Unzählige Löschungen sind auf ein Neues entstanden. Malware Bytes Anti Malware fand über 400 schädliche Anwendungen.
Suchlauf- und Schutzprotokoll: Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Suchlauf Datum: 02.05.2014
Suchlauf-Zeit: 20:20:21
Logdatei: mbam_suchlauf.txt
Administrator: Ja
Version: 2.00.1.1004
Malware Datenbank: v2014.05.02.10
Rootkit Datenbank: v2014.03.27.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Chameleon: Deaktiviert
Betriebssystem: Windows 8
CPU: x64
Dateisystem: NTFS
Benutzer: Jaspar
Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 287264
Verstrichene Zeit: 28 Min, 32 Sek
Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert
Prozesse: 6
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\updateScanTack.exe, 7904, Löschen bei Neustart, [8d73b050ea163dc3e374ed732dd4fc04]
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\utilScanTack.exe, 7940, Löschen bei Neustart, [20e0827ed52b7f814c0b86dae918c838]
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\ScanTack.BrowserAdapter.exe, 5416, Löschen bei Neustart, [b64a629e738d44bc638c1d6557abc53b]
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\ScanTack.PurBrowse64.exe, 3944, Löschen bei Neustart, [b64a629e738d44bc638c1d6557abc53b]
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfKF161.exe, 3732, Löschen bei Neustart, [17e967996799847cd5ae215c887a34cc]
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurf-soft\BlockNSurf.exe, 5852, Löschen bei Neustart, [39c7df21b44c8c7421e2a3ccd131f10f]
Module: 2
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\{9acd1534-e8f8-40cb-b5ac-4996fe01175b}.dll, Löschen bei Neustart, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfKF161.dll, Löschen bei Neustart, [39c7df21b44c8c7421e2a3ccd131f10f],
Registrierungsschlüssel: 43
PUP.Optional.ScanTack.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update ScanTack, In Quarantäne, [8d73b050ea163dc3e374ed732dd4fc04],
PUP.Optional.ScanTack.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Util ScanTack, In Quarantäne, [20e0827ed52b7f814c0b86dae918c838],
PUP.Optional.MediaPlayerplus.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511421146}, In Quarantäne, [bb45c739ea16ac546f0e6602e21f2bd5],
PUP.Optional.MediaPlayerplus.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511421146}, In Quarantäne, [bb45c739ea16ac546f0e6602e21f2bd5],
PUP.Optional.MediaPlayerplus.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220522422246}, In Quarantäne, [bb45c739ea16ac546f0e6602e21f2bd5],
PUP.Optional.MediaPlayerplus.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511421146}\INPROCSERVER32, In Quarantäne, [bb45c739ea16ac546f0e6602e21f2bd5],
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, In Quarantäne, [f30dd52b0ff1c43cfe5b67eda35f3cc4],
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, In Quarantäne, [f30dd52b0ff1c43cfe5b67eda35f3cc4],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [43bd31cf02fef10f2e1e1609d9293fc1],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [43bd31cf02fef10f2e1e1609d9293fc1],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [43bd31cf02fef10f2e1e1609d9293fc1],
PUP.Optional.ScanTack.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{d332cff8-358e-4c9e-8af3-a08872ef22c1}, In Quarantäne, [d82812eef50bc33dbdcfe03e6d95ce32],
PUP.Optional.ScanTack.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{D332CFF8-358E-4C9E-8AF3-A08872EF22C1}, In Quarantäne, [d82812eef50bc33dbdcfe03e6d95ce32],
PUP.Optional.ScanTack.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ScanTack, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, In Quarantäne, [ce3244bc5fa1a7592c044e3154ae9e62],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\27058, In Quarantäne, [39c732ce09f7bc4470c09be49d6511ef],
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [fa06b34dc23e20e024e1f1bde32057a9],
PUP.Optional.MediaPlayerplus.A, HKLM\SOFTWARE\WOW6432NODE\MediaPlayerplus, In Quarantäne, [44bc7a86659bd22e4dec7b03a75bda26],
PUP.Optional.ScanTack.A, HKLM\SOFTWARE\WOW6432NODE\ScanTack, In Quarantäne, [ab554fb18e72b050ef027f031ee4a35d],
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\webssearchesSoftware, In Quarantäne, [d82822de4cb45ba520f12f50ae54817f],
PUP.Optional.FirstSeenToday.A, HKLM\SOFTWARE\WOW6432NODE\FREE_SOFT_TODAY\fst_de_7, In Quarantäne, [98689d630df305fbeaeae88f15ed3fc1],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\21636, In Quarantäne, [f10f49b7ec14f70935fb8ff057ab956b],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\27058, In Quarantäne, [8d73a9570cf46d937bb5fc83649e22de],
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [ed1352ae0cf45ca4e2232a84cc370af6],
PUP.Optional.BlockAndSurf.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\BlockAndSurf, In Quarantäne, [17e967996799847cd5ae215c887a34cc],
PUP.Optional.MediaPlayerplus.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\MediaPlayerplus, Löschen bei Neustart, [bc44e51b6a9614ec27147a0457ab3bc5],
PUP.Optional.ScanTack.A, HKU\S-1-5-21-705164964-436951070-2432176924-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\ScanTack, Löschen bei Neustart, [d8288080877946ba2cc4087ae2209967],
PUP.Optional.MediaPlayerplus.A, HKU\S-1-5-21-705164964-436951070-2432176924-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\MediaPlayerplus, Löschen bei Neustart, [7b85d22e26da57a9fd3e532b37cb08f8],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-705164964-436951070-2432176924-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, Löschen bei Neustart, [629efa06768a60a0888a4547f9097d83],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-705164964-436951070-2432176924-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, Löschen bei Neustart, [af51d22ee51bbc44f743edb510f358a8],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-705164964-436951070-2432176924-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, Löschen bei Neustart, [699717e96c9459a7b27fcdb219e96f91],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-705164964-436951070-2432176924-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\27058, Löschen bei Neustart, [d32d50b0669aa15f98993748be44e41c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-705164964-436951070-2432176924-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Freeven, Löschen bei Neustart, [c33d4fb1a7593ac68f08681a8e7447b9],
PUP.Optional.Qone8, HKU\S-1-5-21-705164964-436951070-2432176924-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, Löschen bei Neustart, [08f850b0a25e7d83de268c2238cb3ec2],
PUP.Optional.BlockAndSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\42F1E98D-0FAF-5DB4-FEBA-534A5CE9ADE7, In Quarantäne, [39c7df21b44c8c7421e2a3ccd131f10f],
Adware.EoRezo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\fst_de_7_is1, In Quarantäne, [31cf2ed2000010f0628876fa768ceb15],
Registrierungswerte: 3
PUP.Optional.QuickStart.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|quick_start@gmail.com, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com, In Quarantäne, [39c7a65ad927c33d3c92c3bc6c96936d]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-705164964-436951070-2432176924-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 1V2X1Q1R1M1F, Löschen bei Neustart, [af51d22ee51bbc44f743edb510f358a8]
PUP.Optional.BlockAndSurf.A, HKU\S-1-5-21-705164964-436951070-2432176924-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|BlockNSurf, C:\Program Files (x86)\BlockAndSurf-soft\BlockNSurf.exe, Löschen bei Neustart, [39c7df21b44c8c7421e2a3ccd131f10f]
Registrierungsdaten: 5
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[728ebb45f20e03fd6cdcbb7dba4a18e8]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://istart.webssearches.com/web/?type=ds&ts=1398708465&from=tugs&uid=HGSTXHTS541010A9E680_JA1000102B9R5P2B9R5PX&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=ds&ts=1398708465&from=tugs&uid=HGSTXHTS541010A9E680_JA1000102B9R5P2B9R5PX&q={searchTerms}),Ersetzt,[cd3315eb90704fb19d78ec42ba4a3cc4]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://istart.webssearches.com/?type=hp&ts=1398708465&from=tugs&uid=HGSTXHTS541010A9E680_JA1000102B9R5P2B9R5PX, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1398708465&from=tugs&uid=HGSTXHTS541010A9E680_JA1000102B9R5P2B9R5PX),Ersetzt,[db251fe19d6313ede92ac06e09fbc63a]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[5ca4aa5610f06799390f79bffc083bc5]
PUP.Optional.Conduit.A, HKU\S-1-5-21-705164964-436951070-2432176924-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://search.conduit.com/?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=MDBA52EED-7457-4DBD-90A1-472A2C2BE351&SearchSource=55&CUI=&UM=2&UP=SPEAFA9A0E-76D6-494C-999F-429BEF4A50E9&SSPV=, Gut: (hxxp://www.google.com), Schlecht: (hxxp://search.conduit.com/?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=MDBA52EED-7457-4DBD-90A1-472A2C2BE351&SearchSource=55&CUI=&UM=2&UP=SPEAFA9A0E-76D6-494C-999F-429BEF4A50E9&SSPV=),Löschen bei Neustart,[e020649c6997c63a9120ab832dd7ab55]
Ordner: 100
Adware.EoRezo, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\free_soft_today, In Quarantäne, [e719966adc244cb41487b6c4c83aaf51],
PUP.Optional.MediaPlayerplus.A, C:\Program Files (x86)\MediaPlayerplus, In Quarantäne, [f10fbe42718fe21e1d1aff7fba48f50b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack, Löschen bei Neustart, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin, Löschen bei Neustart, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\plugins, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\TEMP, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\content, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\content\include, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\content\include\tools, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\content\js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\en, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\en-US, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\es, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\es-419, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\fr, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\fr-BE, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\fr-CA, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\fr-CH, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\fr-LU, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\it, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\it-CH, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\pl, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\pt-BR, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\ru, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\ru-MO, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\tr, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\vi, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\zh-CN, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\zh-TW, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\skin, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\skin\weather, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\defaults, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\defaults\preferences, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\modules, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\img, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\js, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\en, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\es, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\es_419, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\fr, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\fr-BE, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\fr-CA, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\fr-CH, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\fr-LU, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\it, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\it-CH, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\pl, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\pt, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\pt_BR, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\ru, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\ru-MO, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\tr, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\vi, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\zh_CN, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\zh_TW, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.WebsSearches.A, C:\Users\Jaspar\AppData\Roaming\webssearches, In Quarantäne, [a85814eca060857b161ffe705fa3bb45],
PUP.Optional.WebsSearches.A, C:\Users\Jaspar\AppData\Roaming\webssearches\images, In Quarantäne, [a85814eca060857b161ffe705fa3bb45],
PUP.Optional.WebsSearches.A, C:\Users\Jaspar\AppData\Roaming\webssearches\log, In Quarantäne, [a85814eca060857b161ffe705fa3bb45],
PUP.Optional.CrossRider.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\majjphhgppkndjjkmhhnbgafooenebhd, In Quarantäne, [36ca1ee2dc2406fa018492dcef1352ae],
PUP.Optional.CrossRider.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\majjphhgppkndjjkmhhnbgafooenebhd\1.26.27_0, In Quarantäne, [36ca1ee2dc2406fa018492dcef1352ae],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurf-soft, Löschen bei Neustart, [39c7df21b44c8c7421e2a3ccd131f10f],
PUP.Optional.MindSpark.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\8hffxtbr@Allin1Convert_8h.com, In Quarantäne, [43bda15f19e7956b93440e6224dec838],
PUP.Optional.MindSpark.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\8hffxtbr@Allin1Convert_8h.com\chrome, In Quarantäne, [43bda15f19e7956b93440e6224dec838],
PUP.Optional.MindSpark.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\8hffxtbr@Allin1Convert_8h.com\META-INF, In Quarantäne, [43bda15f19e7956b93440e6224dec838],
PUP.Optional.MindSpark.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\8hffxtbr@Allin1Convert_8h.com\plugins, In Quarantäne, [43bda15f19e7956b93440e6224dec838],
Adware.EoRezo, C:\Users\Jaspar\AppData\Local\fst_de_7, In Quarantäne, [17e97987a15f5fa16e798ee25da5b050],
Adware.EoRezo, C:\Users\Jaspar\AppData\Local\fst_de_7\Download, In Quarantäne, [17e97987a15f5fa16e798ee25da5b050],
Adware.EoRezo, C:\Program Files (x86)\fst_de_7, In Quarantäne, [31cf2ed2000010f0628876fa768ceb15],
PUP.Optional.MindSpark.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\Allin1Convert_8h, Löschen bei Neustart, [d12fc73911efdd23d24c244d39c9dc24],
Dateien: 243
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\updateScanTack.exe, Löschen bei Neustart, [8d73b050ea163dc3e374ed732dd4fc04],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\utilScanTack.exe, Löschen bei Neustart, [20e0827ed52b7f814c0b86dae918c838],
PUP.Optional.MediaPlayerplus.A, C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-bho64.dll, In Quarantäne, [bb45c739ea16ac546f0e6602e21f2bd5],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SupTab.dll, In Quarantäne, [43bd31cf02fef10f2e1e1609d9293fc1],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\ScanTackBHO.dll, In Quarantäne, [d82812eef50bc33dbdcfe03e6d95ce32],
PUP.Optional.SupTab.A, C:\Users\Jaspar\AppData\Roaming\SupTab\SupTab.dll, In Quarantäne, [c04013edb947fc04e26b260f32ceda26],
PUP.Optional.BundleInstaller.A, C:\Users\Jaspar\Downloads\Player_Setup.exe, In Quarantäne, [4eb2e51b6799d927d9c1ac96956c9070],
PUP.Optional.RegCleanPro, C:\Users\Jaspar\Downloads\regclean_my40945.exe, In Quarantäne, [d22ed62a669a8e7293f993a1b749847c],
Adware.EoRezo, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\free_soft_today\Freesofttoday.lnk, In Quarantäne, [e719966adc244cb41487b6c4c83aaf51],
PUP.Optional.BlockAndSurf.A, C:\Windows\Tasks\BlockAndSurf Update.job, In Quarantäne, [bb4537c9ed13ce326d14cbb20ef41be5],
PUP.Optional.BlockAndSurf.A, C:\Windows\Tasks\BlockAndSurf_wd.job, In Quarantäne, [5ba509f736caf907057cdf9ee41e6997],
PUP.Optional.CrossRider.A, C:\Windows\Tasks\6e36e8b7-5a33-405b-889f-ed80ffb3f521-1.job, In Quarantäne, [23dd45bb3dc37b852b80730af80a5fa1],
PUP.Optional.CrossRider.A, C:\Windows\Tasks\6e36e8b7-5a33-405b-889f-ed80ffb3f521-2.job, In Quarantäne, [0ff1e818ee12000092194538d62c17e9],
PUP.Optional.CrossRider.A, C:\Windows\Tasks\6e36e8b7-5a33-405b-889f-ed80ffb3f521-3.job, In Quarantäne, [0ff11be5df216f91a9023c41f111ec14],
PUP.Optional.CrossRider.A, C:\Windows\Tasks\6e36e8b7-5a33-405b-889f-ed80ffb3f521-4.job, In Quarantäne, [2fd1f40c3cc46a962487295426dc728e],
PUP.Optional.CrossRider.A, C:\Windows\Tasks\6e36e8b7-5a33-405b-889f-ed80ffb3f521-5.job, In Quarantäne, [dc24738d748c39c7a60546378a78a65a],
PUP.Optional.CrossRider.A, C:\Windows\Tasks\923e656c-7931-4c44-9b19-6d3c00ebfbd9-1.job, In Quarantäne, [b14ff30dd12fbc44c2e9e29b0bf743bd],
PUP.Optional.CrossRider.A, C:\Windows\Tasks\923e656c-7931-4c44-9b19-6d3c00ebfbd9-2.job, In Quarantäne, [fa062fd1a15f2ad647640d70db27619f],
PUP.Optional.CrossRider.A, C:\Windows\Tasks\923e656c-7931-4c44-9b19-6d3c00ebfbd9-3.job, In Quarantäne, [ff014ab6f20ecd33e0cb6914798942be],
PUP.Optional.CrossRider.A, C:\Windows\Tasks\923e656c-7931-4c44-9b19-6d3c00ebfbd9-4.job, In Quarantäne, [f10f6a9603fd50b00aa13c417f83dc24],
PUP.Optional.CrossRider.A, C:\Windows\Tasks\923e656c-7931-4c44-9b19-6d3c00ebfbd9-5.job, In Quarantäne, [fe02de226f91a15feebd493441c1b34d],
PUP.Optional.MediaPlayerplus.A, C:\Program Files (x86)\MediaPlayerplus\background.html, In Quarantäne, [f10fbe42718fe21e1d1aff7fba48f50b],
PUP.Optional.MediaPlayerplus.A, C:\Program Files (x86)\MediaPlayerplus\54246.crx, In Quarantäne, [f10fbe42718fe21e1d1aff7fba48f50b],
PUP.Optional.MediaPlayerplus.A, C:\Program Files (x86)\MediaPlayerplus\54246.xpi, In Quarantäne, [f10fbe42718fe21e1d1aff7fba48f50b],
PUP.Optional.MediaPlayerplus.A, C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus.ico, In Quarantäne, [f10fbe42718fe21e1d1aff7fba48f50b],
PUP.Optional.MediaPlayerplus.A, C:\Program Files (x86)\MediaPlayerplus\Uninstall.exe, In Quarantäne, [f10fbe42718fe21e1d1aff7fba48f50b],
PUP.Optional.MediaPlayerplus.A, C:\Program Files (x86)\MediaPlayerplus\utils.exe, In Quarantäne, [f10fbe42718fe21e1d1aff7fba48f50b],
PUP.Optional.WebsSearches.A, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\webssearches.xml, In Quarantäne, [68985ea2768ad22e4fc47e019d653ac6],
PUP.Optional.Conduit.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\searchplugins\conduit-search.xml, In Quarantäne, [d82852ae748c936d72773749c33fbe42],
PUP.Optional.ScanTack.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\{9acd1534-e8f8-40cb-b5ac-4996fe01175b}.xpi, In Quarantäne, [28d849b7c04046ba3958ceb306fc8878],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\ScanTack.ico, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\0, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\7za.exe, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\ScanTackUninstall.exe, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\updateScanTack.InstallState, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\7za.exe, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\BrowserAdapterS.7z, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\ScanTack.BrowserAdapter.exe, Löschen bei Neustart, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\ScanTack.PurBrowse64.exe, Löschen bei Neustart, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\ScanTack.PurBrowseG.zip, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\ScanTackBAApp.dll, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\sqlite3.dll, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\utilScanTack.InstallState, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\{9acd1534-e8f8-40cb-b5ac-4996fe01175b}.dll, Löschen bei Neustart, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\plugins\ScanTack.Bromon.dll, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\plugins\ScanTack.BrowserAdapterS.dll, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\plugins\ScanTack.CompatibilityChecker.dll, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\plugins\ScanTack.FFUpdate.dll, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\plugins\ScanTack.IEUpdate.dll, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.ScanTack.A, C:\Program Files (x86)\ScanTack\bin\plugins\ScanTack.PurBrowseG.dll, In Quarantäne, [b64a629e738d44bc638c1d6557abc53b],
PUP.Optional.PCPerformer.A, C:\Windows\System32\roboot64.exe, In Quarantäne, [2dd3a858946c17e95a73b8cdbe44e719],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\install.data, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\DpInterface32.dll, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\DpInterface64.dll, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\DpInterfacef32.dll, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\ient.json, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\RSHP.exe, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SearchProtect32.dll, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SearchProtect64.dll, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SpAPPSv32.dll, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SpAPPSv64.dll, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\uninstall.exe, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\WebDataJs, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\data.html, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE.html, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE8.html, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\main.css, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\ver.txt, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\arrow.png, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_add_logo.png, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_add_logo_hover.png, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_logo.png, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\googlelogo.png, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\googlelogo2.png, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\google_trends.png, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon128.png, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon16.png, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon48.png, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\loading.gif, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\logo32.ico, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\0.png, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\common.js, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ga.js, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ie8.js, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery-1.11.0.min.js, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\js.js, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\library.js, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit.js, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt\messages.json, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json, In Quarantäne, [18e86e92946c679938912c5caa58f010],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfKF161.exe, Löschen bei Neustart, [17e967996799847cd5ae215c887a34cc],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome.manifest, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\install.rdf, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\content\index.html, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\content\quick_start.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\content\quick_start.xul, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\content\include\speed_dial.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\content\include\tools\about_blank_hook.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\content\include\tools\misc.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\content\include\tools\popup_image_helper.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\content\include\tools\urlrequestor.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\content\js\common.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\content\js\doT.min.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\content\js\ga.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\content\js\jquery-2.1.0.min.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\content\js\jquery.autocomplete.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\content\js\js.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\content\js\xagainit.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\en\locale.properties, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\en-US\locale.properties, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\es\locale.properties, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\es-419\locale.properties, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\fr\locale.properties, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\fr-BE\locale.properties, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\fr-CA\locale.properties, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\fr-CH\locale.properties, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\fr-LU\locale.properties, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\it\locale.properties, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\it-CH\locale.properties, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\pl\locale.properties, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\pt-BR\locale.properties, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\ru\locale.properties, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\ru-MO\locale.properties, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\tr\locale.properties, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\vi\locale.properties, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\zh-CN\locale.properties, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\locale\zh-TW\locale.properties, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\skin\arrow.png, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\skin\default_add_logo.png, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\skin\default_add_logo_hover.png, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\skin\default_logo.png, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\skin\googlelogo.png, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\skin\googlelogo2.png, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\skin\google_trends.png, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\skin\icon.png, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\skin\loading.gif, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\skin\logo.ico, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\skin\logo.png, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\skin\logo32.ico, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\skin\style.css, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\chrome\skin\weather\0.png, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\defaults\preferences\fvd.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\modules\addonmanager.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\modules\aes.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\modules\config.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\modules\dialogs.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\modules\last_tab.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\modules\misc.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\modules\properties.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\modules\remoterequest.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\modules\restoreprefs.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\quick_start@gmail.com\modules\settings.js, In Quarantäne, [af5157a99f6126da7c57de8f33cf966a],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\background.html, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\index.html, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\manifest.json, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\style.css, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\img\default_logo.png, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\img\icon128.png, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\img\icon16.png, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\img\icon48.png, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\img\loading.gif, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\img\search.png, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\img\weather.eot, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\img\weather.svg, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\img\weather.ttf, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\img\weather.woff, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\js\background.js, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\js\ga.js, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\js\inject.js, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\js\jquery-base.js, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\js\jquery.autocomplete.js, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\js\js.js, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\js\xagainit.js, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\en\messages.json, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\es\messages.json, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\es_419\messages.json, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\fr\messages.json, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\fr-BE\messages.json, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\fr-CA\messages.json, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\fr-CH\messages.json, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\fr-LU\messages.json, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\it\messages.json, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\it-CH\messages.json, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\pl\messages.json, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\pt\messages.json, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\pt_BR\messages.json, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\ru\messages.json, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\ru-MO\messages.json, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\tr\messages.json, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\vi\messages.json, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\zh_CN\messages.json, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.QuickStart.A, C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.2.3_0\_locales\zh_TW\messages.json, In Quarantäne, [b94746ba54ac946c755f1b52da2823dd],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurf-soft\161.crx, In Quarantäne, [39c7df21b44c8c7421e2a3ccd131f10f],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurf-soft\161.dat, In Quarantäne, [39c7df21b44c8c7421e2a3ccd131f10f],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurf-soft\161.xpi, In Quarantäne, [39c7df21b44c8c7421e2a3ccd131f10f],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurf-soft\a.db, In Quarantäne, [39c7df21b44c8c7421e2a3ccd131f10f],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurf-soft\b.db, In Quarantäne, [39c7df21b44c8c7421e2a3ccd131f10f],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfKF161.bin, In Quarantäne, [39c7df21b44c8c7421e2a3ccd131f10f],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfKF161.dll, Löschen bei Neustart, [39c7df21b44c8c7421e2a3ccd131f10f],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfKF161.ini, In Quarantäne, [39c7df21b44c8c7421e2a3ccd131f10f],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurf-soft\BlockAndSurfp72.exe, In Quarantäne, [39c7df21b44c8c7421e2a3ccd131f10f],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurf-soft\BlockNSurf.exe, Löschen bei Neustart, [39c7df21b44c8c7421e2a3ccd131f10f],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurf-soft\Sqlite3.dll, In Quarantäne, [39c7df21b44c8c7421e2a3ccd131f10f],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurf-soft\Uninstall.exe, In Quarantäne, [39c7df21b44c8c7421e2a3ccd131f10f],
PUP.Optional.MindSpark.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\8hffxtbr@Allin1Convert_8h.com\bootstrap.js, In Quarantäne, [43bda15f19e7956b93440e6224dec838],
PUP.Optional.MindSpark.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\8hffxtbr@Allin1Convert_8h.com\chrome.manifest, In Quarantäne, [43bda15f19e7956b93440e6224dec838],
PUP.Optional.MindSpark.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\8hffxtbr@Allin1Convert_8h.com\install.rdf, In Quarantäne, [43bda15f19e7956b93440e6224dec838],
PUP.Optional.MindSpark.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\8hffxtbr@Allin1Convert_8h.com\install_old.rdf, In Quarantäne, [43bda15f19e7956b93440e6224dec838],
PUP.Optional.MindSpark.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\8hffxtbr@Allin1Convert_8h.com\chrome\8hffxtbr.jar, In Quarantäne, [43bda15f19e7956b93440e6224dec838],
PUP.Optional.MindSpark.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\8hffxtbr@Allin1Convert_8h.com\META-INF\manifest.mf, In Quarantäne, [43bda15f19e7956b93440e6224dec838],
PUP.Optional.MindSpark.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\8hffxtbr@Allin1Convert_8h.com\META-INF\zigbert.rsa, In Quarantäne, [43bda15f19e7956b93440e6224dec838],
PUP.Optional.MindSpark.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\8hffxtbr@Allin1Convert_8h.com\META-INF\zigbert.sf, In Quarantäne, [43bda15f19e7956b93440e6224dec838],
PUP.Optional.MindSpark.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\extensions\8hffxtbr@Allin1Convert_8h.com\plugins\FF-NativeMessagingDispatcher.dll, In Quarantäne, [43bda15f19e7956b93440e6224dec838],
Adware.EoRezo, C:\Users\Jaspar\AppData\Local\fst_de_7\upfst_de_7.cyp, In Quarantäne, [17e97987a15f5fa16e798ee25da5b050],
Adware.EoRezo, C:\Users\Jaspar\AppData\Local\fst_de_7\user_profil.cyp, In Quarantäne, [17e97987a15f5fa16e798ee25da5b050],
Adware.EoRezo, C:\Users\Jaspar\AppData\Local\fst_de_7\Download\majfst.exe, In Quarantäne, [17e97987a15f5fa16e798ee25da5b050],
Adware.EoRezo, C:\Program Files (x86)\fst_de_7\freeSoftToday_widget.exe, In Quarantäne, [31cf2ed2000010f0628876fa768ceb15],
Adware.EoRezo, C:\Program Files (x86)\fst_de_7\predm.exe, In Quarantäne, [31cf2ed2000010f0628876fa768ceb15],
Adware.EoRezo, C:\Program Files (x86)\fst_de_7\unins000.dat, In Quarantäne, [31cf2ed2000010f0628876fa768ceb15],
Adware.EoRezo, C:\Program Files (x86)\fst_de_7\unins000.exe, In Quarantäne, [31cf2ed2000010f0628876fa768ceb15],
Adware.EoRezo, C:\Program Files (x86)\fst_de_7\unins000.msg, In Quarantäne, [31cf2ed2000010f0628876fa768ceb15],
PUP.Optional.MindSpark.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\Allin1Convert_8h\A110357B-3321-456A-8A1B-86E34FBB8771.sqlite, Löschen bei Neustart, [d12fc73911efdd23d24c244d39c9dc24],
PUP.Optional.CrossRider.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.crossrider.bic", "145a986b98ca277a42669bea3153346a");), Ersetzt,[cb35f60a956ba15f648af17255af9b65]
PUP.Optional.ASK.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?ptb=A110357B-3321-456A-8A1B-86E34FBB8771&n=780bd9f3&p2=^AYY^xdm070^YYA^de&si=flvrunner");), Ersetzt,[738d21dfb34dd32d5b866301c440dd23]
PUP.Optional.ASK.A, C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\prefs.js, Gut: (), Schlecht: (user_pref("keyword.URL", "hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=A110357B-3321-456A-8A1B-86E34FBB8771&n=780bd9f3&ind=2014042611&p2=^AYY^xdm070^YYA^de&si=flvrunner&searchfor=");), Ersetzt,[669acb3536ca0bf5dc06a6be29db60a0]
Physische Sektoren: 0
(No malicious items detected)
(end) Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Protection, 02.05.2014 19:50:26, SYSTEM, LAPPI, Protection, Malware Protection, Starting,
Protection, 02.05.2014 19:50:26, SYSTEM, LAPPI, Protection, Malware Protection, Started,
Protection, 02.05.2014 19:50:26, SYSTEM, LAPPI, Protection, Malicious Website Protection, Starting,
Protection, 02.05.2014 19:50:27, SYSTEM, LAPPI, Protection, Malicious Website Protection, Started,
Update, 02.05.2014 19:50:32, SYSTEM, LAPPI, Manual, Rootkit Database, 2014.2.20.1, 2014.3.27.1,
Update, 02.05.2014 19:50:58, SYSTEM, LAPPI, Manual, Malware Database, 2014.3.4.9, 2014.5.2.10,
Protection, 02.05.2014 19:50:59, SYSTEM, LAPPI, Protection, Refresh, Starting,
Protection, 02.05.2014 19:50:59, SYSTEM, LAPPI, Protection, Malicious Website Protection, Stopping,
Protection, 02.05.2014 19:51:00, SYSTEM, LAPPI, Protection, Malicious Website Protection, Stopped,
Protection, 02.05.2014 19:51:06, SYSTEM, LAPPI, Protection, Refresh, Success,
Protection, 02.05.2014 19:51:06, SYSTEM, LAPPI, Protection, Malicious Website Protection, Starting,
Protection, 02.05.2014 19:51:07, SYSTEM, LAPPI, Protection, Malicious Website Protection, Started,
Protection, 02.05.2014 20:24:17, SYSTEM, LAPPI, Protection, Malware Protection, Starting,
Protection, 02.05.2014 20:24:17, SYSTEM, LAPPI, Protection, Malware Protection, Started,
Protection, 02.05.2014 20:24:17, SYSTEM, LAPPI, Protection, Malicious Website Protection, Starting,
Protection, 02.05.2014 20:25:37, SYSTEM, LAPPI, Protection, Malicious Website Protection, Started,
Detection, 02.05.2014 20:34:59, SYSTEM, LAPPI, Protection, Malware Protection, File, PUP.Optional.CrossRider.A, C:\Program Files (x86)\HQVro-1.91\utils.exe, Quarantine, [b0f26ddfabd0c0760313c87822deed13]
Protection, 02.05.2014 20:38:50, SYSTEM, LAPPI, Protection, Malware Protection, Starting,
Protection, 02.05.2014 20:38:50, SYSTEM, LAPPI, Protection, Malware Protection, Started,
Protection, 02.05.2014 20:38:50, SYSTEM, LAPPI, Protection, Malicious Website Protection, Starting,
Protection, 02.05.2014 20:40:11, SYSTEM, LAPPI, Protection, Malicious Website Protection, Started,
(end)
Nach dem Neustart war es nicht möglich über den Proxy-Server auf das Internet zuzugeifen. Unter Firefox musste ich die Einstellung "Kein Proxy" wählen.
Ergebnisse von adwcleaner: Code:
# AdwCleaner v3.205 - Bericht erstellt am 02/05/2014 um 21:15:10
# Aktualisiert 28/04/2014 von Xplode
# Betriebssystem : Windows 8 (64 bits)
# Benutzername : Jaspar - LAPPI
# Gestartet von : C:\Users\Jaspar\Desktop\adwcleaner.exe
# Option : Suchen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Datei Gefunden : C:\Users\Jaspar\AppData\Roaming\aps.uninstall.scan.results
Datei Gefunden : C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\searchplugins\ask-web-search.xml
Datei Gefunden : C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\user.js
Datei Gefunden : C:\Windows\System32\Tasks\Advanced System Protector
Ordner Gefunden : C:\Program Files (x86)\Advanced System Protector
Ordner Gefunden : C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Ordner Gefunden : C:\Users\Jaspar\AppData\Roaming\Activeris
Ordner Gefunden : C:\Users\Jaspar\AppData\Roaming\Advanced System Protector
Ordner Gefunden : C:\Users\Jaspar\AppData\Roaming\SupTab
Ordner Gefunden : C:\Users\Jaspar\AppData\Roaming\Systweak
Ordner Gefunden : C:\Windows\SysWOW64\AI_RecycleBin
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\blockAndSurf
Schlüssel Gefunden : HKCU\Software\Ciuvo
Schlüssel Gefunden : HKCU\Software\FreeSoftToday
Schlüssel Gefunden : HKCU\Software\installedbrowserextensions
Schlüssel Gefunden : HKCU\Software\systweak
Schlüssel Gefunden : HKCU\Software\Tutorials
Schlüssel Gefunden : HKCU\Software\TutoTag
Schlüssel Gefunden : [x64] HKCU\Software\Ciuvo
Schlüssel Gefunden : [x64] HKCU\Software\FreeSoftToday
Schlüssel Gefunden : [x64] HKCU\Software\installedbrowserextensions
Schlüssel Gefunden : [x64] HKCU\Software\systweak
Schlüssel Gefunden : [x64] HKCU\Software\Tutorials
Schlüssel Gefunden : [x64] HKCU\Software\TutoTag
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522312272}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555315572}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566316672}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Schlüssel Gefunden : HKLM\Software\InstallCore
Schlüssel Gefunden : HKLM\Software\installedbrowserextensions
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Schlüssel Gefunden : HKLM\Software\supTab
Schlüssel Gefunden : HKLM\Software\supWPM
Schlüssel Gefunden : HKLM\Software\systweak
Schlüssel Gefunden : HKLM\Software\Tutorials
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522312272}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555315572}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566316672}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\installedbrowserextensions
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16537
Einstellung Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://istart.webssearches.com/web/?type=ds&ts=1398708465&from=tugs&uid=HGSTXHTS541010A9E680_JA1000102B9R5P2B9R5PX&q={searchTerms}
-\\ Mozilla Firefox v28.0 (de)
[ Datei : C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\prefs.js ]
Zeile gefunden : user_pref("extensions.crossrider.bic", "145a986b98ca277a42669bea3153346a");
Zeile gefunden : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.BUTTON_STRUCTURE", "[{\"b\":221360012,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":221360013,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.defaultenginename.savedPrev", "true");
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.defaultenginename.tb", "Ask Web Search");
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.selectedEngine.savedPrev", "true");
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.selectedEngine.tb", "Ask Web Search");
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.homepage.savedPrev", "true");
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?ptb=A110357B-3321-456A-8A1B-86E34FBB8771&n=780bd9f3&p2=^AYY^xdm070^YYA^de&si=flvru[...]
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.page.savedPrev", 1);
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.page.tb", 1);
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.firstKnownVersion", "6.33.3.42841");
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=A110357B-3321-456A-8A1B-86E34FBB8771&n=780bd9f3&p2=^AYY^xdm070^YYA^de&si=flvrunner");
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.hp.enabled", false);
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.hp.lastGuardTime", -1292075171);
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.hp.numGuards", 1);
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.hp.user.defined", true);
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.initialized", true);
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.installKeysSource", "LocalStorage");
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.installType", "XPI");
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.contextKey", "");
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.installDate", "2014042611");
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.partnerId", "^AYY^xdm070^YYA^de");
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.partnerSubId", "flvrunner");
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.pixelUrl", "hxxp://allin1convert.dl.tb.ask.com/install_pixels.jhtml?partner=^AYY^xdm070^YYA^de&coId=e9142386e1c24128acbcdfddbeb679ff&ca[...]
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.success", true);
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.toolbarId", "A110357B-3321-456A-8A1B-86E34FBB8771");
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.isCompliantUninstallImplementation", true);
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.lastActivePing", "1399040229558");
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.lastKnownVersion", "6.33.3.42841");
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.options.defaultSearch", true);
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.options.homePageEnabled", true);
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.options.keywordEnabled", true);
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.options.tabEnabled", true);
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.partnerPixelFired", true);
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.successUrl", "hxxp://flvrunner.com/thankyou.php");
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.toolbarCollapsed", true);
Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.weather.location", "10001");
Zeile gefunden : user_pref("extensions.toolbar.mindspark.hp.enabled", false);
Zeile gefunden : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "");
Zeile gefunden : user_pref("extensions.toolbar.mindspark.lastInstalled", "allin1convert@mindspark.com");
-\\ Google Chrome v34.0.1847.131
[ Datei : C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Gefunden [Extension] : bopakagnckmlgajfccecajhnimjiiedh
*************************
AdwCleaner[R0].txt - [9034 octets] - [02/05/2014 21:15:10]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [9094 octets] ########## Code:
# AdwCleaner v3.205 - Bericht erstellt am 02/05/2014 um 21:16:34
# Aktualisiert 28/04/2014 von Xplode
# Betriebssystem : Windows 8 (64 bits)
# Benutzername : Jaspar - LAPPI
# Gestartet von : C:\Users\Jaspar\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\Program Files (x86)\Advanced System Protector
Ordner Gelöscht : C:\Windows\SysWOW64\AI_RecycleBin
Ordner Gelöscht : C:\Users\Jaspar\AppData\Roaming\Activeris
Ordner Gelöscht : C:\Users\Jaspar\AppData\Roaming\Advanced System Protector
Ordner Gelöscht : C:\Users\Jaspar\AppData\Roaming\SupTab
Ordner Gelöscht : C:\Users\Jaspar\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Datei Gelöscht : C:\Users\Jaspar\AppData\Roaming\aps.uninstall.scan.results
Datei Gelöscht : C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\searchplugins\ask-web-search.xml
Datei Gelöscht : C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\user.js
Datei Gelöscht : C:\Windows\System32\Tasks\Advanced System Protector
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522312272}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555315572}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566316672}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522312272}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555315572}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566316672}
Schlüssel Gelöscht : HKCU\Software\Ciuvo
Schlüssel Gelöscht : HKCU\Software\FreeSoftToday
Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\Tutorials
Schlüssel Gelöscht : HKCU\Software\TutoTag
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\blockAndSurf
Schlüssel Gelöscht : HKLM\Software\InstallCore
Schlüssel Gelöscht : HKLM\Software\installedbrowserextensions
Schlüssel Gelöscht : HKLM\Software\supTab
Schlüssel Gelöscht : HKLM\Software\supWPM
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\Software\Tutorials
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\installedbrowserextensions
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16537
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
-\\ Mozilla Firefox v28.0 (de)
[ Datei : C:\Users\Jaspar\AppData\Roaming\Mozilla\Firefox\Profiles\7gzgvd2b.default\prefs.js ]
Zeile gelöscht : user_pref("extensions.crossrider.bic", "145a986b98ca277a42669bea3153346a");
Zeile gelöscht : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.BUTTON_STRUCTURE", "[{\"b\":221360012,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":221360013,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.defaultenginename.savedPrev", "true");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.defaultenginename.tb", "Ask Web Search");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.selectedEngine.savedPrev", "true");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.selectedEngine.tb", "Ask Web Search");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.homepage.savedPrev", "true");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?ptb=A110357B-3321-456A-8A1B-86E34FBB8771&n=780bd9f3&p2=^AYY^xdm070^YYA^de&si=flvru[...]
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.page.savedPrev", 1);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.page.tb", 1);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.firstKnownVersion", "6.33.3.42841");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=A110357B-3321-456A-8A1B-86E34FBB8771&n=780bd9f3&p2=^AYY^xdm070^YYA^de&si=flvrunner");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.hp.enabled", false);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.hp.lastGuardTime", -1292075171);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.hp.numGuards", 1);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.hp.user.defined", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.initialized", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installKeysSource", "LocalStorage");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installType", "XPI");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.contextKey", "");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.installDate", "2014042611");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.partnerId", "^AYY^xdm070^YYA^de");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.partnerSubId", "flvrunner");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.pixelUrl", "hxxp://allin1convert.dl.tb.ask.com/install_pixels.jhtml?partner=^AYY^xdm070^YYA^de&coId=e9142386e1c24128acbcdfddbeb679ff&ca[...]
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.success", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.toolbarId", "A110357B-3321-456A-8A1B-86E34FBB8771");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.isCompliantUninstallImplementation", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.lastActivePing", "1399040229558");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.lastKnownVersion", "6.33.3.42841");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.options.defaultSearch", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.options.homePageEnabled", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.options.keywordEnabled", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.options.tabEnabled", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.partnerPixelFired", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.successUrl", "hxxp://flvrunner.com/thankyou.php");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.toolbarCollapsed", true);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.weather.location", "10001");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark.hp.enabled", false);
Zeile gelöscht : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "");
Zeile gelöscht : user_pref("extensions.toolbar.mindspark.lastInstalled", "allin1convert@mindspark.com");
-\\ Google Chrome v34.0.1847.131
[ Datei : C:\Users\Jaspar\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Gelöscht [Extension] : bopakagnckmlgajfccecajhnimjiiedh
*************************
AdwCleaner[R0].txt - [9218 octets] - [02/05/2014 21:15:10]
AdwCleaner[S0].txt - [8669 octets] - [02/05/2014 21:16:34]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8729 octets] ##########
JRT hat dann die Schwierigkeiten mit dem Proxy beseitigen können: Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8 x64
Ran by Jaspar on 02.05.2014 at 21:30:08,94
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
~~~ FireFox
Successfully deleted the following from C:\Users\Jaspar\AppData\Roaming\mozilla\firefox\profiles\7gzgvd2b.default\prefs.js
user_pref("keyword.URL", "hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=A110357B-3321-456A-8A1B-86E34FBB8771&n=780bd9f3&ind=2014042611&p2=^AYY^xdm070^YYA^de&si=flvru
Emptied folder: C:\Users\Jaspar\AppData\Roaming\mozilla\firefox\profiles\7gzgvd2b.default\minidumps [5 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 02.05.2014 at 21:37:45,10
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Ungewöhnliche (mir unbekannte) Anwendungen scheinen sich trotzdem immer noch auf dem PC zu befinden. Beispiel:
KBfiltr.exe
Andere Anwendungen scheinen - nach Netz-Überprüfung -sich legitimerweise auf dem PC zu befinden (ASUS-Prozesse, Intel usw.)
Gruß |