Trojaner-Board - Win 7 Pro N und Popups ohne Ende...

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Win 7 Pro N und Popups ohne Ende... (https://www.trojaner-board.de/158805-win-7-pro-n-popups-ohne-ende.html)

Win 7 Pro N und Popups ohne Ende...

Hallo,
ich habe das Thema schon gesehen bei anderen hier und wollte da jetzt allerdings nicht auf eigene Faust herumprobieren nach dem Try and Error - Prinzip.
Also kurz. Ich hab Windows 7 Pro N auf meinem ASUS Laptop und seit geraumer Zeit ist es kein Spass mehr ins Internet zu gehen, da ich dauernd von aufploppenden Popups gestört werde und auch dauernd neue Seiten geöffnet werden. Es ist egal ob Explorer oder Mozilla als Browser genutzt werden. Chrome hatte ich auch schon versucht, aber das war ganz katastrophal.
Ich habe mir FRST heruntergeladen und auch einen Scan durchgeführt:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-09-2014

Ran by Mucky (administrator) on ASUS on 17-09-2014 09:03:48

Running from C:\Users\Mucky\Downloads

Platform: Microsoft Windows 7 Professional N  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(G Data Software AG) C:\Program Files\Common Files\G Data\GDScan\GDScan.exe

(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe

(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe

(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVKTray\AVKTray.exe

(G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\GDKBFltExe32.exe

() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe

(CyberLink Corp.) C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\PCMAgent.exe

(CyberLink) C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvc.exe

(CyberLink Corp.) C:\Program Files\ASUS\AI TouchMedia\PlayMovie\PMVService.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

() C:\Program Files\DivX\DivX Update\DivXUpdate.exe

(G Data Software AG) C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe

(Somoto) C:\Users\Mucky\AppData\Local\FilesFrog Update Checker\update_checker.exe

(MyPCBackup.com) C:\Program Files\MyPC Backup\MyPC Backup.exe

(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\w32x86\3\NetFaxServer.exe

(G Data Software AG) C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe

(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Microsoft Corporation) C:\Windows\System32\wuauclt.exe

() C:\Users\Mucky\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_11_8_800_174_ActiveX.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [331264 2010-11-26] ()

HKLM\...\Run: [PCMAgent] => C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\PCMAgent.exe [212992 2008-06-11] (CyberLink Corp.)

HKLM\...\Run: [CLMLServer] => C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvc.exe [196608 2008-06-11] (CyberLink)

HKLM\...\Run: [PlayMovie] => C:\Program Files\ASUS\AI TouchMedia\PlayMovie\PMVService.exe [172032 2008-05-19] (CyberLink Corp.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1549608 2009-08-17] (Synaptics Incorporated)

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)

HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()

HKLM\...\Run: [GDFirewallTray] => C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1724728 2013-12-19] (G Data Software AG)

HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files\G Data\InternetSecurity\AVKTray\AVKTray.exe

HKU\S-1-5-21-1307851060-3472154346-1383332600-1000\...\Run: [SDP] => C:\Users\Mucky\AppData\Local\FilesFrog Update Checker\update_checker.exe [201808 2013-01-31] (Somoto)

Startup: C:\Users\Mucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk

ShortcutTarget: MyPC Backup.lnk -> C:\Program Files\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=C0F700215D8F2354&affID=119357&tsp=5005

BHO: LyricsSay-1 -> {11111111-1111-1111-1111-110411151152} -> C:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll (Lyrics)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default

FF Homepage: https://www.google.de/

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF user.js: detected! => C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\user.js

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: LyricsSay-1 - C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\Extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com [2014-04-22]

FF Extension: LyriXeeker-1 - C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\Extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com [2014-04-22]

FF Extension: No Name - C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\Extensions\staged [2014-09-17]

FF Extension: Adblock Plus - C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-23]
 

Chrome: 

=======

CHR StartupUrls: Default -> "https://www.google.de/"

CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}

CHR CustomProfile: C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Docs) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-07]

CHR Extension: (Google Drive) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-07]

CHR Extension: (YouTube) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-07]

CHR Extension: (Google-Suche) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-07]

CHR Extension: (Google Wallet) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-07]

CHR Extension: (Google Mail) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-07]
 

========================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AVKProxy; C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe [2244728 2014-02-12] (G Data Software AG)

R2 AVKService; C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe [914552 2013-12-19] (G Data Software AG)

R2 AVKWCtl; C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe [2159472 2014-03-25] (G Data Software AG)

S2 BackupStack; C:\Program Files\MyPC Backup\BackupStack.exe [32808 2013-07-01] (Just Develop It)

R3 GDFwSvc; C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe [2409280 2014-01-30] (G Data Software AG)

R3 GDScan; C:\Program Files\Common Files\G Data\GDScan\GDScan.exe [700024 2014-02-03] (G Data Software AG)

R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\w32x86\3\NetFaxServer.exe [175104 2011-01-24] (Samsung Electronics Co., Ltd.) [File not signed]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [44544 2014-04-22] (G Data Software AG)

R3 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt32.sys [20736 2014-04-22] (G Data Software AG)

R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [101504 2014-04-22] (G Data Software AG)

R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [56832 2014-04-22] (G Data Software AG)

R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd32.sys [53248 2014-04-22] (G Data Software AG)

R1 GRD; C:\Windows\system32\drivers\GRD.sys [29528 2014-04-22] (G Data Software)

R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [50176 2014-04-22] (G Data Software AG)

R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2007-07-31] (ATK0100)

R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2010-12-23] (Samsung Electronics) [File not signed]

S3 ZOOM_R16MTR; C:\Windows\System32\Drivers\zmr16usbaudio.sys [81920 2013-04-03] (Zoom Corporation.)

R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\ASUS\AI TouchMedia\PlayMovie\000.fcl [61424 2008-05-19] (Cyberlink Corp.)

U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-09-17 09:01 - 2014-09-17 09:03 - 00053049 _____ () C:\Users\Mucky\Downloads\Addition.txt

2014-09-17 09:00 - 2014-09-17 09:03 - 00012331 _____ () C:\Users\Mucky\Downloads\FRST.txt

2014-09-17 08:59 - 2014-09-17 09:03 - 00000000 ____D () C:\FRST

2014-09-17 08:57 - 2014-09-17 08:57 - 01097728 _____ (Farbar) C:\Users\Mucky\Downloads\FRST.exe

2014-09-17 08:04 - 2014-09-17 08:04 - 00000000 ____D () C:\Windows\LastGood

2014-09-11 11:49 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-09-11 11:49 - 2014-08-23 02:42 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-09-11 11:49 - 2014-07-07 03:40 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-09-11 11:49 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-09-11 11:17 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2014-09-11 11:17 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-09-11 11:12 - 2014-09-05 03:52 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-09-11 11:12 - 2014-09-05 03:47 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-09-11 11:00 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2014-09-10 06:09 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-09-10 06:09 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2014-09-10 06:09 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-09-10 06:09 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2014-09-10 06:09 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2014-09-10 06:09 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2014-09-10 06:09 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2014-09-10 06:08 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2014-09-10 06:08 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2014-09-01 07:01 - 2014-09-01 07:01 - 00212600 _____ () C:\Windows\system32\SBuySupplies.exe

2014-09-01 07:01 - 2014-09-01 07:01 - 00024064 _____ () C:\Windows\system32\ssn2mlm.dll

2014-08-23 10:44 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll

2014-08-23 10:44 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2014-08-23 10:44 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe

2014-08-23 10:44 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll

2014-08-23 10:22 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2014-08-23 10:22 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2014-08-23 10:22 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2014-08-23 10:22 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2014-08-23 10:22 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2014-08-23 10:22 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-08-23 10:22 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll

2014-08-23 10:22 - 2014-03-04 11:17 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2014-08-23 10:22 - 2014-03-04 11:17 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2014-08-23 10:22 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll

2014-08-23 10:22 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll

2014-08-23 10:22 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll

2014-08-23 10:22 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll

2014-08-23 10:22 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll

2014-08-23 10:22 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll

2014-08-23 10:21 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2014-08-23 10:21 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2014-08-23 10:21 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-08-23 10:21 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2014-08-23 10:21 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2014-08-23 10:21 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2014-08-23 10:21 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2014-08-23 10:21 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2014-08-23 10:21 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2014-08-23 10:21 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2014-08-23 10:21 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-08-23 10:21 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll

2014-08-23 10:21 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2014-08-23 10:20 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-08-23 10:20 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-08-23 10:20 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2014-08-23 10:20 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-08-23 10:20 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-08-23 10:20 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-08-23 10:20 - 2014-05-30 08:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-08-23 10:20 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll

2014-08-23 10:19 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-08-23 10:18 - 2014-04-12 04:15 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2014-08-23 10:18 - 2014-04-12 04:15 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2014-08-23 10:18 - 2014-04-12 04:12 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2014-08-23 10:18 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2014-08-23 10:18 - 2014-04-12 04:12 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2014-08-23 10:18 - 2014-04-12 04:11 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-09-17 09:03 - 2014-09-17 09:01 - 00053049 _____ () C:\Users\Mucky\Downloads\Addition.txt

2014-09-17 09:03 - 2014-09-17 09:00 - 00012331 _____ () C:\Users\Mucky\Downloads\FRST.txt

2014-09-17 09:03 - 2014-09-17 08:59 - 00000000 ____D () C:\FRST

2014-09-17 09:01 - 2014-02-07 14:30 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-09-17 08:57 - 2014-09-17 08:57 - 01097728 _____ (Farbar) C:\Users\Mucky\Downloads\FRST.exe

2014-09-17 08:40 - 2013-06-20 16:53 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2014-09-17 08:40 - 2013-06-20 16:53 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2014-09-17 08:37 - 2013-09-14 10:37 - 00000180 _____ () C:\Users\Mucky\AppData\Roaming\WB.CFG

2014-09-17 08:37 - 2013-09-14 09:37 - 00000286 _____ () C:\Windows\Tasks\DSite.job

2014-09-17 08:07 - 2009-07-14 06:02 - 00028160 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-09-17 08:07 - 2009-07-14 06:02 - 00028160 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-09-17 08:04 - 2014-09-17 08:04 - 00000000 ____D () C:\Windows\LastGood

2014-09-17 08:04 - 2013-06-17 10:23 - 02038306 _____ () C:\Windows\WindowsUpdate.log

2014-09-17 08:00 - 2014-02-07 14:30 - 00001092 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-09-17 08:00 - 2013-09-14 09:39 - 00001284 _____ () C:\Windows\Tasks\LyriXeeker-1-updater.job

2014-09-17 08:00 - 2013-09-14 09:39 - 00001088 _____ () C:\Windows\Tasks\LyriXeeker-1-enabler.job

2014-09-17 08:00 - 2013-09-14 09:38 - 00001188 _____ () C:\Windows\Tasks\LyriXeeker-1-codedownloader.job

2014-09-17 08:00 - 2013-09-14 09:37 - 00001810 _____ () C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job

2014-09-17 08:00 - 2013-09-13 12:10 - 00001278 _____ () C:\Windows\Tasks\LyricsSay-1-updater.job

2014-09-17 08:00 - 2013-09-13 12:10 - 00001182 _____ () C:\Windows\Tasks\LyricsSay-1-codedownloader.job

2014-09-17 08:00 - 2013-09-13 12:10 - 00001082 _____ () C:\Windows\Tasks\LyricsSay-1-enabler.job

2014-09-17 08:00 - 2013-09-13 12:09 - 00001802 _____ () C:\Windows\Tasks\LyricsSay-1-firefoxinstaller.job

2014-09-17 08:00 - 2009-07-14 06:17 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-09-17 08:00 - 2009-07-14 06:07 - 00039975 _____ () C:\Windows\setupact.log

2014-09-17 07:59 - 2010-11-20 23:49 - 00134354 _____ () C:\Windows\PFRO.log

2014-09-16 20:36 - 2013-12-02 19:17 - 00120514 _____ () C:\Windows\IE11_main.log

2014-09-16 20:18 - 2013-06-21 11:21 - 00000000 ____D () C:\ProgramData\Samsung

2014-09-16 20:17 - 2013-06-21 11:19 - 00000000 ____D () C:\Program Files\SamsungPrinterLiveUpdate

2014-09-16 10:14 - 2013-06-21 12:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013

2014-09-16 10:14 - 2013-06-21 09:41 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-09-15 08:31 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET

2014-09-12 09:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache

2014-09-12 09:07 - 2013-09-14 09:37 - 00000000 ____D () C:\Program Files\LyriXeeker-1

2014-09-12 09:07 - 2013-09-13 12:09 - 00000000 ____D () C:\Program Files\LyricsSay-1

2014-09-12 08:29 - 2009-07-14 06:17 - 00032634 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-09-11 13:57 - 2009-07-14 06:02 - 00433200 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-09-11 13:00 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE

2014-09-11 12:59 - 2014-05-30 12:08 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-09-11 12:55 - 2010-11-20 23:03 - 01593564 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-09-11 11:45 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles

2014-09-09 12:52 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Public\Libraries

2014-09-09 12:43 - 2013-09-14 10:49 - 00000000 ____D () C:\Users\Mucky\Downloads\alt

2014-09-09 08:35 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF

2014-09-05 03:52 - 2014-09-11 11:12 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-09-05 03:47 - 2014-09-11 11:12 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-09-01 07:01 - 2014-09-01 07:01 - 00212600 _____ () C:\Windows\system32\SBuySupplies.exe

2014-09-01 07:01 - 2014-09-01 07:01 - 00024064 _____ () C:\Windows\system32\ssn2mlm.dll

2014-08-23 11:05 - 2011-04-12 04:25 - 00000000 ____D () C:\Program Files\Windows Journal

2014-08-23 09:57 - 2013-09-11 16:32 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2014-08-23 03:46 - 2014-09-11 11:49 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-08-23 02:42 - 2014-09-11 11:49 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
 

Some content of TEMP:

====================

C:\Users\Mucky\AppData\Local\Temp\BabylonTB.exe

C:\Users\Mucky\AppData\Local\Temp\BackupSetup.exe

C:\Users\Mucky\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe

C:\Users\Mucky\AppData\Local\Temp\fmp-2.0.7-win32.exe

C:\Users\Mucky\AppData\Local\Temp\IminentSetup.exe

C:\Users\Mucky\AppData\Local\Temp\ose00000.exe

C:\Users\Mucky\AppData\Local\Temp\ose00001.exe

C:\Users\Mucky\AppData\Local\Temp\Setup.exe

C:\Users\Mucky\AppData\Local\Temp\uninst1.exe

C:\Users\Mucky\AppData\Local\Temp\UpdateCheckerSetup.exe

C:\Users\Mucky\AppData\Local\Temp\wajam_download.exe

C:\Users\Mucky\AppData\Local\Temp\xmlUpdater.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-09-16 07:39
 

==================== End Of Log ============================

Der Rechner ist ein Core 2 Duo T5900 mit 2,2 GHz und 3 GB RAM. Das Windows 7 Pro N ist ein 32er System.
Ach ja, als Sicherheit habe ich GData auf dem Rechner installiert.
Wie muss ich jetzt weitermachen?

Hallo und :hallo:

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch das Addition.txt Logfile von FRST nachreichen.

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

Hallo cosinus,
dank eschonmal für di ewahnsinnig schnelle Reaktion.
Ich hab die letzten Wochen keine Scans durchgeführt, hab aber dauernd Virenmeldungen un dverschiebe dauernd Dateien in die Quarantäne oder lösche diese.
Ich hab nen Sreenshot gemacht von meiner Quarantäne-Liste und al spdf angehangen.

Und hierd die Addition:

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 12-09-2014

Ran by Mucky at 2014-09-17 09:04:14

Running from C:\Users\Mucky\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: G Data InternetSecurity (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}

AS: G Data InternetSecurity (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: G Data Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Adobe Flash Player 11 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 11.8.800.174 - Adobe Systems Incorporated)

Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.08) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)

AI TouchMedia (HKLM\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 6.0.1811 - CyberLink Corp.)

AI TouchMedia (Version: 6.0.1811 - CyberLink Corp.) Hidden

CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.3.4746 - CDBurnerXP)

Common Desktop Agent (Version: 1.52.0 - OEM) Hidden

DC-Bass Source 1.3.0 (HKLM\...\DC-Bass Source) (Version:  - )

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{650DE870-ECA3-4E63-8D77-778512BE5D4C}) (Version:  - Microsoft)

Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{BF1E7B7B-8FBB-45C8-B170-214AA0F4F6AE}) (Version:  - Microsoft)

DirectVobSub 2.40.4209 (HKLM\...\vsfilter_is1) (Version: 2.40.4209 - MPC-HC Team)

DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.1.8 - DivX, LLC)

ElsterFormular (HKLM\...\ElsterFormular) (Version: 15.2.20140326 - Landesfinanzdirektion Thüringen)

FilesFrog Update Checker (HKLM\...\FilesFrog Update Checker) (Version:  - ) <==== ATTENTION

G Data InternetSecurity (HKLM\...\{85203592-3610-4FB9-AA11-15B2255B5A12}) (Version: 25.0.1.2 - G Data Software AG)

Google Chrome (HKLM\...\Google Chrome) (Version: 37.0.2062.120 - Google Inc.)

Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden

Haali Media Splitter (HKLM\...\HaaliMkx) (Version:  - )

Lagarith Lossless Codec (1.3.27) (HKLM\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version:  - )

LAME v3.99.3 (for Windows) (HKLM\...\LAME_is1) (Version:  - )

LyricsSay-1 (HKLM\...\LyricsSay-1) (Version: 1.28.153.3 - Lyrics) <==== ATTENTION

LyriXeeker-1 (HKLM\...\LyriXeeker-1) (Version: 1.28.153.3 - Lyrics) <==== ATTENTION

Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Mathematics (HKLM\...\{4D090F70-6F08-4B60-9357-A1DFD4458F09}) (Version: 4.0 - Microsoft Corporation)

Microsoft Mathematics Add-In for Word and OneNote (HKLM\...\{90150000-00D8-0407-0000-0000000FF1CE}) (Version: 15.0.4481.1008 - Microsoft Corporation)

Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Professional 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Single Image 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Visio MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Visio Professional 2013 (HKLM\...\Office15.VISPROR) (Version: 15.0.4569.1506 - Microsoft Corporation)

Microsoft Visio Professional 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)

Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)

Mozilla Thunderbird 17.0.7 (x86 de) (HKLM\...\Mozilla Thunderbird 17.0.7 (x86 de)) (Version: 17.0.7 - Mozilla)

MyPC Backup  (HKLM\...\MyPC Backup) (Version:  - MyPC Backup) <==== ATTENTION

Notepad++ (HKLM\...\Notepad++) (Version: 6.3.3 - Notepad++ Team)

NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.4 - NVIDIA Corporation)

OpenSource Flash Video Splitter 1.0.0.5 (HKLM\...\OpenSource Flash Video Splitter) (Version: 1.0.0.5 - )

Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

R16_R24 Driver (HKLM\...\{19CF1A77-C522-4082-8A2B-A9952EE9E372}) (Version: 2.0.0.5 - ZOOM)

RICOH R5U8xx Media Driver ver.3.62.02 (HKLM\...\{59F6A514-9813-47A3-948C-8A155460CC2A}) (Version: 3.62.02 - RICOH)

Samsung Easy Printer Manager (HKLM\...\Samsung Easy Printer Manager) (Version: 1.00.55.00 - Samsung Electronics Co., Ltd.)

Samsung Network PC Fax (HKLM\...\Samsung Network PC Fax) (Version: 1.05.17.00 - Samsung Electronics Co., Ltd.)

Samsung Printer Live Update (HKLM\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)

Samsung Scan Assistant (HKLM\...\Samsung Scan Assistant) (Version: 1.03.28.00 - Samsung Electronics Co., Ltd.)

Samsung SCX-483x 5x3x Series (HKLM\...\Samsung SCX-483x 5x3x Series) (Version:  - Samsung Electronics Co., Ltd.)

Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{8D2E04ED-3350-4ECE-9D6E-3BC9A9A93A47}) (Version:  - Microsoft)

Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (Version:  - Microsoft) Hidden

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version:  - Microsoft) Hidden

Steinberg Cubase 5 (HKLM\...\{4A19D6AC-ADE0-4A07-80FF-9C9812C45557}) (Version: 5.1.2 - Steinberg Media Technologies GmbH)

Steinberg Drum Loop Expansion 01 (HKLM\...\{490BF87E-1F75-4453-BF55-9F540543A3CA}) (Version: 1.0.0.1 - Steinberg Media Technologies GmbH)

Steinberg Groove Agent ONE Content (HKLM\...\{BD86F1AC-B594-46E4-85DC-1258AC9E2232}) (Version: 1.0.0.003 - Steinberg Media Technologies GmbH)

Steinberg HALionOne (HKLM\...\{E70E7159-93B1-470D-9FBD-D8E9EF34B538}) (Version: 1.1.0.457 - Steinberg Media Technologies GmbH)

Steinberg HALionOne Additional Content Set 01 (HKLM\...\{F3AFD063-8BAD-485E-B641-E7F5A2C5AE71}) (Version: 1.0.0.001 - Steinberg Media Technologies GmbH)

Steinberg HALionOne Expression Set (HKLM\...\{E22AD5D3-EB60-4A8F-835C-6C10E369DCE2}) (Version: 1.0.1.0 - Steinberg Media Technologies GmbH)

Steinberg HALionOne GM Drum Set (HKLM\...\{AC997F93-0757-4ED4-A701-F40C2D654D09}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)

Steinberg HALionOne GM Set (HKLM\...\{F057965A-D974-4C64-ADB1-4381CD4B8956}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)

Steinberg HALionOne Pro Set (HKLM\...\{D82CDA0D-C182-42C8-8FF2-5649C98D6003}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)

Steinberg HALionOne Studio Drum Set (HKLM\...\{865D9ED1-EAC2-436D-AFA7-0B750EB5AAAB}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)

Steinberg HALionOne Studio Set (HKLM\...\{D23CBFDA-C46B-4920-BA70-FC7878A3F05A}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)

Steinberg LoopMash Content (HKLM\...\{4D454CF8-12FD-464D-B57B-B46FE27B78BB}) (Version: 1.0.0.005 - Steinberg Media Technologies GmbH)

Steinberg REVerence Content 01 (HKLM\...\{532B917B-8235-4FA5-BE36-643A8BB053A5}) (Version: 1.0.0.006 - Steinberg Media Technologies GmbH)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.1.1 - Synaptics Incorporated)

Update for Codec Package (HKCU\...\DSite) (Version:  - ) <==== ATTENTION

Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)

Update for Microsoft Excel 2010 (KB2889836) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9179FC17-97A8-4D98-9E09-05720AF5D44E}) (Version:  - Microsoft)

Update for Microsoft Excel 2013 (KB2889861) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.VISPROR_{F47D9DA0-739D-4FEE-A2CD-16B23382F7EE}) (Version:  - Microsoft)

Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)

Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2687502) 32-Bit Edition (HKLM\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{7DE7DF97-82FE-4B3A-AB8D-1621F9CC464A}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{EAD7BEF9-B28C-425F-B2C5-538CB27EF013}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{089DBFD7-8211-43B2-AAAE-5BDD8C23E3A8}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2760344) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{A7610F07-E844-4444-8E1D-D5BC8AD0B4C5}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2768012) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{66421820-D3CA-450A-898C-78D7E40108E6}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2863843) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{AD7045B8-1D75-4B4C-8120-12F045D206C7}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2880462) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.VISPROR_{5D6439FF-D651-4B13-B52E-2508AB9DE19D}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2880462) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{5D6439FF-D651-4B13-B52E-2508AB9DE19D}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2880478) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{7C5CEE0F-6823-4BB7-A28F-76FEC14EB6AC}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2881001) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{31849233-AD8B-42D7-9AE1-74C79C8E8C03}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2881009) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{7A3EF4FF-A9C8-4F7E-8020-A45F7D319387}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2881039) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{1B208923-2810-414F-82CC-AFFC1B19563F}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2881081) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{6171BC1B-907E-44D4-930A-4AE0D9260E65}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2883036) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{B8E73381-09B1-4895-ACD0-34385B0F526D}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2883049) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{1C6260FD-A280-49FE-89D0-CCEC647FBD8E}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2883060) 32-Bit Edition (HKLM\...\{90150000-001F-0407-0000-0000000FF1CE}_Office15.VISPROR_{0F5FFEB6-2F66-4592-8A34-CC85FF318951}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2883060) 32-Bit Edition (HKLM\...\{90150000-001F-0409-0000-0000000FF1CE}_Office15.VISPROR_{DA288EB3-648C-433C-88AC-71AEAAFAACF7}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2883060) 32-Bit Edition (HKLM\...\{90150000-001F-040C-0000-0000000FF1CE}_Office15.VISPROR_{51865C36-97D4-4210-A33E-50BCC8CDDF72}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2883060) 32-Bit Edition (HKLM\...\{90150000-001F-0410-0000-0000000FF1CE}_Office15.VISPROR_{D533D4E6-5056-487A-8F18-7FA51AF0E283}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2889848) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.VISPROR_{E1285C4F-1DB7-4A7F-9DEF-22068D09EBFA}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2889848) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{E1285C4F-1DB7-4A7F-9DEF-22068D09EBFA}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2889862) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{96AE4BBC-69CC-4004-8B53-1F40B2461755}) (Version:  - Microsoft)

Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)

Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)

Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)

Update for Microsoft Outlook 2013 (KB2880470) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{1BCA67A6-5329-48D0-A088-C097AC7A14BD}) (Version:  - Microsoft)

Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)

Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)

Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version:  - Microsoft)

Update for Microsoft Visio 2013 (KB2889849) 32-Bit Edition (HKLM\...\{90150000-0054-0407-0000-0000000FF1CE}_Office15.VISPROR_{CB9B82D8-4B8A-4EF1-846B-7E1B9379C7DA}) (Version:  - Microsoft)

Update for Microsoft Visio 2013 (KB2889849) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{CB9B82D8-4B8A-4EF1-846B-7E1B9379C7DA}) (Version:  - Microsoft)

Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version:  - Microsoft)

Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.VISPROR_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)

Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)

Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version:  - Microsoft)

VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden

Winamp (HKLM\...\Winamp) (Version: 5.64  - Nullsoft, Inc)

Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)

WinZip 18.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DE}) (Version: 18.0.10661 - WinZip Computing, S.L. )

Xvid Video Codec (HKLM\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 

23-08-2014 08:35:15 Windows Update

23-08-2014 09:18:47 Windows Update

10-09-2014 04:07:14 Windows Update

10-09-2014 04:54:53 Windows Update

11-09-2014 08:59:29 Windows Update

11-09-2014 10:53:06 Windows Update

12-09-2014 20:05:43 Windows Update

16-09-2014 08:12:14 Windows Update

16-09-2014 18:35:55 Windows Update
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {0509C076-8F47-497B-9F8C-DAF34A74B89D} - \LyricsSay-1-codedownloader No Task File <==== ATTENTION

Task: {10D9F1DD-B93E-493D-8CA1-D13C9224CEEA} - \LyriXeeker-1-codedownloader No Task File <==== ATTENTION

Task: {25FA414D-EDD9-43C0-8BDF-2FFCBDB4FE98} - \LyricsSay-1-enabler No Task File <==== ATTENTION

Task: {2D311364-3673-411E-8034-B10EFCC7BB15} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-02-07] (Google Inc.)

Task: {352DE5CD-ADBC-46B7-83A3-3A87685ED04B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)

Task: {3BA4BBFA-40D1-46CA-BA9C-0BA221E10C89} - \LyriXeeker-1-firefoxinstaller No Task File <==== ATTENTION

Task: {463969CB-450B-4119-817D-602705EF989E} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)

Task: {47A2578E-B74C-41A8-8432-04FD8C405BFA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-02-07] (Google Inc.)

Task: {99FDB450-4524-4F0F-A38F-A9B4D9A4F682} - System32\Tasks\DSite => C:\Users\Mucky\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe [2013-09-14] () <==== ATTENTION

Task: {B1953FF5-F54F-4FE9-B20D-55231A3CCD37} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)

Task: {B532E6AD-8269-48EB-91E4-D1056CA9D12F} - \LyricsSay-1-firefoxinstaller No Task File <==== ATTENTION

Task: {BD42470B-934F-42BB-9C19-1DBA6C33BDDB} - \LyricsSay-1-updater No Task File <==== ATTENTION

Task: {D0EC8579-BCCA-4024-B7AA-604011BF3268} - \LyriXeeker-1-updater No Task File <==== ATTENTION

Task: {E85E5E1A-F54E-4AA0-ACEF-E97562CF0481} - \LyriXeeker-1-enabler No Task File <==== ATTENTION
 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 

Task: C:\Windows\Tasks\DSite.job => C:\Users\Mucky\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\LyricsSay-1-codedownloader.job => C:\Program Files\LyricsSay-1\LyricsSay-1-codedownloader.exe <==== ATTENTION

Task: C:\Windows\Tasks\LyricsSay-1-enabler.job => C:\Program Files\LyricsSay-1\LyricsSay-1-enabler.exe <==== ATTENTION

Task: C:\Windows\Tasks\LyricsSay-1-firefoxinstaller.job => C:\Program Files\LyricsSay-1\LyricsSay-1-firefoxinstaller.exe <==== ATTENTION

Task: C:\Windows\Tasks\LyricsSay-1-updater.job => C:\Program Files\LyricsSay-1\LyricsSay-1-updater.exe <==== ATTENTION

Task: C:\Windows\Tasks\LyriXeeker-1-codedownloader.job => C:\Program Files\LyriXeeker-1\LyriXeeker-1-codedownloader.exe

Task: C:\Windows\Tasks\LyriXeeker-1-enabler.job => C:\Program Files\LyriXeeker-1\LyriXeeker-1-enabler.exe

Task: C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job => C:\Program Files\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe

Task: C:\Windows\Tasks\LyriXeeker-1-updater.job => C:\Program Files\LyriXeeker-1\LyriXeeker-1-updater.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-09-01 07:01 - 2014-09-01 07:01 - 00024064 _____ () C:\Windows\System32\ssn2mlm.dll

2010-11-26 22:17 - 2010-11-26 22:17 - 00331264 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe

2010-11-26 22:17 - 2010-11-26 22:17 - 00049664 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll

2008-06-11 21:52 - 2008-06-11 21:52 - 00778240 ____N () C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMediaLibrary.dll

2008-06-11 21:52 - 2008-06-11 21:52 - 00007680 ____N () C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvcPS.dll

2013-08-29 02:23 - 2013-08-29 02:23 - 01861968 _____ () C:\Program Files\DivX\DivX Update\DivXUpdate.exe

2013-08-29 02:25 - 2013-08-29 02:25 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll

2013-07-01 19:47 - 2013-07-01 19:47 - 00012288 _____ () C:\Program Files\MyPC Backup\GetText.dll

2013-07-01 19:43 - 2013-07-01 19:43 - 00904704 _____ () C:\Program Files\MyPC Backup\x86\System.Data.SQLite.dll

2013-06-21 11:19 - 2010-11-24 12:30 - 00274432 _____ () C:\Windows\system32\SaMinDrv.dll

2013-12-19 04:42 - 2013-12-19 04:42 - 00287864 ____N () C:\Program Files\Common Files\G Data\AVKProxy\PktIcpt2.dll

2013-06-21 11:19 - 2014-09-01 07:01 - 00896512 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\ssn2mdu.dll

2013-09-14 09:37 - 2013-09-14 09:37 - 00095232 _____ () C:\Users\Mucky\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 
 

==================== Faulty Device Manager Devices =============
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (09/17/2014 09:04:29 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c

Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00001b2f

ID des fehlerhaften Prozesses: 0x2174

Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0

Pfad der fehlerhaften Anwendung: iexplore.exe1

Pfad des fehlerhaften Moduls: iexplore.exe2

Berichtskennung: iexplore.exe3
 

Error: (09/17/2014 08:10:10 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )

Description: Subscription licensing service failed: -1073418231
 

Error: (09/17/2014 08:01:43 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/16/2014 07:45:51 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/16/2014 09:24:35 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c

Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00001b2f

ID des fehlerhaften Prozesses: 0x2884

Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0

Pfad der fehlerhaften Anwendung: iexplore.exe1

Pfad des fehlerhaften Moduls: iexplore.exe2

Berichtskennung: iexplore.exe3
 

Error: (09/16/2014 09:21:53 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c

Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00001b2f

ID des fehlerhaften Prozesses: 0x26bc

Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0

Pfad der fehlerhaften Anwendung: iexplore.exe1

Pfad des fehlerhaften Moduls: iexplore.exe2

Berichtskennung: iexplore.exe3
 

Error: (09/16/2014 08:59:41 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c

Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00001b2f

ID des fehlerhaften Prozesses: 0x2ad4

Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0

Pfad der fehlerhaften Anwendung: iexplore.exe1

Pfad des fehlerhaften Moduls: iexplore.exe2

Berichtskennung: iexplore.exe3
 

Error: (09/16/2014 08:32:48 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c

Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00001b2f

ID des fehlerhaften Prozesses: 0x1ff4

Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0

Pfad der fehlerhaften Anwendung: iexplore.exe1

Pfad des fehlerhaften Moduls: iexplore.exe2

Berichtskennung: iexplore.exe3
 

Error: (09/16/2014 08:27:47 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea91c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00052d94

ID des fehlerhaften Prozesses: 0x14cc

Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0

Pfad der fehlerhaften Anwendung: iexplore.exe1

Pfad des fehlerhaften Moduls: iexplore.exe2

Berichtskennung: iexplore.exe3
 

Error: (09/16/2014 08:06:06 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c

Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00001b2f

ID des fehlerhaften Prozesses: 0x4f8

Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0

Pfad der fehlerhaften Anwendung: iexplore.exe1

Pfad des fehlerhaften Moduls: iexplore.exe2

Berichtskennung: iexplore.exe3
 
 

System errors:

=============

Error: (09/17/2014 08:01:26 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
 

Error: (09/17/2014 08:00:36 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (09/17/2014 08:00:36 AM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.
 

Error: (09/16/2014 08:36:51 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7
 

Error: (09/16/2014 10:13:01 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7
 

Error: (09/16/2014 08:33:55 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
 

Error: (09/11/2014 02:09:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "G Data Personal Firewall" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (09/11/2014 02:09:39 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst G Data Personal Firewall erreicht.
 

Error: (09/11/2014 01:58:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (09/11/2014 01:58:29 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.
 
 

Microsoft Office Sessions:

=========================

Error: (09/17/2014 09:04:29 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f217401cfd2459a1d3189C:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dlldd6639c3-3e38-11e4-82e4-00248c76c64b
 

Error: (09/17/2014 08:10:10 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )

Description: Subscription licensing service failed: -1073418231
 

Error: (09/17/2014 08:01:43 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/16/2014 07:45:51 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/16/2014 09:24:35 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f288401cfd17f3eeb083dC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll81eefd0f-3d72-11e4-adb4-00248c76c64b
 

Error: (09/16/2014 09:21:53 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f26bc01cfd17edda61ad8C:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll219f0474-3d72-11e4-adb4-00248c76c64b
 

Error: (09/16/2014 08:59:41 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f2ad401cfd17bc4342ebcC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll0752918f-3d6f-11e4-adb4-00248c76c64b
 

Error: (09/16/2014 08:32:48 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f1ff401cfd178030c8cc5C:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll45e12753-3d6b-11e4-adb4-00248c76c64b
 

Error: (09/16/2014 08:27:47 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: iexplore.exe11.0.9600.16428525b664cntdll.dll6.1.7601.18247521ea91cc000000500052d9414cc01cfd17174a4f696C:\Program Files\Internet Explorer\iexplore.exeC:\Windows\SYSTEM32\ntdll.dll92f4cd93-3d6a-11e4-adb4-00248c76c64b
 

Error: (09/16/2014 08:06:06 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f4f801cfd17448ca23a7C:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll8b4f394b-3d67-11e4-adb4-00248c76c64b
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM)2 Duo CPU T5900 @ 2.20GHz

Percentage of memory in use: 45%

Total physical RAM: 3071.11 MB

Available physical RAM: 1667.1 MB

Total Pagefile: 6140.52 MB

Available Pagefile: 4114.35 MB

Total Virtual: 2047.88 MB

Available Virtual: 1899.23 MB
 

==================== Drives ================================
 

Drive c: (VistaOS) (Fixed) (Total:116.44 GB) (Free:66.12 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (Katha Rina) (Fixed) (Total:104.73 GB) (Free:100.76 GB) NTFS

Drive e: (Belkin CD) (CDROM) (Total:0.05 GB) (Free:0 GB) CDFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 97646C29)

Partition 1: (Not Active) - (Size=11.7 GB) - (Type=1C)

Partition 2: (Active) - (Size=116.4 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=104.7 GB) - (Type=OF Extended)
 

==================== End Of Log ============================

Während ich versucht hab diesen Text zu verfassen haben sich gefühlte 17896 neue Seiten geöffnet....AAArrrgh

Adware/Junkware/Toolbars entfernen

(alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen aus den Desktop!)

1. Schritt: Malwarebytes

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

2. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

3. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

4. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Moin,
ich hab die ganzen Programme installiert und durchlaufen lassen. Der subjektive Eindruk des Rechners ist schonmal sehr positiv. Ich kann wieder vernünftig schreiben :applaus:
Hier sind die gewünschten txt Files:

MalwareBytes:

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 
 

Protection, 17.09.2014 17:29:42, SYSTEM, ASUS, Protection, Malware Protection, Starting, 

Protection, 17.09.2014 17:29:42, SYSTEM, ASUS, Protection, Malware Protection, Started, 

Protection, 17.09.2014 17:29:42, SYSTEM, ASUS, Protection, Malicious Website Protection, Starting, 

Protection, 17.09.2014 17:30:19, SYSTEM, ASUS, Protection, Malicious Website Protection, Started, 

Update, 17.09.2014 17:31:31, SYSTEM, ASUS, Manual, Rootkit Database, 2014.2.20.1, 2014.9.15.1, 

Update, 17.09.2014 17:31:56, SYSTEM, ASUS, Manual, Malware Database, 2014.3.4.9, 2014.9.17.6, 

Protection, 17.09.2014 17:32:17, SYSTEM, ASUS, Protection, Refresh, Starting, 

Protection, 17.09.2014 17:32:17, SYSTEM, ASUS, Protection, Malicious Website Protection, Stopping, 

Protection, 17.09.2014 17:32:17, SYSTEM, ASUS, Protection, Malicious Website Protection, Stopped, 

Protection, 17.09.2014 17:32:24, SYSTEM, ASUS, Protection, Refresh, Success, 

Protection, 17.09.2014 17:32:24, SYSTEM, ASUS, Protection, Malicious Website Protection, Starting, 

Protection, 17.09.2014 17:32:25, SYSTEM, ASUS, Protection, Malicious Website Protection, Started, 

Protection, 17.09.2014 17:47:42, SYSTEM, ASUS, Protection, Malware Protection, Starting, 

Protection, 17.09.2014 17:47:42, SYSTEM, ASUS, Protection, Malware Protection, Started, 

Protection, 17.09.2014 17:47:42, SYSTEM, ASUS, Protection, Malicious Website Protection, Starting, 

Protection, 17.09.2014 17:48:29, SYSTEM, ASUS, Protection, Malicious Website Protection, Started, 
 

(end)

und ein zweites, da ich zwei txt hatte und nicht ersehen kann welches die letzte sein soll:

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 
 

Protection, 17.09.2014 17:29:42, SYSTEM, ASUS, Protection, Malware Protection, Starting, 

Protection, 17.09.2014 17:29:42, SYSTEM, ASUS, Protection, Malware Protection, Started, 

Protection, 17.09.2014 17:29:42, SYSTEM, ASUS, Protection, Malicious Website Protection, Starting, 

Protection, 17.09.2014 17:30:19, SYSTEM, ASUS, Protection, Malicious Website Protection, Started, 

Update, 17.09.2014 17:31:31, SYSTEM, ASUS, Manual, Rootkit Database, 2014.2.20.1, 2014.9.15.1, 

Update, 17.09.2014 17:31:56, SYSTEM, ASUS, Manual, Malware Database, 2014.3.4.9, 2014.9.17.6, 

Protection, 17.09.2014 17:32:17, SYSTEM, ASUS, Protection, Refresh, Starting, 

Protection, 17.09.2014 17:32:17, SYSTEM, ASUS, Protection, Malicious Website Protection, Stopping, 

Protection, 17.09.2014 17:32:17, SYSTEM, ASUS, Protection, Malicious Website Protection, Stopped, 

Protection, 17.09.2014 17:32:24, SYSTEM, ASUS, Protection, Refresh, Success, 

Protection, 17.09.2014 17:32:24, SYSTEM, ASUS, Protection, Malicious Website Protection, Starting, 

Protection, 17.09.2014 17:32:25, SYSTEM, ASUS, Protection, Malicious Website Protection, Started, 

Protection, 17.09.2014 17:47:42, SYSTEM, ASUS, Protection, Malware Protection, Starting, 

Protection, 17.09.2014 17:47:42, SYSTEM, ASUS, Protection, Malware Protection, Started, 

Protection, 17.09.2014 17:47:42, SYSTEM, ASUS, Protection, Malicious Website Protection, Starting, 

Protection, 17.09.2014 17:48:29, SYSTEM, ASUS, Protection, Malicious Website Protection, Started, 
 

(end)

adw cleaner:

Code:

# AdwCleaner v3.310 - Bericht erstellt am 19/09/2014 um 07:24:10

# Aktualisiert 12/09/2014 von Xplode

# Betriebssystem : Windows 7 Professional N Service Pack 1 (32 bits)

# Benutzername : Mucky - ASUS

# Gestartet von : C:\Users\Mucky\Downloads\AdwCleaner_3.310.exe

# Option : Löschen
 

***** [ Dienste ] *****
 

[#] Dienst Gelöscht : BackupStack
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\Babylon

Ordner Gelöscht : C:\Program Files\MyPC Backup

Ordner Gelöscht : C:\Users\Mucky\AppData\Local\Temp\BrowseFox

Ordner Gelöscht : C:\Users\Mucky\AppData\Local\Temp\OCS

Ordner Gelöscht : C:\Users\Mucky\AppData\Roaming\Babylon

Ordner Gelöscht : C:\Users\Mucky\AppData\Roaming\DSite

Ordner Gelöscht : C:\Users\Mucky\AppData\Roaming\Systweak

Ordner Gelöscht : C:\Users\Mucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup

Datei Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\lollipop.lnk

Datei Gelöscht : C:\Users\Mucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\lollipop.lnk

Datei Gelöscht : C:\Users\Mucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk

Datei Gelöscht : C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\invalidprefs.js

Datei Gelöscht : C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\user.js
 

***** [ Tasks ] *****
 

Task Gelöscht : DSite
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKCU\Software\Classes\Applications\lollipop.exe

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\updateBrowseFox_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\updateBrowseFox_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup

Schlüssel Gelöscht : HKLM\SOFTWARE\8688debc3db847

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422182256}

Schlüssel Gelöscht : HKCU\Software\BABSOLUTION

Schlüssel Gelöscht : HKCU\Software\Delta

Schlüssel Gelöscht : HKCU\Software\dsiteproducts

Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions

Schlüssel Gelöscht : HKCU\Software\InstalledThirdPartyPrograms

Schlüssel Gelöscht : HKCU\Software\lollipop

Schlüssel Gelöscht : HKCU\Software\OCS

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\LyricsSay-1

Schlüssel Gelöscht : HKLM\SOFTWARE\Delta

Schlüssel Gelöscht : HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar

Schlüssel Gelöscht : HKLM\SOFTWARE\InstalledThirdPartyPrograms

Schlüssel Gelöscht : HKLM\SOFTWARE\systweak

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\DSite

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.16428
 
 

-\\ Mozilla Firefox v28.0 (de)
 

[ Datei : C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js ]
 

Zeile gelöscht : user_pref("extensions.a71139f7bcef24ada9c6025f887d7e2e15b12962159ed453c9453d7593ee48c04com41552.41552.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]

Zeile gelöscht : user_pref("extensions.a763ab44b71df436c906e2ee8e1d7b302af951efb381e47b2ac4580df41e44bc7com41856.41856.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]

Zeile gelöscht : user_pref("extensions.crossrider.bic", "14116cdaca06fd7a8e7414641e30849f");

Zeile gelöscht : user_pref("extensions.delta.admin", false);

Zeile gelöscht : user_pref("extensions.delta.aflt", "babsst");

Zeile gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");

Zeile gelöscht : user_pref("extensions.delta.autoRvrt", "false");

Zeile gelöscht : user_pref("extensions.delta.dfltLng", "de");

Zeile gelöscht : user_pref("extensions.delta.excTlbr", false);

Zeile gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);

Zeile gelöscht : user_pref("extensions.delta.id", "c0f781d600000000000000215d8f2354");

Zeile gelöscht : user_pref("extensions.delta.instlDay", "15962");

Zeile gelöscht : user_pref("extensions.delta.instlRef", "sst");

Zeile gelöscht : user_pref("extensions.delta.newTab", false);

Zeile gelöscht : user_pref("extensions.delta.prdct", "delta");

Zeile gelöscht : user_pref("extensions.delta.prtnrId", "delta");

Zeile gelöscht : user_pref("extensions.delta.rvrt", "false");

Zeile gelöscht : user_pref("extensions.delta.smplGrp", "none");

Zeile gelöscht : user_pref("extensions.delta.tlbrId", "base");

Zeile gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");

Zeile gelöscht : user_pref("extensions.delta.vrsn", "1.8.24.6");

Zeile gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.24.69:38:19");

Zeile gelöscht : user_pref("extensions.delta.vrsni", "1.8.24.6");

Zeile gelöscht : user_pref("extensions.delta_i.babExt", "");

Zeile gelöscht : user_pref("extensions.delta_i.babTrack", "affID=119357&tsp=5005");

Zeile gelöscht : user_pref("extensions.delta_i.srcExt", "ss");
 

-\\ Google Chrome v37.0.2062.120
 

[ Datei : C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [5872 octets] - [19/09/2014 07:21:33]

AdwCleaner[S0].txt - [5797 octets] - [19/09/2014 07:24:10]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5857 octets] ##########

JRT:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.7 (09.18.2014:2)

OS: Windows 7 Professional N x86

Ran by Mucky on 19.09.2014 at  7:32:18,58

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1307851060-3472154346-1383332600-1000\Software\sweetim

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411181156}
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ FireFox
 

Emptied folder: C:\Users\Mucky\AppData\Roaming\mozilla\firefox\profiles\owiy37f4.default\minidumps [19 files]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 19.09.2014 at  7:42:41,57

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

und FRST
txt:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-09-2014

Ran by Mucky (administrator) on ASUS on 19-09-2014 07:50:16

Running from C:\Users\Mucky\Downloads

Platform: Microsoft Windows 7 Professional N  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(G Data Software AG) C:\Program Files\Common Files\G Data\GDScan\GDScan.exe

(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe

(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe

(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\w32x86\3\NetFaxServer.exe

(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe

(G Data Software AG) C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe

(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVKTray\AVKTray.exe

(G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\GDKBFltExe32.exe

() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe

(CyberLink Corp.) C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\PCMAgent.exe

(CyberLink) C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvc.exe

(CyberLink Corp.) C:\Program Files\ASUS\AI TouchMedia\PlayMovie\PMVService.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

() C:\Program Files\DivX\DivX Update\DivXUpdate.exe

(G Data Software AG) C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Microsoft Corporation) C:\Windows\System32\wuauclt.exe

(Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [331264 2010-11-26] ()

HKLM\...\Run: [PCMAgent] => C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\PCMAgent.exe [212992 2008-06-11] (CyberLink Corp.)

HKLM\...\Run: [CLMLServer] => C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvc.exe [196608 2008-06-11] (CyberLink)

HKLM\...\Run: [PlayMovie] => C:\Program Files\ASUS\AI TouchMedia\PlayMovie\PMVService.exe [172032 2008-05-19] (CyberLink Corp.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1549608 2009-08-17] (Synaptics Incorporated)

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)

HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()

HKLM\...\Run: [GDFirewallTray] => C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1724728 2013-12-19] (G Data Software AG)

HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files\G Data\InternetSecurity\AVKTray\AVKTray.exe,
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default

FF Homepage: https://www.google.de/

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Adblock Plus - C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-23]
 

Chrome: 

=======

CHR HomePage: Default -> 

CHR StartupUrls: Default -> "https://www.google.de/"

CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}

CHR CustomProfile: C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Docs) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-07]

CHR Extension: (Google Drive) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-07]

CHR Extension: (YouTube) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-07]

CHR Extension: (Google-Suche) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-07]

CHR Extension: (Google Wallet) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-07]

CHR Extension: (Google Mail) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-07]
 

========================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AVKProxy; C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe [2244728 2014-02-12] (G Data Software AG)

R2 AVKService; C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe [914552 2013-12-19] (G Data Software AG)

R2 AVKWCtl; C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe [2159472 2014-03-25] (G Data Software AG)

R3 GDFwSvc; C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe [2409280 2014-01-30] (G Data Software AG)

R3 GDScan; C:\Program Files\Common Files\G Data\GDScan\GDScan.exe [700024 2014-02-03] (G Data Software AG)

R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\w32x86\3\NetFaxServer.exe [175104 2011-01-24] (Samsung Electronics Co., Ltd.) [File not signed]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [44544 2014-04-22] (G Data Software AG)

R3 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt32.sys [20736 2014-04-22] (G Data Software AG)

R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [101504 2014-04-22] (G Data Software AG)

R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [56832 2014-04-22] (G Data Software AG)

R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd32.sys [53248 2014-04-22] (G Data Software AG)

R1 GRD; C:\Windows\system32\drivers\GRD.sys [29528 2014-04-22] (G Data Software)

R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [50176 2014-04-22] (G Data Software AG)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-09-19] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation)

R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2007-07-31] (ATK0100)

R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2010-12-23] (Samsung Electronics) [File not signed]

S3 ZOOM_R16MTR; C:\Windows\System32\Drivers\zmr16usbaudio.sys [81920 2013-04-03] (Zoom Corporation.)

R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\ASUS\AI TouchMedia\PlayMovie\000.fcl [61424 2008-05-19] (Cyberlink Corp.)

U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-09-19 07:42 - 2014-09-19 07:42 - 00001103 _____ () C:\Users\Mucky\Desktop\JRT.txt

2014-09-19 07:31 - 2014-09-19 07:31 - 01019328 _____ (Thisisu) C:\Users\Mucky\Downloads\JRT.exe

2014-09-19 07:31 - 2014-09-19 07:31 - 00000000 ____D () C:\Windows\ERUNT

2014-09-19 07:27 - 2014-09-19 07:27 - 00005937 _____ () C:\Users\Mucky\Desktop\AdwCleaner[S0].txt

2014-09-19 07:23 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll

2014-09-19 07:21 - 2014-09-19 07:24 - 00000000 ____D () C:\AdwCleaner

2014-09-19 07:18 - 2014-09-19 07:18 - 01373475 _____ () C:\Users\Mucky\Downloads\AdwCleaner_3.310.exe

2014-09-17 18:17 - 2014-09-17 18:17 - 00001578 _____ () C:\Users\Mucky\Desktop\mbam1.txt

2014-09-17 18:16 - 2014-09-17 18:16 - 00001578 _____ () C:\Users\Mucky\Desktop\mbam.txt

2014-09-17 17:29 - 2014-09-19 07:43 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-09-17 17:29 - 2014-09-17 17:29 - 00001071 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-09-17 17:29 - 2014-09-17 17:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-09-17 17:29 - 2014-09-17 17:29 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-09-17 17:29 - 2014-09-17 17:29 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware

2014-09-17 17:29 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-09-17 17:29 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-09-17 17:29 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-09-17 17:27 - 2014-09-17 17:28 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Mucky\Desktop\mbam-setup-2.0.2.1012.exe

2014-09-17 17:17 - 2014-09-17 17:17 - 00002921 _____ () C:\Users\Mucky\Desktop\Anleitung Cleanen.txt

2014-09-17 09:01 - 2014-09-17 09:04 - 00039439 _____ () C:\Users\Mucky\Downloads\Addition.txt

2014-09-17 09:00 - 2014-09-19 07:50 - 00011389 _____ () C:\Users\Mucky\Downloads\FRST.txt

2014-09-17 08:59 - 2014-09-19 07:50 - 00000000 ____D () C:\FRST

2014-09-17 08:57 - 2014-09-17 08:57 - 01097728 _____ (Farbar) C:\Users\Mucky\Downloads\FRST.exe

2014-09-11 11:49 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-09-11 11:49 - 2014-08-23 02:42 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-09-11 11:49 - 2014-07-07 03:40 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-09-11 11:49 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-09-11 11:17 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2014-09-11 11:17 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-09-11 11:12 - 2014-09-05 03:52 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-09-11 11:12 - 2014-09-05 03:47 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-09-11 11:00 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2014-09-10 06:09 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-09-10 06:09 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2014-09-10 06:09 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-09-10 06:09 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2014-09-10 06:09 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2014-09-10 06:09 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2014-09-10 06:09 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2014-09-10 06:08 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2014-09-10 06:08 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2014-09-01 07:01 - 2014-09-01 07:01 - 00212600 _____ () C:\Windows\system32\SBuySupplies.exe

2014-09-01 07:01 - 2014-09-01 07:01 - 00024064 _____ () C:\Windows\system32\ssn2mlm.dll

2014-08-23 10:44 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll

2014-08-23 10:44 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2014-08-23 10:44 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe

2014-08-23 10:44 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll

2014-08-23 10:22 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2014-08-23 10:22 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2014-08-23 10:22 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2014-08-23 10:22 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2014-08-23 10:22 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2014-08-23 10:22 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-08-23 10:22 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll

2014-08-23 10:22 - 2014-03-04 11:17 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2014-08-23 10:22 - 2014-03-04 11:17 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2014-08-23 10:22 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll

2014-08-23 10:22 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll

2014-08-23 10:22 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll

2014-08-23 10:22 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll

2014-08-23 10:22 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll

2014-08-23 10:22 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll

2014-08-23 10:21 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2014-08-23 10:21 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2014-08-23 10:21 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-08-23 10:21 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2014-08-23 10:21 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2014-08-23 10:21 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2014-08-23 10:21 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2014-08-23 10:21 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2014-08-23 10:21 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2014-08-23 10:21 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2014-08-23 10:21 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-08-23 10:21 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll

2014-08-23 10:21 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2014-08-23 10:20 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-08-23 10:20 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-08-23 10:20 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2014-08-23 10:20 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-08-23 10:20 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-08-23 10:20 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-08-23 10:20 - 2014-05-30 08:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-08-23 10:20 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll

2014-08-23 10:19 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-08-23 10:18 - 2014-04-12 04:15 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2014-08-23 10:18 - 2014-04-12 04:15 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2014-08-23 10:18 - 2014-04-12 04:12 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2014-08-23 10:18 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2014-08-23 10:18 - 2014-04-12 04:12 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2014-08-23 10:18 - 2014-04-12 04:11 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-09-19 07:50 - 2014-09-17 09:00 - 00011389 _____ () C:\Users\Mucky\Downloads\FRST.txt

2014-09-19 07:50 - 2014-09-17 08:59 - 00000000 ____D () C:\FRST

2014-09-19 07:47 - 2014-01-06 13:00 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2014-09-19 07:46 - 2013-09-12 20:13 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird

2014-09-19 07:43 - 2014-09-17 17:29 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-09-19 07:42 - 2014-09-19 07:42 - 00001103 _____ () C:\Users\Mucky\Desktop\JRT.txt

2014-09-19 07:33 - 2009-07-14 06:02 - 00028160 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-09-19 07:33 - 2009-07-14 06:02 - 00028160 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-09-19 07:31 - 2014-09-19 07:31 - 01019328 _____ (Thisisu) C:\Users\Mucky\Downloads\JRT.exe

2014-09-19 07:31 - 2014-09-19 07:31 - 00000000 ____D () C:\Windows\ERUNT

2014-09-19 07:30 - 2013-06-17 10:23 - 01148758 _____ () C:\Windows\WindowsUpdate.log

2014-09-19 07:27 - 2014-09-19 07:27 - 00005937 _____ () C:\Users\Mucky\Desktop\AdwCleaner[S0].txt

2014-09-19 07:26 - 2014-02-07 14:30 - 00001092 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-09-19 07:25 - 2010-11-20 23:49 - 00184926 _____ () C:\Windows\PFRO.log

2014-09-19 07:25 - 2009-07-14 06:17 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-09-19 07:25 - 2009-07-14 06:07 - 00040311 _____ () C:\Windows\setupact.log

2014-09-19 07:24 - 2014-09-19 07:21 - 00000000 ____D () C:\AdwCleaner

2014-09-19 07:18 - 2014-09-19 07:18 - 01373475 _____ () C:\Users\Mucky\Downloads\AdwCleaner_3.310.exe

2014-09-18 21:38 - 2013-12-02 19:17 - 00133958 _____ () C:\Windows\IE11_main.log

2014-09-17 18:17 - 2014-09-17 18:17 - 00001578 _____ () C:\Users\Mucky\Desktop\mbam1.txt

2014-09-17 18:16 - 2014-09-17 18:16 - 00001578 _____ () C:\Users\Mucky\Desktop\mbam.txt

2014-09-17 18:01 - 2014-02-07 14:30 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-09-17 17:46 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Registration

2014-09-17 17:29 - 2014-09-17 17:29 - 00001071 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-09-17 17:29 - 2014-09-17 17:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-09-17 17:29 - 2014-09-17 17:29 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-09-17 17:29 - 2014-09-17 17:29 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware

2014-09-17 17:28 - 2014-09-17 17:27 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Mucky\Desktop\mbam-setup-2.0.2.1012.exe

2014-09-17 17:17 - 2014-09-17 17:17 - 00002921 _____ () C:\Users\Mucky\Desktop\Anleitung Cleanen.txt

2014-09-17 09:04 - 2014-09-17 09:01 - 00039439 _____ () C:\Users\Mucky\Downloads\Addition.txt

2014-09-17 08:57 - 2014-09-17 08:57 - 01097728 _____ (Farbar) C:\Users\Mucky\Downloads\FRST.exe

2014-09-17 08:40 - 2013-06-20 16:53 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2014-09-17 08:40 - 2013-06-20 16:53 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2014-09-16 20:18 - 2013-06-21 11:21 - 00000000 ____D () C:\ProgramData\Samsung

2014-09-16 20:17 - 2013-06-21 11:19 - 00000000 ____D () C:\Program Files\SamsungPrinterLiveUpdate

2014-09-16 10:14 - 2013-06-21 12:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013

2014-09-16 10:14 - 2013-06-21 09:41 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-09-15 08:31 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET

2014-09-12 09:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache

2014-09-12 08:29 - 2009-07-14 06:17 - 00032634 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-09-11 13:57 - 2009-07-14 06:02 - 00433200 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-09-11 13:00 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE

2014-09-11 12:59 - 2014-05-30 12:08 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-09-11 12:55 - 2010-11-20 23:03 - 01593564 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-09-11 11:45 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles

2014-09-09 12:52 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Public\Libraries

2014-09-09 12:43 - 2013-09-14 10:49 - 00000000 ____D () C:\Users\Mucky\Downloads\alt

2014-09-09 08:35 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF

2014-09-05 03:52 - 2014-09-11 11:12 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-09-05 03:47 - 2014-09-11 11:12 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-09-01 07:01 - 2014-09-01 07:01 - 00212600 _____ () C:\Windows\system32\SBuySupplies.exe

2014-09-01 07:01 - 2014-09-01 07:01 - 00024064 _____ () C:\Windows\system32\ssn2mlm.dll

2014-08-23 11:05 - 2011-04-12 04:25 - 00000000 ____D () C:\Program Files\Windows Journal

2014-08-23 09:57 - 2013-09-11 16:32 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2014-08-23 03:46 - 2014-09-11 11:49 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-08-23 02:42 - 2014-09-11 11:49 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
 

Some content of TEMP:

====================

C:\Users\Mucky\AppData\Local\Temp\BackupSetup.exe

C:\Users\Mucky\AppData\Local\Temp\fmp-2.0.7-win32.exe

C:\Users\Mucky\AppData\Local\Temp\ose00000.exe

C:\Users\Mucky\AppData\Local\Temp\ose00001.exe

C:\Users\Mucky\AppData\Local\Temp\Quarantine.exe

C:\Users\Mucky\AppData\Local\Temp\Setup.exe

C:\Users\Mucky\AppData\Local\Temp\uninst1.exe

C:\Users\Mucky\AppData\Local\Temp\xmlUpdater.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-09-16 07:39
 

==================== End Of Log ============================

--- --- ---

addition:

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 12-09-2014

Ran by Mucky at 2014-09-17 09:04:14

Running from C:\Users\Mucky\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: G Data InternetSecurity (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}

AS: G Data InternetSecurity (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: G Data Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Adobe Flash Player 11 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 11.8.800.174 - Adobe Systems Incorporated)

Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.08) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)

AI TouchMedia (HKLM\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 6.0.1811 - CyberLink Corp.)

AI TouchMedia (Version: 6.0.1811 - CyberLink Corp.) Hidden

CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.3.4746 - CDBurnerXP)

Common Desktop Agent (Version: 1.52.0 - OEM) Hidden

DC-Bass Source 1.3.0 (HKLM\...\DC-Bass Source) (Version:  - )

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{650DE870-ECA3-4E63-8D77-778512BE5D4C}) (Version:  - Microsoft)

Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{BF1E7B7B-8FBB-45C8-B170-214AA0F4F6AE}) (Version:  - Microsoft)

DirectVobSub 2.40.4209 (HKLM\...\vsfilter_is1) (Version: 2.40.4209 - MPC-HC Team)

DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.1.8 - DivX, LLC)

ElsterFormular (HKLM\...\ElsterFormular) (Version: 15.2.20140326 - Landesfinanzdirektion Thüringen)

FilesFrog Update Checker (HKLM\...\FilesFrog Update Checker) (Version:  - ) <==== ATTENTION

G Data InternetSecurity (HKLM\...\{85203592-3610-4FB9-AA11-15B2255B5A12}) (Version: 25.0.1.2 - G Data Software AG)

Google Chrome (HKLM\...\Google Chrome) (Version: 37.0.2062.120 - Google Inc.)

Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden

Haali Media Splitter (HKLM\...\HaaliMkx) (Version:  - )

Lagarith Lossless Codec (1.3.27) (HKLM\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version:  - )

LAME v3.99.3 (for Windows) (HKLM\...\LAME_is1) (Version:  - )

LyricsSay-1 (HKLM\...\LyricsSay-1) (Version: 1.28.153.3 - Lyrics) <==== ATTENTION

LyriXeeker-1 (HKLM\...\LyriXeeker-1) (Version: 1.28.153.3 - Lyrics) <==== ATTENTION

Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Mathematics (HKLM\...\{4D090F70-6F08-4B60-9357-A1DFD4458F09}) (Version: 4.0 - Microsoft Corporation)

Microsoft Mathematics Add-In for Word and OneNote (HKLM\...\{90150000-00D8-0407-0000-0000000FF1CE}) (Version: 15.0.4481.1008 - Microsoft Corporation)

Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Professional 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Single Image 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Visio MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Visio Professional 2013 (HKLM\...\Office15.VISPROR) (Version: 15.0.4569.1506 - Microsoft Corporation)

Microsoft Visio Professional 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)

Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)

Mozilla Thunderbird 17.0.7 (x86 de) (HKLM\...\Mozilla Thunderbird 17.0.7 (x86 de)) (Version: 17.0.7 - Mozilla)

MyPC Backup  (HKLM\...\MyPC Backup) (Version:  - MyPC Backup) <==== ATTENTION

Notepad++ (HKLM\...\Notepad++) (Version: 6.3.3 - Notepad++ Team)

NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.4 - NVIDIA Corporation)

OpenSource Flash Video Splitter 1.0.0.5 (HKLM\...\OpenSource Flash Video Splitter) (Version: 1.0.0.5 - )

Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

R16_R24 Driver (HKLM\...\{19CF1A77-C522-4082-8A2B-A9952EE9E372}) (Version: 2.0.0.5 - ZOOM)

RICOH R5U8xx Media Driver ver.3.62.02 (HKLM\...\{59F6A514-9813-47A3-948C-8A155460CC2A}) (Version: 3.62.02 - RICOH)

Samsung Easy Printer Manager (HKLM\...\Samsung Easy Printer Manager) (Version: 1.00.55.00 - Samsung Electronics Co., Ltd.)

Samsung Network PC Fax (HKLM\...\Samsung Network PC Fax) (Version: 1.05.17.00 - Samsung Electronics Co., Ltd.)

Samsung Printer Live Update (HKLM\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)

Samsung Scan Assistant (HKLM\...\Samsung Scan Assistant) (Version: 1.03.28.00 - Samsung Electronics Co., Ltd.)

Samsung SCX-483x 5x3x Series (HKLM\...\Samsung SCX-483x 5x3x Series) (Version:  - Samsung Electronics Co., Ltd.)

Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{8D2E04ED-3350-4ECE-9D6E-3BC9A9A93A47}) (Version:  - Microsoft)

Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (Version:  - Microsoft) Hidden

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version:  - Microsoft) Hidden

Steinberg Cubase 5 (HKLM\...\{4A19D6AC-ADE0-4A07-80FF-9C9812C45557}) (Version: 5.1.2 - Steinberg Media Technologies GmbH)

Steinberg Drum Loop Expansion 01 (HKLM\...\{490BF87E-1F75-4453-BF55-9F540543A3CA}) (Version: 1.0.0.1 - Steinberg Media Technologies GmbH)

Steinberg Groove Agent ONE Content (HKLM\...\{BD86F1AC-B594-46E4-85DC-1258AC9E2232}) (Version: 1.0.0.003 - Steinberg Media Technologies GmbH)

Steinberg HALionOne (HKLM\...\{E70E7159-93B1-470D-9FBD-D8E9EF34B538}) (Version: 1.1.0.457 - Steinberg Media Technologies GmbH)

Steinberg HALionOne Additional Content Set 01 (HKLM\...\{F3AFD063-8BAD-485E-B641-E7F5A2C5AE71}) (Version: 1.0.0.001 - Steinberg Media Technologies GmbH)

Steinberg HALionOne Expression Set (HKLM\...\{E22AD5D3-EB60-4A8F-835C-6C10E369DCE2}) (Version: 1.0.1.0 - Steinberg Media Technologies GmbH)

Steinberg HALionOne GM Drum Set (HKLM\...\{AC997F93-0757-4ED4-A701-F40C2D654D09}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)

Steinberg HALionOne GM Set (HKLM\...\{F057965A-D974-4C64-ADB1-4381CD4B8956}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)

Steinberg HALionOne Pro Set (HKLM\...\{D82CDA0D-C182-42C8-8FF2-5649C98D6003}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)

Steinberg HALionOne Studio Drum Set (HKLM\...\{865D9ED1-EAC2-436D-AFA7-0B750EB5AAAB}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)

Steinberg HALionOne Studio Set (HKLM\...\{D23CBFDA-C46B-4920-BA70-FC7878A3F05A}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)

Steinberg LoopMash Content (HKLM\...\{4D454CF8-12FD-464D-B57B-B46FE27B78BB}) (Version: 1.0.0.005 - Steinberg Media Technologies GmbH)

Steinberg REVerence Content 01 (HKLM\...\{532B917B-8235-4FA5-BE36-643A8BB053A5}) (Version: 1.0.0.006 - Steinberg Media Technologies GmbH)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.1.1 - Synaptics Incorporated)

Update for Codec Package (HKCU\...\DSite) (Version:  - ) <==== ATTENTION

Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)

Update for Microsoft Excel 2010 (KB2889836) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9179FC17-97A8-4D98-9E09-05720AF5D44E}) (Version:  - Microsoft)

Update for Microsoft Excel 2013 (KB2889861) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.VISPROR_{F47D9DA0-739D-4FEE-A2CD-16B23382F7EE}) (Version:  - Microsoft)

Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)

Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2687502) 32-Bit Edition (HKLM\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{7DE7DF97-82FE-4B3A-AB8D-1621F9CC464A}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{EAD7BEF9-B28C-425F-B2C5-538CB27EF013}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{089DBFD7-8211-43B2-AAAE-5BDD8C23E3A8}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2760344) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{A7610F07-E844-4444-8E1D-D5BC8AD0B4C5}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2768012) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{66421820-D3CA-450A-898C-78D7E40108E6}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2863843) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{AD7045B8-1D75-4B4C-8120-12F045D206C7}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2880462) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.VISPROR_{5D6439FF-D651-4B13-B52E-2508AB9DE19D}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2880462) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{5D6439FF-D651-4B13-B52E-2508AB9DE19D}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2880478) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{7C5CEE0F-6823-4BB7-A28F-76FEC14EB6AC}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2881001) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{31849233-AD8B-42D7-9AE1-74C79C8E8C03}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2881009) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{7A3EF4FF-A9C8-4F7E-8020-A45F7D319387}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2881039) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{1B208923-2810-414F-82CC-AFFC1B19563F}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2881081) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{6171BC1B-907E-44D4-930A-4AE0D9260E65}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2883036) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{B8E73381-09B1-4895-ACD0-34385B0F526D}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2883049) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{1C6260FD-A280-49FE-89D0-CCEC647FBD8E}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2883060) 32-Bit Edition (HKLM\...\{90150000-001F-0407-0000-0000000FF1CE}_Office15.VISPROR_{0F5FFEB6-2F66-4592-8A34-CC85FF318951}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2883060) 32-Bit Edition (HKLM\...\{90150000-001F-0409-0000-0000000FF1CE}_Office15.VISPROR_{DA288EB3-648C-433C-88AC-71AEAAFAACF7}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2883060) 32-Bit Edition (HKLM\...\{90150000-001F-040C-0000-0000000FF1CE}_Office15.VISPROR_{51865C36-97D4-4210-A33E-50BCC8CDDF72}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2883060) 32-Bit Edition (HKLM\...\{90150000-001F-0410-0000-0000000FF1CE}_Office15.VISPROR_{D533D4E6-5056-487A-8F18-7FA51AF0E283}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2889848) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.VISPROR_{E1285C4F-1DB7-4A7F-9DEF-22068D09EBFA}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2889848) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{E1285C4F-1DB7-4A7F-9DEF-22068D09EBFA}) (Version:  - Microsoft)

Update for Microsoft Office 2013 (KB2889862) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{96AE4BBC-69CC-4004-8B53-1F40B2461755}) (Version:  - Microsoft)

Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)

Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)

Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)

Update for Microsoft Outlook 2013 (KB2880470) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{1BCA67A6-5329-48D0-A088-C097AC7A14BD}) (Version:  - Microsoft)

Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)

Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)

Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version:  - Microsoft)

Update for Microsoft Visio 2013 (KB2889849) 32-Bit Edition (HKLM\...\{90150000-0054-0407-0000-0000000FF1CE}_Office15.VISPROR_{CB9B82D8-4B8A-4EF1-846B-7E1B9379C7DA}) (Version:  - Microsoft)

Update for Microsoft Visio 2013 (KB2889849) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{CB9B82D8-4B8A-4EF1-846B-7E1B9379C7DA}) (Version:  - Microsoft)

Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version:  - Microsoft)

Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.VISPROR_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)

Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)

Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version:  - Microsoft)

VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden

Winamp (HKLM\...\Winamp) (Version: 5.64  - Nullsoft, Inc)

Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)

WinZip 18.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DE}) (Version: 18.0.10661 - WinZip Computing, S.L. )

Xvid Video Codec (HKLM\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 

23-08-2014 08:35:15 Windows Update

23-08-2014 09:18:47 Windows Update

10-09-2014 04:07:14 Windows Update

10-09-2014 04:54:53 Windows Update

11-09-2014 08:59:29 Windows Update

11-09-2014 10:53:06 Windows Update

12-09-2014 20:05:43 Windows Update

16-09-2014 08:12:14 Windows Update

16-09-2014 18:35:55 Windows Update
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {0509C076-8F47-497B-9F8C-DAF34A74B89D} - \LyricsSay-1-codedownloader No Task File <==== ATTENTION

Task: {10D9F1DD-B93E-493D-8CA1-D13C9224CEEA} - \LyriXeeker-1-codedownloader No Task File <==== ATTENTION

Task: {25FA414D-EDD9-43C0-8BDF-2FFCBDB4FE98} - \LyricsSay-1-enabler No Task File <==== ATTENTION

Task: {2D311364-3673-411E-8034-B10EFCC7BB15} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-02-07] (Google Inc.)

Task: {352DE5CD-ADBC-46B7-83A3-3A87685ED04B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)

Task: {3BA4BBFA-40D1-46CA-BA9C-0BA221E10C89} - \LyriXeeker-1-firefoxinstaller No Task File <==== ATTENTION

Task: {463969CB-450B-4119-817D-602705EF989E} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)

Task: {47A2578E-B74C-41A8-8432-04FD8C405BFA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-02-07] (Google Inc.)

Task: {99FDB450-4524-4F0F-A38F-A9B4D9A4F682} - System32\Tasks\DSite => C:\Users\Mucky\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe [2013-09-14] () <==== ATTENTION

Task: {B1953FF5-F54F-4FE9-B20D-55231A3CCD37} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)

Task: {B532E6AD-8269-48EB-91E4-D1056CA9D12F} - \LyricsSay-1-firefoxinstaller No Task File <==== ATTENTION

Task: {BD42470B-934F-42BB-9C19-1DBA6C33BDDB} - \LyricsSay-1-updater No Task File <==== ATTENTION

Task: {D0EC8579-BCCA-4024-B7AA-604011BF3268} - \LyriXeeker-1-updater No Task File <==== ATTENTION

Task: {E85E5E1A-F54E-4AA0-ACEF-E97562CF0481} - \LyriXeeker-1-enabler No Task File <==== ATTENTION
 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 

Task: C:\Windows\Tasks\DSite.job => C:\Users\Mucky\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\LyricsSay-1-codedownloader.job => C:\Program Files\LyricsSay-1\LyricsSay-1-codedownloader.exe <==== ATTENTION

Task: C:\Windows\Tasks\LyricsSay-1-enabler.job => C:\Program Files\LyricsSay-1\LyricsSay-1-enabler.exe <==== ATTENTION

Task: C:\Windows\Tasks\LyricsSay-1-firefoxinstaller.job => C:\Program Files\LyricsSay-1\LyricsSay-1-firefoxinstaller.exe <==== ATTENTION

Task: C:\Windows\Tasks\LyricsSay-1-updater.job => C:\Program Files\LyricsSay-1\LyricsSay-1-updater.exe <==== ATTENTION

Task: C:\Windows\Tasks\LyriXeeker-1-codedownloader.job => C:\Program Files\LyriXeeker-1\LyriXeeker-1-codedownloader.exe

Task: C:\Windows\Tasks\LyriXeeker-1-enabler.job => C:\Program Files\LyriXeeker-1\LyriXeeker-1-enabler.exe

Task: C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job => C:\Program Files\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe

Task: C:\Windows\Tasks\LyriXeeker-1-updater.job => C:\Program Files\LyriXeeker-1\LyriXeeker-1-updater.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-09-01 07:01 - 2014-09-01 07:01 - 00024064 _____ () C:\Windows\System32\ssn2mlm.dll

2010-11-26 22:17 - 2010-11-26 22:17 - 00331264 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe

2010-11-26 22:17 - 2010-11-26 22:17 - 00049664 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll

2008-06-11 21:52 - 2008-06-11 21:52 - 00778240 ____N () C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMediaLibrary.dll

2008-06-11 21:52 - 2008-06-11 21:52 - 00007680 ____N () C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvcPS.dll

2013-08-29 02:23 - 2013-08-29 02:23 - 01861968 _____ () C:\Program Files\DivX\DivX Update\DivXUpdate.exe

2013-08-29 02:25 - 2013-08-29 02:25 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll

2013-07-01 19:47 - 2013-07-01 19:47 - 00012288 _____ () C:\Program Files\MyPC Backup\GetText.dll

2013-07-01 19:43 - 2013-07-01 19:43 - 00904704 _____ () C:\Program Files\MyPC Backup\x86\System.Data.SQLite.dll

2013-06-21 11:19 - 2010-11-24 12:30 - 00274432 _____ () C:\Windows\system32\SaMinDrv.dll

2013-12-19 04:42 - 2013-12-19 04:42 - 00287864 ____N () C:\Program Files\Common Files\G Data\AVKProxy\PktIcpt2.dll

2013-06-21 11:19 - 2014-09-01 07:01 - 00896512 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\ssn2mdu.dll

2013-09-14 09:37 - 2013-09-14 09:37 - 00095232 _____ () C:\Users\Mucky\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 
 

==================== Faulty Device Manager Devices =============
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (09/17/2014 09:04:29 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c

Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00001b2f

ID des fehlerhaften Prozesses: 0x2174

Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0

Pfad der fehlerhaften Anwendung: iexplore.exe1

Pfad des fehlerhaften Moduls: iexplore.exe2

Berichtskennung: iexplore.exe3
 

Error: (09/17/2014 08:10:10 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )

Description: Subscription licensing service failed: -1073418231
 

Error: (09/17/2014 08:01:43 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/16/2014 07:45:51 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/16/2014 09:24:35 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c

Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00001b2f

ID des fehlerhaften Prozesses: 0x2884

Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0

Pfad der fehlerhaften Anwendung: iexplore.exe1

Pfad des fehlerhaften Moduls: iexplore.exe2

Berichtskennung: iexplore.exe3
 

Error: (09/16/2014 09:21:53 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c

Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00001b2f

ID des fehlerhaften Prozesses: 0x26bc

Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0

Pfad der fehlerhaften Anwendung: iexplore.exe1

Pfad des fehlerhaften Moduls: iexplore.exe2

Berichtskennung: iexplore.exe3
 

Error: (09/16/2014 08:59:41 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c

Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00001b2f

ID des fehlerhaften Prozesses: 0x2ad4

Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0

Pfad der fehlerhaften Anwendung: iexplore.exe1

Pfad des fehlerhaften Moduls: iexplore.exe2

Berichtskennung: iexplore.exe3
 

Error: (09/16/2014 08:32:48 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c

Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00001b2f

ID des fehlerhaften Prozesses: 0x1ff4

Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0

Pfad der fehlerhaften Anwendung: iexplore.exe1

Pfad des fehlerhaften Moduls: iexplore.exe2

Berichtskennung: iexplore.exe3
 

Error: (09/16/2014 08:27:47 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea91c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00052d94

ID des fehlerhaften Prozesses: 0x14cc

Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0

Pfad der fehlerhaften Anwendung: iexplore.exe1

Pfad des fehlerhaften Moduls: iexplore.exe2

Berichtskennung: iexplore.exe3
 

Error: (09/16/2014 08:06:06 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c

Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00001b2f

ID des fehlerhaften Prozesses: 0x4f8

Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0

Pfad der fehlerhaften Anwendung: iexplore.exe1

Pfad des fehlerhaften Moduls: iexplore.exe2

Berichtskennung: iexplore.exe3
 
 

System errors:

=============

Error: (09/17/2014 08:01:26 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
 

Error: (09/17/2014 08:00:36 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (09/17/2014 08:00:36 AM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.
 

Error: (09/16/2014 08:36:51 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7
 

Error: (09/16/2014 10:13:01 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7
 

Error: (09/16/2014 08:33:55 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
 

Error: (09/11/2014 02:09:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "G Data Personal Firewall" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (09/11/2014 02:09:39 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst G Data Personal Firewall erreicht.
 

Error: (09/11/2014 01:58:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (09/11/2014 01:58:29 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.
 
 

Microsoft Office Sessions:

=========================

Error: (09/17/2014 09:04:29 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f217401cfd2459a1d3189C:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dlldd6639c3-3e38-11e4-82e4-00248c76c64b
 

Error: (09/17/2014 08:10:10 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )

Description: Subscription licensing service failed: -1073418231
 

Error: (09/17/2014 08:01:43 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/16/2014 07:45:51 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/16/2014 09:24:35 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f288401cfd17f3eeb083dC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll81eefd0f-3d72-11e4-adb4-00248c76c64b
 

Error: (09/16/2014 09:21:53 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f26bc01cfd17edda61ad8C:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll219f0474-3d72-11e4-adb4-00248c76c64b
 

Error: (09/16/2014 08:59:41 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f2ad401cfd17bc4342ebcC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll0752918f-3d6f-11e4-adb4-00248c76c64b
 

Error: (09/16/2014 08:32:48 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f1ff401cfd178030c8cc5C:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll45e12753-3d6b-11e4-adb4-00248c76c64b
 

Error: (09/16/2014 08:27:47 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: iexplore.exe11.0.9600.16428525b664cntdll.dll6.1.7601.18247521ea91cc000000500052d9414cc01cfd17174a4f696C:\Program Files\Internet Explorer\iexplore.exeC:\Windows\SYSTEM32\ntdll.dll92f4cd93-3d6a-11e4-adb4-00248c76c64b
 

Error: (09/16/2014 08:06:06 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f4f801cfd17448ca23a7C:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll8b4f394b-3d67-11e4-adb4-00248c76c64b
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM)2 Duo CPU T5900 @ 2.20GHz

Percentage of memory in use: 45%

Total physical RAM: 3071.11 MB

Available physical RAM: 1667.1 MB

Total Pagefile: 6140.52 MB

Available Pagefile: 4114.35 MB

Total Virtual: 2047.88 MB

Available Virtual: 1899.23 MB
 

==================== Drives ================================
 

Drive c: (VistaOS) (Fixed) (Total:116.44 GB) (Free:66.12 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (Katha Rina) (Fixed) (Total:104.73 GB) (Free:100.76 GB) NTFS

Drive e: (Belkin CD) (CDROM) (Total:0.05 GB) (Free:0 GB) CDFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 97646C29)

Partition 1: (Not Active) - (Size=11.7 GB) - (Type=1C)

Partition 2: (Active) - (Size=116.4 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=104.7 GB) - (Type=OF Extended)
 

==================== End Of Log ============================

Vielen Dank bis dahin

Bitte die richtigen Logs von MBAM posten und nicht (nur) die Protection Logs.

Ich dachte, dass ich das getan hätte...verwirrendes Zeugs :wtf:
Hier der nächste Versuch. Das könnte jetzt das Richtige sein...hoffentlich...

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlauf Datum: 17.09.2014

Suchlauf-Zeit: 17:32:17

Logdatei: mbam2.txt

Administrator: Ja
 

Version: 2.00.2.1012

Malware Datenbank: v2014.09.17.06

Rootkit Datenbank: v2014.09.15.01

Lizenz: Testversion

Malware Schutz: Aktiviert

Bösartiger Webseiten Schutz: Aktiviert

Self-protection: Deaktiviert
 

Betriebssystem: Windows 7 Service Pack 1

CPU: x86

Dateisystem: NTFS

Benutzer: Mucky
 

Suchlauf-Art: Bedrohungs-Suchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 278726

Verstrichene Zeit: 11 Min, 13 Sek
 

Speicher: Aktiviert

Autostart: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Heuristics: Aktiviert

PUP: Aktiviert

PUM: Aktiviert
 

Prozesse: 1

PUP.Optional.FilesFrog.A, C:\Users\Mucky\AppData\Local\FilesFrog Update Checker\update_checker.exe, 4216, Löschen bei Neustart, [4f6b9955215a64d271d4dd4651affc04]
 

Module: 0

(No malicious items detected)
 

Registrierungsschlüssel: 35

PUP.Optional.Lyrics.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110411151152}, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 

PUP.Optional.Lyrics.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440444154452}, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 

PUP.Optional.Lyrics.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550455155552}, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 

PUP.Optional.Lyrics.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660466156652}, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 

PUP.Optional.Lyrics.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0041552.BHO.1, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 

PUP.Optional.Lyrics.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110411151152}, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 

PUP.Optional.Lyrics.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0041552.BHO, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 

PUP.Optional.Lyrics.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110411151152}, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 

PUP.Optional.Lyrics.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110411151152}, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 

PUP.Optional.Lyrics.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{11111111-1111-1111-1111-110411151152}, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 

PUP.Optional.Lyrics.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{11111111-1111-1111-1111-110411151152}, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 

PUP.Optional.Lyrics.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220422152252}, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 

PUP.Optional.Lyrics.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0041552.Sandbox.1, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 

PUP.Optional.Lyrics.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0041552.Sandbox, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 

PUP.Optional.Lyrics.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110411151152}\INPROCSERVER32, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 

PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, In Quarantäne, [2892b13dbcbfed496885d0ef738f1be5], 

PUP.Optional.Babylon.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, In Quarantäne, [7941db134d2e6cca2e511f67887a05fb], 

PUP.Optional.Somoto.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FilesFrog Update Checker, In Quarantäne, [f5c5bd31fd7e64d2d36ba5760cf5a15f], 

PUP.Optional.DataMangr.A, HKLM\SOFTWARE\DataMngr, In Quarantäne, [d6e475798eedbf77cccc4dcbf40f22de], 

PUP.Optional.LyricsSay.A, HKLM\SOFTWARE\LyricsSay-1, In Quarantäne, [91299f4fd5a687af17d08ec2f4101ee2], 

PUP.Optional.LyriXeeker.A, HKLM\SOFTWARE\LyriXeeker-1, In Quarantäne, [dfdb11dd6b10e056dd7c73e0010334cc], 

PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0041856.Sandbox, In Quarantäne, [27935797e39894a236fa5daf13f0d12f], 

PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0041856.Sandbox.1, In Quarantäne, [5268b83698e375c1201045c711f2ff01], 

PUP.Optional.DataMngr.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr, In Quarantäne, [11a969852952e94d7f15bd8e12f2619f], 

PUP.Optional.DataMngr.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, In Quarantäne, [d8e2f1fd8bf0c76f672c6ae15ca801ff], 

PUP.Optional.Somoto.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Somoto, In Quarantäne, [dedc638bfe7da6907bcf37ca41c27f81], 

PUP.Optional.CrossRider.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, In Quarantäne, [e1d926c8c8b360d69d5f26390afa57a9], 

PUP.Optional.Babylon.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BABSOLUTION\Updater, In Quarantäne, [a317af3fc0bb79bdf6a180ccf4105aa6], 

PUP.Optional.FilesFrog.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BI, In Quarantäne, [e7d3cb2303786bcb63c90b462cd87b85], 

PUP.Optional.InstallCore.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, In Quarantäne, [ab0f7d71631871c52c2b45f06f947c84], 

PUP.Optional.InstallCore.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, In Quarantäne, [ceec41adfe7d64d26255a1aad52f9c64], 

PUP.Optional.Lyrics.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Lyrics, In Quarantäne, [e1d9ca2467140333809c77c1ea1919e7], 

PUP.Optional.Somoto.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOMOTO\SDP, In Quarantäne, [45759d516615af872c33cc84d034fd03], 

PUP.Optional.LyricsSay.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\LyricsSay-1, In Quarantäne, [724865892a51171f5268864daf533ec2], 

PUP.Optional.LyriXeeker.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\LyriXeeker-1, In Quarantäne, [e8d2549af784a49228e8c60e17eba45c], 
 

Registrierungswerte: 4

PUP.Optional.FilesFrog.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SDP, C:\Users\Mucky\AppData\Local\FilesFrog Update Checker\update_checker.exe /auto , In Quarantäne, [4f6b9955215a64d271d4dd4651affc04]

PUP.Optional.FilesFrog.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BI|ui_path_filesfrog, HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker, In Quarantäne, [e7d3cb2303786bcb63c90b462cd87b85]

PUP.Optional.InstallCore.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0L1N1H2O1S, In Quarantäne, [ceec41adfe7d64d26255a1aad52f9c64]

PUP.Optional.Somoto.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOMOTO\SDP|affid, awdefreemediaplayer66252, In Quarantäne, [45759d516615af872c33cc84d034fd03]
 

Registrierungsdaten: 0

(No malicious items detected)
 

Ordner: 33

Adware.LolliPop.IT, C:\Users\Mucky\AppData\Local\Lollipop, In Quarantäne, [00baa846a3d84cea7ccb969ead57837d], 

PUP.Optional.FilesFrog.A, C:\Users\Mucky\AppData\Local\FilesFrog Update Checker, Löschen bei Neustart, [9f1b8a641b606ec84366a52e50b2ff01], 

PUP.Optional.FilesFrog.A, C:\Users\Mucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker, In Quarantäne, [b604ed01dd9ec472c1e9b51ee0229c64], 

PUP.Optional.LyricsSay.A, C:\Program Files\LyricsSay-1, In Quarantäne, [724865892a51171f5268864daf533ec2], 

PUP.Optional.LyriXeeker.A, C:\Program Files\LyriXeeker-1, In Quarantäne, [e8d2549af784a49228e8c60e17eba45c], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\defaults, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\defaults\preferences, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\userCode, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\locale, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\locale\en-US, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\defaults, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\defaults\preferences, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\userCode, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\locale, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\locale\en-US, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.Updater.A, C:\Users\Mucky\AppData\Roaming\DSite\UpdateProc, In Quarantäne, [3e7c737b55260234e62e5b9629d940c0], 

PUP.Optional.DSearchLink.A, C:\ProgramData\DSearchLink, In Quarantäne, [cded43ab3744a78fae0512eae61c7090], 
 

Dateien: 264

PUP.Optional.FilesFrog.A, C:\Users\Mucky\AppData\Local\FilesFrog Update Checker\update_checker.exe, Löschen bei Neustart, [4f6b9955215a64d271d4dd4651affc04], 

PUP.Optional.Lyrics.A, C:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 

PUP.Optional.Delta.A, C:\ProgramData\DSearchLink\DSearchLink.exe, In Quarantäne, [3c7e3cb24e2de35343b6b104758fc040], 

PUP.Optional.Crossrider, C:\Program Files\LyriXeeker-1\LyriXeeker-1-buttonutil.dll, In Quarantäne, [f1c904ea304b3105a368cbee2cd8c937], 

PUP.Optional.Somoto.A, C:\Users\Mucky\AppData\Local\Temp\UpdateCheckerSetup.exe, In Quarantäne, [8f2baf3f4d2e6cca75c920fb56ab2ed2], 

PUP.Optional.Wajam.A, C:\Users\Mucky\AppData\Local\Temp\wajam_download.exe, In Quarantäne, [8634a24ca8d373c39297272008f828d8], 

PUP.Optional.Babylon.A, C:\Users\Mucky\AppData\Local\Temp\BabylonTB.exe, In Quarantäne, [ad0d945a26552d090d2d74a74ab70ff1], 

PUP.Optional.Iminent.A, C:\Users\Mucky\AppData\Local\Temp\IminentSetup.exe, In Quarantäne, [c7f318d6b1ca78be646af24b3ec3847c], 

PUP.Optional.Somoto, c:\Users\Mucky\AppData\Local\Temp\flvplayerupdate_downloader_by_flvplayerupdate.exe, In Quarantäne, [9327519d96e526101a5122040203c23e], 

PUP.Optional.Babylon.A, C:\Users\Mucky\AppData\Local\Temp\C57015DE-BAB0-7891-B86F-9D20AF292209\Latest\BExternal.dll, In Quarantäne, [3486806e6912d3635dbde93ad927d22e], 

PUP.Optional.Conduit.A, C:\Users\Mucky\AppData\Local\Temp\C57015DE-BAB0-7891-B86F-9D20AF292209\Latest\ccp.exe, In Quarantäne, [10aa7e701f5cd165b16a2f02f40d6f91], 

PUP.Optional.Babylon.A, C:\Users\Mucky\AppData\Local\Temp\C57015DE-BAB0-7891-B86F-9D20AF292209\Latest\CrxInstaller.dll, In Quarantäne, [86346787dba03df9c87d9693f01113ed], 

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Local\Temp\C57015DE-BAB0-7891-B86F-9D20AF292209\Latest\DSearchLink.exe, In Quarantäne, [18a29c5297e47fb74eabbff66e96758b], 

PUP.Optional.Babylon.A, C:\Users\Mucky\AppData\Local\Temp\C57015DE-BAB0-7891-B86F-9D20AF292209\Latest\MntrDLLInstall.dll, In Quarantäne, [e9d12bc39cdff145fc4a0e1ba1603dc3], 

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Local\Temp\C57015DE-BAB0-7891-B86F-9D20AF292209\Latest\MyDeltaTB.exe, In Quarantäne, [0fab41ad3744a393303a82fe4bb66799], 

PUP.Optional.Babylon.A, C:\Users\Mucky\AppData\Local\Temp\C57015DE-BAB0-7891-B86F-9D20AF292209\Latest\Setup.exe, In Quarantäne, [02b8b935a7d4280e6c50a67b77896a96], 

PUP.Optional.ScramblePacker.A, C:\Users\Mucky\AppData\Local\Temp\is1590112554\609283_Setup.EXE, In Quarantäne, [4d6d08e686f53df92f16b5d744bde917], 

PUP.Optional.Babylon.A, C:\Users\Mucky\AppData\Local\Temp\is1590112554\DeltaTB.exe, In Quarantäne, [3e7cb539a1da80b639e3f620c23fdb25], 

PUP.OptionalBundleInstaller.A, C:\Users\Mucky\AppData\Local\Temp\Setup.exe\7908ba6b395e457887e181de34630b3e\Setup.exe, In Quarantäne, [b109e40abebd5bdbc32d998833cdc23e], 

PUP.Optional.Lyrics.A, C:\Windows\Temp\41856_updater.exe, In Quarantäne, [5c5eb43a2b5020166b66220150b18b75], 

PUP.Optional.Somoto.A, C:\Users\Mucky\AppData\Local\FilesFrog Update Checker\uninstall.exe, In Quarantäne, [f5c5bd31fd7e64d2d36ba5760cf5a15f], 

Adware.LolliPop.IT, C:\Users\Mucky\AppData\Local\Lollipop\lollipop.lpd, In Quarantäne, [00baa846a3d84cea7ccb969ead57837d], 

Adware.LolliPop.IT, C:\Users\Mucky\AppData\Local\Lollipop\logo.ico, In Quarantäne, [00baa846a3d84cea7ccb969ead57837d], 

Adware.LolliPop.IT, C:\Users\Mucky\AppData\Local\Lollipop\lollipop_cfg.lpd, In Quarantäne, [00baa846a3d84cea7ccb969ead57837d], 

Adware.LolliPop.IT, C:\Users\Mucky\AppData\Local\Lollipop\lollipop_ps.lpd, In Quarantäne, [00baa846a3d84cea7ccb969ead57837d], 

PUP.Optional.Lyrics.A, C:\Windows\Tasks\LyricsSay-1-codedownloader.job, In Quarantäne, [73470ee03c3f7abc2b3bb998709460a0], 

PUP.Optional.Lyrics.A, C:\Windows\Tasks\LyricsSay-1-enabler.job, In Quarantäne, [f0caa945e59654e22244bb965aaa05fb], 

PUP.Optional.Lyrics.A, C:\Windows\Tasks\LyricsSay-1-firefoxinstaller.job, In Quarantäne, [eecc797508731f171254c58cc3417e82], 

PUP.Optional.Lyrics.A, C:\Windows\Tasks\LyricsSay-1-updater.job, In Quarantäne, [e5d5a84692e94cea22440c45b94b748c], 

PUP.Optional.LyriXeeker.A, C:\Windows\Tasks\LyriXeeker-1-codedownloader.job, In Quarantäne, [b1095e90ec8fb97dd97e0b482dd79967], 

PUP.Optional.LyriXeeker.A, C:\Windows\Tasks\LyriXeeker-1-enabler.job, In Quarantäne, [b406945af8833006490e173c0bf99967], 

PUP.Optional.LyriXeeker.A, C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job, In Quarantäne, [d2e8bf2f1566ec4ae770d57e699bd729], 

PUP.Optional.LyriXeeker.A, C:\Windows\Tasks\LyriXeeker-1-updater.job, In Quarantäne, [0cae519d4a310333e6713221c93b8f71], 

PUP.Optional.FilesFrog.A, C:\Users\Mucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker\Check for Updates.lnk, In Quarantäne, [b604ed01dd9ec472c1e9b51ee0229c64], 

PUP.Optional.FilesFrog.A, C:\Users\Mucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker\Uninstall.lnk, In Quarantäne, [b604ed01dd9ec472c1e9b51ee0229c64], 

PUP.Optional.LyricsSay.A, C:\Program Files\LyricsSay-1\41552.xpi, In Quarantäne, [724865892a51171f5268864daf533ec2], 

PUP.Optional.LyricsSay.A, C:\Program Files\LyricsSay-1\background.html, In Quarantäne, [724865892a51171f5268864daf533ec2], 

PUP.Optional.LyricsSay.A, C:\Program Files\LyricsSay-1\Installer.log, In Quarantäne, [724865892a51171f5268864daf533ec2], 

PUP.Optional.LyricsSay.A, C:\Program Files\LyricsSay-1\LyricsSay-1.ico, In Quarantäne, [724865892a51171f5268864daf533ec2], 

PUP.Optional.LyricsSay.A, C:\Program Files\LyricsSay-1\Uninstall.exe, In Quarantäne, [724865892a51171f5268864daf533ec2], 

PUP.Optional.LyriXeeker.A, C:\Program Files\LyriXeeker-1\41856.xpi, In Quarantäne, [e8d2549af784a49228e8c60e17eba45c], 

PUP.Optional.LyriXeeker.A, C:\Program Files\LyriXeeker-1\background.html, In Quarantäne, [e8d2549af784a49228e8c60e17eba45c], 

PUP.Optional.LyriXeeker.A, C:\Program Files\LyriXeeker-1\Installer.log, In Quarantäne, [e8d2549af784a49228e8c60e17eba45c], 

PUP.Optional.LyriXeeker.A, C:\Program Files\LyriXeeker-1\LyriXeeker-1.ico, In Quarantäne, [e8d2549af784a49228e8c60e17eba45c], 

PUP.Optional.LyriXeeker.A, C:\Program Files\LyriXeeker-1\Uninstall.exe, In Quarantäne, [e8d2549af784a49228e8c60e17eba45c], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome.manifest, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\install.rdf, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\20351907df69514605aea39772d0fcce.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\445e7b69a85d6fac2bca80310c3777fe.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\591b1b8a4a2c0d37b230bff6575426e2.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\60444dc152f23e4cafb9d2615e8490d9.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\baaa6f76e540ec5af9c3840d70c01657.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\background.html, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\bb96b50783be398efa7c0cb618bb8965.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\browser.xul, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\dialog.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\options.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\options.xul, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\search_dialog.xul, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\961d06a957b5d5a16e73954166343819.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\1be980620fc9a0731c0e7089eaf17afe.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\352da808be71cccfd381f45aec52feeb.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\415a8a6cbbf14d1be8b3f22b5b666d7c.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\4d11bd4b657aa8c891739be620596ed3.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\51637b23c6b8d28867020986a935af8a.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\664fb448251a396bea5c884382b497a5.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\78abd6c8bdba5d39a01fc9b7545d8476.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\8e12e291838455b25c018492325cabed.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\9b26e37e8f409ac6782783f4db969306.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\9d051a26310aab6c55e86aecddc3bcfb.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\a781eb12dc3fb0d1153a104590968850.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\bd81eea984b8d0a3dc1892d366a9785c.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\c65022754395f1949916d98e9ecf7388.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\e1e60d24d8d80c89cddc6b311c4dcf6f.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\e685fd3d42f9b15bb9fb093a29744fe1.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\b9d1a631cd2a749f0717015b4679b6ac.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\0736eee7ab3a871ddef2c85f1e26831a.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\0f3fc76f34854f4bed0f54609aaa6f59.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\1167533e0a23f9a58ce8cd935b0f8f38.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\12c26b721ec8772bb7710aaf3e2367c1.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\4a294fe26ee0d4afe040f2786441f6df.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\4b37ce66092f5cf25d124b247673a069.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\601e9ffb5bc8454113bb97b59fbd188a.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\8ba9d640d2b08dfff27835f75ad98c9e.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\8f5de51da3dbfb75f943d3a7967d0179.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\9252f9e04faccf6e09a98c9f661db4ed.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\93108d732b16cfef448e963c35cd5820.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\ad8145c32a9d64193a9ba52d61b125af.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\af8220a558867940cb9e08e28adbe284.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\c3120c1e332c3f8db9ea9130323df492.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\c329c9a54ca8a7613e0ba56a732158b0.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\cdaa9bc33fe901fd64bb549e36291fe2.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\ed5920f270514a4049b5405ec158aaaa.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\f58a02c3f4f1821ce5a60f65e024baba.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\f74dba54c3a86a24962f319d0f8445ca.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\installer.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\defaults\preferences\prefs.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\manifest.xml, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins.json, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\1.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\13.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\14.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\16.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\17.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\177.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\182.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\183.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\207.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\21.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\22.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\220.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\221.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\226.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\246.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\28.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\298.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\4.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\47.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\64.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\7.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\72.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\78.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\9.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\91.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\98.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\userCode\background.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\userCode\extension.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\locale\en-US\translations.dtd, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\button1.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\button2.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\button3.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\button4.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\button5.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\crossrider_statusbar.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\icon128.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\icon16.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\icon24.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\icon48.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\panelarrow-up.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\popup.html, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\skin.css, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\update.css, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome.manifest, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\install.rdf, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\background.html, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\baseObject.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\browser.xul, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\dialog.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\main.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\options.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\options.xul, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\platformVersion.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\search_dialog.xul, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\asyncDB.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\background.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\browserAction.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\contextMenu.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\dbManager.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\dom_bg.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\fileManager.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\firefox.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\firefoxNotifications.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\firefoxOmnibox.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\message.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\pageAction.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\request.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\tabs.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\webRequest.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\windowsMessagingHandler.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\addressBarChangeObserver.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\console.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\consts.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\delegate.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\extensionDataStore.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\folderIOWrapper.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\httpObserver.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\IDBWrapper.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\installer.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\logFile.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\prefs.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\progressListenerObserver.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\registry.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\reloadObserver.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\reports.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\requestObject.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\searchSettings.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\uninstallObserver.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\updateManager.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\utils.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\xhr.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\defaults\preferences\prefs.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\manifest.xml, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins.json, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\13_CrossriderAppUtils.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\14_CrossriderUtils.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\16_FFAppAPIWrapper.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\177_crossriderDashboard.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\17_jQuery.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\182_openUrl.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\246_setup.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\28_initializer.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\298_basic_set_campaign_id.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\47_resources_background.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\183_tabsWrapper.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\1_base.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\207_dbWrapper.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\21_debug.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\220_icm_base_m.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\221_icm_downloads_m.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\226_set_campaign_id_m.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\22_resources.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\4_jquery_1_7_1.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\64_appApiMessage.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\72_appApiValidation.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\78_CrossriderInfo.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\7_hooks.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\91_monetizationLoader.js.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\98_omniCommands.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\9_search_engine_hook.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\userCode\background.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\userCode\extension.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\locale\en-US\translations.dtd, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\button1.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\button2.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\button3.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\button4.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\button5.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\crossrider_statusbar.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\icon128.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\icon16.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\icon24.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\icon48.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\panelarrow-up.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\popup.html, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\skin.css, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\update.css, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 

PUP.Optional.Updater.A, C:\Users\Mucky\AppData\Roaming\DSite\UpdateProc\config.dat, In Quarantäne, [3e7c737b55260234e62e5b9629d940c0], 

PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.crossrider.bic", "14116cdaca06fd7a8e7414641e30849f");), Ersetzt,[6f4b8f5fe09bff37be0fb0840203e11f]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.admin", false);), Ersetzt,[7248a747cbb01d1954907cb87b8acf31]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.aflt", "babsst");), Ersetzt,[9a2034ba0873979f7272f44064a1de22]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");), Ersetzt,[f3c7707e2c4f1b1ba83cc470e91c7d83]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.autoRvrt", "false");), Ersetzt,[e3d7de101b6093a36c784fe5a5605ca4]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.dfltLng", "de");), Ersetzt,[803aee003447b185a440b480cc394cb4]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.excTlbr", false);), Ersetzt,[2d8dc32b8cef5adc568e7db725e0a759]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.ffxUnstlRst", true);), Ersetzt,[d7e3826c88f365d14a9a8fa50bfaa060]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.id", "c0f781d600000000000000215d8f2354");), Ersetzt,[b80243abfa8192a4925246ee74911be5]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.instlDay", "15962");), Ersetzt,[fcbec32be992b4822fb5ea4a5da84bb5]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.instlRef", "sst");), Ersetzt,[8931945a5c1f1f178163da5a31d4e818]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.newTab", false);), Ersetzt,[ae0c806ea7d480b606de2f057392b749]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.prdct", "delta");), Ersetzt,[13a7648acdae1026fce84aea62a3847c]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.prtnrId", "delta");), Ersetzt,[ab0f39b51c5fc76fcc1853e10bfae020]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.rvrt", "false");), Ersetzt,[11a9f0fe126914228b595bd9ec1905fb]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.smplGrp", "none");), Ersetzt,[3e7cb836542781b5677dea4a33d28e72]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.tlbrId", "base");), Ersetzt,[64569955e695c17519cb0f25a85d0ef2]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.tlbrSrchUrl", "");), Ersetzt,[91298668b7c468ce5b8943f115f0a25e]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.vrsn", "1.8.24.6");), Ersetzt,[2a9031bdafcc092d7b699e96fd087b85]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.vrsnTs", "1.8.24.69:38:19");), Ersetzt,[5565d717cab116203ba9d75dd035b64a]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.vrsni", "1.8.24.6");), Ersetzt,[4b6f6b83bcbf2511756fc96b42c3c739]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta_i.babExt", "");), Ersetzt,[b208d61884f7e45221c3ab89ee17c63a]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta_i.babTrack", "affID=119357&tsp=5005");), Ersetzt,[5367c22cdc9f3bfbd90bd65e27de3bc5]

PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta_i.srcExt", "ss");), Ersetzt,[2298b03e710afa3c3ea681b323e28e72]
 

Physische Sektoren: 0

(No malicious items detected)
 
 

(end)

Viel Adware :D eine Nachkontrollte mit ESET bitte!

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset