ok hast ja recht:rolleyes: Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Suchlaufdatum: 01.12.2015
Suchlaufzeit: 11:35
Protokolldatei: mbamlog.txt
Administrator: Nein
Version: 2.2.0.1024
Malware-Datenbank: v2015.12.01.02
Rootkit-Datenbank: v2015.11.26.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert
Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Manu
Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 302039
Abgelaufene Zeit: 13 Min., 40 Sek.
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert
Prozesse: 0
(keine bösartigen Elemente erkannt)
Module: 0
(keine bösartigen Elemente erkannt)
Registrierungsschlüssel: 82
PUP.Optional.HDVidCodec, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\HDvid-Codec V9.0, In Quarantäne, [d115910ec1ca91a5b4993a5047bc4fb1],
PUP.Optional.HQPro, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\HQ-V-Pro-v1.8, In Quarantäne, [e204c3dc9eed72c4e144167519ea3cc4],
PUP.Optional.MediaPlayerPlus, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Media_Play_AIR+, In Quarantäne, [8c5af5aa593241f55de8c6ccb35040c0],
PUP.Optional.PlusHD, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD-9.7, In Quarantäne, [17cf3867721942f4e19ddebd9f64e020],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{0F212658-AC46-4DB4-A651-F2E3F5D38859}, In Quarantäne, [3caa28770c7fda5c8e6c0e71d72c8e72],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{108D8067-8643-4CF1-AD3B-101D25E768BF}, In Quarantäne, [d313831cbfcced4927d4c0bf2dd68b75],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{178E9451-E9D4-4381-971F-AD9530306779}, In Quarantäne, [578f6f302368e3539a62ed92e1228080],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{243121BC-100C-4AD0-BD27-1171FA11535A}, In Quarantäne, [28be9708701bfc3a58a47e01d72c817f],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{29BBDDF8-DD97-45DD-AF9B-C79232B8E5FB}, In Quarantäne, [6482c1de0784ed49dc20b4cbfa09d729],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2A50A943-F295-4327-9A13-8A6FDE603887}, In Quarantäne, [f3f3d7c874172610cc30a9d6ec177b85],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2C6E88B5-E812-4915-8F98-7DEDCA968096}, In Quarantäne, [23c3a9f62b608baba8547708758e19e7],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3201F3BF-442C-44D9-941C-DED57D9E39F9}, In Quarantäne, [05e1ced1c0cb56e08b7093ec0af926da],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{32079536-D419-4EC5-9595-458584C51E73}, In Quarantäne, [6284a7f8751695a1ba42acd33cc7946c],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{32FF15BB-1746-4465-9D49-5BD934F0ABE6}, In Quarantäne, [16d05e415239122469920b74b64d0df3],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{347244E5-8DC2-410F-891A-CBAFFA5B9B58}, In Quarantäne, [f8eee8b7f59661d5e21ab7c8c1423ac6],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{370C4882-3678-4934-B3F8-365577ED1916}, In Quarantäne, [f9ed425d1774d660bf3ded9261a2a060],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{38A03796-445B-4B91-8357-38D3F71D8A4E}, In Quarantäne, [796da9f65e2d6bcb0eeee09fe81b59a7],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3CF1FF4B-591A-4D7D-9ECE-C4AA701DAEC9}, In Quarantäne, [9e48544b632833030eeeed92c93aa759],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3DE2F41F-43B2-447D-8F27-94872AF29849}, In Quarantäne, [7670dbc4b8d350e6ac50b5cadb28837d],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4241BAA4-98E3-4220-AD22-8EEDCCA3A57F}, In Quarantäne, [796d801f8a017db9ed0ebfc08f74738d],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4339F59A-23EE-44A2-BDA0-2BF2F2F635AC}, In Quarantäne, [5c8a2e7119720432ea118ef1a85b23dd],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{448AC77C-BC55-4305-BA96-A1DFAD8F58E6}, In Quarantäne, [38ae3b64bad13df9817a4b347093ae52],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{45B71231-D71B-49F0-91AE-8BBED0D8E54D}, In Quarantäne, [3da938672269c670f902add245be857b],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{470C2232-DF1D-42F1-AA50-4712B8B1C5BD}, In Quarantäne, [8d591e81810a7cba6497daa550b30cf4],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4B605DC8-1160-4B90-BA69-D9D94681ACDA}, In Quarantäne, [ecfaffa07d0ec571b547aad5a063aa56],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4F6B9E16-DA67-4E0F-94D1-F9F7F9E7D2F6}, In Quarantäne, [21c52b74414a54e2be3e225dee1501ff],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5284F595-4519-4416-A4F4-78E1667984ED}, In Quarantäne, [07dfd6c9018a95a1ed0f94eb4db6728e],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{58897D74-1416-4284-8677-5CF215122361}, In Quarantäne, [c323d9c658332f076c8fb5cac73c50b0],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5A4D0888-7C66-49BB-98EE-AB8F90668E66}, In Quarantäne, [677ffea11a717abcc23aee915da6fb05],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5C8D1436-87D2-41F9-BC5E-B612F2FA569F}, In Quarantäne, [e40236696229fb3bb546ec93ae5505fb],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5E6B95C4-65C3-4396-9DAE-1EB81EF3CAD5}, In Quarantäne, [8066950a99f291a588731c6362a1ff01],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5ED96D22-A363-4CCE-801A-D431BAA677FE}, In Quarantäne, [63832778e5a68caa28d49de2877c10f0],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6049520A-E37D-493A-A1CB-F3CA1E53F6BC}, In Quarantäne, [42a46b34107b3df948b4ccb33bc8d32d],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6305ACDF-10FA-44FD-B790-B3A9737D46C2}, In Quarantäne, [eef8a9f6cdbe1b1b5aa183fc44bfdc24],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68DA9E74-2753-4D16-A5F2-3789ACD8C0F2}, In Quarantäne, [bc2aa9f69feccb6bdf1d8ef19d669769],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6900D7FA-7A60-44B7-84E8-2B13651799EF}, In Quarantäne, [24c29b04d2b975c1fffc3847ef148977],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F52208F-2C52-446A-919D-19B389CCFA74}, In Quarantäne, [1ccae3bca6e5d5617686ea9526dd8f71],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{71484CBA-6D1C-4D14-93D6-9E7FEC8EB217}, In Quarantäne, [cd198f1098f33afc00fb611eb05341bf],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{73174BA1-463A-4E33-856C-B0A9768C7188}, In Quarantäne, [7b6b950a1279c373be3ec6b9db281ae6],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{76FF8EE5-6E5A-4091-95F8-72D892EBAD3C}, In Quarantäne, [9254d7c85e2d44f29e5d7d024db69f61],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{782CE1D4-815E-4CEB-A9D0-232BBFA05820}, In Quarantäne, [697d29761279310509f2dca360a3c040],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7906FE99-9B73-45DA-802C-9E3ECF643A69}, In Quarantäne, [e7ff772896f5989ea8545a25e2219d63],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7BE1335F-830A-42BC-85BC-77C31F19403D}, In Quarantäne, [984e6936711ae35300fb0a758c777888],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7D692592-F455-445A-BFD7-14F23E53D31F}, In Quarantäne, [7b6b6837c8c30b2bd328d8a76c978878],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{819B9182-3E54-4952-98DD-1DF84CDFF528}, In Quarantäne, [2fb7e9b6236886b0e01b275831d24ab6],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{83D3BB6C-230D-44D7-A635-28F73188E2F9}, In Quarantäne, [3ea8f6a9345769cd906b0a75ae5501ff],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{89FC5209-C785-4891-A1D2-6291E24EB3B4}, In Quarantäne, [02e4bde20d7eae88e715c1be2fd4ff01],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A04DFF9F-25C6-4DC4-A9ED-F0483D4536C8}, In Quarantäne, [be28940b0a81999dcd2ed3ac4fb444bc],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AB5E15E1-881C-45ED-99BE-127269A81FCB}, In Quarantäne, [05e10798117a94a26497344b4fb413ed],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B2394958-C484-429A-B6D9-2120192DCC79}, In Quarantäne, [e7ff207f92f943f3cd2f96e9c340c23e],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B2F7A7C3-B14A-4DAC-A3FD-70385B51DAF3}, In Quarantäne, [c71ffda2b0dbf3437f7d245bf50e1be5],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B558CA57-2A92-4F63-8B80-F3C6E0A5DEAE}, In Quarantäne, [6f77930cd0bbd0665ba16c13e71c9a66],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B95AFDF4-305B-4BE0-B92F-F6227FEABD4F}, In Quarantäne, [5e88811eee9d4aecaf4cdaa5c83b9a66],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BDA297CF-2BBB-463D-9D51-24FF29791355}, In Quarantäne, [499d900fd9b2dc5a11ebd6a960a3b24e],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C0603216-89C4-4200-BEC8-E99F299E87E8}, In Quarantäne, [cc1ac8d7ed9e7abc18e4156aa55e38c8],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C08F6C81-FD88-4311-B8DA-7F5DCB5CD9AB}, In Quarantäne, [c5211689c9c2ba7c619b92edf013738d],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C1F76434-8480-44B4-974F-2C335171ECAC}, In Quarantäne, [cb1b900fb3d80f27da22b5ca36cd639d],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C2BA08AD-9479-42CB-B47E-9828521D9498}, In Quarantäne, [4d999a054c3f75c10af1116e1ae9c937],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C5913AD0-989C-41E4-A1A8-8BAC6C777C13}, In Quarantäne, [cd19930c751633037b811a657291ee12],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7163553-28E8-44B5-B432-1832BCB6ED79}, In Quarantäne, [fde9dac51a7150e61ede532c16ed3ac6],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CA614061-DC8C-45B4-9619-732AF86F522E}, In Quarantäne, [bc2ac7d88cff92a40dee83fc50b3916f],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D08752A0-F26A-4EF8-BF17-E1BC442DCDE1}, In Quarantäne, [c81e356abdce64d2ef0d95ea56adcb35],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D227944D-474C-4B1B-A9AF-CE76B4F47D6A}, In Quarantäne, [5393a4fbf8935ed8dc2086f9ac573cc4],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D2A9E610-7EFF-47A2-BA87-5A9D71C29B79}, In Quarantäne, [8462d1ce4348cf6711eb37486d96f808],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DCD1AEA9-4558-4D5A-B6CD-8D928B369BB0}, In Quarantäne, [7b6b18874249d95df00c3847847fd927],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DCFE8F93-FA8E-42A7-8E4A-1DE8B5368CBD}, In Quarantäne, [c91d0b94127941f539c21669f3108977],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6D65DD2-C9FF-46A1-A690-BB754A2D2234}, In Quarantäne, [21c54956c3c8f6407883314e8d76db25],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E7805AEC-22CA-447F-A8A6-7EC7E77070A9}, In Quarantäne, [4c9a6b347b10c6704cafadd24cb73ec2],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EA617D50-E068-4C1D-AE95-F6E6AF98E524}, In Quarantäne, [bf27732c8cff79bd07f482fdeb180ef2],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EE3F1BE3-9026-4411-94C0-6275F5D04962}, In Quarantäne, [39ad1a85d6b5ba7c7784dba442c1738d],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F254CE75-9F5A-4339-95D3-C425FB9D2FA3}, In Quarantäne, [76703b64f7945adc4bb037488a791ce4],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F2F2CECB-4057-45D7-9099-DBA4A389EDA3}, In Quarantäne, [0adc306f3754fc3a29d3bfc0ab5820e0],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F63CB3CD-DFB0-48EF-B2D7-FEE9CDB66E41}, In Quarantäne, [1bcb6837ddae56e00cf0532c63a059a7],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F88A048B-94CB-47D1-849C-D6DED33C423F}, In Quarantäne, [d313b0efdcafb18546b695eab94aab55],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F9BD8476-7ED1-47C5-AC74-4D343134A95A}, In Quarantäne, [a73f4f509bf0e551e6155e212bd84fb1],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FA438C90-32B9-4258-85D8-D35DBF4AC826}, In Quarantäne, [fbeb4758f7945adc6596e19ee91a34cc],
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FCE608D2-31D8-4F88-8853-E471C5AE4D18}, In Quarantäne, [be28ffa04b40eb4b9e5da6d959aaf709],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F05661C7-1D8D-4DCA-9CCD-38B1D14B90C6}, Löschen bei Neustart, [cd1928775833c86e5bc2562ae122bc44],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F508FD0F-A0B9-4FA6-9671-D508E2630CBB}, Löschen bei Neustart, [20c6900f6a213ff7fe1ddda33ac99f61],
PUP.Optional.MediaPlayerPlus, HKLM\SOFTWARE\WOW6432NODE\Media_Play_AIR+, Löschen bei Neustart, [d70fddc2048755e184c9a4ee996a53ad],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F05661C7-1D8D-4DCA-9CCD-38B1D14B90C6}, Löschen bei Neustart, [64822e719cefa096a974bec27c87a759],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F508FD0F-A0B9-4FA6-9671-D508E2630CBB}, Löschen bei Neustart, [cc1a5d42a5e6f83e48d36020de2526da],
Registrierungswerte: 77
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{0f212658-ac46-4db4-a651-f2e3f5d38859}|AppName, HDvid-Codec V9.0-bg.exe, In Quarantäne, [3caa28770c7fda5c8e6c0e71d72c8e72]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{108D8067-8643-4CF1-AD3B-101D25E768BF}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [d313831cbfcced4927d4c0bf2dd68b75]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{178E9451-E9D4-4381-971F-AD9530306779}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [578f6f302368e3539a62ed92e1228080]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{243121BC-100C-4AD0-BD27-1171FA11535A}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [28be9708701bfc3a58a47e01d72c817f]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{29BBDDF8-DD97-45DD-AF9B-C79232B8E5FB}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [6482c1de0784ed49dc20b4cbfa09d729]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2A50A943-F295-4327-9A13-8A6FDE603887}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [f3f3d7c874172610cc30a9d6ec177b85]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2C6E88B5-E812-4915-8F98-7DEDCA968096}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [23c3a9f62b608baba8547708758e19e7]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3201F3BF-442C-44D9-941C-DED57D9E39F9}|AppName, 0ee6de5f-3a06-4b03-90c8-26d4cf9d4b0a-2.exe-buttonutil.exe, In Quarantäne, [05e1ced1c0cb56e08b7093ec0af926da]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{32079536-D419-4EC5-9595-458584C51E73}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [6284a7f8751695a1ba42acd33cc7946c]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{32FF15BB-1746-4465-9D49-5BD934F0ABE6}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [16d05e415239122469920b74b64d0df3]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{347244E5-8DC2-410F-891A-CBAFFA5B9B58}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [f8eee8b7f59661d5e21ab7c8c1423ac6]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{370C4882-3678-4934-B3F8-365577ED1916}|AppName, 4e46404a-c7b1-4975-9527-355ea5225317-2.exe-codedownloader.exe, In Quarantäne, [f9ed425d1774d660bf3ded9261a2a060]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{38A03796-445B-4B91-8357-38D3F71D8A4E}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [796da9f65e2d6bcb0eeee09fe81b59a7]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3CF1FF4B-591A-4D7D-9ECE-C4AA701DAEC9}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [9e48544b632833030eeeed92c93aa759]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3DE2F41F-43B2-447D-8F27-94872AF29849}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [7670dbc4b8d350e6ac50b5cadb28837d]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4241BAA4-98E3-4220-AD22-8EEDCCA3A57F}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [796d801f8a017db9ed0ebfc08f74738d]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4339F59A-23EE-44A2-BDA0-2BF2F2F635AC}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [5c8a2e7119720432ea118ef1a85b23dd]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{448AC77C-BC55-4305-BA96-A1DFAD8F58E6}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [38ae3b64bad13df9817a4b347093ae52]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{45B71231-D71B-49F0-91AE-8BBED0D8E54D}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [3da938672269c670f902add245be857b]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{470C2232-DF1D-42F1-AA50-4712B8B1C5BD}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [8d591e81810a7cba6497daa550b30cf4]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4B605DC8-1160-4B90-BA69-D9D94681ACDA}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [ecfaffa07d0ec571b547aad5a063aa56]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4F6B9E16-DA67-4E0F-94D1-F9F7F9E7D2F6}|AppName, 4e46404a-c7b1-4975-9527-355ea5225317-2.exe-codedownloader.exe, In Quarantäne, [21c52b74414a54e2be3e225dee1501ff]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5284F595-4519-4416-A4F4-78E1667984ED}|AppName, 87ca2a8b-2c21-40d9-9b89-2d00c43bd78c-2.exe-codedownloader.exe, In Quarantäne, [07dfd6c9018a95a1ed0f94eb4db6728e]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{58897D74-1416-4284-8677-5CF215122361}|AppName, 4e46404a-c7b1-4975-9527-355ea5225317-2.exe-buttonutil.exe, In Quarantäne, [c323d9c658332f076c8fb5cac73c50b0]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5A4D0888-7C66-49BB-98EE-AB8F90668E66}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [677ffea11a717abcc23aee915da6fb05]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5C8D1436-87D2-41F9-BC5E-B612F2FA569F}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [e40236696229fb3bb546ec93ae5505fb]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5E6B95C4-65C3-4396-9DAE-1EB81EF3CAD5}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [8066950a99f291a588731c6362a1ff01]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5ED96D22-A363-4CCE-801A-D431BAA677FE}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [63832778e5a68caa28d49de2877c10f0]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6049520A-E37D-493A-A1CB-F3CA1E53F6BC}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [42a46b34107b3df948b4ccb33bc8d32d]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6305ACDF-10FA-44FD-B790-B3A9737D46C2}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [eef8a9f6cdbe1b1b5aa183fc44bfdc24]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68DA9E74-2753-4D16-A5F2-3789ACD8C0F2}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [bc2aa9f69feccb6bdf1d8ef19d669769]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6900D7FA-7A60-44B7-84E8-2B13651799EF}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [24c29b04d2b975c1fffc3847ef148977]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F52208F-2C52-446A-919D-19B389CCFA74}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [1ccae3bca6e5d5617686ea9526dd8f71]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{71484CBA-6D1C-4D14-93D6-9E7FEC8EB217}|AppName, 4e46404a-c7b1-4975-9527-355ea5225317-2.exe-buttonutil.exe, In Quarantäne, [cd198f1098f33afc00fb611eb05341bf]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{73174BA1-463A-4E33-856C-B0A9768C7188}|AppName, 0ee6de5f-3a06-4b03-90c8-26d4cf9d4b0a-2.exe-codedownloader.exe, In Quarantäne, [7b6b950a1279c373be3ec6b9db281ae6]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{76FF8EE5-6E5A-4091-95F8-72D892EBAD3C}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [9254d7c85e2d44f29e5d7d024db69f61]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{782CE1D4-815E-4CEB-A9D0-232BBFA05820}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [697d29761279310509f2dca360a3c040]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7906FE99-9B73-45DA-802C-9E3ECF643A69}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [e7ff772896f5989ea8545a25e2219d63]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7BE1335F-830A-42BC-85BC-77C31F19403D}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [984e6936711ae35300fb0a758c777888]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7D692592-F455-445A-BFD7-14F23E53D31F}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [7b6b6837c8c30b2bd328d8a76c978878]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{819B9182-3E54-4952-98DD-1DF84CDFF528}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [2fb7e9b6236886b0e01b275831d24ab6]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{83D3BB6C-230D-44D7-A635-28F73188E2F9}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [3ea8f6a9345769cd906b0a75ae5501ff]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{89FC5209-C785-4891-A1D2-6291E24EB3B4}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [02e4bde20d7eae88e715c1be2fd4ff01]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A04DFF9F-25C6-4DC4-A9ED-F0483D4536C8}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [be28940b0a81999dcd2ed3ac4fb444bc]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AB5E15E1-881C-45ED-99BE-127269A81FCB}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [05e10798117a94a26497344b4fb413ed]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B2394958-C484-429A-B6D9-2120192DCC79}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [e7ff207f92f943f3cd2f96e9c340c23e]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B2F7A7C3-B14A-4DAC-A3FD-70385B51DAF3}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [c71ffda2b0dbf3437f7d245bf50e1be5]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B558CA57-2A92-4F63-8B80-F3C6E0A5DEAE}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [6f77930cd0bbd0665ba16c13e71c9a66]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B95AFDF4-305B-4BE0-B92F-F6227FEABD4F}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [5e88811eee9d4aecaf4cdaa5c83b9a66]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BDA297CF-2BBB-463D-9D51-24FF29791355}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [499d900fd9b2dc5a11ebd6a960a3b24e]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C0603216-89C4-4200-BEC8-E99F299E87E8}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [cc1ac8d7ed9e7abc18e4156aa55e38c8]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C08F6C81-FD88-4311-B8DA-7F5DCB5CD9AB}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [c5211689c9c2ba7c619b92edf013738d]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{c1f76434-8480-44b4-974f-2c335171ecac}|AppName, HDvid-Codec V9.0-codedownloader.exe, In Quarantäne, [cb1b900fb3d80f27da22b5ca36cd639d]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C2BA08AD-9479-42CB-B47E-9828521D9498}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [4d999a054c3f75c10af1116e1ae9c937]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C5913AD0-989C-41E4-A1A8-8BAC6C777C13}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [cd19930c751633037b811a657291ee12]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7163553-28E8-44B5-B432-1832BCB6ED79}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [fde9dac51a7150e61ede532c16ed3ac6]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CA614061-DC8C-45B4-9619-732AF86F522E}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [bc2ac7d88cff92a40dee83fc50b3916f]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D08752A0-F26A-4EF8-BF17-E1BC442DCDE1}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [c81e356abdce64d2ef0d95ea56adcb35]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D227944D-474C-4B1B-A9AF-CE76B4F47D6A}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [5393a4fbf8935ed8dc2086f9ac573cc4]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D2A9E610-7EFF-47A2-BA87-5A9D71C29B79}|AppName, 4e46404a-c7b1-4975-9527-355ea5225317-2.exe-codedownloader.exe, In Quarantäne, [8462d1ce4348cf6711eb37486d96f808]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DCD1AEA9-4558-4D5A-B6CD-8D928B369BB0}|AppName, 0ee6de5f-3a06-4b03-90c8-26d4cf9d4b0a-2.exe-codedownloader.exe, In Quarantäne, [7b6b18874249d95df00c3847847fd927]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DCFE8F93-FA8E-42A7-8E4A-1DE8B5368CBD}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [c91d0b94127941f539c21669f3108977]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{e6d65dd2-c9ff-46a1-a690-bb754a2d2234}|AppName, HDvid-Codec V9.0-buttonutil.exe, In Quarantäne, [21c54956c3c8f6407883314e8d76db25]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E7805AEC-22CA-447F-A8A6-7EC7E77070A9}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [4c9a6b347b10c6704cafadd24cb73ec2]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EA617D50-E068-4C1D-AE95-F6E6AF98E524}|AppName, 4e46404a-c7b1-4975-9527-355ea5225317-2.exe-buttonutil.exe, In Quarantäne, [bf27732c8cff79bd07f482fdeb180ef2]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EE3F1BE3-9026-4411-94C0-6275F5D04962}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [39ad1a85d6b5ba7c7784dba442c1738d]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F254CE75-9F5A-4339-95D3-C425FB9D2FA3}|AppName, 87ca2a8b-2c21-40d9-9b89-2d00c43bd78c-2.exe-buttonutil.exe, In Quarantäne, [76703b64f7945adc4bb037488a791ce4]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F2F2CECB-4057-45D7-9099-DBA4A389EDA3}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [0adc306f3754fc3a29d3bfc0ab5820e0]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F63CB3CD-DFB0-48EF-B2D7-FEE9CDB66E41}|AppName, 4e46404a-c7b1-4975-9527-355ea5225317-2.exe-codedownloader.exe, In Quarantäne, [1bcb6837ddae56e00cf0532c63a059a7]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F88A048B-94CB-47D1-849C-D6DED33C423F}|AppName, Media_Play_AIR+-enabler.exe-codedownloader.exe, In Quarantäne, [d313b0efdcafb18546b695eab94aab55]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F9BD8476-7ED1-47C5-AC74-4D343134A95A}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [a73f4f509bf0e551e6155e212bd84fb1]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FA438C90-32B9-4258-85D8-D35DBF4AC826}|AppName, 4e46404a-c7b1-4975-9527-355ea5225317-2.exe-buttonutil.exe, In Quarantäne, [fbeb4758f7945adc6596e19ee91a34cc]
PUP.Optional.CrossRider, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FCE608D2-31D8-4F88-8853-E471C5AE4D18}|AppName, Media_Play_AIR+-enabler.exe-buttonutil.exe, In Quarantäne, [be28ffa04b40eb4b9e5da6d959aaf709]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{f05661c7-1d8d-4dca-9ccd-38b1d14b90c6}|AppName, Media_Play_AIR+-codedownloader.exe, Löschen bei Neustart, [cd1928775833c86e5bc2562ae122bc44]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{f508fd0f-a0b9-4fa6-9671-d508e2630cbb}|AppName, Media_Play_AIR+-bg.exe, Löschen bei Neustart, [20c6900f6a213ff7fe1ddda33ac99f61]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{f05661c7-1d8d-4dca-9ccd-38b1d14b90c6}|AppName, Media_Play_AIR+-codedownloader.exe, Löschen bei Neustart, [64822e719cefa096a974bec27c87a759]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{f508fd0f-a0b9-4fa6-9671-d508e2630cbb}|AppName, Media_Play_AIR+-bg.exe, Löschen bei Neustart, [cc1a5d42a5e6f83e48d36020de2526da]
Registrierungsdaten: 1
PUP.Optional.SimplyTech, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|newtab, %appdata%\SimplyTech\home\home.htm, Gut: (www.google.com), Schlecht: (%appdata%\SimplyTech\home\home.htm),Löschen bei Neustart,[af377e21f99281b55bda0a659c68cb35]
Ordner: 1
PUP.Optional.ProtectedSearch, C:\Windows\System32\Tasks\ProtectedSearch, In Quarantäne, [aa3c86196c1fd363afc694f30df58d73],
Dateien: 2
PUP.Optional.WebInstr, C:\Windows\System32\drivers\Msft_Kernel_webinstrNew_01009.Wdf, Löschen bei Neustart, [b333dcc3187376c0be1e0fa05aa91fe1],
PUP.Optional.ProtectedSearch, C:\Windows\System32\Tasks\ProtectedSearch\Protected Search, In Quarantäne, [aa3c86196c1fd363afc694f30df58d73],
Physische Sektoren: 0
(keine bösartigen Elemente erkannt)
(end)
Code:
# AdwCleaner v5.023 - Bericht erstellt am 01/12/2015 um 11:20:31
# Aktualisiert am 30/11/2015 von Xplode
# Datenbank : 2015-11-30.1 [Server]
# Betriebssystem : Windows 7 Professional Service Pack 1 (x64)
# Benutzername : Hauptversorgung - MANUSPC
# Gestartet von : C:\Users\Manu\Downloads\AdwCleaner_5.023.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum
***** [ Dienste ] *****
[-] Dienst Gelöscht : Update snipsmart
***** [ Ordner ] *****
[-] Ordner Gelöscht : C:\Program Files (x86)\Common Files\ParetoLogic
[-] Ordner Gelöscht : C:\ProgramData\ParetoLogic
[-] Ordner Gelöscht : C:\ProgramData\ytd video downloader
[-] Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader
[-] Ordner Gelöscht : C:\Users\Hauptversorgung\AppData\Local\MalwareProtectionLive
[-] Ordner Gelöscht : C:\Users\Hauptversorgung\AppData\Roaming\DriverCure
[-] Ordner Gelöscht : C:\Users\Hauptversorgung\AppData\Roaming\ParetoLogic
[-] Ordner Gelöscht : C:\Users\Hauptversorgung\AppData\Roaming\Systweak
[-] Ordner Gelöscht : C:\Users\Hauptversorgung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceMetér
[!] Ordner Nicht Gelöscht : C:\Users\Hauptversorgung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceMetér
[-] Ordner Gelöscht : C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\QVb22NAK.default\astrmndant
[-] Ordner Gelöscht : C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\QVb22NAK.default\Extensions\{8dc5c42e-9204-2a64-8b97-fa94ff8a241f}
[-] Ordner Gelöscht : C:\Windows\SysNative\Tasks\Browser Updater
[-] Ordner Gelöscht : C:\Windows\SysNative\Tasks\SystemSockets
***** [ Dateien ] *****
[-] Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\webssearches.xml
[-] Datei Gelöscht : C:\Users\Hauptversorgung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Malware Protection Live.lnk
[-] Datei Gelöscht : C:\Users\Hauptversorgung\AppData\Roaming\Mozilla\Firefox\Profiles\4uoldsn5.default\Extensions\{f2548724-373f-45fe-be6a-3a85e87b7711}.xpi
[-] Datei Gelöscht : C:\Users\Hauptversorgung\AppData\Roaming\Mozilla\Firefox\Profiles\4uoldsn5.default\Extensions\{f2548724-373f-45fe-be6a-3a85e87b7711}.xpi
[-] Datei Gelöscht : C:\Users\Hauptversorgung\AppData\Roaming\Mozilla\Firefox\Profiles\4uoldsn5.default\Extensions\{b64d9b05-48e1-4ceb-bf58-e0643994e900}.xpi
[-] Datei Gelöscht : C:\Users\Hauptversorgung\AppData\Roaming\Mozilla\Firefox\Profiles\4uoldsn5.default\searchplugins\yahoo_ff.xml
[-] Datei Gelöscht : C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\QVb22NAK.default\Extensions\{f2548724-373f-45fe-be6a-3a85e87b7711}.xpi
[-] Datei Gelöscht : C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\QVb22NAK.default\Extensions\{f2548724-373f-45fe-be6a-3a85e87b7711}.xpi
***** [ DLLs ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
[-] Aufgabenplanung Gelöscht : ASP
[-] Aufgabenplanung Gelöscht : paretologic registration3
[-] Aufgabenplanung Gelöscht : paretologic update version3
[-] Aufgabenplanung Gelöscht : ParetoLogic Update Version3 Startup Task
***** [ Registrierungsdatenbank ] *****
[-] Schlüssel Gelöscht : HKCU\Software\Mozilla\Extends
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\uus3url-pl
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}
[-] Schlüssel Gelöscht : HKLM\System\CurrentControlSet\Services\Eventlog\Application\Update snipsmart
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [C:\Program Files (x86)\Plus-HD-9.7\Plus-HD-9.7-nova.exe]
[-] Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [faststartff@gmail.com]
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6EC77D09-02CB-4E1F-E3C4-FB141B2610B3}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
[-] Schlüssel Gelöscht : HKCU\Software\OCS
[-] Schlüssel Gelöscht : HKCU\Software\ParetoLogic
[-] Schlüssel Gelöscht : HKCU\Software\StormWatchApp
[-] Schlüssel Gelöscht : HKCU\Software\StormWatch
[-] Schlüssel Gelöscht : HKCU\Software\snipsmart
[-] Schlüssel Gelöscht : HKCU\Software\OB
[-] Schlüssel Gelöscht : HKCU\Software\Reg\Clean
[!] Schlüssel Nicht Gelöscht : HKCU\Software\Mozilla\Extends
[-] Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\re-markit
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\ParetoLogic
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\webssearchesSoftware
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Taronja
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Reg\Clean
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WindowsMangerProtect
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Activeris AntiMalware_is1
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ACF5FE1B-3772-4068-8B87-2D2A6EFD0A05}
[-] Schlüssel Gelöscht : HKU\.DEFAULT\Software\AppDataLow\Software\Supra Savings
[-] Schlüssel Gelöscht : HKU\S-1-5-19\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
[-] Schlüssel Gelöscht : HKU\S-1-5-20\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
[-] Schlüssel Gelöscht : HKU\S-1-5-20\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
[-] Schlüssel Gelöscht : HKU\S-1-5-21-1029605971-2717496707-4219619431-1001\Software\InstalledBrowserExtensions
[-] Schlüssel Gelöscht : HKU\S-1-5-21-1029605971-2717496707-4219619431-1001\Software\Softonic
[-] Schlüssel Gelöscht : HKU\S-1-5-21-1029605971-2717496707-4219619431-1001\Software\suprasavings
[-] Schlüssel Gelöscht : HKU\S-1-5-21-1029605971-2717496707-4219619431-1001\Software\AppDataLow\Software\Supra Savings
[-] Schlüssel Gelöscht : HKU\S-1-5-21-1029605971-2717496707-4219619431-1001\Software\AppDataLow\Software\suprasavings
[-] Schlüssel Gelöscht : HKU\S-1-5-21-1029605971-2717496707-4219619431-1001\Software\AppDataLow\Software\re-markit
[-] Daten Wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Daten Wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main [Search Bar]
[-] Daten Wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[-] Daten Wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search [Default_Search_URL]
[-] Daten Wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search [Search Bar]
[-] Daten Wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search [Search Page]
[-] Daten Wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchURI []
[-] Daten Wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchUrl []
[-] Daten Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Daten Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Daten Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchURI []
[-] Daten Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchURI []
[-] Daten Wiederhergestellt : HKU\S-1-5-21-1029605971-2717496707-4219619431-1001\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Daten Wiederhergestellt : HKU\S-1-5-21-1029605971-2717496707-4219619431-1001\Software\Microsoft\Internet Explorer\Main [Search Bar]
[-] Daten Wiederhergestellt : HKU\S-1-5-21-1029605971-2717496707-4219619431-1001\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
[-] Daten Wiederhergestellt : HKU\S-1-5-21-1029605971-2717496707-4219619431-1001\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
[-] Daten Wiederhergestellt : HKU\S-1-5-21-1029605971-2717496707-4219619431-1001\Software\Microsoft\Internet Explorer\SearchUrl [Default]
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BCDA714C-8505-4B2F-8D95-183C58730C77}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\astromenda.com
***** [ Internetbrowser ] *****
[-] [C:\Users\Hauptversorgung\AppData\Roaming\Mozilla\Firefox\Profiles\4uoldsn5.default\prefs.js] [Preference] Gelöscht : user_pref("keyword.URL", "hxxps://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=937811&p=");
[-] [C:\Users\Hauptversorgung\AppData\Roaming\Mozilla\Firefox\Profiles\4uoldsn5.default\prefs.js] [Preference] Gelöscht : user_pref("browser.startup.homepage", "hxxps://de.search.yahoo.com/?type=937811&fr=spigot-yhp-ff");
[-] [C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\QVb22NAK.default\prefs.js] [Preference] Gelöscht : user_pref("browser.search.defaultenginename", "Astromenda");
[-] [C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\QVb22NAK.default\prefs.js] [Preference] Gelöscht : user_pref("browser.search.selectedEngine", "Astromenda");
[-] [C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\QVb22NAK.default\prefs.js] [Preference] Gelöscht : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_cmi_14_43_ch&cd=2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDyBzz0B0EyEyE0CtD0E0BtN0D0Tzu0StCtDtBzytN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzytDy[...]
[-] [C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\QVb22NAK.default\prefs.js] [Preference] Gelöscht : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_cmi_14_43_ch&cd=2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDyBzz0B0EyEyE0CtD0E0BtN0D0Tzu0StCtDtBzytN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzyt[...]
[-] [C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\QVb22NAK.default\prefs.js] [Preference] Gelöscht : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda");
[-] [C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\QVb22NAK.default\prefs.js] [Preference] Gelöscht : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda");
[-] [C:\Users\Manu\AppData\Roaming\Mozilla\Firefox\Profiles\QVb22NAK.default\prefs.js] [Preference] Gelöscht : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_cmi_14_43_ch&cd=2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDyBzz0B0EyEyE0CtD0E0BtN0D0Tzu0StCtDtBzytN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBz[...]
[-] [C:\Users\Hauptversorgung\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : astromenda.com
[-] [C:\Users\Hauptversorgung\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : feed.snapdo.com
[-] [C:\Users\Hauptversorgung\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : default-search.net
[-] [C:\Users\Hauptversorgung\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : istart.webssearches.com
[-] [C:\Users\Hauptversorgung\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : webssearches
[-] [C:\Users\Hauptversorgung\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Gelöscht : hxxp://istart.webssearches.com/?type=hp&ts=1414402244&from=cvs2&uid=HGSTXHTS541075A9E680_130913JA13021H0B0YVKX
[-] [C:\Users\Hauptversorgung\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider_Data] Gelöscht : hxxp://istart.webssearches.com/web/?type=ds&ts=1414402244&from=cvs2&uid=HGSTXHTS541075A9E680_130913JA13021H0B0YVKX&q={searchTerms}
[-] [C:\Users\Hauptversorgung\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : ibnjmihbbanannlbobkbmnmckjnmdnom
[-] [C:\Users\Hauptversorgung\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Gelöscht : hxxp://istart.webssearches.com/?type=hp&ts=1414402244&from=cvs2&uid=HGSTXHTS541075A9E680_130913JA13021H0B0YVKX
[-] [C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : feed.snapdo.com
[-] [C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : booedmolknjekdopkepjjeckmjkdpfgl
[-] [C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : flpcjncodpafbgdpnkljologafpionhb
[-] [C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : ibnjmihbbanannlbobkbmnmckjnmdnom
[-] [C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : kfgaibfbmkjgmimhbbaikfnpkkjkpoan
[-] [C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : nhjnmokdaalmckkikjklibeakholpham
[-] [C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : pfkfdlcdbajamklbneflfbcmfgddmpae
[-] [C:\Users\Manu\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Gelöscht : hxxp://search.conduit.com/?gd=&ctid=CT3323900&octid=EB_ORIGINAL_CTID&ISID=MCD9BAB08-7ABA-4542-874F-FC143CF15558&SearchSource=55&CUI=&UM=5&UP=SPA12563DE-28B5-4BD1-8429-E6959CE85A73&SSPV=
*************************
:: "Tracing" Schlüssel gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht
########## EOF - \AdwCleaner\AdwCleaner[C2].txt - [15481 Bytes] ##########
|
Hinweis:
AdwCleaner auf deinen Desktop.