Moin,
Das Ergebnis von Malwarebytes Anti-Malware Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Suchlauf Datum: 04.11.2014
Suchlauf-Zeit: 10:21:19
Logdatei: mbam.txt
Administrator: Ja
Version: 2.00.3.1025
Malware Datenbank: v2014.11.04.02
Rootkit Datenbank: v2014.11.01.02
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert
Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: Bolle
Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 374288
Verstrichene Zeit: 4 Min, 58 Sek
Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert
Prozesse: 0
(Keine schädliche Elemente erkannt)
Module: 0
(Keine schädliche Elemente erkannt)
Registrierungsschlüssel: 37
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\APPID\{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}, In Quarantäne, [c8fac86fe894979f558a18ced131af51],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}, In Quarantäne, [932f41f6f5871a1c3ca45393ac56f709],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{C292AD0A-C11F-479B-B8DB-743E72D283B0}, In Quarantäne, [932f41f6f5871a1c3ca45393ac56f709],
PUP.Optional.BonanzaDeals.A, HKLM\SOFTWARE\CLASSES\CLSID\{F904AC50-215C-42AB-A532-77E9FDBA9B19}, In Quarantäne, [d5ed43f4a0dc65d1e2a5bf295ea408f8],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{FBC322D5-407E-4854-8C0B-555B951FD8E3}, In Quarantäne, [e7db77c02b5162d4bc892bbc2dd53dc3],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{0400EBCA-042C-4000-AA89-9713FBEDB671}, In Quarantäne, [e7db77c02b5162d4bc892bbc2dd53dc3],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{0BD19251-4B4B-4B94-AB16-617106245BB7}, In Quarantäne, [e7db77c02b5162d4bc892bbc2dd53dc3],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{3281114F-BCAB-45E3-80D9-A6CD64D4E636}, In Quarantäne, [e7db77c02b5162d4bc892bbc2dd53dc3],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{44533FCB-F9FB-436A-8B6B-CF637B2D465A}, In Quarantäne, [e7db77c02b5162d4bc892bbc2dd53dc3],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{44B29DDD-CF7A-454A-A275-A322A398D93F}, In Quarantäne, [e7db77c02b5162d4bc892bbc2dd53dc3],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{A4DE94DB-DF03-45A3-8A5D-D1B7464B242D}, In Quarantäne, [e7db77c02b5162d4bc892bbc2dd53dc3],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{AA0F50A8-2618-4AE4-A779-9F7378555A8F}, In Quarantäne, [e7db77c02b5162d4bc892bbc2dd53dc3],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B2DB115C-8278-4947-9A07-57B53D1C4215}, In Quarantäne, [e7db77c02b5162d4bc892bbc2dd53dc3],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B97FC455-DB33-431D-84DB-6F1514110BD5}, In Quarantäne, [e7db77c02b5162d4bc892bbc2dd53dc3],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C67281E0-78F5-4E49-9FAE-4B1B2ADAF17B}, In Quarantäne, [e7db77c02b5162d4bc892bbc2dd53dc3],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E72E9312-0367-4216-BFC7-21485FA8390B}, In Quarantäne, [e7db77c02b5162d4bc892bbc2dd53dc3],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{F6CCB6C9-127E-44AE-8552-B94356F39FFE}, In Quarantäne, [e7db77c02b5162d4bc892bbc2dd53dc3],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FFD25630-2734-4AE9-88E6-21BF6525F3FE}, In Quarantäne, [e7db77c02b5162d4bc892bbc2dd53dc3],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{219046AE-358F-4CF1-B1FD-2B4DE83642A8}, In Quarantäne, [1ea49b9c1f5d7bbb83135c8a837f817f],
PUP.Optional.BonanzaDeals.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{33BAF587-9647-4281-A34F-F4830CDC1B9F}, In Quarantäne, [576b15224c309c9acbaf23c50af8867a],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}, In Quarantäne, [18aa6acd3a425dd9bc5e687f54aef808],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, In Quarantäne, [cef4b4832e4e48eed64544a320e22dd3],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}, In Quarantäne, [3092cc6bc9b3cb6b01968825af53b44c],
PUP.Optional.BonanzaDeals.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{29494049-211F-4F5C-8545-7DA8BF7A6CF8}, In Quarantäne, [c9f99c9b06769c9a6019ac3caf533cc4],
PUP.Optional.BonanzaDeals.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{C4BEF720-313C-420A-ACF6-77DD95D8F553}, In Quarantäne, [863cc0774b311620b8ca9e4a59a933cd],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\Iminent, In Quarantäne, [2c9665d2dca0c5716375095bc24114ec],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent, In Quarantäne, [6c560037c3b9ad89a86bdfb09f658c74],
PUP.Optional.InstallCore.A, HKLM\SOFTWARE\INSTALLCORE\WSE_Astromenda, In Quarantäne, [9c26a2958eeeb97d84cf9696a55ebb45],
PUP.Optional.BonanzaDeals.A, HKLM\SOFTWARE\MOZILLAPLUGINS\@tools.bdupdater.com/BonanzaDealsLive Update;version=3, In Quarantäne, [734f9e994636cf6730026a1862a28977],
PUP.Optional.BonanzaDeals.A, HKLM\SOFTWARE\MOZILLAPLUGINS\@tools.bdupdater.com/BonanzaDealsLive Update;version=9, In Quarantäne, [7f431423bcc0a98d30027e0415ef7a86],
PUP.Optional.SystemSpeedup, HKLM\SOFTWARE\SYSTWEAK\ssd, In Quarantäne, [0db55ed93745f83efbd26ed0a95a4db3],
PUP.Optional.BonanzaDeals.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\bonanzadealslive, In Quarantäne, [9d25ba7d106c46f04be8c6bc5ea6f60a],
PUP.Optional.BonanzaDeals.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\bonanzadealslivem, In Quarantäne, [2a9875c2f08c53e3fa397f03d3314eb2],
PUP.Optional.Astromenda.A, HKU\S-1-5-21-3000836441-3054148485-1156403926-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WSE_Astromenda, In Quarantäne, [bd05ed4a18648da9024cc86c7c87b749],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3000836441-3054148485-1156403926-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, In Quarantäne, [ba08c671007c53e37b6c51124cb726da],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3000836441-3054148485-1156403926-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, In Quarantäne, [a31fef48324a5adcf72f98e2cf353bc5],
PUP.Optional.SystemSpeedup, HKU\S-1-5-21-3000836441-3054148485-1156403926-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\ssd, In Quarantäne, [bf030433f18b0135933981bdc34002fe],
Registrierungswerte: 1
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3000836441-3054148485-1156403926-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, zr2Y1E2Z1G1J1T1M, In Quarantäne, [a31fef48324a5adcf72f98e2cf353bc5]
Registrierungsdaten: 1
PUP.Optional.Astromenda.A, HKU\S-1-5-21-3000836441-3054148485-1156403926-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://astromenda.com/?f=1&a=ast_dnldstr_14_50_ff&cd=2XzuyEtN2Y1L1QzutC0CyC0FyCyD0A0DtDtA0D0EyByBtC0CtN0D0Tzu0SzyyDyEtN1L2XzutBtFtBtCtFtCzztFyBtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StCyD0FtDyBzyyCyBtG0E0FtCyBtGzztAtDtDtGyBtC0CyBtGyDyCtCtAtCtAtAyDzy0B0E0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytDyCyE0FtAyEzztG0C0Dzz0AtGyE0AyB0AtG0ByCyCtAtGyCyD0ByDzy0D0F0ByBtByD0D2Q&cr=786703565&ir=, Gut: (www.google.com), Schlecht: (hxxp://astromenda.com/?f=1&a=ast_dnldstr_14_50_ff&cd=2XzuyEtN2Y1L1QzutC0CyC0FyCyD0A0DtDtA0D0EyByBtC0CtN0D0Tzu0SzyyDyEtN1L2XzutBtFtBtCtFtCzztFyBtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StCyD0FtDyBzyyCyBtG0E0FtCyBtGzztAtDtDtGyBtC0CyBtGyDyCtCtAtCtAtAyDzy0B0E0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytDyCyE0FtAyEzztG0C0Dzz0AtGyE0AyB0AtG0ByCyCtAtGyCyD0ByDzy0D0F0ByBtByD0D2Q&cr=786703565&ir=),Ersetzt,[cbf78cab0973ca6c8ec52f0c45c01ae6]
Ordner: 25
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\Cache, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\Cache\index-dir, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\databases, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\GPUCache, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\IndexedDB, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\IndexedDB\file__0.indexeddb.leveldb, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\Local Storage, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.OpenCandy, C:\Users\Bolle\AppData\Roaming\OpenCandy, In Quarantäne, [9e24e354413bcc6a91d9a4568c762bd5],
PUP.Optional.OpenCandy, C:\Users\Bolle\AppData\Roaming\OpenCandy\2F4A2257A4F24917BF7AD88F11BF5D62, In Quarantäne, [9e24e354413bcc6a91d9a4568c762bd5],
PUP.Optional.SystemSpeedup, C:\Users\Bolle\AppData\Roaming\Systweak\ssd, In Quarantäne, [bd052e090b71053139bbcf4342c1936d],
PUP.Optional.Astromenda.A, C:\Users\Bolle\AppData\Roaming\Astromenda, In Quarantäne, [259df93e0379d4622bf3aa7139ca4cb4],
PUP.Optional.Astromenda.A, C:\Users\Bolle\AppData\Roaming\Astromenda\BRS, In Quarantäne, [259df93e0379d4622bf3aa7139ca4cb4],
PUP.Optional.Astromenda, C:\Program Files\WSE_Astromenda, In Quarantäne, [bb0753e42b51fb3b440dd845cb386a96],
PUP.Optional.Astromenda, C:\Program Files\WSE_Astromenda\bh, In Quarantäne, [bb0753e42b51fb3b440dd845cb386a96],
PUP.Optional.Astromenda, C:\Program Files\WSE_Astromenda\BRS, In Quarantäne, [bb0753e42b51fb3b440dd845cb386a96],
PUP.Optional.Astromenda.A, C:\Users\Bolle\AppData\Roaming\WSE_Astromenda, In Quarantäne, [368cb2854c30b680dd8de63705fe59a7],
PUP.Optional.Astromenda.A, C:\Users\Bolle\AppData\Roaming\WSE_Astromenda\icons_3.0.10.2, In Quarantäne, [368cb2854c30b680dd8de63705fe59a7],
PUP.Optional.Astromenda.A, C:\Users\Bolle\AppData\Roaming\WSE_Astromenda\UpdateProc, In Quarantäne, [368cb2854c30b680dd8de63705fe59a7],
PUP.Optional.FLVMPlayer, C:\Program Files\FLVM Player, In Quarantäne, [15ad50e7126ad26445402df146bd16ea],
PUP.Optional.FLVMPlayer, C:\Program Files\FLVM Player\Adobe AIR, In Quarantäne, [15ad50e7126ad26445402df146bd16ea],
PUP.Optional.FLVMPlayer, C:\Program Files\FLVM Player\Adobe AIR\Versions, In Quarantäne, [15ad50e7126ad26445402df146bd16ea],
PUP.Optional.FLVMPlayer, C:\Program Files\FLVM Player\Adobe AIR\Versions\1.0, In Quarantäne, [15ad50e7126ad26445402df146bd16ea],
PUP.Optional.FLVMPlayer, C:\Program Files\FLVM Player\META-INF, In Quarantäne, [15ad50e7126ad26445402df146bd16ea],
PUP.Optional.FLVMPlayer, C:\Program Files\FLVM Player\META-INF\AIR, In Quarantäne, [15ad50e7126ad26445402df146bd16ea],
Dateien: 113
PUP.Optional.Freemium.A, C:\Users\Bolle\Downloads\Media-Player.exe, In Quarantäne, [7e444fe8c3b91c1a055ff34b6e93718f],
PUP.Optional.RegCleanerPro, C:\Windows\System32\Tasks\ASP, In Quarantäne, [bf0323141e5ec86e60c461d6877c9b65],
PUP.Optional.Adpeak.A, C:\Program Files\005\vulsrsebjh32.exe, In Quarantäne, [c20084b346361d1938d257e454afcf31],
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Local\mysearchdial-speeddial.crx, In Quarantäne, [289ae156a8d4f2449d8580bec2418d73],
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\searchplugins\Mysearchdial.xml, In Quarantäne, [01c12b0c84f85cda23a2085155aed62a],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\QuotaManager-journal, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\cookies, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\cookies-journal, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\QuotaManager, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\website.ico, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\Cache\07d2ceb8057382e2_0, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\Cache\315a39b606bc4359_0, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\Cache\327e2f346370c855_0, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\Cache\37777592bb84fb04_0, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\Cache\47cff2ba15008159_0, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\Cache\49aed1ef9e352033_0, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\Cache\77598e62f86163fb_0, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\Cache\8a2abd4eed83e9d6_0, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\Cache\a682a844981d4e40_0, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\Cache\ee45053f10a52455_0, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\Cache\f69da27520847370_0, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\Cache\index, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\Cache\index-dir\the-real-index, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\databases\Databases.db, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\databases\Databases.db-journal, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\GPUCache\data_0, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\GPUCache\data_1, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\GPUCache\data_2, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\GPUCache\data_3, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\GPUCache\index, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\IndexedDB\file__0.indexeddb.leveldb\000003.log, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\IndexedDB\file__0.indexeddb.leveldb\CURRENT, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\IndexedDB\file__0.indexeddb.leveldb\LOCK, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\IndexedDB\file__0.indexeddb.leveldb\LOG, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.Gameo.A, C:\Users\Bolle\AppData\Local\Gameo\IndexedDB\file__0.indexeddb.leveldb\MANIFEST-000002, In Quarantäne, [596960d73b419b9b961f8015d52fef11],
PUP.Optional.MySpeedDial.A, C:\Users\Bolle\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage, In Quarantäne, [9131b186c9b30b2be55d3363699ba45c],
PUP.Optional.OpenCandy, C:\Users\Bolle\AppData\Roaming\OpenCandy\2F4A2257A4F24917BF7AD88F11BF5D62\SkypeSetupFull-6.18.0.106.exe, In Quarantäne, [9e24e354413bcc6a91d9a4568c762bd5],
PUP.Optional.SystemSpeedup, C:\Users\Bolle\AppData\Roaming\Systweak\ssd\SSDPTstub.exe, In Quarantäne, [bd052e090b71053139bbcf4342c1936d],
PUP.Optional.Astromenda.A, C:\Users\Bolle\AppData\Roaming\Astromenda\BRS\stats, In Quarantäne, [259df93e0379d4622bf3aa7139ca4cb4],
PUP.Optional.Astromenda, C:\Program Files\WSE_Astromenda\FavIcon.ico, In Quarantäne, [bb0753e42b51fb3b440dd845cb386a96],
PUP.Optional.Astromenda, C:\Program Files\WSE_Astromenda\Sqlite3.dll, In Quarantäne, [bb0753e42b51fb3b440dd845cb386a96],
PUP.Optional.Astromenda, C:\Program Files\WSE_Astromenda\uninst.dat, In Quarantäne, [bb0753e42b51fb3b440dd845cb386a96],
PUP.Optional.Astromenda, C:\Program Files\WSE_Astromenda\uninstall.exe, In Quarantäne, [bb0753e42b51fb3b440dd845cb386a96],
PUP.Optional.Astromenda, C:\Program Files\WSE_Astromenda\BRS\brs.exe, In Quarantäne, [bb0753e42b51fb3b440dd845cb386a96],
PUP.Optional.Astromenda, C:\Program Files\WSE_Astromenda\BRS\Sqlite3.dll, In Quarantäne, [bb0753e42b51fb3b440dd845cb386a96],
PUP.Optional.Astromenda.A, C:\Users\Bolle\AppData\Roaming\WSE_Astromenda\icons_3.0.10.2\ctr.ico, In Quarantäne, [368cb2854c30b680dd8de63705fe59a7],
PUP.Optional.Astromenda.A, C:\Users\Bolle\AppData\Roaming\WSE_Astromenda\UpdateProc\bkup.dat, In Quarantäne, [368cb2854c30b680dd8de63705fe59a7],
PUP.Optional.Astromenda.A, C:\Users\Bolle\AppData\Roaming\WSE_Astromenda\UpdateProc\config.dat, In Quarantäne, [368cb2854c30b680dd8de63705fe59a7],
PUP.Optional.Astromenda.A, C:\Users\Bolle\AppData\Roaming\WSE_Astromenda\UpdateProc\info.dat, In Quarantäne, [368cb2854c30b680dd8de63705fe59a7],
PUP.Optional.Astromenda.A, C:\Users\Bolle\AppData\Roaming\WSE_Astromenda\UpdateProc\STTL.DAT, In Quarantäne, [368cb2854c30b680dd8de63705fe59a7],
PUP.Optional.Astromenda.A, C:\Users\Bolle\AppData\Roaming\WSE_Astromenda\UpdateProc\TTL.DAT, In Quarantäne, [368cb2854c30b680dd8de63705fe59a7],
PUP.Optional.Astromenda.A, C:\Users\Bolle\AppData\Roaming\WSE_Astromenda\UpdateProc\UpdateTask.exe, In Quarantäne, [368cb2854c30b680dd8de63705fe59a7],
PUP.Optional.FLVMPlayer, C:\Program Files\FLVM Player\FLVMPlayer.exe, In Quarantäne, [15ad50e7126ad26445402df146bd16ea],
PUP.Optional.FLVMPlayer, C:\Program Files\FLVM Player\FLVMPlayer.swf, In Quarantäne, [15ad50e7126ad26445402df146bd16ea],
PUP.Optional.FLVMPlayer, C:\Program Files\FLVM Player\mimetype, In Quarantäne, [15ad50e7126ad26445402df146bd16ea],
PUP.Optional.FLVMPlayer, C:\Program Files\FLVM Player\Uninstaller.exe, In Quarantäne, [15ad50e7126ad26445402df146bd16ea],
PUP.Optional.FLVMPlayer, C:\Program Files\FLVM Player\Adobe AIR\Versions\1.0\Adobe AIR.dll, In Quarantäne, [15ad50e7126ad26445402df146bd16ea],
PUP.Optional.FLVMPlayer, C:\Program Files\FLVM Player\META-INF\AIR\application.xml, In Quarantäne, [15ad50e7126ad26445402df146bd16ea],
PUP.Optional.FLVMPlayer, C:\Program Files\FLVM Player\META-INF\AIR\signatures.xml, In Quarantäne, [15ad50e7126ad26445402df146bd16ea],
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.aflt", "irmsd1103");), Ersetzt,[d4ee2a0d87f5e5517e0f175872932dd3]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
*
* If you make changes to this file while the a), Ersetzt,[a41e181f6517ee48513cff70798ca858]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (e.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To mak), Ersetzt,[b50db7805c2076c01c71c1aee32228d8]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (nning,
* the changes will be overwritten when the a), Ersetzt,[11b1e057b8c42e08c3caa1ced0357987]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (ences
/* Do not edit this file.
*
* If you), Ersetzt,[bd052215dca068ce08854e2108fd1fe1]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (eferences
/* Do not edit this file.
*
* If yo), Ersetzt,[517121164f2db97dbdd0224d5ca9b34d]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (rences
/* Do not edit this file.
*
* If you), Ersetzt,[30920235255738fe9fee3a35877eda26]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (ferences
/* Do not edit this file.
*
* If you), Ersetzt,[20a248ef522a05316627e38c9c69cc34]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (rences
/* Do not edit this file.
*
* If y), Ersetzt,[3b872017f18ba096f499145b3bca1de3]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (references
/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, y), Ersetzt,[992945f2d7a5e6503558412e3acb2cd4]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: ( *
* To make a manual change to preferences, you can visit), Ersetzt,[3989fa3d13694ee816772b442bda1ee2]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (
/* Do not edit this file.
*
* If you make changes), Ersetzt,[853def48afcd65d1a0ed88e707feae52]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
*
* If you ma), Ersetzt,[dae89a9d1a62c670f59881ee887d5ea2]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (ferences
/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you c), Ersetzt,[6c5610275e1ed6606726323dbe47fa06]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (
* To make a manual change to preferences, you can visit ), Ersetzt,[15adbf785923d85e1b72a4cb9e673dc3]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (
/* Do not edit this file.
*
* If you make changes to t), Ersetzt,[dde5d265bdbf94a2a1ecea85b352857b]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (
/* Do not edit this file.
*
* If you make changes to this ), Ersetzt,[3191181f057776c0d0bdb6b94bba4eb2]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (* Do not edit this file.
*
* If you make changes), Ersetzt,[7b4748efd8a462d4bdd00b64b84d11ef]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (rences
/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visi), Ersetzt,[0cb6191e3a42ed499df0afc0976eda26]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (To make a manual change to preferences, you can visit ), Ersetzt,[4d75092ed1ab2f070c81195636cfe020]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (nces
/* Do not edit this file.
*
* If you make c), Ersetzt,[bc0676c1f08c48ee0e7fff70b550d42c]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (ferences
/* Do not edit this file.
*
* If you ), Ersetzt,[447e71c6fb814cea820bc6a9f11408f8]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (ences
/* Do not edit this file.
*
* If you make ), Ersetzt,[f2d07abd9edea88edbb2ff70877e2dd3]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
*
* If you make changes to t), Ersetzt,[5d65ac8bc7b52b0b2a63204fb15421df]
PUP.Optional.MySearch.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (user_pref("extensions.irmysearch.aflt", "irmsd1103");), Ersetzt,[04be340380fcc76f9de83d320ff63dc3]
PUP.Optional.MySearch.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (ysearchdial.hmpg", true);
user_pref("extensions), Ersetzt,[913186b16a1253e31e6774fb26df7090]
PUP.Optional.MySearch.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (ons.mysearchdial.hmpg", true);
user_pref("extensio), Ersetzt,[8a3824135626d660a0e590dffd0858a8]
PUP.Optional.MySearch.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (.mysearchdial.hmpg", true);
user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=irmsd1103&cd=2XzuyEtN2Y1L1QzutC0CyC0FyCyD0), Ersetzt,[06bc3ef95428fb3bd4b1fb746e9707f9]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.hmpg", true);), Ersetzt,[cff388af5a22e155810d3b340005e61a]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (sions.mysearchdial.hmpg", true);
user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=irmsd1103&cd=2XzuyEtN2Y1L1QzutC0CyC0FyCyD0A0DtDtA0D0EyByBtC0CtN0D0Tzu0SyBtDyEtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L), Ersetzt,[972b3601b1cbd462c0ce48270ff6c13f]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (0D0Tzu0SyBtDyEtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1Czu), Ersetzt,[cdf57fb8d6a6d6607f0f8be4f2138b75]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (s.mysearchdial.hmpg", true);
user_pref("extensions.mysearchdia), Ersetzt,[685ab87fe795c96d4a44b6b9709537c9]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (ial.hmpg", true);
user_pref("extensions.mysearchd), Ersetzt,[01c1eb4c087470c6088699d6b35202fe]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (ons.mysearchdial.hmpg", true);
user_pref("extensions), Ersetzt,[c9f9e94e94e883b3a5e9541b5ca904fc]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (.mysearchdial.hmpg", true);
user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=irmsd1103&cd=2XzuyEtN2Y1L1QzutC0CyC0FyCyD0A0DtDtA0D0EyByBtC0CtN0D0Tzu0SyBtDyEtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCy), Ersetzt,[4082c473dba116207e10521d63a2ca36]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (0Tzu0SyBtDyEtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=289058922&ir=");
user_pref("extensions.mysearchdial.dfltSrch", true);
user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");
user_pref("extensions.mysearchdial), Ersetzt,[883a55e299e3cc6a9cf24b245aabb64a]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (SyBtDyEtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=2), Ersetzt,[566cf641cdaf49eddab4452a44c10bf5]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (chdial.hmpg", true);
user_pref("extensions.mysearchdia), Ersetzt,[279b26111e5eb680d1bda2cd937212ee]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (ysearchdial.hmpg", true);
user_pref("extensions.mysea), Ersetzt,[a02270c70c7080b6d8b6c6a9986d768a]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (mysearchdial.hmpg", true);
user_pref("extensions.mysea), Ersetzt,[3092ec4bef8d2f0779154926887db749]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (ysearchdial.hmpg", true);
user_pref("extensions.mysearchdial.hmp), Ersetzt,[8a38fa3da4d886b0f59906699372b54b]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (l.hmpg", true);
user_pref("extensions.mysearchdial.hmpgUrl",), Ersetzt,[d8ead364e7954ee82e601b54d92c639d]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (hdial.hmpg", true);
user_pref("extensions.mysearchdial.hmp), Ersetzt,[9a285cdb16667bbb5b33541be71e51af]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (rchdial.hmpg", true);
user_pref("extensions.mysearchdi), Ersetzt,[71514dea3844af87820ca6c917ee6a96]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (ysearchdial.hmpg", true);
user_pref("extensions.mysear), Ersetzt,[9929fc3bc7b55adc6d218de24db848b8]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (ysearchdial.hmpg", true);
user_pref("extensions.mys), Ersetzt,[fdc5a790225a74c2573717587a8b9e62]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (s.mysearchdial.hmpg", true);
user_pref("extension), Ersetzt,[0fb353e4374530068e0090dfff06cc34]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (ons.mysearchdial.hmpg", true);
user_pref("extens), Ersetzt,[2b971027a6d6a294aae4ea85d2333dc3]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (ions.mysearchdial.hmpg", true);
user_pref("extensions.mysearchdial.hmpgUrl", "http:/), Ersetzt,[0bb7092e4735fb3ba8e6383746bf8b75]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (r_pref("extensions.mysearchdial.hmpgUrl", "hxxp://st), Ersetzt,[13afa592b0cc73c35935b7b84fb6f50b]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (.mysearchdial.hmpg", true);
user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=irmsd1103&cd=2XzuyEtN2Y1L1QzutC0CyC0FyCyD0A0), Ersetzt,[734f1e190c702511b1dd254af510718f]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=irmsd1103&cd=2XzuyEtN2Y1L1QzutC0CyC0FyCyD0A0DtDtA0D0EyByBtC0CtN0D0Tzu0SyBtDyEtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=289058922&ir=");), Ersetzt,[3a88aa8db1cb49edeea1a1ce20e53cc4]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: ("Mysearchdial");
user_pref("extensions.mysearchdial.dnsErr", true);
user_pref("extensions.mysearchdial_i.newTab", false);
user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=irmsd1103&cd=2XzuyEt), Ersetzt,[1aa8c86fafcd59dd2b642e4160a5ce32]
PUP.Optional.MySearchDial.A, C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js, Gut: (), Schlecht: (Y1L1QzutC0CyC0FyCyD0A0DtDtA0D0EyByBtC0CtN0D0Tzu0SyBtDyEtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=289058922&ir=");
user_pref("extensions.mysearchdial.dfltSrch", true);
user_pref("extensions.mysearchdial.srchPrvdr", "Mysearch), Ersetzt,[30926ec93a420531c2cd630c0203d729]
Physische Sektoren: 0
(Keine schädliche Elemente erkannt)
(end) Das vom AwdCleaner Code:
# AdwCleaner v4.002 - Bericht erstellt am 04/11/2014 um 10:38:44
# DB v2014-11-02.1
# Aktualisiert 27/10/2014 von Xplode
# Betriebssystem : Windows 7 Professional N Service Pack 1 (32 bits)
# Benutzername : Bolle - NEILARMSTRONG
# Gestartet von : C:\Users\Bolle\Desktop\AdwCleaner_4.002.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\Users\Bolle\AppData\Local\Astromenda
Ordner Gelöscht : C:\Users\Bolle\AppData\Roaming\Gameo
Ordner Gelöscht : C:\Users\Bolle\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Bolle\AppData\Local\wse_astromenda
Datei Gelöscht : C:\Users\Bolle\AppData\Roaming\Mozilla\Firefox\Profiles\u743yc74.default\user.js
***** [ Tasks ] *****
Task Gelöscht : ASP
Task Gelöscht : BonanzaDealsUpdate
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [BRS]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4ED063C9-4A0B-4B44-A9DC-23AFF424A0D3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{82E74373-58AB-47EB-B0F0-A1D82BB8EB5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C358B3D0-B911-41E3-A276-E7D43A6BA56D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{13086CD4-88B6-45E3-9182-3BC2664199F7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1FCD7139-C2A3-49AD-8B9E-E82E48AE5DF6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{319FCB76-1568-4EFA-863B-B03A2B16EB5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4796719D-2B92-47BC-920B-77BCDBDBCB6A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64A66B25-A70F-4373-95EF-3A1DB6040B3A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6FC5F7E0-D65A-465C-B8EE-A5F8E008D6DF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{731D436C-464C-4F29-BFB2-DE9C458535AE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7C89C8A6-991C-4626-9E26-B12EB4D89C04}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EEF00686-CAB8-4885-9CCB-78FF483041AA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FDA55C78-736E-4E8A-996C-4A80FC0396FB}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FFE66D00-A56A-4F7F-81D7-4A28C5816D6C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB}
Schlüssel Gelöscht : HKCU\Software\BRS
Schlüssel Gelöscht : HKCU\Software\ClickConnect
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\InstallCore
Schlüssel Gelöscht : HKLM\SOFTWARE\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CSEHTMLVALIDATORLITE110_is1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GoogleUpdate.exe
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17344
-\\ Mozilla Firefox v
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.irmysearch.aflt", "irmsd1103");
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1QzutC0CyC0FyCyD0A0DtDtA0D0EyByBtC0CtN0D0Tzu0SyBtDyEtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R");
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.irmysearch.cr", "289058922");
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.irmysearch.instlRef", "");
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzutC0CyC0FyCyD0A0DtDtA0D0EyByBtC0CtN0D0Tzu0SyBtDyEtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R");
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial.cr", "289058922");
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial.dfltLng", "");
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial.dfltSrch", true);
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial.dnsErr", true);
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial.excTlbr", false);
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial.hmpg", true);
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=irmsd1103&cd=2XzuyEtN2Y1L1QzutC0CyC0FyCyD0A0DtDtA0D0EyByBtC0CtN0D0Tzu0SyBtDyEtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutC[...]
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial.id", "1C6F65AD03DE771C");
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial.instlDay", "16044");
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial.instlRef", "");
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=irmsd1103&cd=2XzuyEtN2Y1L1QzutC0CyC0FyCyD0A0DtDtA0D0EyByBtC0CtN0D0Tzu0SyBtDyEtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1Czu[...]
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial.prdct", "mysearchdial");
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial.tlbrId", "base");
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3&a=irmsd1103&cd=2XzuyEtN2Y1L1QzutC0CyC0FyCyD0A0DtDtA0D0EyByBtC0CtN0D0Tzu0SyBtDyEtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1C[...]
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial.vrsn", "1.8.21.0");
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial.vrsni", "1.8.21.0");
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial_i.hmpg", true);
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial_i.newTab", false);
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial_i.smplGrp", "none");
[u743yc74.default] - Zeile gelöscht : user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.21.01:55:35");
[u743yc74.default] - Zeile gelöscht : user_pref("iminent.BirthDate", "1407843255");
-\\ Google Chrome v
*************************
AdwCleaner[R0].txt - [7326 octets] - [04/11/2014 10:37:01]
AdwCleaner[S0].txt - [7239 octets] - [04/11/2014 10:38:44]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7299 octets] ########## ... und nun noch der JRT.txt Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.5 (10.31.2014:1)
OS: Windows 7 Professional N x86
Ran by Bolle on 04.11.2014 at 10:47:16,56
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\Program Files\005"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 04.11.2014 at 10:48:37,95
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Irgendwo war mir Bonanzadeals aufgefallen - das hatte ich schon mal vor einiger Zeit entfernt. Es könnte vielleicht sein, daß sich das von einer Datensicherung wieder eingeschlichen hat, denn sonst kann ich mir ein Problem kaum vorstellen. Ich besuche keine einschlägigen Seiten...
Mein erster Eindruck ist mittlerweile schon wieder recht gut, aber ich warte lieber mal auf Deine Antwort.
jedenfalls noch mal Danke!
Gruß
Bolle |