FVBPlayrt | 29.06.2014 12:30 | Zitat:
Wie sieht es denn aktuell aus auf dem Rechner?
| Die Werbung ist weg und der PC arbeitet wieder schneller :-) Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Suchlauf Datum: 29.06.2014
Suchlauf-Zeit: 01:13:06
Logdatei: mbam.txt
Administrator: Ja
Version: 2.00.2.1012
Malware Datenbank: v2014.06.28.05
Rootkit Datenbank: v2014.06.23.02
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Self-protection: Deaktiviert
Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Julian
Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 290936
Verstrichene Zeit: 18 Min, 37 Sek
Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert
Prozesse: 0
(No malicious items detected)
Module: 0
(No malicious items detected)
Registrierungsschlüssel: 6
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\Plus-HD-9.3, In Quarantäne, [40954736f8832a0c4ce2e7ed5ba7fa06],
PUP.Optional.WeatherItUp.A, HKLM\SOFTWARE\WOW6432NODE\Weather It Up, In Quarantäne, [904578050b70a690003113b731d18779],
PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD-9.3, Löschen bei Neustart, [b025552876051a1c31605c68ab57857b],
PUP.Optional.WeatherItUp.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Weather It Up, Löschen bei Neustart, [eee799e4403bbc7ac46b3397857d09f7],
PUP.Optional.PlusHD.A, HKU\S-1-5-21-1677683325-2679214213-1298775176-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD-9.3, In Quarantäne, [bc19abd24a31ba7c8809853fae54a060],
PUP.Optional.WeatherItUp.A, HKU\S-1-5-21-1677683325-2679214213-1298775176-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Weather It Up, In Quarantäne, [528393ea0873b680a08f6e5c867c2fd1],
Registrierungswerte: 2
PUP.Optional.CertifiedToolBar.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURI|(Default), hxxp://search.certified-toolbar.com?si=41460&bs=true&tid=2937&q=%s, In Quarantäne, [ac297c013249122417340da22bd7d12f]
PUP.Optional.QuickStart.A, HKU\S-1-5-21-1677683325-2679214213-1298775176-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS|appid, quick_start@gmail.com, In Quarantäne, [a431c7b63b403ef8fd45723d41c1c53b]
Registrierungsdaten: 2
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[4c89532a5526dd59a7577e0c51b34cb4]
PUP.Optional.SearchCertifiedTB.A, HKU\S-1-5-21-1677683325-2679214213-1298775176-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURI|(Default), hxxp://search.certified-toolbar.com?si=41460&bs=true&tid=2937&q=%s, Gut: (hxxp://www.google.com), Schlecht: (hxxp://search.certified-toolbar.com?si=41460&bs=true&tid=2937&q=%s),Ersetzt,[5d789be2017ab185c7e43c4f3fc5a957]
Ordner: 17
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\bakgmemkflciahncfpgaebpnknhejeja, In Quarantäne, [468f512c2457c1754e12d3c54db5a45c],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\userCode, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\icons, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\icons\actions, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\api, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\lib, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\lib\popupResource, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-9.3, In Quarantäne, [20b582fb304bfa3cf300118946bcf10f],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gngfnjclpjflgomhidfecidndbfaniak, Löschen bei Neustart, [20b5f588accfa2942b43dcc0a062e020],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_gngfnjclpjflgomhidfecidndbfaniak_0, Löschen bei Neustart, [894cdba21e5d0e285c1399034cb633cd],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bakgmemkflciahncfpgaebpnknhejeja, In Quarantäne, [785d6d10ef8c092d068df5b2a65c639d],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_bakgmemkflciahncfpgaebpnknhejeja_0, In Quarantäne, [7e57c7b6d4a7211599fbb7f0b0523dc3],
Dateien: 165
PUP.Optional.DomaIQ, C:\$Recycle.Bin\S-1-5-21-1677683325-2679214213-1298775176-1000\$R3RHQXY.exe, In Quarantäne, [3c99f18ca9d2280e115190fef50c53ad],
PUP.Optional.DomaIQ, C:\$Recycle.Bin\S-1-5-21-1677683325-2679214213-1298775176-1000\$RSLY7LE.exe, In Quarantäne, [785d116cb8c30f27de06137ee61ba35d],
PUP.Optional.OutBrowse, C:\Users\Julian\AppData\Local\Temp\DownloadManager.exe, In Quarantäne, [fdd884f9bebdce68d8357ba3ac540ef2],
PUP.Optional.Conduit.A, C:\Users\Julian\AppData\Local\Temp\SPSetup.exe, In Quarantäne, [a431d0ad94e70a2cf0ca30f33dc4f709],
PUP.Optional.AdLyrics, C:\Users\Julian\AppData\Local\Temp\_BnSup.exe, In Quarantäne, [1fb6037ac5b6e94d50674446818031cf],
PUP.Optional.Conduit.A, C:\Users\Julian\AppData\Local\Temp\SearchProtectINT.exe, In Quarantäne, [ede8afce38436acc15e15dc4827f7d83],
MSIL.Solimba, C:\Users\Julian\AppData\Local\Temp\GetCC.dll, In Quarantäne, [864fafce116aa98da273041e0df442be],
PUP.Optional.InstallCore.A, C:\Users\Julian\AppData\Local\Temp\ICReinstall_nso3B61.tmp, In Quarantäne, [9a3bf984ff7cab8bec251d5a39c8fe02],
PUP.Optional.NextLive.A, C:\Users\Julian\AppData\Local\Temp\Mobogenie_Setup_INT.exe, In Quarantäne, [b22365181e5daf87e60c0356ca376898],
PUP.Optional.SearchProtect.A, C:\Users\Julian\AppData\Local\Temp\nswCA93.exe, In Quarantäne, [23b2f08d76050d29c404979759a8659b],
PUP.Optional.SearchProtect.A, C:\Users\Julian\AppData\Local\Temp\nsx1851.exe, In Quarantäne, [f7de6716691214225870c96556ab27d9],
PUP.Optional.RegCleanerPro, C:\Users\Julian\AppData\Local\Temp\RegClean10.exe, In Quarantäne, [9b3ab1cc483357dfef6ab65a80817789],
PUP.Optional.SearchProtect.A, C:\Users\Julian\AppData\Local\Temp\nscD6E.exe, In Quarantäne, [9c399ae364170d29c8008f9fed148d73],
PUP.Optional.InstallCore.A, C:\Users\Julian\AppData\Local\Temp\nso3B61.tmp, In Quarantäne, [30a559249fdc12241cf5f28551b0d52b],
PUP.Optional.SearchProtect.A, C:\Users\Julian\AppData\Local\Temp\nsr103C.exe, In Quarantäne, [3d988eefdd9eb97dba0e48e6629f2fd1],
PUP.Optional.SearchProtect.A, C:\Users\Julian\AppData\Local\Temp\nsrC803.exe, In Quarantäne, [795c0c717704ee48a4249d916f921ee2],
MSIL.Solimba, C:\Users\Julian\AppData\Local\Temp\vbmz10.exe, In Quarantäne, [894ca2db68135cda868f160cab56c13f],
PUP.Optional.SnapDo.A, C:\Users\Julian\AppData\Local\Temp\Installer.msi, In Quarantäne, [4a8b8eefdf9c7fb75789295fd03103fd],
PUP.Optional.SkyTech.A, C:\Users\Julian\AppData\Local\Temp\fullpackage_temp1396349083\alilog.dll, In Quarantäne, [05d0a3da3b4069cd37f4ed4545bbe719],
PUP.Optional.SkyTech.A, C:\Users\Julian\AppData\Local\Temp\fullpackage_temp1396349083\package1.zip, In Quarantäne, [dafbe796e398e94d09221022fd038080],
PUP.Optional.V9.A, C:\Users\Julian\AppData\Local\Temp\fullpackage_temp1396349083\qSE.exe, In Quarantäne, [7560d1ac2853c6702598d67229d733cd],
PUP.Optional.IePluginService.A, C:\Users\Julian\AppData\Local\Temp\fullpackage_temp1396349083\tmp\SupTab.exe, In Quarantäne, [21b4e19c0279a98d338ce3789869f50b],
PUP.Optional.WpManager, C:\Users\Julian\AppData\Local\Temp\fullpackage_temp1396349083\tmp\wpm.exe, In Quarantäne, [a82dff7e1269b87edc5c46209968a858],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsaB35C.exe, In Quarantäne, [399cd2abf08bd85e3791af7fe918e020],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsb7610.exe, In Quarantäne, [1fb6add0ceadad89a82038f613ee7b85],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nscE2A4.exe, In Quarantäne, [f4e1a8d5bebd072f03c50c22709153ad],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsd62D8.exe, In Quarantäne, [e8ed2657c8b33ef8e0e857d7b64b47b9],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsd80BF.exe, In Quarantäne, [b81d4d30a6d51c1a992fae804cb5ea16],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsd80C0.exe, In Quarantäne, [686df08d017a71c5e7e1b97540c12dd3],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsf15A7.exe, In Quarantäne, [478e82fbd4a73402ffc978b67b86ba46],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsjB3C2.exe, In Quarantäne, [cf060479d8a30a2c0cbc0e201ce530d0],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nslD740.exe, In Quarantäne, [cb0aaad3dba061d5bd0b9e909f6244bc],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsn18D2.exe, In Quarantäne, [eee7f885cbb06cca6b5d53dbdb264fb1],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsn99AF.exe, In Quarantäne, [28aded9098e365d14f790925996802fe],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsoB20D.exe, In Quarantäne, [8451c3ba3c3f0b2b24a43df12fd242be],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsr2B6A.exe, In Quarantäne, [993ccbb2364590a6cff9e14df01156aa],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nss9980.exe, In Quarantäne, [dafb6f0e0972ce68e7e157d7ca37de22],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nstBE02.exe, In Quarantäne, [4b8a98e5bcbf2511b31575b9798849b7],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsvC7F5.exe, In Quarantäne, [ae275d20dd9e171f9d2bb17d3bc6758b],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsw51BC.exe, In Quarantäne, [c60f4538bbc0cc6a0abe8ba3fc055aa6],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsx1346.exe, In Quarantäne, [14c1b9c4cdae1323a91fc16d847dab55],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsxE285.exe, In Quarantäne, [02d33944ee8dde58c3055bd304fdeb15],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsz4E82.exe, In Quarantäne, [e0f5a5d85b202d0903c544eae918f10f],
PUP.Optional.Outbrowse, C:\Users\Julian\Downloads\Setup.exe, In Quarantäne, [ddf8ceaf077473c3c2e3ad63db29758b],
PUP.Optional.Ciuvo.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_api.ciuvo.com_0.localstorage, Löschen bei Neustart, [3e97c5b8bbc0e74f13dcddd4a55d05fb],
PUP.Optional.Ciuvo.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_api.ciuvo.com_0.localstorage-journal, Löschen bei Neustart, [fed7b2cbbcbf71c544ab7a3723df41bf],
PUP.Optional.BetterDeals.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.betterdeals00.betterdeals.co_0.localstorage, In Quarantäne, [b124e796611a89ad674df5be4cb6d62a],
PUP.Optional.BetterDeals.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.betterdeals00.betterdeals.co_0.localstorage-journal, In Quarantäne, [12c3fc81245741f58f25e6cd08fab848],
PUP.Optional.SelectNGo.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.select-n-go00.select-n-go.com_0.localstorage, Löschen bei Neustart, [d104b1cc3a418caacfd105b0b2509b65],
PUP.Optional.SelectNGo.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.select-n-go00.select-n-go.com_0.localstorage-journal, Löschen bei Neustart, [00d51c611269e94d7b25367f966c9769],
PUP.Optional.LiveLyrics.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.livelyrics00.live-lyrics.com_0.localstorage, In Quarantäne, [b1246518c2b9a393c432744425ddbf41],
PUP.Optional.LiveLyrics.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.livelyrics00.live-lyrics.com_0.localstorage-journal, In Quarantäne, [666ff38a9cdff343886e2098f70b08f8],
PUP.Optional.Superfish.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage, Löschen bei Neustart, [6570710c85f61f1707f0aa0e15ed5ea2],
PUP.Optional.Superfish.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal, Löschen bei Neustart, [cc096914601b6ec88f68b60225ddef11],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gngfnjclpjflgomhidfecidndbfaniak_0.localstorage, Löschen bei Neustart, [eaeb7eff81faec4a41c3e3df79897888],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gngfnjclpjflgomhidfecidndbfaniak_0.localstorage-journal, In Quarantäne, [5d78225b7704bf77da2a626003ff54ac],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bakgmemkflciahncfpgaebpnknhejeja_0.localstorage, In Quarantäne, [be17a9d4700ba98d0991986d24e0e61a],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bakgmemkflciahncfpgaebpnknhejeja_0.localstorage-journal, In Quarantäne, [d3029ae39be06dc93862f70ec53f827e],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\background.html, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\chromeCoreFilesIndex.txt, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\crossriderManifest.json, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\manifest.json, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\popup.html, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\manifest.xml, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins.json, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\207.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\1.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\102.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\103.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\104.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\119.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\123.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\13.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\14.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\155.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\17.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\177.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\179.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\180.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\182.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\183.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\184.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\19.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\190.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\191.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\195.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\21.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\22.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\220.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\221.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\223.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\231.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\232.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\236.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\242.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\246.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\28.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\4.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\47.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\64.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\7.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\72.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\78.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\80.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\9.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\91.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\93.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\plugins\97.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\userCode\background.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\extensionData\userCode\extension.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\icons\icon128.png, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\icons\icon16.png, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\icons\icon48.png, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\icons\actions\1.png, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\background.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\main.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\platformVersion.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\api\chrome.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\api\cookie.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\api\message.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\api\monitor.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\api\pageAction.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\api\pageActionBG.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\lib\app_api.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\lib\bg_app_api.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\lib\consts.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\lib\cookie_store.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\lib\crossriderAPI.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\lib\delegate.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\lib\events.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\lib\extensionDataStore.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\lib\installer.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\lib\logFile.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\lib\logging.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\lib\onBGDocumentLoad.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\lib\reports.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\lib\storageWrapper.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\lib\updateManager.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\lib\util.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\lib\xhr.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\lib\popupResource\newPopup.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak\1.26.52_0\js\lib\popupResource\popup.js, In Quarantäne, [5382f4895e1dcc6ad598663459a96f91],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-9.3\53098.crx, In Quarantäne, [20b582fb304bfa3cf300118946bcf10f],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-9.3\53098.xpi, In Quarantäne, [20b582fb304bfa3cf300118946bcf10f],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-9.3\Plus-HD-9.3-bho.dll, In Quarantäne, [20b582fb304bfa3cf300118946bcf10f],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-9.3\Plus-HD-9.3-bho64.dll, In Quarantäne, [20b582fb304bfa3cf300118946bcf10f],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-9.3\Plus-HD-9.3.ico, In Quarantäne, [20b582fb304bfa3cf300118946bcf10f],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gngfnjclpjflgomhidfecidndbfaniak\000038.ldb, Löschen bei Neustart, [20b5f588accfa2942b43dcc0a062e020],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gngfnjclpjflgomhidfecidndbfaniak\000040.ldb, Löschen bei Neustart, [20b5f588accfa2942b43dcc0a062e020],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gngfnjclpjflgomhidfecidndbfaniak\000056.log, Löschen bei Neustart, [20b5f588accfa2942b43dcc0a062e020],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gngfnjclpjflgomhidfecidndbfaniak\CURRENT, In Quarantäne, [20b5f588accfa2942b43dcc0a062e020],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gngfnjclpjflgomhidfecidndbfaniak\LOCK, Löschen bei Neustart, [20b5f588accfa2942b43dcc0a062e020],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gngfnjclpjflgomhidfecidndbfaniak\LOG, Löschen bei Neustart, [20b5f588accfa2942b43dcc0a062e020],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gngfnjclpjflgomhidfecidndbfaniak\LOG.old, In Quarantäne, [20b5f588accfa2942b43dcc0a062e020],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gngfnjclpjflgomhidfecidndbfaniak\MANIFEST-000054, Löschen bei Neustart, [20b5f588accfa2942b43dcc0a062e020],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_gngfnjclpjflgomhidfecidndbfaniak_0\3, In Quarantäne, [894cdba21e5d0e285c1399034cb633cd],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bakgmemkflciahncfpgaebpnknhejeja\000038.ldb, In Quarantäne, [785d6d10ef8c092d068df5b2a65c639d],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bakgmemkflciahncfpgaebpnknhejeja\000040.ldb, In Quarantäne, [785d6d10ef8c092d068df5b2a65c639d],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bakgmemkflciahncfpgaebpnknhejeja\000053.log, In Quarantäne, [785d6d10ef8c092d068df5b2a65c639d],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bakgmemkflciahncfpgaebpnknhejeja\CURRENT, In Quarantäne, [785d6d10ef8c092d068df5b2a65c639d],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bakgmemkflciahncfpgaebpnknhejeja\LOCK, In Quarantäne, [785d6d10ef8c092d068df5b2a65c639d],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bakgmemkflciahncfpgaebpnknhejeja\LOG, In Quarantäne, [785d6d10ef8c092d068df5b2a65c639d],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bakgmemkflciahncfpgaebpnknhejeja\LOG.old, In Quarantäne, [785d6d10ef8c092d068df5b2a65c639d],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bakgmemkflciahncfpgaebpnknhejeja\MANIFEST-000051, In Quarantäne, [785d6d10ef8c092d068df5b2a65c639d],
PUP.Optional.CrossRider.A, C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_bakgmemkflciahncfpgaebpnknhejeja_0\2, In Quarantäne, [7e57c7b6d4a7211599fbb7f0b0523dc3],
Physische Sektoren: 0
(No malicious items detected)
(end) Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 28-06-2014 02
Ran by Julian at 2014-06-29 13:18:20 Run:1
Running from C:\Users\Julian\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - {193DDDE3-3F56-48EC-8085-549FD9F026DB} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=09599e60-d3a6-4fb0-946d-ff4c0fa54d5f&apn_sauid=46E449BC-4F3E-4556-9110-102CBC7E6CD9
SearchScopes: HKCU - {44594F6D-AD20-45F6-8766-FBB35DB5C317} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=7ac7ee6a000000000000c0143dc3fd0b&r=392
Task: {15150AC7-DFB6-495F-AA49-F7A18EE12FFC} - \ae1c3042-3388-45b9-b3c5-7de311620ae3-5 No Task File <==== ATTENTION
Task: {33535263-5917-4D7B-9337-F6B02A8BA43E} - \Scheduled Update for Ask Toolbar No Task File <==== ATTENTION
Task: {3D4D3CF7-BD80-45E4-91CA-2FC80DED067C} - \APSnotifierPP3 No Task File <==== ATTENTION
Task: {5EED5FCC-AE50-4459-85C9-374E501DA4E8} - \Weather It Up-updater No Task File <==== ATTENTION
Task: {6023D30E-9302-4225-A4E9-D42AAF71AECE} - \MySearchDial No Task File <==== ATTENTION
Task: {652C1272-9EAF-4C21-96CA-8315C82B4B8D} - \Weather It Up-codedownloader No Task File <==== ATTENTION
Task: {6B402D9F-9393-4F3E-843E-BF6893FF5FA0} - \Weather It Up-firefoxinstaller No Task File <==== ATTENTION
Task: {7D3E29F6-EE2B-43C0-8A37-B727D11383E0} - \APSnotifierPP1 No Task File <==== ATTENTION
Task: {7E9166AF-4D60-4400-BF30-1DAF66F6D3B4} - \ae1c3042-3388-45b9-b3c5-7de311620ae3-4 No Task File <==== ATTENTION
Task: {83512CF7-3FCA-4468-A9D9-86C3525FA26A} - \ae1c3042-3388-45b9-b3c5-7de311620ae3-1 No Task File <==== ATTENTION
Task: {C28CD781-E211-4712-87B4-B5C86054EFD9} - \APSnotifierPP2 No Task File <==== ATTENTION
Task: {D85A7E85-4BE6-4315-9CDA-2F54596AE661} - \Weather It Up-chromeinstaller No Task File <==== ATTENTION
Task: {DC07BF9B-D977-458A-9CB9-B6909D9FF560} - \ae1c3042-3388-45b9-b3c5-7de311620ae3-2 No Task File <==== ATTENTION
Task: {E8395618-29D9-4798-B7BB-204170A87627} - \ae1c3042-3388-45b9-b3c5-7de311620ae3-3 No Task File <==== ATTENTION
Task: {F1A9EF49-A76F-4E9F-90E0-8ECCFD43AAEC} - \Weather It Up-enabler No Task File <==== ATTENTION
C:\Users\Julian\AppData\Local\Temp\*.exe
C:\Users\Julian\AppData\Local\Temp\*.dll
*****************
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{193DDDE3-3F56-48EC-8085-549FD9F026DB}' => Key deleted successfully.
'HKCR\CLSID\{193DDDE3-3F56-48EC-8085-549FD9F026DB}'=> Key not found.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{44594F6D-AD20-45F6-8766-FBB35DB5C317}' => Key deleted successfully.
'HKCR\CLSID\{44594F6D-AD20-45F6-8766-FBB35DB5C317}'=> Key not found.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{15150AC7-DFB6-495F-AA49-F7A18EE12FFC}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{15150AC7-DFB6-495F-AA49-F7A18EE12FFC}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ae1c3042-3388-45b9-b3c5-7de311620ae3-5' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{33535263-5917-4D7B-9337-F6B02A8BA43E}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{33535263-5917-4D7B-9337-F6B02A8BA43E}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3D4D3CF7-BD80-45E4-91CA-2FC80DED067C}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3D4D3CF7-BD80-45E4-91CA-2FC80DED067C}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\APSnotifierPP3' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5EED5FCC-AE50-4459-85C9-374E501DA4E8}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5EED5FCC-AE50-4459-85C9-374E501DA4E8}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Weather It Up-updater' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6023D30E-9302-4225-A4E9-D42AAF71AECE}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6023D30E-9302-4225-A4E9-D42AAF71AECE}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MySearchDial' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{652C1272-9EAF-4C21-96CA-8315C82B4B8D}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{652C1272-9EAF-4C21-96CA-8315C82B4B8D}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Weather It Up-codedownloader' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6B402D9F-9393-4F3E-843E-BF6893FF5FA0}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6B402D9F-9393-4F3E-843E-BF6893FF5FA0}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Weather It Up-firefoxinstaller' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7D3E29F6-EE2B-43C0-8A37-B727D11383E0}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7D3E29F6-EE2B-43C0-8A37-B727D11383E0}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\APSnotifierPP1' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7E9166AF-4D60-4400-BF30-1DAF66F6D3B4}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7E9166AF-4D60-4400-BF30-1DAF66F6D3B4}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ae1c3042-3388-45b9-b3c5-7de311620ae3-4' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{83512CF7-3FCA-4468-A9D9-86C3525FA26A}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{83512CF7-3FCA-4468-A9D9-86C3525FA26A}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ae1c3042-3388-45b9-b3c5-7de311620ae3-1' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C28CD781-E211-4712-87B4-B5C86054EFD9}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C28CD781-E211-4712-87B4-B5C86054EFD9}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\APSnotifierPP2' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D85A7E85-4BE6-4315-9CDA-2F54596AE661}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D85A7E85-4BE6-4315-9CDA-2F54596AE661}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Weather It Up-chromeinstaller' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DC07BF9B-D977-458A-9CB9-B6909D9FF560}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DC07BF9B-D977-458A-9CB9-B6909D9FF560}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ae1c3042-3388-45b9-b3c5-7de311620ae3-2' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E8395618-29D9-4798-B7BB-204170A87627}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E8395618-29D9-4798-B7BB-204170A87627}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ae1c3042-3388-45b9-b3c5-7de311620ae3-3' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F1A9EF49-A76F-4E9F-90E0-8ECCFD43AAEC}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F1A9EF49-A76F-4E9F-90E0-8ECCFD43AAEC}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Weather It Up-enabler' => Key deleted successfully.
C:\Users\Julian\AppData\Local\Temp\*.exe => Moved successfully.
C:\Users\Julian\AppData\Local\Temp\*.dll => Moved successfully.
The system needed a reboot.
==== End of Fixlog ==== |