProfSvc - ok

23:30:09.0708 0x0ef4  [ 981CE3E3A653511799F4A862494B66A8, 414D975387A118535E39636413969A7D4C98A85E542A44B8FA515C8A20D6093F ] ProtectedStorage C:\Windows\system32\lsass.exe

23:30:09.0724 0x0ef4  ProtectedStorage - ok

23:30:09.0755 0x0ef4  [ 6270CCAE2A86DE6D146529FE55B3246A, 463209CBAF1B0E269DC8FC6FBDEE5BB7E5ADB5D3F024930BFD0B97E0A9678883 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

23:30:09.0833 0x0ef4  Psched - ok

23:30:09.0911 0x0ef4  [ A6A7AD767BF5141665F5C675F671B3E1, 11D43F732C3B82679E53516F83E675B60B0EFEDE3F4EE3C42AC752AD8D5155AF ] PSI_SVC_2       c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe

23:30:09.0958 0x0ef4  PSI_SVC_2 - ok

23:30:10.0036 0x0ef4  [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys

23:30:10.0145 0x0ef4  ql2300 - ok

23:30:10.0176 0x0ef4  [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F9968222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys

23:30:10.0223 0x0ef4  ql40xx - ok

23:30:10.0254 0x0ef4  [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE           C:\Windows\system32\qwave.dll

23:30:10.0332 0x0ef4  QWAVE - ok

23:30:10.0348 0x0ef4  [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

23:30:10.0394 0x0ef4  QWAVEdrv - ok

23:30:10.0426 0x0ef4  [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB1689B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

23:30:10.0488 0x0ef4  RasAcd - ok

23:30:10.0504 0x0ef4  [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

23:30:10.0566 0x0ef4  RasAgileVpn - ok

23:30:10.0597 0x0ef4  [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto         C:\Windows\System32\rasauto.dll

23:30:10.0660 0x0ef4  RasAuto - ok

23:30:10.0675 0x0ef4  [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

23:30:10.0738 0x0ef4  Rasl2tp - ok

23:30:10.0784 0x0ef4  [ CB9E04DC05EACF5B9A36CA276D475006, 4D8C0AEF1D4F84F375AD2BAF786C9F6C52316A3E655B913449E71AD7C0FCA56E ] RasMan          C:\Windows\System32\rasmans.dll

23:30:10.0862 0x0ef4  RasMan - ok

23:30:10.0894 0x0ef4  [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

23:30:10.0972 0x0ef4  RasPppoe - ok

23:30:11.0018 0x0ef4  [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

23:30:11.0065 0x0ef4  RasSstp - ok

23:30:11.0096 0x0ef4  [ D528BC58A489409BA40334EBF96A311B, C71E9A4B101DB6C3183B9F97B9098D73D6FE1B12C05C2EB3CE8A8041BEE6BA61 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

23:30:11.0190 0x0ef4  rdbss - ok

23:30:11.0206 0x0ef4  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F91F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys

23:30:11.0268 0x0ef4  rdpbus - ok

23:30:11.0299 0x0ef4  [ 23DAE03F29D253AE74C44F99E515F9A1, 8FED93D10B2062F0526FE3508101F8FCF8F72DEB90AFB472EB7CBAE83A0EC430 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

23:30:11.0346 0x0ef4  RDPCDD - ok

23:30:11.0377 0x0ef4  [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BDE4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

23:30:11.0424 0x0ef4  RDPENCDD - ok

23:30:11.0440 0x0ef4  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

23:30:11.0502 0x0ef4  RDPREFMP - ok

23:30:11.0549 0x0ef4  [ CD9214A6AE17D188D17C3CF8CB9CC693, 2E16FF1F7446F0600D6519010FD05A30B94D97167C16B3E7FC396A97D8139D60 ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

23:30:11.0611 0x0ef4  RDPWD - ok

23:30:11.0658 0x0ef4  [ 518395321DC96FE2C9F0E96AC743B656, 5F6A0880B4F3EE7196259EA362DA9554B0687B0236F9A8E5CF7A4A77F01F1776 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

23:30:11.0705 0x0ef4  rdyboost - ok

23:30:11.0736 0x0ef4  [ 7B5E1419717FAC363A31CC302895217A, 048B96B127CC20833948DAE53C59886D5C725ECA7A744424A01339447D2DDC32 ] RemoteAccess    C:\Windows\System32\mprdim.dll

23:30:11.0814 0x0ef4  RemoteAccess - ok

23:30:11.0845 0x0ef4  [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40BFA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry  C:\Windows\system32\regsvc.dll

23:30:11.0954 0x0ef4  RemoteRegistry - ok

23:30:11.0970 0x0ef4  [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

23:30:12.0001 0x0ef4  RpcEptMapper - ok

23:30:12.0032 0x0ef4  [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator      C:\Windows\system32\locator.exe

23:30:12.0079 0x0ef4  RpcLocator - ok

23:30:12.0110 0x0ef4  [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] RpcSs           C:\Windows\system32\rpcss.dll

23:30:12.0157 0x0ef4  RpcSs - ok

23:30:12.0157 0x0ef4  [ 032B0D36AD92B582D869879F5AF5B928, 0F8F18A6A0A689957B886D9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

23:30:12.0235 0x0ef4  rspndr - ok

23:30:12.0298 0x0ef4  [ 417510C595075C6F1F4231D5E0E4E92D, 58BF53657E9AA48634CC1964D50FEF362BF1C015E13B0D3E2C2EF3ED6B1B71B6 ] RTL2832UBDA     C:\Windows\system32\drivers\RTL2832UBDA.sys

23:30:12.0329 0x0ef4  RTL2832UBDA - ok

23:30:12.0360 0x0ef4  [ 5FEAEF56EF51C46527DE684B93E99367, 505EA0169265830F6207BE14C8566EAAB54B013E1BAFFF451D1FD2DD7A9A8D19 ] RTL2832UUSB     C:\Windows\system32\Drivers\RTL2832UUSB.sys

23:30:12.0391 0x0ef4  RTL2832UUSB - ok

23:30:12.0422 0x0ef4  [ A883C6239C1A48A3077D113BE385BEF0, 1E27734519A1DCC200D803DC65D7704677DB8D8C4585074AF21B9794CED6F782 ] RTL2832U_IRHID  C:\Windows\system32\DRIVERS\RTL2832U_IRHID.sys

23:30:12.0438 0x0ef4  RTL2832U_IRHID - ok

23:30:12.0485 0x0ef4  [ 0516998076AD894AE7E362C3110AA071, 1C5B6A55418FE0D324AE2BD9AB9E5AAAB17F398608029E0EEAA0C0AE90040FDA ] RTL8167         C:\Windows\system32\DRIVERS\Rt86win7.sys

23:30:12.0532 0x0ef4  RTL8167 - ok

23:30:12.0578 0x0ef4  [ 51ADEF77E4C929535FD50DA153774E79, A02C501D6582DE2E450840E187285678A42087519C232AA20A7ECA1E218ED179 ] RTL8192su       C:\Windows\system32\DRIVERS\RTL8192su.sys

23:30:12.0656 0x0ef4  RTL8192su - ok

23:30:12.0672 0x0ef4  [ 981CE3E3A653511799F4A862494B66A8, 414D975387A118535E39636413969A7D4C98A85E542A44B8FA515C8A20D6093F ] SamSs           C:\Windows\system32\lsass.exe

23:30:12.0688 0x0ef4  SamSs - ok

23:30:12.0719 0x0ef4  [ 05D860DA1040F111503AC416CCEF2BCA, DAE2F37D09A5A42F945BC8E27E4EA2303521081783A80CEE7FEE7C5A1C2CFC5E ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

23:30:12.0750 0x0ef4  sbp2port - ok

23:30:12.0781 0x0ef4  [ 8FC518FFE9519C2631D37515A68009C4, 21E10585470CF9FC3BD1977F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr        C:\Windows\System32\SCardSvr.dll

23:30:12.0828 0x0ef4  SCardSvr - ok

23:30:12.0859 0x0ef4  [ 0693B5EC673E34DC147E195779A4DCF6, AF1B56FBF3ADABF94CD9DBA67586B8746DE135151F6B3D1B0EE315BC1E2DB670 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

23:30:12.0922 0x0ef4  scfilter - ok

23:30:12.0968 0x0ef4  [ A04BB13F8A72F8B6E8B4071723E4E336, E63287FF71C39CBF64C3347C455324C8437F9CF398153E269543588B65389502 ] Schedule        C:\Windows\system32\schedsvc.dll

23:30:13.0046 0x0ef4  Schedule - ok

23:30:13.0062 0x0ef4  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] SCPolicySvc     C:\Windows\System32\certprop.dll

23:30:13.0093 0x0ef4  SCPolicySvc - ok

23:30:13.0124 0x0ef4  [ 08236C4BCE5EDD0A0318A438AF28E0F7, 77727F963F63C4CEC11E7AAD5FB3836179701D512CA9436C3170B9E6A4E5F888 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

23:30:13.0249 0x0ef4  SDRSVC - ok

23:30:13.0327 0x0ef4  [ 4A5809A1D796E2675AC0332BF7B0CB11, 7EEEC85A397F04A9460DC37A070D115E19114D9A3E5D9D7E8021F60A7986C8C1 ] SeaPort         C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

23:30:13.0358 0x0ef4  SeaPort - ok

23:30:13.0390 0x0ef4  [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

23:30:13.0452 0x0ef4  secdrv - ok

23:30:13.0468 0x0ef4  [ A59B3A4442C52060CC7A85293AA3546F, 1776D6DEE51991149265AAF39E17065E301C5FA1FF4068653DC0010B9B27185D ] seclogon        C:\Windows\system32\seclogon.dll

23:30:13.0530 0x0ef4  seclogon - ok

23:30:13.0546 0x0ef4  [ DCB7FCDCC97F87360F75D77425B81737, F8289AF2C458C167038EEFE613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS            C:\Windows\System32\sens.dll

23:30:13.0608 0x0ef4  SENS - ok

23:30:13.0624 0x0ef4  [ 50087FE1EE447009C9CC2997B90DE53F, B5E6CF1D991F87C29C5E28198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc        C:\Windows\system32\sensrsvc.dll

23:30:13.0702 0x0ef4  SensrSvc - ok

23:30:13.0733 0x0ef4  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1, E2F019BCD1446236D078D46065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys

23:30:13.0764 0x0ef4  Serenum - ok

23:30:13.0795 0x0ef4  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA949DB97595CC32332D9321DF68283BFC102E66D766F ] Serial          C:\Windows\system32\DRIVERS\serial.sys

23:30:13.0858 0x0ef4  Serial - ok

23:30:13.0873 0x0ef4  [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys

23:30:13.0904 0x0ef4  sermouse - ok

23:30:13.0936 0x0ef4  [ 4AE380F39A0032EAB7DD953030B26D28, C8F5F2DD59574E966FDF3057867BB959A554BAB6FD5DC6F1427094A6BC2B2809 ] SessionEnv      C:\Windows\system32\sessenv.dll

23:30:14.0029 0x0ef4  SessionEnv - ok

23:30:14.0045 0x0ef4  [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206EE7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

23:30:14.0123 0x0ef4  sffdisk - ok

23:30:14.0138 0x0ef4  [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

23:30:14.0170 0x0ef4  sffp_mmc - ok

23:30:14.0185 0x0ef4  [ 6D4CCAEDC018F1CF52866BBBAA235982, AAC41F5C97B3FE5A3DC0838457EB8CC9BB71FCA16D3EDBB67D603F0A9D46C131 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

23:30:14.0248 0x0ef4  sffp_sd - ok

23:30:14.0279 0x0ef4  [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys

23:30:14.0326 0x0ef4  sfloppy - ok

23:30:14.0357 0x0ef4  [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess    C:\Windows\System32\ipnathlp.dll

23:30:14.0466 0x0ef4  SharedAccess - ok

23:30:14.0513 0x0ef4  [ 414DA952A35BF5D50192E28263B40577, 9C9BAFB9880DA6CC728506A142BE124E186219610DCC3460657A3CA93C865DF1 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

23:30:14.0575 0x0ef4  ShellHWDetection - ok

23:30:14.0606 0x0ef4  [ 2565CAC0DC9FE0371BDCE60832582B2E, 1A775214E86B83C2F1799F12D71077D81C89AD32734A248BA88787B7F104B79D ] sisagp          C:\Windows\system32\drivers\sisagp.sys

23:30:14.0638 0x0ef4  sisagp - ok

23:30:14.0669 0x0ef4  [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCBFFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys

23:30:14.0731 0x0ef4  SiSRaid2 - ok

23:30:14.0747 0x0ef4  [ 3727097B55738E2F554972C3BE5BC1AA, 75D52A596A298C33EC79A3B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys

23:30:14.0809 0x0ef4  SiSRaid4 - ok

23:30:14.0856 0x0ef4  [ 3E21C083B8A01CB70BA1F09303010FCE, 803F8F91299C387110F34A49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

23:30:14.0950 0x0ef4  Smb - ok

23:30:14.0996 0x0ef4  [ 6A984831644ECA1A33FFEAE4126F4F37, 753E23D2B33D47C52C05D892B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

23:30:15.0028 0x0ef4  SNMPTRAP - ok

23:30:15.0028 0x0ef4  [ 95CF1AE7527FB70F7816563CBC09D942, CE8BACB91A5A86CBCE82619C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr           C:\Windows\system32\drivers\spldr.sys

23:30:15.0059 0x0ef4  spldr - ok

23:30:15.0121 0x0ef4  [ 9AEA093B8F9C37CF45538382CABA2475, CC63239C412067AA72318ADB8BB80BCDF2CA60DA05D814D32753C92508BC16A8 ] Spooler         C:\Windows\System32\spoolsv.exe

23:30:15.0199 0x0ef4  Spooler - ok

23:30:15.0371 0x0ef4  [ CF87A1DE791347E75B98885214CED2B8, 7AF4E03D751C951A4E5FBA28200DABFE6B3BF055490163EEEEA84EBA4D0F368A ] sppsvc          C:\Windows\system32\sppsvc.exe

23:30:15.0652 0x0ef4  sppsvc - ok

23:30:15.0683 0x0ef4  [ B0180B20B065D89232A78A40FE56EAA6, 4D045B23AD58A8822BE9F20119744A8D47455469D54494745CEB099951DA60FF ] sppuinotify     C:\Windows\system32\sppuinotify.dll

23:30:15.0745 0x0ef4  sppuinotify - ok

23:30:15.0792 0x0ef4  [ E4C2764065D66EA1D2D3EBC28FE99C46, 043AEF06A23069DD17675955C834690A5FD8F1948A05B3969F977E823C4E25F5 ] srv             C:\Windows\system32\DRIVERS\srv.sys

23:30:15.0886 0x0ef4  srv - ok

23:30:15.0917 0x0ef4  [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB, 4DF31206DF8F33C2975E23C7257ED930C4EDA8BC4E246D8FDA130BB583083ED0 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

23:30:16.0010 0x0ef4  srv2 - ok

23:30:16.0026 0x0ef4  [ BE6BD660CAA6F291AE06A718A4FA8ABC, CD38939CFBA80B882D38099194FC1EBAE15A9D27A4D941DD03C55EC745E52E59 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

23:30:16.0088 0x0ef4  srvnet - ok

23:30:16.0104 0x0ef4  [ D887C9FD02AC9FA880F6E5027A43E118, F38BAD90EC791368C37C21090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

23:30:16.0182 0x0ef4  SSDPSRV - ok

23:30:16.0244 0x0ef4  [ A36EE93698802CD899F98BFD553D8185, 224CFED921EA230FF8025D259E34968FD2C0FD34BB3A918FB4B9B8BA42BEA5D3 ] ssmdrv          C:\Windows\system32\DRIVERS\ssmdrv.sys

23:30:16.0260 0x0ef4  ssmdrv - ok

23:30:16.0276 0x0ef4  [ D318F23BE45D5E3A107469EB64815B50, D74355E6FF215AA8CE53BC9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc         C:\Windows\system32\sstpsvc.dll

23:30:16.0322 0x0ef4  SstpSvc - ok

23:30:16.0338 0x0ef4  [ DB32D325C192B801DF274BFD12A7E72B, F089DBA719E22BC269720A6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys

23:30:16.0369 0x0ef4  stexstor - ok

23:30:16.0416 0x0ef4  [ E1FB3706030FB4578A0D72C2FC3689E4, A62EC9AA4514CAF2A10C0A3AEF7A36F593A7E7DA370A3F130C24E1B612E19427 ] StiSvc          C:\Windows\System32\wiaservc.dll

23:30:16.0494 0x0ef4  StiSvc - ok

23:30:16.0525 0x0ef4  [ E58C78A848ADD9610A4DB6D214AF5224, 1575A90EB22A4FB066459BDA00C6CAC10198C3C8C74493721EC6D34B51F50426 ] swenum          C:\Windows\system32\drivers\swenum.sys

23:30:16.0572 0x0ef4  swenum - ok

23:30:16.0603 0x0ef4  [ A28BD92DF340E57B024BA433165D34D7, 889CC7FF143C3549982128473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv           C:\Windows\System32\swprv.dll

23:30:16.0697 0x0ef4  swprv - ok

23:30:16.0759 0x0ef4  [ 36650D618CA34C9D357DFD3D89B2C56F, 7C3774E53DCF32CB3A4B3504E32D2A651E18467FA0A6AC4C7993C696741B704B ] SysMain         C:\Windows\system32\sysmain.dll

23:30:16.0837 0x0ef4  SysMain - ok

23:30:16.0884 0x0ef4  [ 763FECDC3D30C815FE72DD57936C6CD1, 1A62C7E63E426D56894F4121C75D9C60FC9A14469ADBD0D6F0B94B8DE48CDA3E ] TabletInputService C:\Windows\System32\TabSvc.dll

23:30:16.0946 0x0ef4  TabletInputService - ok

23:30:16.0978 0x0ef4  [ 613BF4820361543956909043A265C6AC, FCFF02E466D2501630B452627FB218C01E5245A0921EE3D2117E7FD63AC7E98E ] TapiSrv         C:\Windows\System32\tapisrv.dll

23:30:17.0040 0x0ef4  TapiSrv - ok

23:30:17.0040 0x0ef4  [ B799D9FDB26111737F58288D8DC172D9, 409A60819A4305699E2E492A6190637FAAEBD19E745A5DB2A5D6977106C86591 ] TBS             C:\Windows\System32\tbssvc.dll

23:30:17.0134 0x0ef4  TBS - ok

23:30:17.0227 0x0ef4  [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

23:30:17.0368 0x0ef4  Tcpip - ok

23:30:17.0446 0x0ef4  [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

23:30:17.0508 0x0ef4  TCPIP6 - ok

23:30:17.0570 0x0ef4  [ 3EEBD3BD93DA46A26E89893C7AB2FF3B, 2C7204DCD2BCBC6A250FF0F6477616F327AF41FDB7CABE69E5C357361009FB4E ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

23:30:17.0617 0x0ef4  tcpipreg - ok

23:30:17.0664 0x0ef4  [ 1CB91B2BD8F6DD367DFC2EF26FD751B2, 879E2827354BB21573AC6A7CCEB746D44214540687E6882FFCB4089546FBD954 ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

23:30:17.0742 0x0ef4  TDPIPE - ok

23:30:17.0758 0x0ef4  [ 2C2C5AFE7EE4F620D69C23C0617651A8, E828D974C3F9D7004A030C3AD448096C736FDB4C4C1707D043E567D08C845103 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

23:30:17.0804 0x0ef4  TDTCP - ok

23:30:17.0820 0x0ef4  [ 7FE680A3DFA421C4A8E4879AE4C5AAB0, A4C64E155AB2843823CD3586756BA7681CFDEA50812095468221503BBAD30DCD ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

23:30:17.0882 0x0ef4  tdx - ok

23:30:17.0898 0x0ef4  [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20, 0D81B427720637882077C5024D738191F858FC734ED040697872D906351EF663 ] TermDD          C:\Windows\system32\drivers\termdd.sys

23:30:17.0929 0x0ef4  TermDD - ok

23:30:17.0976 0x0ef4  [ FCFD4F50419B4BC72E80066DA10D2E54, 7C2314A57A404525F0444986332DBAE0964A3359374671598387051D7AAE72AE ] TermService     C:\Windows\System32\termsrv.dll

23:30:18.0070 0x0ef4  TermService - ok

23:30:18.0085 0x0ef4  [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED490B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes          C:\Windows\system32\themeservice.dll

23:30:18.0163 0x0ef4  Themes - ok

23:30:18.0179 0x0ef4  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER     C:\Windows\system32\mmcss.dll

23:30:18.0226 0x0ef4  THREADORDER - ok

23:30:18.0257 0x0ef4  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks          C:\Windows\System32\trkwks.dll

23:30:18.0335 0x0ef4  TrkWks - ok

23:30:18.0397 0x0ef4  [ 2C49B175AEE1D4364B91B531417FE583, 6C7995E18F84E465C376D1D5F153C15ACB66CDEA86EE5BF186677F572E7E129B ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

23:30:18.0491 0x0ef4  TrustedInstaller - ok

23:30:18.0522 0x0ef4  [ 6C5139E4283249518F7743D7043775B3, 58684E8C90EBAC65459A97C905CDCFE3A915CFF7E8E96071DE1AC3489F85E67F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

23:30:18.0569 0x0ef4  tssecsrv - ok

23:30:18.0631 0x0ef4  [ FD1D6C73E6333BE727CBCC6054247654, 6F7B9AE1A5986204DB3348D13B303F30FC17624939DA74D6BD114FAEED0FB30E ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys

23:30:18.0725 0x0ef4  TsUsbFlt - ok

23:30:18.0740 0x0ef4  [ B2FA25D9B17A68BB93D58B0556E8C90D, 0146931B733CAB1CD87F94C35F97E110D6ED6C55EAFF03345400A29AEDE99BDE ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

23:30:18.0834 0x0ef4  tunnel - ok

23:30:18.0865 0x0ef4  [ 750FBCB269F4D7DD2E420C56B795DB6D, E1A95C59148FE463539C34336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys

23:30:18.0881 0x0ef4  uagp35 - ok

23:30:18.0912 0x0ef4  [ EE43346C7E4B5E63E54F927BABBB32FF, BAD6FC3BEE45E644D5A6A0A31428F5B2AEC72A0AA0C74EF8177B1FE23EEF3AA9 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

23:30:19.0021 0x0ef4  udfs - ok

23:30:19.0052 0x0ef4  [ 8344FD4FCE927880AA1AA7681D4927E5, 1B54EFA60A221E2B9FFE59BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect       C:\Windows\system32\UI0Detect.exe

23:30:19.0099 0x0ef4  UI0Detect - ok

23:30:19.0130 0x0ef4  [ 44E8048ACE47BEFBFDC2E9BE4CBC8880, 5D96D90FDF68AE470CC92CA9DF9DA2C05A53EF455A5A109DBBF7C96F3238257C ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

23:30:19.0177 0x0ef4  uliagpkx - ok

23:30:19.0208 0x0ef4  [ D295BED4B898F0FD999FCFA9B32B071B, D4130DB4AE76EE6DC0B8E7A4FEF5CB8B26EBD822C21021F6FA78FD29C1E211C2 ] umbus           C:\Windows\system32\drivers\umbus.sys

23:30:19.0255 0x0ef4  umbus - ok

23:30:19.0286 0x0ef4  [ 7550AD0C6998BA1CB4843E920EE0FEAC, 24C001E422C3B3B920CDCF6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys

23:30:19.0333 0x0ef4  UmPass - ok

23:30:19.0364 0x0ef4  [ 833FBB672460EFCE8011D262175FAD33, C0C3067A305993CBF056C229771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost        C:\Windows\System32\upnphost.dll

23:30:19.0442 0x0ef4  upnphost - ok

23:30:19.0474 0x0ef4  [ 83CAFCB53201BBAC04D822F32438E244, E3F6FDE4D429FB630B19417DD9752A2CE9F6C9FD58918D714B5438A3D4136853 ] USBAAPL         C:\Windows\system32\Drivers\usbaapl.sys

23:30:19.0520 0x0ef4  USBAAPL - ok

23:30:19.0567 0x0ef4  [ 0803FBA9FE829D61AE26EC0BCC910C46, 30D00E2C7DFC630C99C1599587D4F9C272BC30D444E07C961AA05BF84587806B ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

23:30:19.0630 0x0ef4  usbccgp - ok

23:30:19.0676 0x0ef4  [ 2352AB5F9F8F097BF9D41D5A4718A041, 25BC7828C625B9B2A5110C25B230C5828CEC18EC97ECF9EC4745E8930CBF472C ] usbcir          C:\Windows\system32\drivers\usbcir.sys

23:30:19.0739 0x0ef4  usbcir - ok

23:30:19.0786 0x0ef4  [ D40855F89B69305140BBD7E9A3BA2DA6, 745DC6D770666F6B19C2B6AA89C21D1A314732E291453BFA2367F9AF86F97C3C ] usbehci         C:\Windows\system32\drivers\usbehci.sys

23:30:19.0848 0x0ef4  usbehci - ok

23:30:19.0942 0x0ef4  [ EDF2DF71C4F1E13A6AC75F5224DE655A, 1764D155C6B99201774B57195349304259232A12868ECFC2069CA49443EBDC2C ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

23:30:20.0004 0x0ef4  usbhub - ok

23:30:20.0035 0x0ef4  [ 9828C8D14CC2676421778F0DE638CF97, 479A28211FFB85190A01FAB0283B927588805D2C0CDB03F85F8F814B88E4F453 ] usbohci         C:\Windows\system32\drivers\usbohci.sys

23:30:20.0098 0x0ef4  usbohci - ok

23:30:20.0129 0x0ef4  [ 797D862FE0875E75C7CC4C1AD7B30252, 1BBE745E4C85F8911076F6032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

23:30:20.0191 0x0ef4  usbprint - ok

23:30:20.0207 0x0ef4  [ FC6B21DB4B5B398AB93DBE59CBF11036, A94094C208F376405C07822A6143001EF1B12AE93205CD8002E87F6EB45F6374 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys

23:30:20.0285 0x0ef4  usbscan - ok

23:30:20.0300 0x0ef4  [ F991AB9CC6B908DB552166768176896A, AD8E7A16B23B244B7F834622D4E38B5844193C6E31EF96F61E0E2EA16C945026 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

23:30:20.0394 0x0ef4  USBSTOR - ok

23:30:20.0441 0x0ef4  [ 800AABFD625EEFF899F7E5496BDE37AB, 3EB7ED07760CB348FCA9A06C2B838EF79B51A83C5F70A9C9EAAEAE54480067E2 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys

23:30:20.0488 0x0ef4  usbuhci - ok

23:30:20.0519 0x0ef4  [ 081E6E1C91AEC36758902A9F727CD23C, 9FDAA17A3B99067E035E5D76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms           C:\Windows\System32\uxsms.dll

23:30:20.0597 0x0ef4  UxSms - ok

23:30:20.0612 0x0ef4  [ 981CE3E3A653511799F4A862494B66A8, 414D975387A118535E39636413969A7D4C98A85E542A44B8FA515C8A20D6093F ] VaultSvc        C:\Windows\system32\lsass.exe

23:30:20.0644 0x0ef4  VaultSvc - ok

23:30:20.0690 0x0ef4  [ A059C4C3EDB09E07D21A8E5C0AABD3CB, BDD3729B49DF2E2FC72FFEF9D10235B481A671DE5A721B6B9A80873B7A343F07 ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

23:30:20.0753 0x0ef4  vdrvroot - ok

23:30:20.0831 0x0ef4  [ C3CD30495687C2A2F66A65CA6FD89BE9, 582E4706C1D6A151020D14B26C7BF166F4E42BDD6E410F30EC452469270C5E9B ] vds             C:\Windows\System32\vds.exe

23:30:20.0924 0x0ef4  vds - ok

23:30:20.0971 0x0ef4  [ 17C408214EA61696CEC9C66E388B14F3, 829C0416672E2B2DFABCFE641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

23:30:21.0018 0x0ef4  vga - ok

23:30:21.0049 0x0ef4  [ 8E38096AD5C8570A6F1570A61E251561, 4DBA3C1397A2203548F45F006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave         C:\Windows\System32\drivers\vga.sys

23:30:21.0112 0x0ef4  VgaSave - ok

23:30:21.0127 0x0ef4  [ 5461686CCA2FDA57B024547733AB42E3, 2721D0659AA890172FCAD4EC4D926B58ACD0EE4887DA51545DC7237420D5BF84 ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys

23:30:21.0174 0x0ef4  vhdmp - ok

23:30:21.0205 0x0ef4  [ C829317A37B4BEA8F39735D4B076E923, 55D1796AE750071E1E05BD7702B6C355CCFFE27B4C00E93E7044C3184732B497 ] viaagp          C:\Windows\system32\drivers\viaagp.sys

23:30:21.0236 0x0ef4  viaagp - ok

23:30:21.0268 0x0ef4  [ E02F079A6AA107F06B16549C6E5C7B74, B530DCE3EE4F285B3D5F69F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7           C:\Windows\system32\DRIVERS\viac7.sys

23:30:21.0299 0x0ef4  ViaC7 - ok

23:30:21.0314 0x0ef4  [ E43574F6A56A0EE11809B48C09E4FD3C, 3687BF638E21C00E62ABFED70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide          C:\Windows\system32\drivers\viaide.sys

23:30:21.0377 0x0ef4  viaide - ok

23:30:21.0392 0x0ef4  [ 4C63E00F2F4B5F86AB48A58CD990F212, 9796BD4B9CFEEEAF57C5E332A732EFC2770B21F9B35301A5D202F5FC52C1E035 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

23:30:21.0439 0x0ef4  volmgr - ok

23:30:21.0470 0x0ef4  [ B5BB72067DDDDBBFB04B2F89FF8C3C87, 65B9AD55F43940A5FDD88B6EC5034A7E375DF8E6F5F1AE6519A4BD6B7E992EBC ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

23:30:21.0533 0x0ef4  volmgrx - ok

23:30:21.0564 0x0ef4  [ F497F67932C6FA693D7DE2780631CFE7, DAE544ED99D2CF570DA31343BD87D2F856D0D13529656D38E1BF854C77F017F6 ] volsnap         C:\Windows\system32\drivers\volsnap.sys

23:30:21.0626 0x0ef4  volsnap - ok

23:30:21.0689 0x0ef4  [ 9DFA0CC2F8855A04816729651175B631, 37FD9E43A2A3F125E94A315FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys

23:30:21.0720 0x0ef4  vsmraid - ok

23:30:21.0814 0x0ef4  [ 209A3B1901B83AEB8527ED211CCE9E4C, 1A431F6409F8E0531F600F8F988ECECECB902DA26BBAAF1DE74A5CAC29A7CB44 ] VSS             C:\Windows\system32\vssvc.exe

23:30:22.0016 0x0ef4  VSS - ok

23:30:22.0048 0x0ef4  [ 90567B1E658001E79D7C8BBD3DDE5AA6, EFC23BEEA7F54A2DC56CB523DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys

23:30:22.0094 0x0ef4  vwifibus - ok

23:30:22.0126 0x0ef4  [ 7090D3436EEB4E7DA3373090A23448F7, 3A130B28F2BFA7DCEC8596C4CE4E187B019F5ECF1AAC8DD1BBDE9CBD2428FEC2 ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys

23:30:22.0188 0x0ef4  vwififlt - ok

23:30:22.0219 0x0ef4  [ A3F04CBEA6C2A10E6CB01F8B47611882, 32AFE18B07FECA30BC95831A5DC94C784E543784DF16165334A777DC84E91EF3 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys

23:30:22.0282 0x0ef4  vwifimp - ok

23:30:22.0328 0x0ef4  [ 55187FD710E27D5095D10A472C8BAF1C, AE298E2D3BA366BCBDC092C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time         C:\Windows\system32\w32time.dll

23:30:22.0438 0x0ef4  W32Time - ok

23:30:22.0453 0x0ef4  [ DE3721E89C653AA281428C8A69745D90, 501C78056ED4295625D8A5412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys

23:30:22.0500 0x0ef4  WacomPen - ok

23:30:22.0531 0x0ef4  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

23:30:22.0609 0x0ef4  WANARP - ok

23:30:22.0625 0x0ef4  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

23:30:22.0672 0x0ef4  Wanarpv6 - ok

23:30:22.0750 0x0ef4  [ 691E3285E53DCA558E1A84667F13E15A, 12EDB66EF8FC100402BEA221F354D3BD5542F6DDF715B6E7D873D6BAE7E3D329 ] wbengine        C:\Windows\system32\wbengine.exe

23:30:22.0937 0x0ef4  wbengine - ok

23:30:22.0968 0x0ef4  [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E862DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

23:30:23.0046 0x0ef4  WbioSrvc - ok

23:30:23.0093 0x0ef4  [ 34EEE0DFAADB4F691D6D5308A51315DC, A040A03E25A0C78B9E26F86C2DF95BCAF8E7EC90183CEB295615D3265350EBEE ] wcncsvc         C:\Windows\System32\wcncsvc.dll

23:30:23.0171 0x0ef4  wcncsvc - ok

23:30:23.0186 0x0ef4  [ 5D930B6357A6D2AF4D7653BDABBF352F, 677FF2ED14EE0B0CAA710DA81556CC16D5971DAB10E7C7432D167A87CA6F0EAA ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

23:30:23.0280 0x0ef4  WcsPlugInService - ok

23:30:23.0280 0x0ef4  [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E6945FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd              C:\Windows\system32\DRIVERS\wd.sys

23:30:23.0311 0x0ef4  Wd - ok

23:30:23.0374 0x0ef4  [ 25944D2CC49E0A6C581D02A74B7D6645, AF8FFAFEC07F1A6A3D4008E609E8E1D705A8DFCC7995C766E3946887203F7BEE ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

23:30:23.0483 0x0ef4  Wdf01000 - ok

23:30:23.0498 0x0ef4  [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiServiceHost  C:\Windows\system32\wdi.dll

23:30:23.0561 0x0ef4  WdiServiceHost - ok

23:30:23.0576 0x0ef4  [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiSystemHost   C:\Windows\system32\wdi.dll

23:30:23.0592 0x0ef4  WdiSystemHost - ok

23:30:23.0654 0x0ef4  [ 75E8EBD7040CE238684333F97014762A, 2CA0B267FBAEB303D1F8B639D733DC0DE17BA1276CC9096035B4F2BBBED3EF7F ] WebClient       C:\Windows\System32\webclnt.dll

23:30:23.0717 0x0ef4  WebClient - ok

23:30:23.0732 0x0ef4  [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F16B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc          C:\Windows\system32\wecsvc.dll

23:30:23.0826 0x0ef4  Wecsvc - ok

23:30:23.0842 0x0ef4  [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

23:30:23.0935 0x0ef4  wercplsupport - ok

23:30:23.0966 0x0ef4  [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76DA6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc          C:\Windows\System32\WerSvc.dll

23:30:24.0029 0x0ef4  WerSvc - ok

23:30:24.0091 0x0ef4  [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

23:30:24.0154 0x0ef4  WfpLwf - ok

23:30:24.0169 0x0ef4  [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

23:30:24.0200 0x0ef4  WIMMount - ok

23:30:24.0278 0x0ef4  [ 082CF481F659FAE0DE51AD060881EB47, BB67D2AF0BB9192D4CCF66C23D80CE5A1B38715556D94E2561DBF8F805FA30A5 ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll

23:30:24.0372 0x0ef4  WinDefend - ok

23:30:24.0403 0x0ef4  WinHttpAutoProxySvc - ok

23:30:24.0450 0x0ef4  [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320CFBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

23:30:24.0544 0x0ef4  Winmgmt - ok

23:30:24.0637 0x0ef4  [ 1DE9BD23AFA36150586C732D876D9B74, 32CF2C8EC18CFDA677AB72A182EB4B839DCC72BFCD6CA309BE2F434991CAE973 ] WinRM           C:\Windows\system32\WsmSvc.dll

23:30:24.0824 0x0ef4  WinRM - ok

23:30:24.0871 0x0ef4  [ A67E5F9A400F3BD1BE3D80613B45F708, E170A8BD31A779403DC9C43ED6483DA8E186512D3EE700B87F6BA292E284E367 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys

23:30:24.0918 0x0ef4  WinUsb - ok

23:30:24.0980 0x0ef4  [ 16935C98FF639D185086A3529B1F2067, E9C6B73A572A04FCE9B1B0E6815F941B10332D9A6D55B92927C2B1275F119091 ] Wlansvc         C:\Windows\System32\wlansvc.dll

23:30:25.0058 0x0ef4  Wlansvc - ok

23:30:25.0090 0x0ef4  [ 0217679B8FCA58714C3BF2726D2CA84E, 4494984B922DCF24D37BCD0E6831CEBD07D1CA49235D04E821D17ED3DF84ED2A ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys

23:30:25.0121 0x0ef4  WmiAcpi - ok

23:30:25.0168 0x0ef4  [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062ADBB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

23:30:25.0214 0x0ef4  wmiApSrv - ok

23:30:25.0355 0x0ef4  [ 3B40D3A61AA8C21B88AE57C58AB3122E, 6C67DCB007C3CDF2EB0BBF5FD89C32CD7800C20F7166872F8C387BE262C5CD21 ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe

23:30:25.0495 0x0ef4  WMPNetworkSvc - ok

23:30:25.0511 0x0ef4  [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC449D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc          C:\Windows\System32\wpcsvc.dll

23:30:25.0604 0x0ef4  WPCSvc - ok

23:30:25.0636 0x0ef4  [ AA53356D60AF47EACC85BC617A4F3F66, 155CB8112AA382D841C1891750FF29EF4F1BF716CD9CDF0F2243209E2CCCAC98 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

23:30:25.0698 0x0ef4  WPDBusEnum - ok

23:30:25.0729 0x0ef4  [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BCEF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

23:30:25.0807 0x0ef4  ws2ifsl - ok

23:30:25.0838 0x0ef4  [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc          C:\Windows\System32\wscsvc.dll

23:30:25.0885 0x0ef4  wscsvc - ok

23:30:25.0885 0x0ef4  WSearch - ok

23:30:26.0041 0x0ef4  [ 7E5C454A3F986FEBAD075DB8D915917E, 9E9147DDACD075958689523130DB92FC4ED0E38433461D8AB8792BCFBD9376DA ] wuauserv        C:\Windows\system32\wuaueng.dll

23:30:26.0182 0x0ef4  wuauserv - ok

23:30:26.0228 0x0ef4  [ 06E6F32C8D0A3F66D956F57B43A2E070, 9A6BD96A28294B0372F16E13D652FD603308F64B74A56E41E0C68C5E8011F943 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

23:30:26.0306 0x0ef4  WudfPf - ok

23:30:26.0369 0x0ef4  [ 867C301E8B790040AE9CF6486E8041DF, D867D6498C987944D99508B2FAD6D6B749FA1EDFE8124B0863D4A642352F0855 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

23:30:26.0447 0x0ef4  WUDFRd - ok

23:30:26.0478 0x0ef4  [ FE47B7BC8EA320C2D9B5E5BF6E303765, 34518DBD1E9EA6E5DA62273B18613761E1D9C6B4E074A93C6D639FBAF02222EA ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

23:30:26.0509 0x0ef4  wudfsvc - ok

23:30:26.0556 0x0ef4  [ 7CC38741B8F68F1E0D5D79DA6123666A, F90D2DA1C9AFB506C381CD386E1430931B5F81813FEDFD720F87FBC54E7A00DA ] WwanSvc         C:\Windows\System32\wwansvc.dll

23:30:26.0665 0x0ef4  WwanSvc - ok

23:30:26.0681 0x0ef4  ================ Scan global ===============================

23:30:26.0728 0x0ef4  [ DAB748AE0439955ED2FA22357533DDDB, 73EDD402C7479DDCE1998D0C7E99E1EC2974F64EFC33A851439CC85D09EDCDF9 ] C:\Windows\system32\basesrv.dll

23:30:26.0806 0x0ef4  [ 51BB04243DF6196C06E125898127E397, E1B6C83FC6E455F6806185027C5B56F8BA9ECDF1CD69E97301EC0291F0D3466E ] C:\Windows\system32\winsrv.dll

23:30:26.0837 0x0ef4  [ 51BB04243DF6196C06E125898127E397, E1B6C83FC6E455F6806185027C5B56F8BA9ECDF1CD69E97301EC0291F0D3466E ] C:\Windows\system32\winsrv.dll

23:30:26.0868 0x0ef4  [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF27E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\Windows\system32\sxssrv.dll

23:30:26.0899 0x0ef4  [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6, D7BC4ED605B32274B45328FD9914FB0E7B90D869A38F0E6F94FB1BF4E9E2B407 ] C:\Windows\system32\services.exe

23:30:26.0915 0x0ef4  [ Global ] - ok

23:30:26.0915 0x0ef4  ================ Scan MBR ==================================

23:30:26.0930 0x0ef4  [ 5D949EEA3BEEC2DF38A2D7900AD89A60 ] \Device\Harddisk0\DR0

23:30:30.0924 0x0ef4  \Device\Harddisk0\DR0 - ok

23:30:30.0924 0x0ef4  ================ Scan VBR ==================================

23:30:30.0955 0x0ef4  [ 4BA4FAB1AB1BB0938C5CE8CA9A40EC46 ] \Device\Harddisk0\DR0\Partition1

23:30:31.0018 0x0ef4  \Device\Harddisk0\DR0\Partition1 - ok

23:30:31.0049 0x0ef4  [ 6906C902F0E51AF117D14BDF3646A777 ] \Device\Harddisk0\DR0\Partition2

23:30:31.0127 0x0ef4  \Device\Harddisk0\DR0\Partition2 - ok

23:30:31.0142 0x0ef4  [ 4A6508FACEA94B9FCABE01BDC850863E ] \Device\Harddisk0\DR0\Partition3

23:30:31.0142 0x0ef4  \Device\Harddisk0\DR0\Partition3 - ok

23:30:31.0142 0x0ef4  ================ Scan generic autorun ======================

23:30:31.0236 0x0ef4  [ 25107F58D1B8F60D67D1EE95798C0DE8, C3B5205E8818576EBF33E3B9FD8664A498714B823D9128FC1CA0A64F81499263 ] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

23:30:31.0283 0x0ef4  IAStorIcon - ok

23:30:31.0626 0x0ef4  [ DC4F85C97890899E706A2D9229D95D2B, B4BEF5E2CC4A060077F68DDDCB7AAFDB0D5C320CBDEEEAC8D754D48EB6FE5390 ] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

23:30:32.0406 0x0ef4  RtHDVCpl - ok

23:30:32.0468 0x0ef4  [ D3B5015D8AE7B02284E94EA13CCBC41A, 625F2450D5ADF0C0EEDCF9F96360814D4B96304158FAF6792E42893DFEB2A671 ] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe

23:30:32.0515 0x0ef4  StartCCC - detected UnsignedFile.Multi.Generic ( 1 )

23:30:35.0120 0x0ef4  Detect skipped due to KSN trusted

23:30:35.0120 0x0ef4  StartCCC - ok

23:30:35.0214 0x0ef4  [ 51C8885B6A00904C0252704C9FB0F43A, BF2F58E6697DB10F3D6FB3859FADC2CE1D3CDD318E487E02FDC2BE171AF6CA29 ] C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

23:30:35.0292 0x0ef4  NUSB3MON - ok

23:30:35.0386 0x0ef4  [ 57B4D34232852BFE4453BE571DF90D21, 3D329499D7BCACAE5F6377F988B90714F5A8301784CDB22D5B54A2266AC50D79 ] C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe

23:30:35.0448 0x0ef4  CLMLServer - ok

23:30:35.0620 0x0ef4  [ 48BE298F7FD1BEF4D8FBACB04D8D95C4, D375B3F6E850E4B0EC81BAA0E554C356BE2248AA77C6C56F5267CA05460FE4EB ] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

23:30:35.0744 0x0ef4  Adobe ARM - ok

23:30:35.0838 0x0ef4  [ F4F7C86191A981C804326E2EF6F3604F, 1ECE05E643AFFB27A148A8B86615F6C167875EF29D6FF7E2FD15B8DCBE6B8A16 ] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe

23:30:35.0869 0x0ef4  Adobe Reader Speed Launcher - ok

23:30:36.0025 0x0ef4  [ FF473648E7B1B37C7F3249A6549FAC72, 632825038F5975415D129CCB84682243360821857D250D7827E21A08DE855BCC ] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe

23:30:36.0072 0x0ef4  hpqSRMon - detected UnsignedFile.Multi.Generic ( 1 )

23:30:40.0315 0x0ef4  Detect skipped due to KSN trusted

23:30:40.0315 0x0ef4  hpqSRMon - ok

23:30:40.0331 0x0ef4  [ C637FC4638A96165256B28D38DE7B953, CD658543610F151C7860DBDCF36596C9B5417D87E598FA50A435392D4AED1C14 ] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

23:30:40.0362 0x0ef4  HP Software Update - ok

23:30:40.0456 0x0ef4  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe

23:30:40.0643 0x0ef4  Sidebar - ok

23:30:40.0674 0x0ef4  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe

23:30:40.0736 0x0ef4  mctadmin - ok

23:30:40.0799 0x0ef4  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe

23:30:40.0877 0x0ef4  Sidebar - ok

23:30:40.0892 0x0ef4  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe

23:30:40.0924 0x0ef4  mctadmin - ok

23:30:40.0986 0x0ef4  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\sidebar.exe

23:30:41.0064 0x0ef4  Sidebar - ok

23:30:41.0111 0x0ef4  msnmsgr - ok

23:30:42.0234 0x0ef4  [ B258305816E8591DA86EE84CA05FF26A, 40CA9762C075BD292070D2237DABB81836E3067FEA47D5596EB6235DE1E80877 ] C:\Program Files\Wunderlist2\Wunderlist.exe

23:30:43.0123 0x0ef4  Wunderlist - ok

23:30:43.0139 0x0ef4  Waiting for KSN requests completion. In queue: 7

23:30:44.0153 0x0ef4  Waiting for KSN requests completion. In queue: 7

23:30:45.0167 0x0ef4  Waiting for KSN requests completion. In queue: 7

23:30:46.0259 0x0ef4  AV detected via SS2: Avira Antivirus, C:\Program Files\Avira\AntiVir Desktop\wsctool.exe ( 15.0.9.460 ), 0x41000 ( enabled : updated )

23:30:46.0290 0x0ef4  Win FW state via NFP2: enabled

23:30:48.0786 0x0ef4  ============================================================

23:30:48.0786 0x0ef4  Scan finished

23:30:48.0786 0x0ef4  ============================================================

23:30:48.0786 0x177c  Detected object count: 0

23:30:48.0786 0x177c  Actual detected object count: 0

deeprybka

07.05.2015 22:53

Kannst das PDF vielleicht hochladen?

Submit Malware Sample

Link usw. brauchst keinen angeben. Nur die PDF Datei auswählen und hochladen lassen. Das ist mein BC Channel.

Patroklos91

08.05.2015 01:26

Die PDF-Datei ist momentan nur im Anhang der Mail. Um dir die Datei zuzuschicken, müsste ich den Anhang neu öffnen und diesen dann auf meinem Rechner abspeichern. Soll ich das machen?

Ich dachte bislang, Anhänge runterladen und abspeichern sei der schlimmste Fehler!?

deeprybka

08.05.2015 08:56

Zitat:

Zitat von Patroklos91 (Beitrag 1463768)

Soll ich das machen?

Ne, ne. Will Dich nicht verängstigen. :)

Echtzeitscanner abschalten.

http://www.deeprybka.trojaner-board.de/zoek/avira.gif

Schritt 1
http://deeprybka.trojaner-board.de/b...s/combofix.pngScan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Patroklos91

08.05.2015 08:58

Hi Jürgen,

heute Morgen hat das Programm Malwarebytes Anti-Malware eigenständig einen Suchlauf gemacht und einige Elemente in die Quarantäne gesteckt. Unten schicke ich dir die zugehörige Log-Datei - aufgespalten, weil sie offenbar einzeln zu lang ist.

Bis kommenden Montag-Abend werde ich dir leider nicht antworten können. Ich melde mich dann zurück und freue mich, wenn du mir weiter zur Seite stehst.

Code:



Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlauf Datum: 08.05.2015

Suchlauf-Zeit: 08:45:52

Logdatei: Malwarebytes Anti-Malware Logdatei 08052015.txt

Administrator: Ja
 

Version: 2.01.6.1022

Malware Datenbank: v2015.05.08.01

Rootkit Datenbank: v2015.04.21.01

Lizenz: Testversion

Malware Schutz: Aktiviert

Bösartiger Webseiten Schutz: Aktiviert

Selbstschutz: Deaktiviert
 

Betriebssystem: Windows 7 Service Pack 1

CPU: x86

Dateisystem: NTFS

Benutzer: Jonas ******
 

Suchlauf-Art: Bedrohungs-Suchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 333567

Verstrichene Zeit: 27 Min, 49 Sek
 

Speicher: Aktiviert

Autostart: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Heuristik: Aktiviert

PUP: Warnen

PUM: Aktiviert
 

Prozesse: 0

(Keine schädliche Elemente gefunden)
 

Module: 0

(Keine schädliche Elemente gefunden)
 

Registrierungsschlüssel: 0

(Keine schädliche Elemente gefunden)
 

Registrierungswerte: 0

(Keine schädliche Elemente gefunden)
 

Registrierungsdaten: 0

(Keine schädliche Elemente gefunden)
 

Ordner: 206

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\APISupport, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\lib, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\options, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\tabs, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\tabs\back, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\toolbarAPI, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\mam, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\mam\scripts, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\mam\scripts\contentScripts, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\nativeMessaging, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\plugins, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\aboutBox, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\aboutBox\images, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\aboutBox\js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\res, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\api, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\msd, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\images, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\js\resources, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\sp, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\sp\js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\sp\spbd, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\sp\spbd\images, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\sp\spsd, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\sp\spsd\images, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\ftd, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\ftd\images, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\restart, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\restart\images, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\gadgetFrame, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\gf, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\gf\css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\gf\img, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\gf\js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\menu, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\menu\css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\menu\img, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\menu\js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\APPLICATION_BUTTON, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\APPLICATION_BUTTON\Js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\APPLICATION_BUTTON\resources, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\HIGHLIGHTER, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\MULTI_RSS, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\MULTI_RSS\css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\MULTI_RSS\img, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\MULTI_RSS\js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\MULTI_RSS\js\resources, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\images, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\dark, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\light, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\Optimizer, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\Optimizer\js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\PRICE_GONG, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\PRICE_GONG\agreement, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\PRICE_GONG\css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\PRICE_GONG\css\custom-theme, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\PRICE_GONG\images, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\css\custom-theme, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\resources, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\buildSettings, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\Css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\resources, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\view, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\view\script, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\view\style, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\view\style\rsx, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\TWITTER, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\TWITTER\img, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\TWITTER\js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\WEATHER, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\WEATHER\css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\WEATHER\js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\core, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\jquery.alerts, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\jquery.alerts\images, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\jquery.jscrollpane, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\sl, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\_locales, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\_locales\en, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Css, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\API, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\API\component, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\API\component\view, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\controller, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\css, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\about, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\components, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\components\view, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\components\view\InjectScript, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\container, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\contextMenu, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\contextMenu\view, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\dynamicMenu, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\dynamicMenu\view, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\menuPanel, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\menuPanel\view, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\multiRssItem, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\multiRssItem\view, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\urlGadget, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\urlGadget\view, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\xmlMenu, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\xmlMenu\view, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\lib, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\model, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\popup, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\popup\view, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\services, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\services\alerts, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\services\translation, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\dyamincMenu, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\icons, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\ifarme, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\rssItem, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\searchBox, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\urlGadget, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\useful_components, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\popup, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\rssItem, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Options, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Css, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\API, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\API\component, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\API\component\view, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\controller, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\css, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\about, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\components, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\components\view, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\components\view\InjectScript, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\container, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\contextMenu, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\contextMenu\view, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\dynamicMenu, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\dynamicMenu\view, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\menuPanel, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\menuPanel\view, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\multiRssItem, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\multiRssItem\view, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\urlGadget, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\urlGadget\view, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\xmlMenu, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\xmlMenu\view, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\lib, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\model, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\popup, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\popup\view, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\services, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\services\alerts, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\services\translation, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\dyamincMenu, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\icons, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\ifarme, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\rssItem, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\searchBox, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\urlGadget, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\useful_components, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\popup, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\rssItem, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Options, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 
 

Dateien: 933

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\CT2529008.txt, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\634419422965498379.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\634419422966045275.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\634462332745353873.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\AbstractionLayerBack.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\AbstractionLayerFront.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\blank.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\CT2529008_public.txt, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\initdata.json, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\manifest.json, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\shouldShowTB.txt, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\APISupport\APISupport.dll, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\framework.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\bcview.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\chromeBackstage.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\chromeBackstage.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\chromeBackstageLoader.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\communicator.back.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\compatibility.end.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\compatibility.service.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\compatibility.start.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\contentScript.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\iframeHost.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\iframeHost.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\JSONStringify.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\logger.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\match.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\nativeMsgCom.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\navigationHandler.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\pluginLoader.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\pricegongMigration.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\toolbarEnv.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\updatesManager.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\verlyEarly.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\lib\jquery-1.5.min.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\options\Options.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\tabs\back\postNavigation.htm, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\js\toolbarAPI\toolbarAPI.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\mam\background.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\mam\settings.json, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\mam\scripts\background.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\mam\scripts\iframeHost.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\mam\scripts\iframeHost.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\mam\scripts\popup.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\mam\scripts\contentScripts\contentScript.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\nativeMessaging\nmHostConfig.json, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\nativeMessaging\nmHostManifest.json, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\nativeMessaging\TBMessagingHost.exe, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\plugins\ChromeApiPlugin.dll, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\initData.json, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\html\SearchBackground.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\html\searchInNewTabAPI.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\MostVisited.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\Applications.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\Bookmarks.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\CntRedirect.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\DeveloperMode.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\EmbeddedConfig.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\enable_disable.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\EventHandler.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\Global.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\LocationService.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\LogMsg.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\NewTabAPI.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\RecentlyClosed.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\SearchBox.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\SearchBoxIframe.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\ServiceMap.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\Settings.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\startupSequence.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\Thumbnails.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\Toolbar.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\Translation.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\API\Usage.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\about_memory.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\alert_overlay.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\apps_page.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\bubble.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\chrome_shared.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\chrome_shared2.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\chrome_shared2_touch.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\dialogs.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\expandable_bubble.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\footer_menu.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\list.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\menu.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\most_visited_page.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\nav_dot.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\new_tab.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\new_tab_theme.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\overlay.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\spinner.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\suggestions_page.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\table.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\tabs.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\throbber.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\tile_page.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\trash.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\tree.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\ui_account_tweaks.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\css\widgets.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\html\alert_overlay.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\html\appLauncher.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\html\loadfile.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\html\NewTabBackground.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\html\new_tab.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\html\Options.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\html\redirect.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\html\trash.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\close_bar_mask.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\exclamationIcon.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\history_section.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\app_promo_button.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\check.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\checkbox_black.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\checkbox_white.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\closed_window.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\close_bar.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\close_bar_2x.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\close_bar_h.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\close_bar_h_2x.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\close_bar_mask_2x.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\close_bar_p.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91],

Patroklos91

08.05.2015 09:01

... hier kommt Teil 2 der Log-Datei ...

Code:



PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\close_bar_p_2x.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\detected_sd.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\detected_usb.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\disabled_select.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\disclosure_triangle_mask.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\downloads_section.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\favicon.ico, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\favicon.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\folder_closed.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\folder_closed_rtl.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\folder_open.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\folder_open_rtl.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\gear.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\google-transparent.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\guest_icon_standalone.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\help.gif, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\icon128.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\icon16.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\icon48.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\icon_checkmark.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\icon_file.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\icon_folder.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\icon_warning.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\icon_warning2.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\IDR_PRODUCT_LOGO.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\ImagesRepository.json, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\insert.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\minus.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\nub.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\nub_mask.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\otr_icon_standalone.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\phishing_icon.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\plus.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\select.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\small_bubble.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\spinner.svg, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\star_small.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\success.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\throbber.svg, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\thumbnailPlaceHolder.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\trash.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\trashBinN.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\WebStore128.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\x-hover.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\x.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\img\__IDR_PRODUCT_LOGO.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\context_menu_handler.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\i18n_template.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\alert_overlay.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\appLauncher.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\apps_page.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\autocomplete_list.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\Base64.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\bubble.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\card_slider.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\color-thief.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\command.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\command_line.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\context_menu_button.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\cr.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\database.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\dialogs.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\dot_list.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\drag_wrapper.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\event_target.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\event_tracker.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\expandable_bubble.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\focus_outline_manager.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\i18n_process.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\i18n_template2.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\jquery.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\link_controller.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\loadFile.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\load_time_data.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\local_strings.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\logerror.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\logging.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\md5.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\media_common.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\menu.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\menu_button.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\menu_item.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\most_visited_page.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\nav_dot.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\NewTabBackground.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\newTabBeforeStart.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\newTabLoadTimeData.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\new_tab.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\options.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\other_sessions.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\overlay.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\page_list_view.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\page_switcher.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\parse_html_subset.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\position_util.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\promise.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\quantize.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\recently_closed.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\repeating_button.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\SearchBoxPage.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\search_history.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\splitter.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\suggestions_page.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\tile_page.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\touch_handler.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\trash.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\tree.css.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\tree.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\ui.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\ui_account_tweaks.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\util.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\Search\NewTabPages\js\ZipFile.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\backstage.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\version.txt, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\al.view.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\aboutBox\aboutBox.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\aboutBox\images\logo.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\aboutBox\images\OK-Button-Default.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\aboutBox\images\OK-Button-MouseOver.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\aboutBox\images\OK-Button-OnClick.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\aboutBox\images\truste.gif, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\aboutBox\images\x.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\aboutBox\js\aboutBox.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\appManager.controller.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\appManager.model.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\appManager.view.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\css\toolbar.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img\minibrowser24.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img\ajax-loader.gif, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img\buttonSprites.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img\chevron_sprites.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img\fallback24.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img\ie8_mouseover_button.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img\ie8_onclick_button.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img\loader-icon.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img\menu_arrow.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img\minibrowser.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img\mp_sprites.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img\new_chevron_sprites.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img\rounded_corners_left_transparent.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img\rounded_corners_left_white.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img\rounded_corners_left_white_34.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img\rounded_corners_right_transparent.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img\rounded_corners_right_white.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img\rounded_corners_right_white_34.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img\separator.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img\separator_hover.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\img\uus.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ac\res\yoxscroll.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\api\toolbarapi.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\api\webAppApi.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\api\webAppApiFront.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\msd\excanvas.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\msd\trusted.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\msd\trusted.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\msd\untrusted.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\msd\untrusted.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\msd\untrusted.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\options.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\css\jquery.jscrollpane.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\css\options.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\css\reset.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\images\bg-hide-click.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\images\bg-hide.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\images\checkbox-check-off.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\images\checkbox-check-on.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\images\ic_Closer.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\images\ic_Closer_hover.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\images\logo.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\images\minibrowser.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\images\scroller.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\images\sprite-ok-button.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\images\truste.gif, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\images\x.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\js\html5SupportIe.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\js\options.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\js\resources\html5shiv.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\js\resources\jquery.jscrollpane.min.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\options\js\resources\jquery.mousewheel.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\sp\js\searchProtectorManager.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\sp\spbd\bubble.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\sp\spbd\bubble.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\sp\spbd\main.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\sp\spbd\images\information.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\sp\spbd\images\x-default-LTR.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\sp\spbd\images\x-default-RTL.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\sp\spbd\images\x-mouseover-LTR.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\sp\spbd\images\x-mouseover-RTL.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\sp\spsd\main.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\sp\spsd\SearchProtector.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\sp\spsd\settings.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\sp\spsd\images\ok-button.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\sp\spsd\images\separation-line.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\sp\spsd\images\warning.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\menus.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\popups.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\DialogsAPI.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\excanvas.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\generalDialogStyle.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\PIE.htc, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\settings.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\ftd\main.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\ftd\ToolbarFirstTimeDialog.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\ftd\ToolbarFirstTimeDialog.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\ftd\images\app-store-icon.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\ftd\images\arrow.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\ftd\images\dialog_tip_left.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\ftd\images\dialog_tip_right.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\ftd\images\divider.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\ftd\images\emailNotifier.gif, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\ftd\images\facebook.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\ftd\images\radio.GIF, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\ftd\images\Thumbs.db, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\ftd\images\truste_welcome.GIF, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\ftd\images\weather.GIF, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\restart\main.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\restart\restartDialog.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\restart\restartDialog.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\restart\images\2.0--spec--kicker.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\restart\images\content-pattern.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\restart\images\content-sep.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\restart\images\OK-Button-Default.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\restart\images\OK-Button-MouseOver.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\restart\images\OK-Button-OnClick.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\dlg\restart\images\x.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\gadgetFrame\gf.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\gadgetFrame\lgf.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\gf\gf.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\gf\lgf.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\gf\css\gf.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\gf\css\gf_ie.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\gf\img\ie_back.gif, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\gf\img\loader.gif, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\gf\img\resize.gif, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\gf\img\sprites.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\gf\js\gf.view.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\gf\js\lgf.view.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\menu\popup.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\menu\css\menu.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\menu\img\arrow-down-strong.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\menu\img\arrow-down.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\menu\img\arrow-left-strong.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\menu\img\arrow-left.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\menu\img\arrow-right-strong.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\menu\img\arrow-right.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\menu\img\arrows.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\menu\js\jquery.ellipsis.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\menu\js\jquery.scrollTo-1.4.2-min.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\menu\js\menu.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\menu\js\renderHandler.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\menu\js\scrollers.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\ui\menu\js\showHandler.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\browserAppApi.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\APPLICATION_BUTTON\bgpage.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\APPLICATION_BUTTON\Js\bgpage.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\APPLICATION_BUTTON\resources\defaultEngineImage.gif, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\bgPage.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\popup.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\css\en.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\css\en_rtl.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\css\jquery.jscrollpane.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\AccountManager.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\bgPage.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\EN.model.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\IMAPExecuter.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\Inboxer.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\Invoker.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\MailDecoder.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\MailMerger.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\POP3Executer.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\Popup.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\providerHelper.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\Providers.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\SettingsManager.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\Timer.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\Translation.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\Utils.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\bgpage.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\embedded.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\popup.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\css\embedded.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\css\popup.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\css\reset.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\js\bgpage.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\js\embedded.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\js\higlighter_script.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\js\popup.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\MULTI_RSS\bgpage.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\MULTI_RSS\popup.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\MULTI_RSS\css\popup.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\MULTI_RSS\img\arrows.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\MULTI_RSS\img\badges.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\MULTI_RSS\img\icons.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\MULTI_RSS\js\bgpage.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\MULTI_RSS\js\popup.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\MULTI_RSS\js\resources\webAppUtils.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\bgpage.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\embedded.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\NotificationPopup.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\Settings.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\css\gadget.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\css\general.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\css\Main.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\css\newMain.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\css\settings.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\css\ui.stepper.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\closeIcon.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\downArrow.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\settingsIcon.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\upArrow.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\dark\close.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\dark\Next.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\dark\Next_hover.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\dark\powered-by.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\dark\Prev.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\dark\Prev_hover.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\dark\settings.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\light\close.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\light\Next.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\light\Next_hover.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\light\powered-by.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\light\Prev.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\light\Prev_hover.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\images\light\settings.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\AppName.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\bgpage.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\bgpageEarly.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\commons.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\jquery.ezmark.min.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\notification.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\NotificationSettings.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\notificationUIManger.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\Settings.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\stepper.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\ToolbarAndAppsSettings.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\Optimizer\bgpage.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\Optimizer\js\bgpage.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\PRICE_GONG\bgpage.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\PRICE_GONG\bgpage.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\PRICE_GONG\pg_offers.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\PRICE_GONG\pg_offers.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\PRICE_GONG\agreement\agree.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\PRICE_GONG\agreement\agree.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\PRICE_GONG\agreement\Close.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\PRICE_GONG\agreement\Image.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\PRICE_GONG\agreement\Logo.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\PRICE_GONG\agreement\OK_Btn.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91],

Patroklos91

08.05.2015 09:02

... und hier Teil 3.

Code:



PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\PRICE_GONG\agreement\Topbg.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\PRICE_GONG\css\gadget.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\PRICE_GONG\css\ie7styles.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\PRICE_GONG\css\iestyle.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\PRICE_GONG\css\custom-theme\jquery-ui-1.8.10.custom.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\PRICE_GONG\images\icon.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\bgpage.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\embedded.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\popup2.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\css\gadget.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\css\jquery.jscrollpane.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\css\reset.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\css\stations.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\css\custom-theme\jquery-ui-1.8.10.custom.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\bgpage.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\bgpageEarly.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\embedded.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\embeddedEarly.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\localization.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\player.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\popup.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\resources\BrowserDetect.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\resources\jquery-ui-1.8.10.custom.min.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\resources\jquery.jscrollpane.min.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\resources\jquery.scrollTo-1.4.2-min.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\resources\radioCommon.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\resources\system.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\resources\utils.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\bgpage.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\embedded.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\information.popup.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\buildSettings\SearchApp_Ant.xml, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\Css\information.popup.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\js\bgpage.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\js\common.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\js\contentManager.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\js\historyProvider.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\js\information.popup.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\js\layoutManager.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\js\searchListener.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\js\selectionListener.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\js\suggestProvider.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\resources\history--x-default.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\resources\history--x-mouseover.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\resources\menu.icon.apps.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\view\script\view.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\view\style\default.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\view\style\rsx\dd-arrow.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\SEARCH\view\style\rsx\ie8.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\TWITTER\bgpage.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\TWITTER\popup.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\TWITTER\popup.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\TWITTER\img\icons.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\TWITTER\img\inbox.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\TWITTER\img\scroll_down.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\TWITTER\img\scroll_up.png, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\TWITTER\js\bgpage.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\TWITTER\js\localization.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\TWITTER\js\popup.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\WEATHER\bgpage.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\WEATHER\popup.html, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\WEATHER\css\gadget.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\WEATHER\css\ie7styles.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\WEATHER\css\iestyle.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\WEATHER\js\bgpage.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\WEATHER\js\common.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\WEATHER\js\date-functions.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\WEATHER\js\gadget.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\WEATHER\js\jquery.autocomplete.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\WEATHER\js\jquery.textshadow.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\WEATHER\js\logic.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\WEATHER\js\main.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\al\wa\WEATHER\js\xPath.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\core\corelibs.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\core\framework.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\core\utils.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\al.view.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\al.viewPerformanceLog.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\background.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\ie_fix.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\jquery.min.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\jquery.mousewheel.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\jquery.text-overflow.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\jquery.tmpl.min.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\jquery.xml2json.custom.min.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\jquery.xml2json.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\json2.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\json2.min.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\script2injectEmbedded.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\script2injectPopup.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\sdk.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\jquery.alerts\jquery.alerts.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\jquery.alerts\jquery.alerts.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\jquery.alerts\images\help.gif, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\jquery.alerts\images\important.gif, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\jquery.alerts\images\info.gif, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\jquery.alerts\images\title.gif, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\jquery.jscrollpane\jquery.jscrollpane.css, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\lib\jquery.jscrollpane\jquery.jscrollpane.min.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\tb\sl\serviceLayer.js, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.31.4.510_0\_locales\en\messages.json, In Quarantäne, [ce03157bf99176c0a36d557aa2616f91], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\CT2529008.txt, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\128.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\634419422965498379.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\634419422966045275.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\634462332745353873.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Controller.html, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\initData.json, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\manifest.json, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Options.html, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Thumbs.db, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\translation_fallback.json, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Css\about.css, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Css\chromeMain.css, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Css\ctbMain.css, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Css\ddmenu.css, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Css\gmail.css, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Css\logoMenu.css, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Css\options.css, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Css\safariMain.css, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Css\searchEngine.css, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Css\searchHistory.css, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\clicksHandler.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\contentScript.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\everypage_early.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\options.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\API\component\view\BrowserCompApi.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\controller\controller.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\css\ctbmain.css, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\about\about.css, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\about\about.htm, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\about\about.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\components\view\InjectScript\ticker.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\container\container.css, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\container\container.html, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\container\container.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\contextMenu\view\contextMenu.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\dynamicMenu\view\dynamicMenu.css, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\dynamicMenu\view\dynamicMenu.html, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\dynamicMenu\view\dynamicMenu.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\menuPanel\view\menuPanel.htm, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\menuPanel\view\menuPanel.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\multiRssItem\view\MultiRssItem.css, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\multiRssItem\view\MultiRssItem.html, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\multiRssItem\view\multiRssItem.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\urlGadget\view\urlGadget.css, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\urlGadget\view\urlGadget.html, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\urlGadget\view\urlGadget.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\xmlMenu\view\xmlMenu.css, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\xmlMenu\view\xmlMenu.html, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\items\xmlMenu\view\xmlMenu.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\lib\jquery-ui-accordion.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\lib\jquery-ui.custom.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\lib\jquery.additions.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\lib\jquery.batchImageLoad.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\lib\jquery.bdc.ddmenu.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\lib\jquery.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\lib\jquery.mousewheel.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\lib\jsonStringify.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\lib\pure.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\lib\xml2json.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\model\model.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\popup\view\popup.css, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\popup\view\popup.html, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\popup\view\popup.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\popup\view\popupShow.html, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\services\alerts\alerts.view.css, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\services\alerts\alerts.view.html, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\services\alerts\alerts.view.js, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\js\services\translation\translation_fallback.json, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\options_acc_item_bg.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\128.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\128g.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\ajax-loader.gif, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\arrow_down.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\colapse.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\Collapse.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\endSeperator.gif, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\expend.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icon.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\options_acc_collapse.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\options_acc_expand.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\options_acc_item_bg_hover.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\options_button_bg_green.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\options_button_bg_orange.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\overBtn.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\seperator.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\shadow_list.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\shadow_list_.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\Thumbs.db, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\bak.gif, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\dyamincMenu\backstrip.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\dyamincMenu\overstrip.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\icons\about_icon.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\icons\delete_s.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\icons\read_s.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\icons\shevronLeft.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\icons\shevronRight.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\icons\unread_s.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\ifarme\blackToWhite.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\ifarme\whiteToBlack.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\rssItem\down_active.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\rssItem\down_disable.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\rssItem\down_over_on.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\rssItem\image_box.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\rssItem\noimage_box.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\rssItem\option_layer.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\rssItem\point_select.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\rssItem\scroll_back.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\rssItem\scroll_bar_center.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\rssItem\scroll_bar_end.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\rssItem\scroll_bar_start.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\rssItem\scroll_down.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\rssItem\scroll_down_on.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\rssItem\scroll_up.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\rssItem\scroll_up_on.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\rssItem\shadow_list.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\rssItem\up_active.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\rssItem\up_disable.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\rssItem\up_over_on.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\searchBox\searchMe.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\searchBox\searchMe_rtl.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\searchBox\search_center_over.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\searchBox\search_left_over.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\base64\searchBox\search_right_over.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\refresh_hover.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\addApp.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\delete.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\delete_blue.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\delete_grey.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\delete_hover.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\delete_press.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\read.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\read_hover.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\read_press.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\read_reg.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\refresh.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\refresh_press.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\refresh_reg.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\small_arrow.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\small_arrowRTL.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\trans.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\unread.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\unread_hover.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\unread_press.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\unread_reg.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\urlGadget\close_hover.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\urlGadget\close_normal.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\urlGadget\info_hover.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\urlGadget\info_normal.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\urlGadget\minimize_hover.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\urlGadget\minimize_normal.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\urlGadget\snap_hover.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\urlGadget\snap_normal.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\useful_components\0.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\useful_components\1.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\useful_components\10.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\useful_components\11.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\useful_components\12.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\useful_components\2.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\useful_components\3.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\useful_components\4.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\useful_components\5.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\useful_components\6.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\useful_components\7.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\useful_components\8.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\icons\useful_components\9.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\popup\main_menu_about.gif, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\popup\main_menu_contact.gif, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\popup\main_menu_help.gif, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\popup\main_menu_hide.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\popup\main_menu_privacy.gif, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\popup\main_menu_refresh.gif, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\popup\main_menu_show.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\popup\main_menu_tell_a_friend.gif, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\popup\main_menu_upgrade.gif, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Media\rssItem\noImage.png, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Options\additional_settings.html, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Options\alerts_setting.html, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Options\personal_components.html, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Options\predefined_components.html, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_0\Options\useful_components.html, In Quarantäne, [bd143b550f7b93a37d93725d20e3b749], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\CT2529008.txt, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\128.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\634419422965498379.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\634419422966045275.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\634462332745353873.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Controller.html, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\initData.json, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\manifest.json, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Options.html, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Thumbs.db, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\translation_fallback.json, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Css\about.css, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Css\chromeMain.css, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Css\ctbMain.css, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Css\ddmenu.css, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Css\gmail.css, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Css\logoMenu.css, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Css\options.css, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Css\safariMain.css, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Css\searchEngine.css, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Css\searchHistory.css, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\clicksHandler.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\contentScript.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\everypage_early.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\options.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\API\component\view\BrowserCompApi.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\controller\controller.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\css\ctbmain.css, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\about\about.css, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\about\about.htm, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\about\about.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\components\view\InjectScript\ticker.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\container\container.css, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\container\container.html, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\container\container.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\contextMenu\view\contextMenu.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\dynamicMenu\view\dynamicMenu.css, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\dynamicMenu\view\dynamicMenu.html, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\dynamicMenu\view\dynamicMenu.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\menuPanel\view\menuPanel.htm, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\menuPanel\view\menuPanel.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\multiRssItem\view\MultiRssItem.css, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\multiRssItem\view\MultiRssItem.html, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\multiRssItem\view\multiRssItem.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\urlGadget\view\urlGadget.css, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\urlGadget\view\urlGadget.html, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\urlGadget\view\urlGadget.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\xmlMenu\view\xmlMenu.css, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\xmlMenu\view\xmlMenu.html, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\items\xmlMenu\view\xmlMenu.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\lib\jquery-ui-accordion.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\lib\jquery-ui.custom.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\lib\jquery.additions.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\lib\jquery.batchImageLoad.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\lib\jquery.bdc.ddmenu.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\lib\jquery.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\lib\jquery.mousewheel.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\lib\jsonStringify.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\lib\pure.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\lib\xml2json.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\model\model.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\popup\view\popup.css, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\popup\view\popup.html, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\popup\view\popup.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\popup\view\popupShow.html, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\services\alerts\alerts.view.css, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\services\alerts\alerts.view.html, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\services\alerts\alerts.view.js, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\js\services\translation\translation_fallback.json, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\options_acc_item_bg.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\128.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\128g.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\ajax-loader.gif, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\arrow_down.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\colapse.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\Collapse.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\endSeperator.gif, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\expend.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icon.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\options_acc_collapse.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\options_acc_expand.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\options_acc_item_bg_hover.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\options_button_bg_green.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\options_button_bg_orange.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\overBtn.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\seperator.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\shadow_list.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\shadow_list_.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\Thumbs.db, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\bak.gif, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\dyamincMenu\backstrip.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\dyamincMenu\overstrip.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\icons\about_icon.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\icons\delete_s.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\icons\read_s.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\icons\shevronLeft.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\icons\shevronRight.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\icons\unread_s.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\ifarme\blackToWhite.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\ifarme\whiteToBlack.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\rssItem\down_active.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\rssItem\down_disable.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\rssItem\down_over_on.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\rssItem\image_box.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\rssItem\noimage_box.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\rssItem\option_layer.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\rssItem\point_select.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\rssItem\scroll_back.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\rssItem\scroll_bar_center.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\rssItem\scroll_bar_end.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\rssItem\scroll_bar_start.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\rssItem\scroll_down.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\rssItem\scroll_down_on.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\rssItem\scroll_up.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\rssItem\scroll_up_on.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\rssItem\shadow_list.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\rssItem\up_active.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\rssItem\up_disable.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\rssItem\up_over_on.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\searchBox\searchMe.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\searchBox\searchMe_rtl.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\searchBox\search_center_over.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\searchBox\search_left_over.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\base64\searchBox\search_right_over.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\refresh_hover.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\addApp.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\delete.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\delete_blue.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\delete_grey.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\delete_hover.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\delete_press.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\read.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\read_hover.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\read_press.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\read_reg.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\refresh.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\refresh_press.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\refresh_reg.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\small_arrow.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\small_arrowRTL.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\trans.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\unread.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\unread_hover.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\unread_press.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\unread_reg.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\urlGadget\close_hover.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\urlGadget\close_normal.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\urlGadget\info_hover.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\urlGadget\info_normal.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\urlGadget\minimize_hover.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\urlGadget\minimize_normal.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\urlGadget\snap_hover.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\urlGadget\snap_normal.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\useful_components\0.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\useful_components\1.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\useful_components\10.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\useful_components\11.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\useful_components\12.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\useful_components\2.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\useful_components\3.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\useful_components\4.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\useful_components\5.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\useful_components\6.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\useful_components\7.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\useful_components\8.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\icons\useful_components\9.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\popup\main_menu_about.gif, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\popup\main_menu_contact.gif, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\popup\main_menu_help.gif, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\popup\main_menu_hide.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\popup\main_menu_privacy.gif, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\popup\main_menu_refresh.gif, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\popup\main_menu_show.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\popup\main_menu_tell_a_friend.gif, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\popup\main_menu_upgrade.gif, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Media\rssItem\noImage.png, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Options\additional_settings.html, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Options\alerts_setting.html, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Options\personal_components.html, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Options\predefined_components.html, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 

PUP.Optional.ConduitTB.Gen, C:\Users\Jonas ******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\2.3.1.8_1\Options\useful_components.html, In Quarantäne, [329f5739cbbf84b27f91913e8281cf31], 
 

Physische Sektoren: 0

(Keine schädliche Elemente gefunden)
 
 

(end)

deeprybka

08.05.2015 09:13

Naja, nicht optimal mit dem MBAM-Scan. Trotzdem mit Combofix weitermachen dann...

Patroklos91

11.05.2015 23:22

Hi Jürgen,

inzwischen habe ich einen Scan mit ComboFix durchgeführt. Hier das resultierende Log-File ...
Wie geht es nun weiter?

Beste Grüße!

Code:



Combofix Logfile:
 

        Code:


        
ComboFix 15-05-09.01 - Jonas ***** 11.05.2015  23:39:40.1.4 - x86

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3063.1567 [GMT 2:00]

ausgeführt von:: c:\users\Jonas *****\Desktop\ComboFix.exe

AV: Avira Antivirus *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}

SP: Avira Antivirus *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

C:\Internet Explorer

c:\internet explorer\Custom\eBay.ico

c:\users\Jonas *****\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll

c:\users\JONASR~1\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll

c:\windows\IsUn0407.exe

c:\windows\unin0407.exe

.

.

(((((((((((((((((((((((   Dateien erstellt von 2015-04-11 bis 2015-05-11  ))))))))))))))))))))))))))))))

.

.

2015-05-11 21:51 . 2015-05-11 21:51        --------        d-----w-        c:\users\Default\AppData\Local\temp

2015-05-11 21:43 . 2015-05-11 21:43        62576        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{39D59300-A278-4EF7-95CC-A035EA738564}\offreg.dll

2015-05-11 21:06 . 2015-04-04 06:39        9201616        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{39D59300-A278-4EF7-95CC-A035EA738564}\mpengine.dll

2015-05-07 19:01 . 2015-05-07 19:06        --------        d-----w-        C:\FRST

2015-05-07 16:56 . 2015-05-11 21:56        119512        ----a-w-        c:\windows\system32\drivers\MBAMSwissArmy.sys

2015-05-07 16:55 . 2015-04-14 07:37        51928        ----a-w-        c:\windows\system32\drivers\mwac.sys

2015-05-07 16:55 . 2015-04-14 07:37        92888        ----a-w-        c:\windows\system32\drivers\mbamchameleon.sys

2015-05-07 16:55 . 2015-05-07 18:34        --------        d-----w-        c:\program files\Malwarebytes Anti-Malware

2015-04-16 01:44 . 2015-04-16 01:44        --------        d-----w-        C:\found.000

2015-04-15 08:38 . 2015-03-23 03:06        576000        ----a-w-        c:\windows\system32\generaltel.dll

2015-04-15 08:38 . 2015-03-23 03:06        630784        ----a-w-        c:\windows\system32\invagent.dll

2015-04-15 08:38 . 2015-03-23 03:06        331264        ----a-w-        c:\windows\system32\devinv.dll

2015-04-15 08:38 . 2015-03-23 03:06        860160        ----a-w-        c:\windows\system32\appraiser.dll

2015-04-15 08:38 . 2015-03-23 03:06        26112        ----a-w-        c:\windows\system32\acmigration.dll

2015-04-15 08:38 . 2015-03-23 03:06        202752        ----a-w-        c:\windows\system32\aepdu.dll

2015-04-15 08:38 . 2015-03-23 02:59        896000        ----a-w-        c:\windows\system32\aeinv.dll

2015-04-15 08:38 . 2015-03-23 03:06        159744        ----a-w-        c:\windows\system32\aepic.dll

2015-04-15 08:36 . 2015-03-25 03:00        92672        ----a-w-        c:\windows\system32\wudriver.dll

2015-04-15 08:36 . 2015-03-25 03:00        35328        ----a-w-        c:\windows\system32\wups2.dll

2015-04-15 08:36 . 2015-03-25 03:00        3088384        ----a-w-        c:\windows\system32\wucltux.dll

2015-04-15 08:36 . 2015-03-25 03:00        29696        ----a-w-        c:\windows\system32\wups.dll

2015-04-15 08:36 . 2015-03-25 03:00        173056        ----a-w-        c:\windows\system32\wuwebv.dll

2015-04-15 08:36 . 2015-03-25 03:00        11776        ----a-w-        c:\windows\system32\wu.upgrade.ps.dll

2015-04-15 08:36 . 2015-03-25 03:00        33792        ----a-w-        c:\windows\system32\wuapp.exe

2015-04-15 08:36 . 2015-03-25 03:00        131584        ----a-w-        c:\windows\system32\wuauclt.exe

2015-04-15 08:36 . 2015-03-25 03:00        566784        ----a-w-        c:\windows\system32\wuapi.dll

2015-04-15 08:36 . 2015-03-25 03:00        2020864        ----a-w-        c:\windows\system32\wuaueng.dll

2015-04-15 08:36 . 2015-03-25 03:00        50176        ----a-w-        c:\windows\system32\WinSetupUI.dll

2015-04-15 08:35 . 2015-02-25 03:03        514560        ----a-w-        c:\windows\system32\drivers\http.sys

2015-04-15 08:35 . 2015-03-10 03:08        1237504        ----a-w-        c:\windows\system32\msxml3.dll

2015-04-15 08:35 . 2015-03-10 03:05        2048        ----a-w-        c:\windows\system32\msxml3r.dll

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2015-04-15 09:57 . 2012-05-03 15:23        778416        ----a-w-        c:\windows\system32\FlashPlayerApp.exe

2015-04-15 09:57 . 2011-05-15 20:19        142512        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl

2015-04-14 07:37 . 2014-01-06 10:33        23256        ----a-w-        c:\windows\system32\drivers\mbam.sys

2015-03-12 17:33 . 2013-05-07 19:59        37896        ----a-w-        c:\windows\system32\drivers\avnetflt.sys

2015-03-12 17:33 . 2013-04-07 09:24        136216        ----a-w-        c:\windows\system32\drivers\avipbb.sys

2015-03-12 17:33 . 2013-04-07 09:24        105864        ----a-w-        c:\windows\system32\drivers\avgntflt.sys

2015-02-26 03:11 . 2015-03-12 17:54        2381312        ----a-w-        c:\windows\system32\win32k.sys

2015-02-24 02:23 . 2010-08-30 16:46        246920        ------w-        c:\windows\system32\MpSigStub.exe

2015-02-20 04:13 . 2015-03-12 17:49        26624        ----a-w-        c:\windows\system32\lpk.dll

2015-02-20 04:13 . 2015-03-12 17:49        70656        ----a-w-        c:\windows\system32\fontsub.dll

2015-02-20 04:13 . 2015-03-12 17:49        10240        ----a-w-        c:\windows\system32\dciman32.dll

2015-02-20 04:13 . 2015-03-12 17:49        34304        ----a-w-        c:\windows\system32\atmlib.dll

2015-02-20 03:09 . 2015-03-12 17:49        299008        ----a-w-        c:\windows\system32\atmfd.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]

"Wunderlist"="c:\program files\Wunderlist2\Wunderlist.exe" [2013-12-02 13021792]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-03-04 284696]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-06-14 9288296]

"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-05-27 98304]

"NUSB3MON"="c:\program files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-04-27 113288]

"CLMLServer"="c:\program files\CyberLink\Power2Go\CLMLSvc.exe" [2009-11-02 103720]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2013-05-08 41056]

"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-08-20 150016]

"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208]

"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-11-01 59240]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-01-16 421736]

"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2015-04-01 726320]

"ownCloud"="c:\program files\ownCloud\owncloud.exe" [2013-04-22 1253540]

"PDFPrint"="c:\programmejonas\PDF24\pdf24.exe" [2014-11-28 193568]

"Avira Systray"="c:\program files\Avira\My Avira\Avira.OE.Systray.exe" [2015-03-16 129272]

.

c:\users\Jonas *****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE -b -l [2001-2-13 83360]

WISO Mein Steuer-Sparbuch heute.lnk - c:\program files\WISO\Steuersoftware 2014\mshaktuell.exe [2014-10-1 1427736]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"aux1"=wdmaud.drv

.

R2 AntiVirMailService;Avira Email-Schutz;c:\program files\Avira\AntiVir Desktop\avmailc7.exe [2015-04-01 815920]

R2 AntiVirWebService;Avira Browser-Schutz;c:\program files\Avira\AntiVir Desktop\avwebg7.exe [2015-04-01 1004280]

R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2015-03-13 102912]

R3 RTL2832U_IRHID;Cinergy T Stick HID;c:\windows\system32\DRIVERS\RTL2832U_IRHID.sys [2012-01-09 43392]

R3 RTL2832UBDA;Cinergy T Stick RC BDA service;c:\windows\system32\drivers\RTL2832UBDA.sys [2012-01-09 189184]

R3 RTL2832UUSB;Cinergy T Stick RC USB service;c:\windows\system32\Drivers\RTL2832UUSB.sys [2012-01-09 33536]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]

S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2013-11-29 37352]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-05-27 176128]

S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2015-04-01 434424]

S2 Avira.OE.ServiceHost;Avira Service Host;c:\program files\Avira\My Avira\Avira.OE.ServiceHost.exe [2015-03-16 201008]

S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys [2015-03-12 37896]

S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-03-04 13336]

S2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-04-14 1871160]

S2 MBAMService;MBAMService;c:\program files\Malwarebytes Anti-Malware\mbamservice.exe [2015-04-14 1080120]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2015-04-14 23256]

S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [2015-05-11 119512]

S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2015-04-14 51928]

S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-04-27 64904]

S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-04-27 146568]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2010-05-31 267880]

S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys [2009-09-22 579072]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - MBAMSWISSARMY

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

hpdevmgmt        REG_MULTI_SZ           hpqcxs08

.

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2015-05-01 07:38        988488        ----a-w-        c:\program files\Google\Chrome\Application\42.0.2311.135\Installer\chrmstp.exe

.

Inhalt des "geplante Tasks" Ordners

.

2015-05-11 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-03 09:57]

.

2015-05-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-11-25 15:00]

.

2015-05-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-11-25 15:00]

.

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = hxxp://www.google.com

uDefault_Search_URL = hxxp://www.google.com

mStart Page = about:blank

uInternet Settings,ProxyOverride = *.local

IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html

IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000

TCP: DhcpNameServer = 192.168.2.1

FF - ProfilePath - c:\users\Jonas *****\AppData\Roaming\Mozilla\Firefox\Profiles\d240w4qq.default-1389057727826\

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

SafeBoot-BsScanner

AddRemove-gedit_is1 - c:\programmejonas\gedit\unins000.exe

AddRemove-{D54E3D9F-FEB8-4D2D-A138-B69A5C80080B} - c:\programdata\Updater\Uninstall.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ChromeHTML"

.

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ChromeHTML"

.

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ChromeHTML"

.

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ChromeHTML"

.

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ChromeHTML"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

--------------------- Durch laufende Prozesse gestartete DLLs ---------------------

.

- - - - - - - > 'Explorer.exe'(3868)

c:\windows\System32\ieframe.dll

.

------------------------ Weitere laufende Prozesse ------------------------

.

c:\windows\system32\atieclxx.exe

c:\program files\Avira\AntiVir Desktop\avguard.exe

c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\program files\Bonjour\mDNSResponder.exe

c:\program files\Common Files\Protexis\License Service\PsiService_2.exe

c:\windows\system32\taskhost.exe

c:\program files\Malwarebytes Anti-Malware\mbam.exe

c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

c:\program files\Avira\AntiVir Desktop\avshadow.exe

c:\windows\servicing\TrustedInstaller.exe

c:\windows\System32\WUDFHost.exe

c:\windows\system32\conhost.exe

c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

c:\program files\OpenOffice.org 3\program\soffice.exe

c:\program files\OpenOffice.org 3\program\soffice.bin

c:\program files\iPod\bin\iPodService.exe

c:\windows\system32\sppsvc.exe

c:\program files\Windows Media Player\wmpnetwk.exe

.

**************************************************************************

.

Zeit der Fertigstellung: 2015-05-12  00:04:17 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2015-05-11 22:04

.

Vor Suchlauf: 14 Verzeichnis(se), 1.177.558.687.744 Bytes frei

Nach Suchlauf: 18 Verzeichnis(se), 1.180.925.071.360 Bytes frei

.

- - End Of File - - 71B241A584D1A28946B928523240C3FB

 
--- --- ---

5D949EEA3BEEC2DF38A2D7900AD89A60

deeprybka

12.05.2015 15:58

Bitte mal frische FRST-Logs:

Schritt 1

http://filepony.de/icon/frst.png http://deeprybka.trojaner-board.de/b...t/frstscan.png

Bitte starte FRST erneut, markiere auch die checkbox http://deeprybka.trojaner-board.de/b...t/addition.pngund drücke auf Scan.
Bitte poste mir den Inhalt der beiden Logs die erstellt werden.

Patroklos91

12.05.2015 23:31

Hier die Log-Dateien des neuen FRST-Scans ...

Beste Grüße!

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-05-2015 01

Ran by Jonas ***** (administrator) on ZUKUNFT on 13-05-2015 00:23:37

Running from C:\ProgrammeJonas

Loaded Profiles: Jonas ***** (Available profiles: Jonas *****)

Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe

(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe

(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

(Renesas Electronics Corporation) C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe

(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe

(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

() C:\Program Files\ownCloud\owncloud.exe

(Geek Software GmbH) C:\ProgrammeJonas\PDF24\pdf24.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(6 Wunderkinder GmbH) C:\Program Files\Wunderlist2\Wunderlist.exe

(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe

(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe

(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe

(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9288296 2010-06-14] (Realtek Semiconductor)

HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-05-27] (Advanced Micro Devices, Inc.)

HKLM\...\Run: [NUSB3MON] => C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)

HKLM\...\Run: [CLMLServer] => C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-11-02] (CyberLink)

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)

HKLM\...\Run: [hpqSRMon] => C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [150016 2008-08-20] (Hewlett-Packard)

HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)

HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2011-11-02] (Apple Inc.)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [421736 2012-01-16] (Apple Inc.)

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [726320 2015-04-01] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [ownCloud] => C:\Program Files\ownCloud\owncloud.exe [1253540 2013-04-22] ()

HKLM\...\Run: [PDFPrint] => C:\ProgrammeJonas\PDF24\pdf24.exe [193568 2014-11-28] (Geek Software GmbH)

HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [129272 2015-03-16] (Avira Operations GmbH & Co. KG)

HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\...\Run: [Wunderlist] => C:\Program Files\Wunderlist2\Wunderlist.exe [13021792 2013-12-02] (6 Wunderkinder GmbH)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2011-03-25]

ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk [2014-10-01]

ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files\WISO\Steuersoftware 2014\mshaktuell.exe ()

Startup: C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk [2010-11-28]

ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

SearchScopes: HKLM -> DefaultScope value is missing.

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08] (Adobe Systems Incorporated)

BHO: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-05-14] (Microsoft Corporation)

Toolbar: HKLM - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll [2011-06-24] (TerraTec Electronic GmbH)

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab

DPF: {CAFEEFAC-0018-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab

Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2000-11-06] (Microsoft Corporation)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-31] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Jonas *****\AppData\Roaming\Mozilla\Firefox\Profiles\d240w4qq.default-1389057727826

FF NewTab:  www.google.de

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [2010-08-18] (Adobe Systems, Inc.)

FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2011-11-14] ()

FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-04] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-04] (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)

FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-04-17] (Microsoft Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2013-05-08] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-1471510115-2474919708-3564051268-1001: @lightspark.github.com/Lightspark;version=1 -> C:\Program Files\Lightspark 0.5.3-git\nplightsparkplugin.dll No File

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2013-05-08] (Adobe Systems Inc.)

FF Extension: 20-20 3D Viewer - IKEA - C:\Users\Jonas *****\AppData\Roaming\Mozilla\Firefox\Profiles\d240w4qq.default-1389057727826\Extensions\2020Player_IKEA@2020Technologies.com [2014-03-21]

FF Extension: Adblock Plus - C:\Users\Jonas *****\AppData\Roaming\Mozilla\Firefox\Profiles\d240w4qq.default-1389057727826\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-08]

FF HKLM\...\Firefox\Extensions: [ext@flash-Enhancer.com] - C:\Program Files\AmiExt\flashEnhancer\ff

FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-04-11]
 

Chrome: 

=======

CHR StartupUrls: Default -> "hxxp://www.google.com"

CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll No File

CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\42.0.2311.135\gcswf32.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll No File

CHR Plugin: (Remoting Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\42.0.2311.135\ppGoogleNaClPluginChrome.dll No File

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\42.0.2311.135\pdf.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Java Deployment Toolkit 6.0.300.12) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U30) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File

CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File

CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

CHR Plugin: (Windows LiveÂ® Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File

CHR Profile: C:\Users\Jonas *****\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (No Name) - C:\Users\Jonas *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg [2012-08-27]

CHR Extension: (Google Wallet) - C:\Users\Jonas *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-26]

CHR HKLM\...\Chrome\Extension: [ckjhoplcbnkhgnnahfbcdmganjhpcceg] - C:\Users\JONASR~1\AppData\Local\Temp\ckjhoplcbnkhgnnahfbcdmganjhpcceg.crx [Not Found]
 

========================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [815920 2015-04-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1004280 2015-04-01] (Avira Operations GmbH & Co. KG)

S2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [201008 2015-03-16] (Avira Operations GmbH & Co. KG)

S3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S3 AF15BDA; C:\Windows\System32\DRIVERS\AF15BDA.sys [489408 2009-11-05] (ITETech                  )

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105864 2015-03-12] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2015-03-12] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-29] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37896 2015-03-12] (Avira Operations GmbH & Co. KG)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2015-05-12] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-04-14] (Malwarebytes Corporation)

R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [64904 2010-04-27] (Renesas Electronics Corporation)

R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [146568 2010-04-27] (Renesas Electronics Corporation)

S3 RTL2832UBDA; C:\Windows\System32\drivers\RTL2832UBDA.sys [189184 2012-01-09] (REALTEK SEMICONDUCTOR Corp.)

S3 RTL2832UUSB; C:\Windows\System32\Drivers\RTL2832UUSB.sys [33536 2012-01-09] (REALTEK SEMICONDUCTOR Corp.)

S3 RTL2832U_IRHID; C:\Windows\System32\DRIVERS\RTL2832U_IRHID.sys [43392 2012-01-09] (Realtek)

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-04-07] (Avira GmbH)

U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

S3 catchme; \??\C:\Users\JONASR~1\AppData\Local\Temp\catchme.sys [X]

S3 Profos; \??\C:\Program Files\BullGuard Ltd\BullGuard\antirootkit\profos.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-05-12 00:10 - 2015-05-12 00:10 - 00014373 _____ () C:\Users\Jonas *****\Desktop\ComboFix.txt

2015-05-12 00:04 - 2015-05-12 00:04 - 00014368 _____ () C:\ComboFix.txt

2015-05-11 23:36 - 2015-05-12 00:04 - 00000000 ____D () C:\ComboFix

2015-05-11 23:36 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2015-05-11 23:36 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2015-05-11 23:36 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2015-05-11 23:36 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2015-05-11 23:36 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2015-05-11 23:36 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2015-05-11 23:36 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2015-05-11 23:36 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2015-05-11 23:34 - 2015-05-12 00:04 - 00000000 ____D () C:\Qoobox

2015-05-11 23:33 - 2015-05-12 00:02 - 00000000 ____D () C:\Windows\erdnt

2015-05-11 23:31 - 2015-05-11 23:31 - 05623215 ____R (Swearware) C:\Users\Jonas *****\Desktop\ComboFix.exe

2015-05-07 23:24 - 2015-05-07 23:25 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Jonas *****\Desktop\tdsskiller.exe

2015-05-07 21:29 - 2015-05-07 21:29 - 00003574 _____ () C:\Users\Jonas *****\Desktop\Gmer.txt

2015-05-07 21:01 - 2015-05-13 00:23 - 00000000 ____D () C:\FRST

2015-05-07 20:58 - 2015-05-07 20:58 - 00000000 _____ () C:\Users\Jonas *****\defogger_reenable

2015-05-07 18:56 - 2015-05-12 23:51 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-05-07 18:55 - 2015-05-07 20:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-05-07 18:55 - 2015-05-07 20:34 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware

2015-05-07 18:55 - 2015-04-14 09:37 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-05-07 18:55 - 2015-04-14 09:37 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-04-28 16:10 - 2015-04-28 16:10 - 00008862 _____ () C:\Users\Jonas *****\.recently-used.xbel

2015-04-16 03:44 - 2015-04-16 03:44 - 00000000 ____D () C:\found.000

2015-04-15 10:38 - 2015-03-23 05:06 - 00860160 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-04-15 10:38 - 2015-03-23 05:06 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-04-15 10:38 - 2015-03-23 05:06 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-04-15 10:38 - 2015-03-23 05:06 - 00331264 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-04-15 10:38 - 2015-03-23 05:06 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-04-15 10:38 - 2015-03-23 05:06 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-04-15 10:38 - 2015-03-23 05:06 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-04-15 10:38 - 2015-03-23 04:59 - 00896000 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-04-15 10:37 - 2015-04-02 01:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-04-15 10:37 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2015-04-15 10:37 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-04-15 10:37 - 2015-03-17 07:01 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-04-15 10:37 - 2015-03-17 07:01 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-04-15 10:37 - 2015-03-17 06:59 - 01306112 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-04-15 10:37 - 2015-03-17 06:57 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-04-15 10:37 - 2015-03-17 06:56 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-04-15 10:37 - 2015-03-17 06:56 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-04-15 10:37 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-04-15 10:37 - 2015-03-17 06:56 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-04-15 10:37 - 2015-03-17 06:56 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-04-15 10:37 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-04-15 10:37 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-04-15 10:37 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-04-15 10:37 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-04-15 10:37 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-04-15 10:37 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-04-15 10:37 - 2015-03-13 05:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-04-15 10:37 - 2015-03-13 05:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-04-15 10:37 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-04-15 10:37 - 2015-03-13 05:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-04-15 10:37 - 2015-03-13 05:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-04-15 10:37 - 2015-03-13 05:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-04-15 10:37 - 2015-03-13 05:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-04-15 10:37 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-04-15 10:37 - 2015-03-13 05:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-04-15 10:37 - 2015-03-13 05:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-04-15 10:37 - 2015-03-13 05:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-04-15 10:37 - 2015-03-13 05:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-04-15 10:37 - 2015-03-13 05:16 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-04-15 10:37 - 2015-03-13 05:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-04-15 10:37 - 2015-03-13 05:09 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-04-15 10:37 - 2015-03-13 05:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-04-15 10:37 - 2015-03-13 05:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-04-15 10:37 - 2015-03-13 04:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-04-15 10:37 - 2015-03-13 04:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-04-15 10:37 - 2015-03-13 04:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-04-15 10:37 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-04-15 10:37 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-04-15 10:37 - 2015-03-13 04:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-04-15 10:37 - 2015-03-13 04:43 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-04-15 10:37 - 2015-03-13 04:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-04-15 10:37 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-04-15 10:37 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-04-15 10:37 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-04-15 10:37 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-04-15 10:37 - 2015-03-05 06:06 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-04-15 10:37 - 2015-03-04 06:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys

2015-04-15 10:37 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll

2015-04-15 10:36 - 2015-03-25 05:00 - 03088384 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-04-15 10:36 - 2015-03-25 05:00 - 02020864 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-04-15 10:36 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-04-15 10:36 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-04-15 10:36 - 2015-03-25 05:00 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-04-15 10:36 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-04-15 10:36 - 2015-03-25 05:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-04-15 10:36 - 2015-03-25 05:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-04-15 10:36 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-04-15 10:36 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-04-15 10:36 - 2015-03-25 05:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-04-15 10:35 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-04-15 10:35 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-04-15 10:35 - 2015-02-25 05:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-05-13 00:24 - 2013-05-08 14:16 - 00691200 ____H () C:\Users\Jonas *****\Documents\.csync_journal.db.ctmp

2015-05-13 00:24 - 2013-05-08 14:16 - 00691200 ____H () C:\Users\Jonas *****\Documents\.csync_journal.db

2015-05-13 00:23 - 2010-11-28 15:15 - 00000000 ____D () C:\ProgrammeJonas

2015-05-13 00:21 - 2010-11-26 05:51 - 01772362 _____ () C:\Windows\WindowsUpdate.log

2015-05-13 00:19 - 2010-11-25 22:14 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-05-12 23:59 - 2009-07-14 06:34 - 00018512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-05-12 23:59 - 2009-07-14 06:34 - 00018512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-05-12 23:56 - 2012-08-06 19:08 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-05-12 23:49 - 2010-11-25 22:14 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-05-12 23:49 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-05-12 23:49 - 2009-07-14 06:39 - 00130155 _____ () C:\Windows\setupact.log

2015-05-12 00:37 - 2014-06-25 01:22 - 00000000 ____D () C:\Users\Jonas *****\Documents\Bilder

2015-05-12 00:04 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public

2015-05-11 23:57 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini

2015-05-11 23:53 - 2010-08-30 11:48 - 00826240 _____ () C:\Windows\PFRO.log

2015-05-11 22:57 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Help

2015-05-07 20:58 - 2010-11-25 22:19 - 00000000 ____D () C:\Users\Jonas *****

2015-05-07 20:34 - 2014-01-06 12:33 - 00001068 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-05-07 18:57 - 2015-01-15 23:11 - 00000000 ____D () C:\Users\Jonas *****\AppData\Local\Wunderlist

2015-05-07 18:55 - 2014-01-06 12:33 - 00000000 ____D () C:\Users\Jonas *****\AppData\Roaming\Malwarebytes

2015-05-07 18:55 - 2014-01-06 12:33 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-05-07 18:55 - 2014-01-06 12:33 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware

2015-05-07 18:52 - 2014-01-05 14:22 - 00000000 ____D () C:\ProgramData\Updater

2015-05-04 20:46 - 2014-04-03 10:19 - 00000000 ____D () C:\Users\Jonas *****\Desktop\Christina

2015-05-01 09:40 - 2010-11-25 22:14 - 00002125 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2015-04-29 10:41 - 2010-08-28 02:49 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-04-28 16:11 - 2011-12-14 11:53 - 00000000 ____D () C:\Users\Jonas *****\.gimp-2.6

2015-04-28 16:10 - 2010-12-07 22:31 - 00000000 ____D () C:\Users\Jonas *****\AppData\Roaming\gtk-2.0

2015-04-28 16:07 - 2015-04-11 21:32 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2015-04-28 16:07 - 2012-07-07 01:19 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service

2015-04-28 16:07 - 2009-07-14 06:53 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2015-04-22 13:47 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\AppCompat

2015-04-20 15:22 - 2011-01-10 00:59 - 00000000 ____D () C:\Users\Jonas *****\Documents\Studium

2015-04-20 11:32 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache

2015-04-16 03:54 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET

2015-04-16 03:35 - 2014-12-11 04:30 - 00000000 ____D () C:\Windows\system32\appraiser

2015-04-16 03:35 - 2014-05-07 03:02 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-04-16 03:35 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE

2015-04-16 03:19 - 2013-07-21 03:01 - 00000000 ____D () C:\Windows\system32\MRT

2015-04-16 03:06 - 2010-08-30 18:47 - 125832184 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-04-15 11:57 - 2012-05-03 17:23 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2015-04-15 11:57 - 2011-05-15 22:19 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2015-04-14 09:37 - 2014-01-06 12:33 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
 

==================== Files in the root of some directories =======
 

2012-02-13 17:10 - 2012-02-13 17:10 - 0000085 ___SH () C:\ProgramData\.zreglib

2014-05-29 00:36 - 2014-09-18 01:22 - 0002097 _____ () C:\ProgramData\flcd_proxy.log

2011-12-13 14:19 - 2011-12-13 14:25 - 0000355 _____ () C:\ProgramData\hpzinstall.log
 

Some content of TEMP:

====================

C:\Users\Jonas *****\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-05-04 15:52
 

==================== End Of Log ============================

--- --- ---

[/CODE]

Code:



Additional scan result of Farbar Recovery Scan Tool (x86) Version: 06-05-2015 01

Ran by Jonas ***** at 2015-05-13 00:24:48

Running from C:\ProgrammeJonas

Boot Mode: Normal

==========================================================
 
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-1471510115-2474919708-3564051268-500 - Administrator - Disabled)

Gast (S-1-5-21-1471510115-2474919708-3564051268-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1471510115-2474919708-3564051268-1002 - Limited - Enabled)

Jonas ***** (S-1-5-21-1471510115-2474919708-3564051268-1001 - Administrator - Enabled) => C:\Users\Jonas *****
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 15.0.0.249 - Adobe Systems Incorporated)

Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Reader 9.5.5 MUI (HKLM\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.5.5 - Adobe Systems Incorporated)

Adobe Shockwave Player 11.5 (HKLM\...\Adobe Shockwave Player) (Version: 11.5.8.612 - Adobe Systems, Inc.)

Anki (HKLM\...\Anki) (Version:  - )

Apple Application Support (HKLM\...\{343666E2-A059-48AC-AD67-230BF74E2DB2}) (Version: 2.1.6 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{8153ED9A-C94A-426E-9880-5E6775C08B62}) (Version: 4.0.0.97 - Apple Inc.)

Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ATI Catalyst Install Manager (HKLM\...\{BE4AE3A7-190D-BCB8-A953-A708C9E8E8AA}) (Version: 3.0.778.0 - ATI Technologies, Inc.)

Avira (HKLM\...\{b5675cc4-ab8b-4945-8c1d-4c5479556d6a}) (Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG)

Avira (Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG) Hidden

Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.9.504 - Avira Operations GmbH & Co. KG)

BlueJ 3.0.4 (HKLM\...\BlueJ_is1) (Version:  - La Trobe University)

Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)

BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden

ccc-core-static (Version: 2010.0527.1242.20909 - ATI) Hidden

CdCreate AM Testversion (HKLM\...\{98667FC9-D57F-11DD-B64E-93631AE7A456}) (Version: 2.80.0000 - Galerie Fuchstal)

Cinergy T Stick RC V86.001.1129.2011 (HKLM\...\Cinergy T Stick RC) (Version: 86.001.1129.2011 - )

Cinergy T USB XXS V2.03.03.29 (HKLM\...\Cinergy T USB XXS) (Version: 2.03.03.29 - )

Cinergy T-Stick MKII V9.06.3.01 (HKLM\...\Cinergy T-Stick MKII) (Version: 9.06.3.01 - )

CorelDRAW Essentials 4 - Content (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Draw (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Filters (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - ICA (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - IPM - No VBA (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang BR (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang DE (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang EN (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang ES (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang FR (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang IT (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang NL (Version: 4.0 - Uw bedrijfsnaam) Hidden

CorelDRAW Essentials 4 - PHOTO-PAINT (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Windows Shell Extension (HKLM\...\_{CF0ADC18-6D8F-4353-8EAA-DF45456B7853}) (Version:  - Corel Corporation)

CorelDRAW Essentials 4 - Windows Shell Extension (Version: 1.1 - Corel Corporation) Hidden

CorelDRAW Essentials 4 (HKLM\...\_{C0237AA4-1BFB-46EA-860D-7B0EB365CA13}) (Version:  - Corel Corporation)

CorelDRAW Essentials 4 (Version: 4.0 - Corel Corporation) Hidden

CyberLink LabelPrint (HKLM\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2515 - CyberLink Corp.)

CyberLink Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.)

CyberLink PowerDVD Copy (HKLM\...\InstallShield_{E3D04529-6EDB-11D8-A372-0050BAE317E1}) (Version: 1.5.1306 - CyberLink Corp.)

Destinations (Version: 130.0.0.0 - Hewlett-Packard) Hidden

DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden

ElsterFormular (HKLM\...\ElsterFormular) (Version: 15.3.14949 - Landesfinanzdirektion Thüringen)

FIFA 2003 (HKLM\...\{6A1DC8D4-9FA4-43C3-00B3-5993B4BBE7D4}) (Version:  - )

Funkyplot 1.1.0-pre1 (HKLM\...\Funkyplot_is1) (Version:  - LOGICIEL)

GIMP 2.6.11 (HKLM\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)

Google Chrome (HKLM\...\Google Chrome) (Version: 42.0.2311.135 - Google Inc.)

Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden

GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden

GPL Ghostscript (HKLM\...\GPL Ghostscript 9.05) (Version: 9.05 - Artifex Software Inc.)

GSview 5.0 (HKLM\...\GSview 5.0) (Version: 5.0 - Ghostgum Software Pty Ltd)

HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)

HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)

HP Scanjet G4000 Series (HKLM\...\{10297E58-2DFE-478B-9A1D-4B14E4E79CDF}) (Version: 13.0 - HP)

HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)

HP Update (HKLM\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)

hpg4000 (Version: 13.0.0.0 - Ihr Firmenname) Hidden

HPPhotosmartEssential (Version: 2.04.0000 - Hewlett-Packard) Hidden

HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden

Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)

iTunes (HKLM\...\{F6D6B258-E3CA-4AAC-965A-68D3E3140A8C}) (Version: 10.5.3.3 - Apple Inc.)

Java 8 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)

Java DB 10.5.3.0 (HKLM\...\{00BA866C-F2A2-4BB9-A308-3DFA695B6F7C}) (Version: 10.5.3.0 - Sun Microsystems, Inc)

Java(TM) SE Development Kit 6 Update 23 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0160230}) (Version: 1.6.0.230 - Oracle)

Junk Mail filter update (Version: 14.0.8117.416 - Microsoft Corporation) Hidden

Kalenderchen 6 (HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\...\Kalenderchen 6) (Version:  - )

Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)

MATLAB R2009b (HKLM\...\MatlabR2009b) (Version: 7.9 - The MathWorks, Inc.)

Media Markt Fotoservice 4.4 (HKLM\...\Media Markt Fotoservice_is1) (Version:  - )

Medion Home Cinema (HKLM\...\InstallShield_{AB770FDE-8087-4C98-9A85-BD64262C104C}) (Version: 6.0.0000 - CyberLink Corp.)

Medion Home Cinema (Version: 6.0.0000 - CyberLink Corp.) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office XP Developer - German (HKLM\...\Microsoft Office XP Developer - German) (Version:  - )

Microsoft Office XP Professional mit FrontPage (HKLM\...\{90280407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.6626.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [DEU] (HKLM\...\{BAC80EF3-E106-4AEA-8C57-F217F9BC7358}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

MiKTeX 2.9 (HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org)

MOD 10.0 Baseline (English-x86-CD) (Version: 7.00.9177 - Microsoft) Hidden

Mozilla Firefox 37.0.2 (x86 de) (HKLM\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 35.0.1 - Mozilla)

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)

OpenOffice.org 3.2 (HKLM\...\{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}) (Version: 3.2.9502 - OpenOffice.org)

ownCloud (HKLM\...\ownCloud) (Version: 1.2.5 - ownCloud, Inc)

PDF24 Creator 6.9.2 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)

PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)

Project64 1.6 (HKLM\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)

R for Windows 3.1.1 (HKLM\...\R for Windows 3.1.1_is1) (Version: 3.1.1 - R Core Team)

Realtek Ethernet Controller Driver For Windows 7 (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.21.531.2010 - Realtek)

Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6136 - Realtek Semiconductor Corp.)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.4.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.0.4.0 - Renesas Electronics Corporation) Hidden

RStudio (HKLM\...\RStudio) (Version: 0.98.983 - RStudio)

Scan (Version: 13.0.0.0 - Hewlett-Packard) Hidden

SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden

Spelling Dictionaries Support For Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)

Stellar Phoenix Windows Data Recovery-Home (HKLM\...\Stellar Phoenix Windows Data Recovery-Home_is1) (Version: 4.2.0.0 - Stellar Information Systems Ltd)

TerraTec Home Cinema (HKLM\...\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}) (Version: 6.25.6 - )

Texmaker (HKLM\...\Texmaker) (Version:  - )

TIPP10 Version 2.1.0 (HKLM\...\TIPP10_is1) (Version:  - (c) 2006-2011, Tom Thielicke IT Solutions)

TmNationsForever (HKLM\...\TmNationsForever_is1) (Version:  - Nadeo)

WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden

Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)

WinRAR 4.00 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.00.0 - win.rar GmbH)

WISO Mein Geld 2011 Professional (HKLM\...\WISO Mein Geld 2011 Professional) (Version:  - Buhl Data Service GmbH)

WISO Mein Geld 2011 Professional (Version: 12.00.02.0024 - Buhl Data Service GmbH) Hidden

WISO Steuer-Sparbuch 2014 (HKLM\...\{F03AAE28-2598-4490-AB26-2B35A0E58828}) (Version: 21.08.8679 - Buhl Data Service GmbH)

Wunderlist (HKLM\...\{1ca68332-4ba1-4943-9010-eaa1aa45b492}) (Version: 2.3.0.31 - 6 Wunderkinder GmbH)

Wunderlist (Version: 2.3.0.31 - 6 Wunderkinder GmbH) Hidden
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 

21-04-2015 09:45:33 Windows Update

24-04-2015 10:03:27 Windows Update

28-04-2015 09:21:01 Windows Update

01-05-2015 09:48:43 Windows Update

06-05-2015 01:37:00 Windows Update

11-05-2015 23:05:33 Windows Update
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:04 - 2015-05-11 23:52 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {25841487-1C33-40BF-8120-5494E99B5656} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {3212333B-1F16-4C10-98F4-7C75FAA9E40A} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)

Task: {4FB622F1-A454-4F6B-BEB4-F71C1A08B1D9} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {51216052-0F20-4386-B40C-C710038DBAD8} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {59D093B0-92DA-42A3-A9BF-2B349A2CB79F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)

Task: {61F13637-483C-42D4-927C-F8099A17FB78} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)

Task: {6F151318-12A0-4D00-8F09-2EC27733568C} - System32\Tasks\{422FC7C0-2347-4491-A45A-99E34858989B} => pcalua.exe -a C:\Windows\LargoWinchInst\SetupUbi.exe -c -uninstall Largo

Task: {8A6329B5-0F52-4A46-8FEF-B34930A60984} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)

Task: {D0B8CBAD-B240-4E45-A1BD-7AFF085A8504} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {D67732B8-E5A2-4676-A3D6-7F013BF6DAFC} - System32\Tasks\{B86A33F0-D926-4927-A51E-BF2C8D32A885} => pcalua.exe -a C:\WINDOWS\ISUN0407.EXE -c -f"c:\program files\Uninst.isu" -c"c:\program files\Uninst.dll"
 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) ==============
 

2008-09-08 11:19 - 2008-09-08 11:19 - 00022723 _____ () C:\Windows\System32\cl31cl3.dll

2011-11-02 00:26 - 2011-11-02 00:26 - 00087912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2011-11-02 00:26 - 2011-11-02 00:26 - 01242472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2009-11-02 23:20 - 2009-11-02 23:20 - 00619816 ____N () C:\Program Files\CyberLink\Power2Go\CLMediaLibrary.dll

2009-11-02 23:23 - 2009-11-02 23:23 - 00013096 ____N () C:\Program Files\CyberLink\Power2Go\CLMLSvcPS.dll

2013-04-22 17:00 - 2013-04-22 17:00 - 01253540 _____ () C:\Program Files\ownCloud\owncloud.exe

2012-12-21 15:27 - 2012-12-21 15:27 - 00106700 _____ () C:\Program Files\ownCloud\zlib1.dll

2012-12-22 03:16 - 2012-12-22 03:16 - 00120916 _____ () C:\Program Files\ownCloud\libgcc_s_sjlj-1.dll

2012-12-22 03:16 - 2012-12-22 03:16 - 00864381 _____ () C:\Program Files\ownCloud\libstdc++-6.dll

2012-12-21 15:32 - 2012-12-21 15:32 - 00176680 _____ () C:\Program Files\ownCloud\libpng15-15.dll

2013-04-22 16:58 - 2013-04-22 16:58 - 00816147 _____ () C:\Program Files\ownCloud\libowncloudsync.dll

2013-02-21 16:59 - 2013-02-21 16:59 - 00074118 _____ () C:\Program Files\ownCloud\libqtkeychain.dll

2013-04-22 16:56 - 2013-04-22 16:56 - 00834505 _____ () C:\Program Files\ownCloud\libocsync.dll

2012-12-21 22:13 - 2012-12-21 22:13 - 00038291 _____ () C:\Program Files\ownCloud\libdl.dll

2013-02-04 23:07 - 2013-02-04 23:07 - 00044685 _____ () C:\Program Files\ownCloud\libiniparser.dll

2012-12-21 20:02 - 2012-12-21 20:02 - 00567611 _____ () C:\Program Files\ownCloud\libsqlite3-0.dll

2015-01-09 12:24 - 2015-01-09 12:24 - 01166336 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ReactiveUI\1a96a8c1c19e0195d67a9950d1f4d527\ReactiveUI.ni.dll

2015-01-09 12:24 - 2015-01-09 12:24 - 00027136 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Wunderkinde6f42a4a9#\bcb87239e984b283cc128a55e9bc3aaf\Wunderkinder.Wunderlist.Data.Realtime.ni.dll

2015-01-09 12:24 - 2015-01-09 12:24 - 00376320 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Akavache.Portable\47d6f1dd3d6ffb3bc16647055208cdfb\Akavache.Portable.ni.dll

2015-01-09 12:24 - 2015-01-09 12:24 - 00039424 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Wunderkinded9c6edae#\af819191c1a5d188230c5ce0bfb68220\Wunderkinder.Wunderlist.Presentation.ni.dll

2010-05-27 21:40 - 2010-05-27 21:40 - 00270336 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll

2010-05-04 16:36 - 2010-05-04 16:36 - 00970752 _____ () C:\Program Files\OpenOffice.org 3\program\libxml2.dll

2014-10-16 03:50 - 2014-10-16 03:50 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\3d576cbc4ffc5ad06fd61510c5d8f326\IsdiInterop.ni.dll

2010-08-30 20:04 - 2010-03-04 05:08 - 00058880 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

2015-04-15 11:57 - 2015-04-15 11:57 - 16863920 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== Internet Explorer trusted/restricted ===============
 

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: Media is not connected to internet.
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 
 

==================== FirewallRules (whitelisted) ===============
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

FirewallRules: [TCP Query User{DC794C29-32CC-4974-9400-D80C6A3F4F00}C:\programmejonas\taxi raser\taxi raser.exe] => (Block) C:\programmejonas\taxi raser\taxi raser.exe

FirewallRules: [UDP Query User{1A82D905-EDDA-463E-89AB-1F7EB5A51EEA}C:\programmejonas\taxi raser\taxi raser.exe] => (Block) C:\programmejonas\taxi raser\taxi raser.exe

FirewallRules: [TCP Query User{ED38330D-DEB7-453D-91AA-4ADF5A6425CD}C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe] => (Block) C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe

FirewallRules: [UDP Query User{84894ECA-9CB8-4F76-8845-B3B5AF85FC23}C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe] => (Block) C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe

FirewallRules: [{FF002A04-FA73-4000-A11C-3BEE45B6CE28}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe

FirewallRules: [{5231EEC6-9410-4F31-9391-6AF6F00D3A25}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe

FirewallRules: [{C2518630-9012-4A03-8418-6D8580618524}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe

FirewallRules: [{55FBD93D-AB58-449B-B772-578D8BC5EBCB}] => (Allow) C:\Program Files\common files\hp\digital imaging\bin\hpqphotocrm.exe

FirewallRules: [{3FDB65D5-AD0B-4628-9FDC-5CD0E939A126}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe

FirewallRules: [{ED88D7B2-7241-4E41-8DED-87E6BF922CE4}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe

FirewallRules: [{E9AEA340-D6A4-4EEB-838E-C3D45E8ACEF9}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe

FirewallRules: [{17F8A429-7A05-4077-A934-3D180CA8968C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe

FirewallRules: [{30FF85D6-7CE6-4ED9-8099-FC43AE8A56F6}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

FirewallRules: [{83DEC76E-9F83-4302-AEE7-96E03014CFE7}] => (Allow) C:\Program Files\HP\hp software update\hpwucli.exe

FirewallRules: [{5AEA1869-BACB-4F1F-815D-4C453A802D9E}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\CinergyDvr.exe

FirewallRules: [{B963AE06-7617-43F6-AAA9-9D6E092FDF78}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\CinergyDvr.exe

FirewallRules: [{F1D9C10F-7210-40A8-B8D5-AE7D4FA53A4C}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe

FirewallRules: [{826F9D84-EE9C-49CC-BF6D-5467E0572A2E}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe

FirewallRules: [{DC5B8CE3-C71D-491B-9C1B-BAAD08A5FBF8}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\InstTool.exe

FirewallRules: [{227EE136-2668-475D-AAFA-0E0C18E3A910}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\InstTool.exe

FirewallRules: [{5ADE8544-17EB-4B32-B973-F37F7FB9292F}] => (Allow) C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe

FirewallRules: [{B928DD33-32A6-4558-9B6C-1E6C138C5798}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{8822F8D9-2068-4F15-B96B-27337BB85C81}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{CB9381BD-BA39-4C0D-9201-806A3BD36C15}] => (Allow) C:\Program Files\iTunes\iTunes.exe

FirewallRules: [{45F8B089-9F2A-4C01-8EAE-4346F8C007DA}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\InstTool.exe

FirewallRules: [{AAEE0B9D-1D90-4D0F-A441-2A5050AF960D}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\InstTool.exe

FirewallRules: [{4EB951AF-E1B3-4857-A07E-EA1B78E57990}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\CinergyDvr.exe

FirewallRules: [{6C1E7793-6B0E-4208-9D2B-BBAFC15BA223}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\CinergyDvr.exe

FirewallRules: [{A9F559C6-EA9A-4A99-9BBD-4FBCBC447E5B}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe

FirewallRules: [{2CABA8DC-F77E-4B3A-91C4-E4C3D671D6D4}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe

FirewallRules: [TCP Query User{E1F4401C-95BD-402C-9DB4-9F80F23C836A}C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe] => (Allow) C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe

FirewallRules: [UDP Query User{A919A04F-22E9-4F1C-B419-581BF64F03CA}C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe] => (Allow) C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe

FirewallRules: [TCP Query User{B018C01A-B6F6-45E0-A11C-3B0811DA2F0C}C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe] => (Block) C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe

FirewallRules: [UDP Query User{7A80BBCD-6AE9-4145-80D3-60AF268FC900}C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe] => (Block) C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe

FirewallRules: [TCP Query User{BE522805-BD65-4391-A54F-89CA1E987E64}C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe] => (Allow) C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe

FirewallRules: [UDP Query User{16FD6222-9F6C-43C5-907F-58406A0F91CE}C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe] => (Allow) C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe

FirewallRules: [{E2A31A10-9C22-4670-8319-E3C537BD8719}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

FirewallRules: [TCP Query User{C8B0BC7D-986C-40EF-8960-5DEAE2708BD1}C:\program files\tmnationsforever\tmforever.exe] => (Block) C:\program files\tmnationsforever\tmforever.exe

FirewallRules: [UDP Query User{D840C2DE-7340-4F8B-ADED-9D4E8A1AB6F2}C:\program files\tmnationsforever\tmforever.exe] => (Block) C:\program files\tmnationsforever\tmforever.exe

FirewallRules: [{4A03E388-E847-4603-85B5-7A21F6E5B28C}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{955432A8-C4B0-44C3-A0B0-2230049D6B4C}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [TCP Query User{1F81D1E8-5D16-4DD7-8E17-410EB255B372}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{EFDBDE91-E0F8-470B-AA2F-750FACF6BFFC}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe

FirewallRules: [{63714984-330D-47F1-B9C1-E747482F129A}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (05/12/2015 02:30:56 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 9969
 

Error: (05/12/2015 02:30:56 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 9969
 

Error: (05/12/2015 02:30:56 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (05/11/2015 11:54:01 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: 468: ERROR: read_msg errno 0 (Der Vorgang wurde erfolgreich beendet.)
 

Error: (05/11/2015 11:54:01 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ERROR: mDNSPlatformReadTCP - recv: 10053
 

Error: (05/11/2015 11:50:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 66566
 

Error: (05/11/2015 11:50:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 66566
 

Error: (05/11/2015 11:50:07 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (05/07/2015 11:19:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 15647
 

Error: (05/07/2015 11:19:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 15647
 
 

System errors:

=============

Error: (05/12/2015 11:50:00 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.
 

Error: (05/12/2015 00:12:12 AM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.
 

Error: (05/11/2015 11:53:46 PM) (Source: EventLog) (EventID: 6008) (User: )

Description: Das System wurde zuvor am ‎11.‎05.‎2015 um 23:52:52 unerwartet heruntergefahren.
 

Error: (05/11/2015 11:45:20 PM) (Source: Service Control Manager) (EventID: 7030) (User: )

Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
 

Error: (05/11/2015 11:39:07 PM) (Source: Service Control Manager) (EventID: 7030) (User: )

Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
 

Error: (04/28/2015 09:45:29 AM) (Source: Server) (EventID: 2505) (User: )

Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{9A295CD5-A244-421C-A8EF-9E3A343737CB} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.
 

Error: (04/15/2015 08:57:38 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.
 

Error: (04/14/2015 11:23:53 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.

Führen Sie auf dem Volume "Boot" den Befehl "chkdsk" aus.
 

Error: (04/14/2015 06:57:48 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
 

Error: (04/14/2015 06:57:45 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
 
 

Microsoft Office Sessions:

=========================

Error: (05/12/2015 02:30:56 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 9969
 

Error: (05/12/2015 02:30:56 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 9969
 

Error: (05/12/2015 02:30:56 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (05/11/2015 11:54:01 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: 468: ERROR: read_msg errno 0 (Der Vorgang wurde erfolgreich beendet.)
 

Error: (05/11/2015 11:54:01 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ERROR: mDNSPlatformReadTCP - recv: 10053
 

Error: (05/11/2015 11:50:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 66566
 

Error: (05/11/2015 11:50:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 66566
 

Error: (05/11/2015 11:50:07 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (05/07/2015 11:19:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 15647
 

Error: (05/07/2015 11:19:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 15647
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i3 CPU 550 @ 3.20GHz

Percentage of memory in use: 54%

Total physical RAM: 3063.11 MB

Available physical RAM: 1400.29 MB

Total Pagefile: 6124.52 MB

Available Pagefile: 3711.85 MB

Total Virtual: 2047.88 MB

Available Virtual: 1914.92 MB
 

==================== Drives ================================
 

Drive c: (Boot) (Fixed) (Total:1356.17 GB) (Free:1098.8 GB) NTFS

Drive d: (Recover) (Fixed) (Total:40 GB) (Free:20.99 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 1397.3 GB) (Disk ID: 2BD2C32A)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=1356.2 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=40 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=1 GB) - (Type=12)
 

==================== End Of Log ============================

deeprybka

13.05.2015 14:50

OK,
jetzt bitte einen Suchscan durchführen:

Schritt 1

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Patroklos91

13.05.2015 20:05

Sollen USB-Sticks, Festplatten etc. vor dem Scan wirklich angeschlossen werden?

deeprybka

13.05.2015 20:08

Ja, außer Du bist Dir sicher, dass da keine Malware drauf ist. :D

Patroklos91

14.05.2015 07:40

Hier kommt das Log-File des ESET-Scans ... USB-Sticks oder externe Festplatten hatte ich seit dem Öffnen des Mail-Anhangs nicht an den Rechner angeschlossen und habe diese deshalb auch nicht in den Scan mit einbezogen.

Nächster Schritt? Ansonsten einen schönen Feiertag! Ach ja, meine nächste Antwort gibt es wohl erst wieder am Sonntagabend. Ich melde mich dann zurück.
Gruß Patroklos

Code:



ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7623

# api_version=3.0.2

# EOSSerial=51404ff545762e4da33e1f23c398b084

# engine=23834

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2015-05-14 02:22:15

# local_time=2015-05-14 04:22:15 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1=''

# compatibility_mode=5893 16776573 100 94 67942 183201326 0 0

# scanned=448010

# found=26

# cleaned=0

# scan_time=15372

sh=E5AD99CE7C7362CA566156033ECB0F04F9437CA7 ft=1 fh=f45d83e01e1c8734 vn="Win32/Toolbar.Conduit.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Avanquest_App'-Anwendungsleiste\Avanquest_App'-AnwendungsleisteToolbarHelper.exe.vir"

sh=1E00782FEC3CA539AE30F866502633FF550356C6 ft=1 fh=46da0b21d76c5220 vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Avanquest_App'-Anwendungsleiste\ldrtbAvan.dll.vir"

sh=A2D929A9864513C0E8ED84AAD622EF6ADCC9B950 ft=1 fh=22c06217fc444ec5 vn="Win32/Toolbar.Conduit.O evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Avanquest_App'-Anwendungsleiste\prxtbAva0.dll.vir"

sh=A2D929A9864513C0E8ED84AAD622EF6ADCC9B950 ft=1 fh=22c06217fc444ec5 vn="Win32/Toolbar.Conduit.O evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Avanquest_App'-Anwendungsleiste\prxtbAvan.dll.vir"

sh=E6F9792E271F52A2245CC8D72C05A57D6DFBBDE3 ft=1 fh=0690a81bbbd9c1b6 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Avanquest_App'-Anwendungsleiste\tbAvan.dll.vir"

sh=97BCCD25561F44E9B13F05F6EEF083C9CE9BA529 ft=1 fh=641f1fb3d2e699c4 vn="Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Conduit\Community Alerts\Alert.dll.vir"

sh=E5AD99CE7C7362CA566156033ECB0F04F9437CA7 ft=1 fh=f45d83e01e1c8734 vn="Win32/Toolbar.Conduit.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Jonas *****\AppData\Local\Conduit\CT2529008\Avanquest_App'-AnwendungsleisteAutoUpdateHelper.exe.vir"

sh=D4D640E4A04D91DEF41DAD844D1EC046FA1D5F3E ft=1 fh=f32a1de57c3d142e vn="Variante von Win32/Toolbar.Conduit.AH evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Jonas *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg\10.24.3.503_0\nativeMessaging\TBMessagingHost.exe.vir"

sh=8E285C2E4BD51F93FDFB76801BABFD9BBBB3B1C9 ft=1 fh=5e02ad9896e321fa vn="Variante von Win32/Amonetize.AB evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Jonas *****\AppData\Local\SwvUpdater\Updater.exe.vir"

sh=568B7040522AE31BE5FF0BD450B7D0B7A218E7A1 ft=1 fh=bb7982953e0dc058 vn="Variante von Win32/ELEX.BF evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Jonas *****\AppData\Local\Temp\Desk365\eInstall\eInstall.exe.vir"

sh=1E00782FEC3CA539AE30F866502633FF550356C6 ft=1 fh=46da0b21d76c5220 vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Jonas *****\AppData\LocalLow\Avanquest_App'-Anwendungsleiste\ldrtbAvan.dll.vir"

sh=E6F9792E271F52A2245CC8D72C05A57D6DFBBDE3 ft=1 fh=0690a81bbbd9c1b6 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Jonas *****\AppData\LocalLow\Avanquest_App'-Anwendungsleiste\tbAvan.dll.vir"

sh=019BD6DEB00A8E2947DD741443A105AAA7AE8452 ft=1 fh=478787c8122fddfc vn="Variante von Win32/Toolbar.SearchSuite.Z evtl. unerwünschte Anwendung" ac=I fn="C:\Datensicherung Walter Mai 2014\Walter\Datensicherung Aldi-PC März 2012\Walter\Downloads\iLividSetupV1.exe"

sh=67971BFDA4A85D27945D4F77AEFFDD17350C693F ft=1 fh=26404b2de5881d6f vn="Win32/Adware.PCFixCleaner Anwendung" ac=I fn="C:\Datensicherung Walter Mai 2014\Walter\Datensicherung Aldi-PC März 2012\Walter\Downloads\pcfix-v205-de(2).exe"

sh=67971BFDA4A85D27945D4F77AEFFDD17350C693F ft=1 fh=26404b2de5881d6f vn="Win32/Adware.PCFixCleaner Anwendung" ac=I fn="C:\Datensicherung Walter Mai 2014\Walter\Datensicherung Aldi-PC März 2012\Walter\Downloads\pcfix-v205-de.exe"

sh=213CEC4C7200028CE0A49E2AE841EDDFEC821FFE ft=1 fh=d128db2f9733d410 vn="Win32/RegistryBooster evtl. unerwünschte Anwendung" ac=I fn="C:\Datensicherung Walter Mai 2014\Walter\Datensicherung Aldi-PC März 2012\Walter\Downloads\registrybooster(1).exe"

sh=213CEC4C7200028CE0A49E2AE841EDDFEC821FFE ft=1 fh=d128db2f9733d410 vn="Win32/RegistryBooster evtl. unerwünschte Anwendung" ac=I fn="C:\Datensicherung Walter Mai 2014\Walter\Datensicherung Aldi-PC März 2012\Walter\Downloads\registrybooster(2).exe"

sh=213CEC4C7200028CE0A49E2AE841EDDFEC821FFE ft=1 fh=d128db2f9733d410 vn="Win32/RegistryBooster evtl. unerwünschte Anwendung" ac=I fn="C:\Datensicherung Walter Mai 2014\Walter\Datensicherung Aldi-PC März 2012\Walter\Downloads\registrybooster(3).exe"

sh=2A11C812839A4A228019C1FB39238EF5041887B4 ft=1 fh=ccfedff2495351cf vn="Win32/RegistryBooster evtl. unerwünschte Anwendung" ac=I fn="C:\Datensicherung Walter Mai 2014\Walter\Datensicherung Aldi-PC März 2012\Walter\Downloads\registrybooster.exe"

sh=1D5316EE651AD2DDE0EA779823507E37CDF90664 ft=1 fh=2d5732c9f96eff3b vn="Variante von Win32/SlowPCfighter evtl. unerwünschte Anwendung" ac=I fn="C:\Datensicherung Walter Mai 2014\Walter\Datensicherung Aldi-PC März 2012\Walter\Downloads\slow-pcfighter_Web.exe"

sh=9BB071BC9E49A4C6C0208B6D563FB6C0DFB2F147 ft=1 fh=50b1f8b169c3d753 vn="Win32/SoftonicDownloader.A evtl. unerwünschte Anwendung" ac=I fn="C:\Datensicherung Walter Mai 2014\Walter\Datensicherung Aldi-PC März 2012\Walter\Downloads\SoftonicDownloader72279(2).exe"

sh=9BB071BC9E49A4C6C0208B6D563FB6C0DFB2F147 ft=1 fh=50b1f8b169c3d753 vn="Win32/SoftonicDownloader.A evtl. unerwünschte Anwendung" ac=I fn="C:\Datensicherung Walter Mai 2014\Walter\Datensicherung Aldi-PC März 2012\Walter\Downloads\SoftonicDownloader72279.exe"

sh=ECACB71BA4B050039E3FCBBB6805498B0F3FD64A ft=1 fh=78c79ddcb2c04138 vn="Win32/SoftonicDownloader.A evtl. unerwünschte Anwendung" ac=I fn="C:\Datensicherung Walter Mai 2014\Walter\Datensicherung Aldi-PC März 2012\Walter\Downloads\SoftonicDownloader_fuer_gedit.exe"

sh=A7ADE3B10E94D1662CE72590F644B2CADED1BAE9 ft=1 fh=709cbdad0f5f569d vn="Win32/SoftonicDownloader.A evtl. unerwünschte Anwendung" ac=I fn="C:\Datensicherung Walter Mai 2014\Walter\Datensicherung Aldi-PC März 2012\Walter\Downloads\SoftonicDownloader_fuer_tipp10.exe"

sh=A9AB071E3C632340DEB6791BF83F8F1A5B3A09AA ft=1 fh=5456a0d68c2c20ed vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Jonas *****\Downloads\StellarPhoenixWindowsDataRecovery-Home_PPCS.exe"

sh=871131E4D4C05C12F719373F3003CE208FF57A1A ft=1 fh=7f96aee7ff66d687 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Jonas *****\Downloads\TrackMania Nations Forever - CHIP-Installer.exe"

deeprybka

14.05.2015 12:42

Keine Malware gefunden. Poste dann am Sonntag mal ein frisches FRST-Log bitte. :)

Patroklos91

18.05.2015 11:37

Hi Jürgen,

hier die Logs des neuen FRST-Scans.

Gruß Patroklos

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-05-2015 02

Ran by Jonas ***** (administrator) on ZUKUNFT on 18-05-2015 12:04:37

Running from C:\ProgrammeJonas

Loaded Profiles: Jonas ***** &  (Available profiles: Jonas *****)

Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: FF)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe

(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe

(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

(Renesas Electronics Corporation) C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe

(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe

(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

() C:\Program Files\ownCloud\owncloud.exe

(Geek Software GmbH) C:\ProgrammeJonas\PDF24\pdf24.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(6 Wunderkinder GmbH) C:\Program Files\Wunderlist2\Wunderlist.exe

(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Microsoft Corporation) C:\Windows\System32\wuauclt.exe

(Daniel Manger Software) C:\Program Files\Kalenderchen6\Kalenderchen.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9288296 2010-06-14] (Realtek Semiconductor)

HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-05-27] (Advanced Micro Devices, Inc.)

HKLM\...\Run: [NUSB3MON] => C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)

HKLM\...\Run: [CLMLServer] => C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-11-02] (CyberLink)

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)

HKLM\...\Run: [hpqSRMon] => C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [150016 2008-08-20] (Hewlett-Packard)

HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)

HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2011-11-02] (Apple Inc.)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [421736 2012-01-16] (Apple Inc.)

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [726320 2015-04-01] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [ownCloud] => C:\Program Files\ownCloud\owncloud.exe [1253540 2013-04-22] ()

HKLM\...\Run: [PDFPrint] => C:\ProgrammeJonas\PDF24\pdf24.exe [193568 2014-11-28] (Geek Software GmbH)

HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [129272 2015-03-16] (Avira Operations GmbH & Co. KG)

HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\...\Run: [Wunderlist] => C:\Program Files\Wunderlist2\Wunderlist.exe [13021792 2013-12-02] (6 Wunderkinder GmbH)

HKU\S-1-5-21-1471510115-2474919708-3564051268-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Wunderlist] => C:\Program Files\Wunderlist2\Wunderlist.exe [13021792 2013-12-02] (6 Wunderkinder GmbH)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2011-03-25]

ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk [2014-10-01]

ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files\WISO\Steuersoftware 2014\mshaktuell.exe ()

Startup: C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk [2010-11-28]

ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\S-1-5-21-1471510115-2474919708-3564051268-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-1471510115-2474919708-3564051268-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

SearchScopes: HKLM -> DefaultScope value is missing.

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08] (Adobe Systems Incorporated)

BHO: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-05-14] (Microsoft Corporation)

Toolbar: HKLM - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll [2011-06-24] (TerraTec Electronic GmbH)

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab

DPF: {CAFEEFAC-0018-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab

Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2000-11-06] (Microsoft Corporation)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-31] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Jonas *****\AppData\Roaming\Mozilla\Firefox\Profiles\d240w4qq.default-1389057727826

FF NewTab:  www.google.de

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [2010-08-18] (Adobe Systems, Inc.)

FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2011-11-14] ()

FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-04] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-04] (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)

FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-04-17] (Microsoft Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2013-05-08] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-1471510115-2474919708-3564051268-1001: @lightspark.github.com/Lightspark;version=1 -> C:\Program Files\Lightspark 0.5.3-git\nplightsparkplugin.dll No File

FF Plugin HKU\S-1-5-21-1471510115-2474919708-3564051268-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @lightspark.github.com/Lightspark;version=1 -> C:\Program Files\Lightspark 0.5.3-git\nplightsparkplugin.dll No File

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2013-05-08] (Adobe Systems Inc.)

FF Extension: 20-20 3D Viewer - IKEA - C:\Users\Jonas *****\AppData\Roaming\Mozilla\Firefox\Profiles\d240w4qq.default-1389057727826\Extensions\2020Player_IKEA@2020Technologies.com [2014-03-21]

FF Extension: Adblock Plus - C:\Users\Jonas *****\AppData\Roaming\Mozilla\Firefox\Profiles\d240w4qq.default-1389057727826\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-08]

FF HKLM\...\Firefox\Extensions: [ext@flash-Enhancer.com] - C:\Program Files\AmiExt\flashEnhancer\ff

FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-04-11]
 

Chrome: 

=======

CHR StartupUrls: Default -> "hxxp://www.google.com"

CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll No File

CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\42.0.2311.135\gcswf32.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll No File

CHR Plugin: (Remoting Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\42.0.2311.135\ppGoogleNaClPluginChrome.dll No File

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\42.0.2311.135\pdf.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Java Deployment Toolkit 6.0.300.12) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File

CHR Plugin: (Java(TM) Platform SE 6 U30) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File

CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File

CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

CHR Plugin: (Windows LiveÂ® Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File

CHR Profile: C:\Users\Jonas *****\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (No Name) - C:\Users\Jonas *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckjhoplcbnkhgnnahfbcdmganjhpcceg [2012-08-27]

CHR Extension: (Google Wallet) - C:\Users\Jonas *****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-26]

CHR HKLM\...\Chrome\Extension: [ckjhoplcbnkhgnnahfbcdmganjhpcceg] - C:\Users\JONASR~1\AppData\Local\Temp\ckjhoplcbnkhgnnahfbcdmganjhpcceg.crx [Not Found]
 

========================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [815920 2015-04-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [434424 2015-04-01] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1004280 2015-04-01] (Avira Operations GmbH & Co. KG)

S2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [201008 2015-03-16] (Avira Operations GmbH & Co. KG)

R2 DiagTrack; C:\Windows\system32\diagtrack.dll [851456 2015-04-27] (Microsoft Corporation)

S3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S3 AF15BDA; C:\Windows\System32\DRIVERS\AF15BDA.sys [489408 2009-11-05] (ITETech                  )

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105864 2015-03-12] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2015-03-12] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-29] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37896 2015-03-12] (Avira Operations GmbH & Co. KG)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2015-05-18] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-04-14] (Malwarebytes Corporation)

R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [64904 2010-04-27] (Renesas Electronics Corporation)

R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [146568 2010-04-27] (Renesas Electronics Corporation)

S3 RTL2832UBDA; C:\Windows\System32\drivers\RTL2832UBDA.sys [189184 2012-01-09] (REALTEK SEMICONDUCTOR Corp.)

S3 RTL2832UUSB; C:\Windows\System32\Drivers\RTL2832UUSB.sys [33536 2012-01-09] (REALTEK SEMICONDUCTOR Corp.)

S3 RTL2832U_IRHID; C:\Windows\System32\DRIVERS\RTL2832U_IRHID.sys [43392 2012-01-09] (Realtek)

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-04-07] (Avira GmbH)

U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

S3 catchme; \??\C:\Users\JONASR~1\AppData\Local\Temp\catchme.sys [X]

S3 Profos; \??\C:\Program Files\BullGuard Ltd\BullGuard\antirootkit\profos.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-05-13 23:51 - 2015-05-13 23:52 - 02347384 _____ (ESET) C:\Users\Jonas *****\Desktop\esetsmartinstaller_deu.exe

2015-05-13 03:16 - 2015-05-01 15:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2015-05-13 00:21 - 2015-04-27 21:11 - 03989440 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2015-05-13 00:21 - 2015-04-27 21:11 - 03934144 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-05-13 00:21 - 2015-04-27 21:11 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-05-13 00:21 - 2015-04-27 21:11 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-05-13 00:21 - 2015-04-27 21:08 - 01307648 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-05-13 00:21 - 2015-04-27 21:05 - 00851456 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll

2015-05-13 00:21 - 2015-04-27 21:05 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll

2015-05-13 00:21 - 2015-04-27 21:05 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-05-13 00:21 - 2015-04-27 21:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-05-13 00:21 - 2015-04-27 21:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-05-13 00:21 - 2015-04-27 21:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-05-13 00:21 - 2015-04-27 21:05 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-05-13 00:21 - 2015-04-27 21:05 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll

2015-05-13 00:21 - 2015-04-27 21:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-05-13 00:21 - 2015-04-27 21:05 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-05-13 00:21 - 2015-04-27 21:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-05-13 00:21 - 2015-04-27 21:05 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-05-13 00:21 - 2015-04-27 21:04 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-05-13 00:21 - 2015-04-27 21:04 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2015-05-13 00:21 - 2015-04-27 21:04 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-05-13 00:21 - 2015-04-27 21:04 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe

2015-05-13 00:21 - 2015-04-27 21:04 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-05-13 00:21 - 2015-04-27 21:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe

2015-05-13 00:21 - 2015-04-27 21:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-05-13 00:21 - 2015-04-27 21:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe

2015-05-13 00:21 - 2015-04-27 21:04 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-05-13 00:21 - 2015-04-27 21:04 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe

2015-05-13 00:21 - 2015-04-27 21:04 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-05-13 00:21 - 2015-04-27 21:04 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-05-13 00:21 - 2015-04-27 21:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-05-13 00:21 - 2015-04-27 21:03 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe

2015-05-13 00:21 - 2015-04-27 21:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-05-13 00:21 - 2015-04-27 21:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-05-13 00:21 - 2015-04-27 20:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-05-13 00:21 - 2015-04-27 20:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-05-13 00:21 - 2015-04-27 20:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll

2015-05-13 00:21 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll

2015-05-13 00:20 - 2015-05-05 03:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-05-13 00:20 - 2015-04-22 03:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-05-13 00:20 - 2015-04-21 18:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-05-13 00:20 - 2015-04-21 18:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-05-13 00:20 - 2015-04-21 18:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-05-13 00:20 - 2015-04-21 18:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-05-13 00:20 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-05-13 00:20 - 2015-04-21 18:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-05-13 00:20 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-05-13 00:20 - 2015-04-21 18:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-05-13 00:20 - 2015-04-21 18:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-05-13 00:20 - 2015-04-21 18:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-05-13 00:20 - 2015-04-21 17:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-05-13 00:20 - 2015-04-21 17:58 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-05-13 00:20 - 2015-04-21 17:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-05-13 00:20 - 2015-04-21 17:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-05-13 00:20 - 2015-04-21 17:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-05-13 00:20 - 2015-04-21 17:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-05-13 00:20 - 2015-04-21 17:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-05-13 00:20 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-05-13 00:20 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-05-13 00:20 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-05-13 00:20 - 2015-04-21 17:26 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-05-13 00:20 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-05-13 00:20 - 2015-04-21 17:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-05-13 00:20 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-05-13 00:20 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-05-13 00:20 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-05-13 00:20 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-05-13 00:20 - 2015-04-20 04:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2015-05-13 00:20 - 2015-04-20 04:56 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2015-05-13 00:20 - 2015-04-20 04:03 - 02382336 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-05-13 00:20 - 2015-04-18 04:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2015-05-13 00:20 - 2015-04-13 05:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe

2015-05-13 00:19 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-05-13 00:19 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-05-13 00:19 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-05-13 00:19 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-05-13 00:16 - 2015-04-08 05:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll

2015-05-13 00:16 - 2015-04-08 05:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll

2015-05-13 00:16 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll

2015-05-13 00:16 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll

2015-05-13 00:16 - 2015-03-04 06:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll

2015-05-13 00:16 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe

2015-05-13 00:16 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe

2015-05-12 00:10 - 2015-05-12 00:10 - 00014373 _____ () C:\Users\Jonas *****\Desktop\ComboFix.txt

2015-05-12 00:04 - 2015-05-12 00:04 - 00014368 _____ () C:\ComboFix.txt

2015-05-11 23:36 - 2015-05-12 00:04 - 00000000 ____D () C:\ComboFix

2015-05-11 23:36 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2015-05-11 23:36 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2015-05-11 23:36 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2015-05-11 23:36 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2015-05-11 23:36 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2015-05-11 23:36 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2015-05-11 23:36 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2015-05-11 23:36 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2015-05-11 23:34 - 2015-05-12 00:04 - 00000000 ____D () C:\Qoobox

2015-05-11 23:33 - 2015-05-12 00:02 - 00000000 ____D () C:\Windows\erdnt

2015-05-11 23:31 - 2015-05-11 23:31 - 05623215 ____R (Swearware) C:\Users\Jonas *****\Desktop\ComboFix.exe

2015-05-07 23:24 - 2015-05-07 23:25 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Jonas *****\Desktop\tdsskiller.exe

2015-05-07 21:29 - 2015-05-07 21:29 - 00003574 _____ () C:\Users\Jonas *****\Desktop\Gmer.txt

2015-05-07 21:01 - 2015-05-18 12:04 - 00000000 ____D () C:\FRST

2015-05-07 20:58 - 2015-05-07 20:58 - 00000000 _____ () C:\Users\Jonas *****\defogger_reenable

2015-05-07 18:56 - 2015-05-18 11:43 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-05-07 18:55 - 2015-05-07 20:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-05-07 18:55 - 2015-05-07 20:34 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware

2015-05-07 18:55 - 2015-04-14 09:37 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-05-07 18:55 - 2015-04-14 09:37 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-04-28 16:10 - 2015-04-28 16:10 - 00008862 _____ () C:\Users\Jonas *****\.recently-used.xbel
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-05-18 12:05 - 2013-05-08 14:16 - 00693248 ____H () C:\Users\Jonas *****\Documents\.csync_journal.db.ctmp

2015-05-18 12:05 - 2013-05-08 14:16 - 00693248 ____H () C:\Users\Jonas *****\Documents\.csync_journal.db

2015-05-18 12:04 - 2010-11-28 15:15 - 00000000 ____D () C:\ProgrammeJonas

2015-05-18 11:56 - 2012-08-06 19:08 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-05-18 11:48 - 2010-11-26 05:51 - 02034379 _____ () C:\Windows\WindowsUpdate.log

2015-05-18 11:18 - 2010-11-25 22:14 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-05-17 23:55 - 2009-07-14 06:34 - 00018512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-05-17 23:55 - 2009-07-14 06:34 - 00018512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-05-17 23:45 - 2010-11-25 22:14 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-05-17 23:44 - 2010-08-30 11:48 - 00827038 _____ () C:\Windows\PFRO.log

2015-05-17 23:44 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-05-17 23:44 - 2009-07-14 06:39 - 00130435 _____ () C:\Windows\setupact.log

2015-05-14 05:57 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache

2015-05-14 02:44 - 2010-11-25 22:14 - 00002125 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2015-05-13 17:13 - 2012-06-18 08:27 - 00000000 ____D () C:\Users\Jonas *****\Documents\EigenePDFs

2015-05-13 10:53 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET

2015-05-13 09:26 - 2010-08-28 02:49 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-05-13 03:45 - 2010-08-30 18:46 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

2015-05-13 03:45 - 2009-07-14 06:33 - 00345272 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-05-13 03:43 - 2009-07-14 09:49 - 00000000 ____D () C:\Program Files\Windows Journal

2015-05-13 03:43 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE

2015-05-13 03:43 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers

2015-05-13 03:15 - 2013-07-21 03:01 - 00000000 ____D () C:\Windows\system32\MRT

2015-05-13 03:08 - 2010-08-30 18:47 - 137310008 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-05-13 03:05 - 2010-08-30 18:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2015-05-12 00:37 - 2014-06-25 01:22 - 00000000 ____D () C:\Users\Jonas *****\Documents\Bilder

2015-05-12 00:04 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public

2015-05-11 23:57 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini

2015-05-11 22:57 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Help

2015-05-07 20:58 - 2010-11-25 22:19 - 00000000 ____D () C:\Users\Jonas *****

2015-05-07 20:34 - 2014-01-06 12:33 - 00001068 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-05-07 18:57 - 2015-01-15 23:11 - 00000000 ____D () C:\Users\Jonas *****\AppData\Local\Wunderlist

2015-05-07 18:55 - 2014-01-06 12:33 - 00000000 ____D () C:\Users\Jonas *****\AppData\Roaming\Malwarebytes

2015-05-07 18:55 - 2014-01-06 12:33 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-05-07 18:55 - 2014-01-06 12:33 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware

2015-05-07 18:52 - 2014-01-05 14:22 - 00000000 ____D () C:\ProgramData\Updater

2015-05-04 20:46 - 2014-04-03 10:19 - 00000000 ____D () C:\Users\Jonas *****\Desktop\Christina

2015-04-28 16:11 - 2011-12-14 11:53 - 00000000 ____D () C:\Users\Jonas *****\.gimp-2.6

2015-04-28 16:10 - 2010-12-07 22:31 - 00000000 ____D () C:\Users\Jonas *****\AppData\Roaming\gtk-2.0

2015-04-28 16:07 - 2015-04-11 21:32 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2015-04-28 16:07 - 2012-07-07 01:19 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service

2015-04-28 16:07 - 2009-07-14 06:53 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2015-04-22 13:47 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\AppCompat

2015-04-20 15:22 - 2011-01-10 00:59 - 00000000 ____D () C:\Users\Jonas *****\Documents\Studium
 

==================== Files in the root of some directories =======
 

2012-02-13 17:10 - 2012-02-13 17:10 - 0000085 ___SH () C:\ProgramData\.zreglib

2014-05-29 00:36 - 2014-09-18 01:22 - 0002097 _____ () C:\ProgramData\flcd_proxy.log

2011-12-13 14:19 - 2011-12-13 14:25 - 0000355 _____ () C:\ProgramData\hpzinstall.log
 

Some content of TEMP:

====================

C:\Users\Jonas *****\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-05-14 05:45
 

==================== End Of Log ============================

--- --- ---

[/CODE]

Code:



Additional scan result of Farbar Recovery Scan Tool (x86) Version: 16-05-2015 02

Ran by Jonas ***** at 2015-05-18 12:05:49

Running from C:\ProgrammeJonas

Boot Mode: Normal

==========================================================
 
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-1471510115-2474919708-3564051268-500 - Administrator - Disabled)

Gast (S-1-5-21-1471510115-2474919708-3564051268-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1471510115-2474919708-3564051268-1002 - Limited - Enabled)

Jonas ***** (S-1-5-21-1471510115-2474919708-3564051268-1001 - Administrator - Enabled) => C:\Users\Jonas *****
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 15.0.0.249 - Adobe Systems Incorporated)

Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Reader 9.5.5 MUI (HKLM\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.5.5 - Adobe Systems Incorporated)

Adobe Shockwave Player 11.5 (HKLM\...\Adobe Shockwave Player) (Version: 11.5.8.612 - Adobe Systems, Inc.)

Anki (HKLM\...\Anki) (Version:  - )

Apple Application Support (HKLM\...\{343666E2-A059-48AC-AD67-230BF74E2DB2}) (Version: 2.1.6 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{8153ED9A-C94A-426E-9880-5E6775C08B62}) (Version: 4.0.0.97 - Apple Inc.)

Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ATI Catalyst Install Manager (HKLM\...\{BE4AE3A7-190D-BCB8-A953-A708C9E8E8AA}) (Version: 3.0.778.0 - ATI Technologies, Inc.)

Avira (HKLM\...\{b5675cc4-ab8b-4945-8c1d-4c5479556d6a}) (Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG)

Avira (Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG) Hidden

Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.9.504 - Avira Operations GmbH & Co. KG)

BlueJ 3.0.4 (HKLM\...\BlueJ_is1) (Version:  - La Trobe University)

Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)

BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden

ccc-core-static (Version: 2010.0527.1242.20909 - ATI) Hidden

CdCreate AM Testversion (HKLM\...\{98667FC9-D57F-11DD-B64E-93631AE7A456}) (Version: 2.80.0000 - Galerie Fuchstal)

Cinergy T Stick RC V86.001.1129.2011 (HKLM\...\Cinergy T Stick RC) (Version: 86.001.1129.2011 - )

Cinergy T USB XXS V2.03.03.29 (HKLM\...\Cinergy T USB XXS) (Version: 2.03.03.29 - )

Cinergy T-Stick MKII V9.06.3.01 (HKLM\...\Cinergy T-Stick MKII) (Version: 9.06.3.01 - )

CorelDRAW Essentials 4 - Content (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Draw (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Filters (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - ICA (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - IPM - No VBA (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang BR (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang DE (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang EN (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang ES (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang FR (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang IT (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Lang NL (Version: 4.0 - Uw bedrijfsnaam) Hidden

CorelDRAW Essentials 4 - PHOTO-PAINT (Version: 4.0 - Corel Corporation) Hidden

CorelDRAW Essentials 4 - Windows Shell Extension (HKLM\...\_{CF0ADC18-6D8F-4353-8EAA-DF45456B7853}) (Version:  - Corel Corporation)

CorelDRAW Essentials 4 - Windows Shell Extension (Version: 1.1 - Corel Corporation) Hidden

CorelDRAW Essentials 4 (HKLM\...\_{C0237AA4-1BFB-46EA-860D-7B0EB365CA13}) (Version:  - Corel Corporation)

CorelDRAW Essentials 4 (Version: 4.0 - Corel Corporation) Hidden

CyberLink LabelPrint (HKLM\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2515 - CyberLink Corp.)

CyberLink Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.)

CyberLink PowerDVD Copy (HKLM\...\InstallShield_{E3D04529-6EDB-11D8-A372-0050BAE317E1}) (Version: 1.5.1306 - CyberLink Corp.)

Destinations (Version: 130.0.0.0 - Hewlett-Packard) Hidden

DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden

ElsterFormular (HKLM\...\ElsterFormular) (Version: 15.3.14949 - Landesfinanzdirektion Thüringen)

FIFA 2003 (HKLM\...\{6A1DC8D4-9FA4-43C3-00B3-5993B4BBE7D4}) (Version:  - )

Funkyplot 1.1.0-pre1 (HKLM\...\Funkyplot_is1) (Version:  - LOGICIEL)

GIMP 2.6.11 (HKLM\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)

Google Chrome (HKLM\...\Google Chrome) (Version: 42.0.2311.152 - Google Inc.)

Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden

GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden

GPL Ghostscript (HKLM\...\GPL Ghostscript 9.05) (Version: 9.05 - Artifex Software Inc.)

GSview 5.0 (HKLM\...\GSview 5.0) (Version: 5.0 - Ghostgum Software Pty Ltd)

HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)

HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)

HP Scanjet G4000 Series (HKLM\...\{10297E58-2DFE-478B-9A1D-4B14E4E79CDF}) (Version: 13.0 - HP)

HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)

HP Update (HKLM\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)

hpg4000 (Version: 13.0.0.0 - Ihr Firmenname) Hidden

HPPhotosmartEssential (Version: 2.04.0000 - Hewlett-Packard) Hidden

HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden

Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)

iTunes (HKLM\...\{F6D6B258-E3CA-4AAC-965A-68D3E3140A8C}) (Version: 10.5.3.3 - Apple Inc.)

Java 8 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)

Java DB 10.5.3.0 (HKLM\...\{00BA866C-F2A2-4BB9-A308-3DFA695B6F7C}) (Version: 10.5.3.0 - Sun Microsystems, Inc)

Java(TM) SE Development Kit 6 Update 23 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0160230}) (Version: 1.6.0.230 - Oracle)

Junk Mail filter update (Version: 14.0.8117.416 - Microsoft Corporation) Hidden

Kalenderchen 6 (HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\...\Kalenderchen 6) (Version:  - )

Kalenderchen 6 (HKU\S-1-5-21-1471510115-2474919708-3564051268-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Kalenderchen 6) (Version:  - )

Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)

MATLAB R2009b (HKLM\...\MatlabR2009b) (Version: 7.9 - The MathWorks, Inc.)

Media Markt Fotoservice 4.4 (HKLM\...\Media Markt Fotoservice_is1) (Version:  - )

Medion Home Cinema (HKLM\...\InstallShield_{AB770FDE-8087-4C98-9A85-BD64262C104C}) (Version: 6.0.0000 - CyberLink Corp.) <==== ATTENTION

Medion Home Cinema (Version: 6.0.0000 - CyberLink Corp.) Hidden <==== ATTENTION

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office XP Developer - German (HKLM\...\Microsoft Office XP Developer - German) (Version:  - )

Microsoft Office XP Professional mit FrontPage (HKLM\...\{90280407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.6626.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [DEU] (HKLM\...\{BAC80EF3-E106-4AEA-8C57-F217F9BC7358}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

MiKTeX 2.9 (HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org)

MiKTeX 2.9 (HKU\S-1-5-21-1471510115-2474919708-3564051268-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org)

MOD 10.0 Baseline (English-x86-CD) (Version: 7.00.9177 - Microsoft) Hidden

Mozilla Firefox 37.0.2 (x86 de) (HKLM\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 35.0.1 - Mozilla)

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)

OpenOffice.org 3.2 (HKLM\...\{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}) (Version: 3.2.9502 - OpenOffice.org)

ownCloud (HKLM\...\ownCloud) (Version: 1.2.5 - ownCloud, Inc)

PDF24 Creator 6.9.2 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)

PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)

Project64 1.6 (HKLM\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)

R for Windows 3.1.1 (HKLM\...\R for Windows 3.1.1_is1) (Version: 3.1.1 - R Core Team)

Realtek Ethernet Controller Driver For Windows 7 (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.21.531.2010 - Realtek)

Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6136 - Realtek Semiconductor Corp.)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.4.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.0.4.0 - Renesas Electronics Corporation) Hidden

RStudio (HKLM\...\RStudio) (Version: 0.98.983 - RStudio)

Scan (Version: 13.0.0.0 - Hewlett-Packard) Hidden

SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden

Spelling Dictionaries Support For Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)

Stellar Phoenix Windows Data Recovery-Home (HKLM\...\Stellar Phoenix Windows Data Recovery-Home_is1) (Version: 4.2.0.0 - Stellar Information Systems Ltd)

TerraTec Home Cinema (HKLM\...\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}) (Version: 6.25.6 - ) <==== ATTENTION

Texmaker (HKLM\...\Texmaker) (Version:  - )

TIPP10 Version 2.1.0 (HKLM\...\TIPP10_is1) (Version:  - (c) 2006-2011, Tom Thielicke IT Solutions)

TmNationsForever (HKLM\...\TmNationsForever_is1) (Version:  - Nadeo)

WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden

Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)

WinRAR 4.00 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.00.0 - win.rar GmbH)

WISO Mein Geld 2011 Professional (HKLM\...\WISO Mein Geld 2011 Professional) (Version:  - Buhl Data Service GmbH)

WISO Mein Geld 2011 Professional (Version: 12.00.02.0024 - Buhl Data Service GmbH) Hidden

WISO Steuer-Sparbuch 2014 (HKLM\...\{F03AAE28-2598-4490-AB26-2B35A0E58828}) (Version: 21.08.8679 - Buhl Data Service GmbH)

Wunderlist (HKLM\...\{1ca68332-4ba1-4943-9010-eaa1aa45b492}) (Version: 2.3.0.31 - 6 Wunderkinder GmbH)

Wunderlist (Version: 2.3.0.31 - 6 Wunderkinder GmbH) Hidden
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 

11-05-2015 23:05:33 Windows Update

13-05-2015 03:00:36 Windows Update

17-05-2015 23:59:54 Windows Update
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:04 - 2015-05-11 23:52 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (Whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {25841487-1C33-40BF-8120-5494E99B5656} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {3212333B-1F16-4C10-98F4-7C75FAA9E40A} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)

Task: {4FB622F1-A454-4F6B-BEB4-F71C1A08B1D9} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {51216052-0F20-4386-B40C-C710038DBAD8} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {59D093B0-92DA-42A3-A9BF-2B349A2CB79F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)

Task: {61F13637-483C-42D4-927C-F8099A17FB78} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)

Task: {6F151318-12A0-4D00-8F09-2EC27733568C} - System32\Tasks\{422FC7C0-2347-4491-A45A-99E34858989B} => pcalua.exe -a C:\Windows\LargoWinchInst\SetupUbi.exe -c -uninstall Largo

Task: {8A6329B5-0F52-4A46-8FEF-B34930A60984} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)

Task: {D0B8CBAD-B240-4E45-A1BD-7AFF085A8504} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {D67732B8-E5A2-4676-A3D6-7F013BF6DAFC} - System32\Tasks\{B86A33F0-D926-4927-A51E-BF2C8D32A885} => pcalua.exe -a C:\WINDOWS\ISUN0407.EXE -c -f"c:\program files\Uninst.isu" -c"c:\program files\Uninst.dll"
 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (Whitelisted) ==============
 

2008-09-08 11:19 - 2008-09-08 11:19 - 00022723 _____ () C:\Windows\System32\cl31cl3.dll

2011-11-02 00:26 - 2011-11-02 00:26 - 00087912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2011-11-02 00:26 - 2011-11-02 00:26 - 01242472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2009-11-02 23:20 - 2009-11-02 23:20 - 00619816 ____N () C:\Program Files\CyberLink\Power2Go\CLMediaLibrary.dll

2009-11-02 23:23 - 2009-11-02 23:23 - 00013096 ____N () C:\Program Files\CyberLink\Power2Go\CLMLSvcPS.dll

2013-04-22 17:00 - 2013-04-22 17:00 - 01253540 _____ () C:\Program Files\ownCloud\owncloud.exe

2012-12-21 15:27 - 2012-12-21 15:27 - 00106700 _____ () C:\Program Files\ownCloud\zlib1.dll

2012-12-22 03:16 - 2012-12-22 03:16 - 00120916 _____ () C:\Program Files\ownCloud\libgcc_s_sjlj-1.dll

2012-12-22 03:16 - 2012-12-22 03:16 - 00864381 _____ () C:\Program Files\ownCloud\libstdc++-6.dll

2012-12-21 15:32 - 2012-12-21 15:32 - 00176680 _____ () C:\Program Files\ownCloud\libpng15-15.dll

2013-04-22 16:58 - 2013-04-22 16:58 - 00816147 _____ () C:\Program Files\ownCloud\libowncloudsync.dll

2013-02-21 16:59 - 2013-02-21 16:59 - 00074118 _____ () C:\Program Files\ownCloud\libqtkeychain.dll

2013-04-22 16:56 - 2013-04-22 16:56 - 00834505 _____ () C:\Program Files\ownCloud\libocsync.dll

2012-12-21 22:13 - 2012-12-21 22:13 - 00038291 _____ () C:\Program Files\ownCloud\libdl.dll

2013-02-04 23:07 - 2013-02-04 23:07 - 00044685 _____ () C:\Program Files\ownCloud\libiniparser.dll

2012-12-21 20:02 - 2012-12-21 20:02 - 00567611 _____ () C:\Program Files\ownCloud\libsqlite3-0.dll

2013-04-22 16:56 - 2013-04-22 16:56 - 00434214 _____ () C:\Program Files\ownCloud\modules\ocsync_owncloud.dll

2013-02-08 22:22 - 2013-02-08 22:22 - 00177844 _____ () C:\Program Files\ownCloud\libneon-27.dll

2012-12-22 07:10 - 2012-12-22 07:10 - 00186070 _____ () C:\Program Files\ownCloud\libproxy.dll

2012-12-22 06:34 - 2012-12-22 06:34 - 00065360 _____ () C:\Program Files\ownCloud\libmodman.dll

2012-12-21 15:36 - 2012-12-21 15:36 - 01161037 _____ () C:\Program Files\ownCloud\libxml2-2.dll

2015-01-09 12:24 - 2015-01-09 12:24 - 01166336 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ReactiveUI\1a96a8c1c19e0195d67a9950d1f4d527\ReactiveUI.ni.dll

2015-01-09 12:24 - 2015-01-09 12:24 - 00027136 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Wunderkinde6f42a4a9#\bcb87239e984b283cc128a55e9bc3aaf\Wunderkinder.Wunderlist.Data.Realtime.ni.dll

2015-01-09 12:24 - 2015-01-09 12:24 - 00376320 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Akavache.Portable\47d6f1dd3d6ffb3bc16647055208cdfb\Akavache.Portable.ni.dll

2015-01-09 12:24 - 2015-01-09 12:24 - 00039424 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Wunderkinded9c6edae#\af819191c1a5d188230c5ce0bfb68220\Wunderkinder.Wunderlist.Presentation.ni.dll

2010-05-27 21:40 - 2010-05-27 21:40 - 00270336 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll

2010-05-04 16:36 - 2010-05-04 16:36 - 00970752 _____ () C:\Program Files\OpenOffice.org 3\program\libxml2.dll

2010-03-24 22:51 - 2010-11-28 15:45 - 00166400 _____ () C:\Program Files\OpenOffice.org 3\program\libxslt.dll

2014-10-16 03:50 - 2014-10-16 03:50 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\3d576cbc4ffc5ad06fd61510c5d8f326\IsdiInterop.ni.dll

2010-08-30 20:04 - 2010-03-04 05:08 - 00058880 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
 

==================== Alternate Data Streams (Whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (Whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== Internet Explorer trusted/restricted ===============
 

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

HKU\S-1-5-21-1471510115-2474919708-3564051268-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\Jonas *****\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.2.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 
 

==================== FirewallRules (Whitelisted) ===============
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

FirewallRules: [TCP Query User{DC794C29-32CC-4974-9400-D80C6A3F4F00}C:\programmejonas\taxi raser\taxi raser.exe] => (Block) C:\programmejonas\taxi raser\taxi raser.exe

FirewallRules: [UDP Query User{1A82D905-EDDA-463E-89AB-1F7EB5A51EEA}C:\programmejonas\taxi raser\taxi raser.exe] => (Block) C:\programmejonas\taxi raser\taxi raser.exe

FirewallRules: [TCP Query User{ED38330D-DEB7-453D-91AA-4ADF5A6425CD}C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe] => (Block) C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe

FirewallRules: [UDP Query User{84894ECA-9CB8-4F76-8845-B3B5AF85FC23}C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe] => (Block) C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe

FirewallRules: [{FF002A04-FA73-4000-A11C-3BEE45B6CE28}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe

FirewallRules: [{5231EEC6-9410-4F31-9391-6AF6F00D3A25}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe

FirewallRules: [{C2518630-9012-4A03-8418-6D8580618524}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe

FirewallRules: [{55FBD93D-AB58-449B-B772-578D8BC5EBCB}] => (Allow) C:\Program Files\common files\hp\digital imaging\bin\hpqphotocrm.exe

FirewallRules: [{3FDB65D5-AD0B-4628-9FDC-5CD0E939A126}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe

FirewallRules: [{ED88D7B2-7241-4E41-8DED-87E6BF922CE4}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe

FirewallRules: [{E9AEA340-D6A4-4EEB-838E-C3D45E8ACEF9}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe

FirewallRules: [{17F8A429-7A05-4077-A934-3D180CA8968C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe

FirewallRules: [{30FF85D6-7CE6-4ED9-8099-FC43AE8A56F6}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

FirewallRules: [{83DEC76E-9F83-4302-AEE7-96E03014CFE7}] => (Allow) C:\Program Files\HP\hp software update\hpwucli.exe

FirewallRules: [{5AEA1869-BACB-4F1F-815D-4C453A802D9E}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\CinergyDvr.exe

FirewallRules: [{B963AE06-7617-43F6-AAA9-9D6E092FDF78}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\CinergyDvr.exe

FirewallRules: [{F1D9C10F-7210-40A8-B8D5-AE7D4FA53A4C}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe

FirewallRules: [{826F9D84-EE9C-49CC-BF6D-5467E0572A2E}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe

FirewallRules: [{DC5B8CE3-C71D-491B-9C1B-BAAD08A5FBF8}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\InstTool.exe

FirewallRules: [{227EE136-2668-475D-AAFA-0E0C18E3A910}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\InstTool.exe

FirewallRules: [{5ADE8544-17EB-4B32-B973-F37F7FB9292F}] => (Allow) C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe

FirewallRules: [{B928DD33-32A6-4558-9B6C-1E6C138C5798}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{8822F8D9-2068-4F15-B96B-27337BB85C81}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{CB9381BD-BA39-4C0D-9201-806A3BD36C15}] => (Allow) C:\Program Files\iTunes\iTunes.exe

FirewallRules: [{45F8B089-9F2A-4C01-8EAE-4346F8C007DA}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\InstTool.exe

FirewallRules: [{AAEE0B9D-1D90-4D0F-A441-2A5050AF960D}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\InstTool.exe

FirewallRules: [{4EB951AF-E1B3-4857-A07E-EA1B78E57990}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\CinergyDvr.exe

FirewallRules: [{6C1E7793-6B0E-4208-9D2B-BBAFC15BA223}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\CinergyDvr.exe

FirewallRules: [{A9F559C6-EA9A-4A99-9BBD-4FBCBC447E5B}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe

FirewallRules: [{2CABA8DC-F77E-4B3A-91C4-E4C3D671D6D4}] => (Allow) C:\Program Files\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe

FirewallRules: [TCP Query User{E1F4401C-95BD-402C-9DB4-9F80F23C836A}C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe] => (Allow) C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe

FirewallRules: [UDP Query User{A919A04F-22E9-4F1C-B419-581BF64F03CA}C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe] => (Allow) C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe

FirewallRules: [TCP Query User{B018C01A-B6F6-45E0-A11C-3B0811DA2F0C}C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe] => (Block) C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe

FirewallRules: [UDP Query User{7A80BBCD-6AE9-4145-80D3-60AF268FC900}C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe] => (Block) C:\programmejonas\eclipse-sdk-3.6.2-win32\eclipse\eclipse.exe

FirewallRules: [TCP Query User{BE522805-BD65-4391-A54F-89CA1E987E64}C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe] => (Allow) C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe

FirewallRules: [UDP Query User{16FD6222-9F6C-43C5-907F-58406A0F91CE}C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe] => (Allow) C:\program files\terratec\terratec home cinema\versioncheck\versioncheck.exe

FirewallRules: [{E2A31A10-9C22-4670-8319-E3C537BD8719}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

FirewallRules: [TCP Query User{C8B0BC7D-986C-40EF-8960-5DEAE2708BD1}C:\program files\tmnationsforever\tmforever.exe] => (Block) C:\program files\tmnationsforever\tmforever.exe

FirewallRules: [UDP Query User{D840C2DE-7340-4F8B-ADED-9D4E8A1AB6F2}C:\program files\tmnationsforever\tmforever.exe] => (Block) C:\program files\tmnationsforever\tmforever.exe

FirewallRules: [{4A03E388-E847-4603-85B5-7A21F6E5B28C}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{955432A8-C4B0-44C3-A0B0-2230049D6B4C}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [TCP Query User{1F81D1E8-5D16-4DD7-8E17-410EB255B372}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{EFDBDE91-E0F8-470B-AA2F-750FACF6BFFC}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe

FirewallRules: [{C41E0464-480B-422F-BB9B-07B60BA16214}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (05/18/2015 03:35:53 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 10047
 

Error: (05/18/2015 03:35:53 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 10047
 

Error: (05/18/2015 03:35:53 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (05/18/2015 02:46:05 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 15600
 

Error: (05/18/2015 02:46:05 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 15600
 

Error: (05/18/2015 02:46:05 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (05/15/2015 09:38:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 15647
 

Error: (05/15/2015 09:38:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 15647
 

Error: (05/15/2015 09:38:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (05/15/2015 03:09:20 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 9969
 
 

System errors:

=============

Error: (05/17/2015 11:45:30 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.
 

Error: (05/15/2015 09:38:53 AM) (Source: Server) (EventID: 2505) (User: )

Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{9A295CD5-A244-421C-A8EF-9E3A343737CB} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.
 

Error: (05/13/2015 03:48:07 AM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1001) (User: NT-AUTORITÄT)

Description: Fehler beim Starten des Assistenten für das Sprachpaket-Setup. Führen Sie einen Neustart des Systems aus, und führen Sie den Assistenten erneut aus.
 

Error: (05/13/2015 03:48:07 AM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1000) (User: NT-AUTORITÄT)

Description: Fehler bei der CBS-Clientinitialisierung. Letzter Fehler: 0x80080005
 

Error: (05/13/2015 03:48:07 AM) (Source: DCOM) (EventID: 10010) (User: )

Description: {752073A1-23F2-4396-85F0-8FDB879ED0ED}
 

Error: (05/13/2015 03:48:06 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "Windows Modules Installer" wurde mit folgendem Fehler beendet: 

%%16405
 

Error: (05/12/2015 11:50:00 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.
 

Error: (05/12/2015 00:12:12 AM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.
 

Error: (05/11/2015 11:53:46 PM) (Source: EventLog) (EventID: 6008) (User: )

Description: Das System wurde zuvor am ‎11.‎05.‎2015 um 23:52:52 unerwartet heruntergefahren.
 

Error: (05/11/2015 11:45:20 PM) (Source: Service Control Manager) (EventID: 7030) (User: )

Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
 
 

Microsoft Office Sessions:

=========================

Error: (05/18/2015 03:35:53 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 10047
 

Error: (05/18/2015 03:35:53 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 10047
 

Error: (05/18/2015 03:35:53 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (05/18/2015 02:46:05 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 15600
 

Error: (05/18/2015 02:46:05 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 15600
 

Error: (05/18/2015 02:46:05 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (05/15/2015 09:38:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 15647
 

Error: (05/15/2015 09:38:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 15647
 

Error: (05/15/2015 09:38:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (05/15/2015 03:09:20 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 9969
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i3 CPU 550 @ 3.20GHz

Percentage of memory in use: 51%

Total physical RAM: 3063.11 MB

Available physical RAM: 1478.93 MB

Total Pagefile: 6124.54 MB

Available Pagefile: 3557.47 MB

Total Virtual: 2047.88 MB

Available Virtual: 1903.32 MB
 

==================== Drives ================================
 

Drive c: (Boot) (Fixed) (Total:1356.17 GB) (Free:1101.07 GB) NTFS

Drive d: (Recover) (Fixed) (Total:40 GB) (Free:20.99 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 1397.3 GB) (Disk ID: 2BD2C32A)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=1356.2 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=40 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=1 GB) - (Type=12)
 

==================== End Of Log ============================

deeprybka

18.05.2015 20:16

Hi,
sieht OK aus.

Schritt 1

http://filepony.de/icon/frst.png http://deeprybka.trojaner-board.de/b...st/frstfix.png

Drücke bitte die http://deeprybka.trojaner-board.de/b...ne/revo/w7.png + R Taste und schreibe notepad in das Ausführen Fenster.
Klicke auf OK und kopiere nun den Text aus der Codebox in das leere Textdokument:

Code:

CloseProcesses:

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction 

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction 

HKU\S-1-5-21-1471510115-2474919708-3564051268-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction 

HKU\S-1-5-21-1471510115-2474919708-3564051268-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction 

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab

DPF: {CAFEEFAC-0018-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab

FF Plugin HKU\S-1-5-21-1471510115-2474919708-3564051268-1001: @lightspark.github.com/Lightspark;version=1 -> C:\Program Files\Lightspark 0.5.3-git\nplightsparkplugin.dll No File

FF Plugin HKU\S-1-5-21-1471510115-2474919708-3564051268-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @lightspark.github.com/

Speichere dieses bitte als Fixlist.txt in das Verzeichnis ab, in dem sich auch die FRST-Anwendung befindet.

Starte FRST und drücke auf den Fix-Button.
Das Tool erstellt eine "Fixlog.txt" -Datei.
Das Log brauchst Du nicht posten!

Die alten Java-Versionen deinstallieren und bei Bedarf mit der aktuellen ersetzen.

>>clean<<
Wir haben es geschafft! :abklatsch:
Die Logs sehen für mich im Moment sauber aus.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:
Es bleibt mir nur noch, Dir unbeschwertes und sicheres Surfen zu wünschen und dass wir uns hier so bald nicht wiedersehen. ;)

http://deeprybka.trojaner-board.de/b...cleanupneu.png
Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
http://deeprybka.trojaner-board.de/b.../combofix2.pngCombofix deinstallieren

Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
Drücke bitte die http://deeprybka.trojaner-board.de/b...ne/revo/w7.png + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
Klicke auf OK.
Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.

Schließe alle offenen Programme.
Starte die delfix.exe mit einem Doppelklick.
Setze vor jede Funktion ein Häkchen.
Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

http://deeprybka.trojaner-board.de/b...ast/schild.png
Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank.

Meine Kauf-Empfehlung:

http://deeprybka.trojaner-board.de/eset/ESS.png
ESET Smart Security

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware scannen.

Optional:
http://filepony.de/icon/noscript.png NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
http://filepony.de/icon/malwarebytes_anti_exploit.pngMalwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.

Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .

Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Patroklos91

19.05.2015 08:12

Hi deeprybka,

vielen, vielen Dank für deine überragende Hilfe! Du hast immer zeitnah geantwortet und genaue Anweisungen gegeben, wie es weitergehen soll. Das war perfekt!

Eine Frage zum Cleanup: Ich habe ja Combofix benutzt, aber der Aufruf "Combofix/Uninstall" führt stets zu einer Meldung, dass dieser Befehl nicht gefunden werden kann. Soll ich dann diesen Punkt überspringen und einfach mit dem nächsten Cleanup-Schritt weitermachen?

Beste Grüße,
Patroklos

deeprybka

19.05.2015 08:15

Hi, Du kannst die combofix.exe auch in uninstall.exe umbenennen und doppelklicken. Oder einfach weiter mit DelFix. :)

Patroklos91

20.05.2015 13:37

Hi deeprybka,

jetzt habe ich deine Aufträge erfolgreich zu Ende gebracht. Vielen Dank nochmal für deine zuverlässige Unterstützung! Einfach großartig ...

Gruß und hoffentlich nicht "bis bald",
Patroklos

deeprybka

20.05.2015 18:34

Gerne. Alles Gute!

Alle Zeitangaben in WEZ +1. Es ist jetzt 17:07 Uhr.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20