Florian9 | 21.05.2015 17:36 | mbam.txt Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Suchlauf Datum: 21.05.2015
Suchlauf-Zeit: 16:50:29
Logdatei: mbam.txt
Administrator: Ja
Version: 2.01.6.1022
Malware Datenbank: v2015.05.21.02
Rootkit Datenbank: v2015.05.16.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert
Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Terra6100
Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 382155
Verstrichene Zeit: 44 Min, 48 Sek
Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert
Prozesse: 0
(Keine schädliche Elemente gefunden)
Module: 0
(Keine schädliche Elemente gefunden)
Registrierungsschlüssel: 37
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, In Quarantäne, [fa4c2e686228e155c9d4abe780834db3],
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, In Quarantäne, [fa4c2e686228e155c9d4abe780834db3],
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, In Quarantäne, [fa4c2e686228e155c9d4abe780834db3],
PUP.Optional.WebCake.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899}, In Quarantäne, [5ceae8ae9cee45f11d844a480cf7e020],
PUP.Optional.WebCake.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899}, In Quarantäne, [5ceae8ae9cee45f11d844a480cf7e020],
PUP.Optional.WebCake.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{DF84E609-C3A4-49CB-A160-61767DAF8899}, In Quarantäne, [5ceae8ae9cee45f11d844a480cf7e020],
PUP.Optional.WebCake.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{DF84E609-C3A4-49CB-A160-61767DAF8899}, In Quarantäne, [5ceae8ae9cee45f11d844a480cf7e020],
PUP.Optional.Datamngr.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{f34c9277-6577-4dff-b2d7-7d58092f272f}, In Quarantäne, [58eeaaec1b6fd165c6fbec790bf89a66],
PUP.Optional.Datamngr.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{F34C9277-6577-4DFF-B2D7-7D58092F272F}, In Quarantäne, [58eeaaec1b6fd165c6fbec790bf89a66],
PUP.Optional.Datamngr.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F34C9277-6577-4DFF-B2D7-7D58092F272F}, In Quarantäne, [58eeaaec1b6fd165c6fbec790bf89a66],
PUP.Optional.Snapdo.T, HKU\S-1-5-21-3936485591-1274735110-1162047914-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}, In Quarantäne, [a4a25343b7d3e84e32f1573f897ae21e],
PUP.Optional.SearchProtect.A, HKU\S-1-5-21-3936485591-1274735110-1162047914-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}, In Quarantäne, [fb4b0492fb8fab8bb2bc1c3de71c1ce4],
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{23119123-0854-469D-807A-171568457991}, In Quarantäne, [1d299105ef9bbd790fe5b9da83807f81],
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\TypeLib\{03119103-0854-469D-807A-171568457991}, In Quarantäne, [a3a3bdd91971d3634ca87122e71c04fc],
Adware.WebCake, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899}, In Quarantäne, [dd693462f595b0861b7ed052e31ded13],
Adware.WebCake, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{DF84E609-C3A4-49CB-A160-61767DAF8899}, In Quarantäne, [dd693462f595b0861b7ed052e31ded13],
Adware.WebCake, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{DF84E609-C3A4-49CB-A160-61767DAF8899}, In Quarantäne, [dd693462f595b0861b7ed052e31ded13],
Adware.WebCake, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899}, In Quarantäne, [dd693462f595b0861b7ed052e31ded13],
PUP.Optional.SupraSavings, HKLM\SOFTWARE\suprasavings, In Quarantäne, [b393b9dd28627eb888c736ce9c681de3],
PUP.Optional.SearchResults.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}, In Quarantäne, [c6805442fe8cd264dfefbc1ebe45a55b],
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\Allin1Convert_8h, In Quarantäne, [83c3910574161a1c1b69293013f28d73],
PUP.Optional.Babylon.A, HKLM\SOFTWARE\WOW6432NODE\babylontoolbar, In Quarantäne, [9aac2a6c5d2d50e681e6b18fd0356d93],
PUP.Optional.WindowsProtectManger.A, HKLM\SOFTWARE\WOW6432NODE\supWindowsProtectManger, In Quarantäne, [80c6ccca0b7f65d13607d9300301b44c],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\SweetIM, In Quarantäne, [f254573fd7b3b680fbd4c12cf80b07f9],
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\webssearchesSoftware, In Quarantäne, [cb7b0d895f2b16209bb1b06d2cd86c94],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21111111-1111-1111-1111-110011441179}, In Quarantäne, [380edbbbe5a5de584ed6462d00057e82],
PUP.Optional.SweetIM.A, HKU\S-1-5-18\SOFTWARE\SweetIM, In Quarantäne, [cd79a5f18307e35316b8bf2e09fa768a],
PUP.Optional.InstallBrain.A, HKU\S-1-5-18\SOFTWARE\WNLT, In Quarantäne, [7dc9f79f6624181e04cb063f49bcd828],
PUP.Optional.Mindspark.A, HKU\S-1-5-21-3936485591-1274735110-1162047914-1001\SOFTWARE\Allin1Convert_8h, In Quarantäne, [cd795e382d5d2115780de376bd481ae6],
PUP.Optional.DataMngr.A, HKU\S-1-5-21-3936485591-1274735110-1162047914-1001\SOFTWARE\DataMngr_Toolbar, In Quarantäne, [9ea8e8aee8a262d4ebd2b98505001fe1],
PUP.Optional.SweetIM.A, HKU\S-1-5-21-3936485591-1274735110-1162047914-1001\SOFTWARE\SweetIM, In Quarantäne, [aa9c9006e4a6cd69fdd12ebf32d18b75],
PUP.Optional.Mindspark.A, HKU\S-1-5-21-3936485591-1274735110-1162047914-1001\SOFTWARE\APPDATALOW\SOFTWARE\Allin1Convert_8h, In Quarantäne, [48fe4155731784b2224f6ba6b94bc23e],
PUP.Optional.PriceGong.A, HKU\S-1-5-21-3936485591-1274735110-1162047914-1001\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, In Quarantäne, [bc8a94027713a2942e8ccf23e320748c],
PUP.Optional.SupraSavings.A, HKU\S-1-5-21-3936485591-1274735110-1162047914-1001\SOFTWARE\APPDATALOW\SOFTWARE\suprasavings, In Quarantäne, [a6a0a7ef14760d298f6fde3d8e76916f],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3936485591-1274735110-1162047914-1001\SOFTWARE\INSTALLCORE\1I1T1Q1S, In Quarantäne, [6adc7c1a44469d9964b91a0fb94b09f7],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3936485591-1274735110-1162047914-1001\SOFTWARE\INSTALLCORE, In Quarantäne, [3e083066a6e439fd6180380634d141bf],
PUP.Optional.FastStart.A, HKU\S-1-5-21-3936485591-1274735110-1162047914-1001\SOFTWARE\MOZILLA\EXTENDS, In Quarantäne, [2a1c23738efcc076701835c73cc704fc],
Registrierungswerte: 13
PUP.Optional.SearchResults.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}|URL, hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=394&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=1269106317534247&q={searchTerms}, In Quarantäne, [c6805442fe8cd264dfefbc1ebe45a55b]
PUP.Optional.SearchQu.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}|SuggestionsURL_JSON, hxxp://www.searchqu.com/suggest.php?src=ieb&gct=ds&appid=394&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=1269106317534247&qu={searchTerms}&ft=json, In Quarantäne, [58ee93038a00270f91d1f07fa164d52b]
PUP.Optional.SmartBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, In Quarantäne, [7dc9bfd779112511be38a75644bf45bb]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21111111-1111-1111-1111-110011441179}|AppName, Giant Savings-bg.exe, In Quarantäne, [380edbbbe5a5de584ed6462d00057e82]
PUP.Optional.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, In Quarantäne, [ca7c55417713b2842ec89469917202fe]
PUP.Optional.QuickStart.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|quick_start@gmail.com, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\extensions\quick_start@gmail.com, In Quarantäne, [dc6af4a22b5f5ed8b24043da29dbf10f]
PUP.Optional.FastStart.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|faststartff@gmail.com, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\extensions\faststartff@gmail.com, In Quarantäne, [2d193d59bad00d29858acd9054b1d42c]
PUP.Optional.InstallBrain.A, HKU\S-1-5-18\SOFTWARE\WNLT|URL, MYSTART, In Quarantäne, [7dc9f79f6624181e04cb063f49bcd828]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3936485591-1274735110-1162047914-1001\SOFTWARE\INSTALLCORE|tb, 0N2X1N, In Quarantäne, [3e083066a6e439fd6180380634d141bf]
PUP.Optional.Trovi.A, HKU\S-1-5-21-3936485591-1274735110-1162047914-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}|URL, hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325585&octid=EB_ORIGINAL_CTID&ISID=MDA42EBD6-20DB-4F7B-B40C-1714E7BA901C&SearchSource=58&CUI=&UM=6&UP=SPD52C150F-428B-4E84-B593-62CBF40B0DC8&q={searchTerms}&SSPV=, In Quarantäne, [2b1b2a6ce1a9d46281b85f0de52016ea]
PUP.Optional.Conduit.A, HKU\S-1-5-21-3936485591-1274735110-1162047914-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}|SuggestionsURL_JSON, hxxp://suggest.seccint.com/CSuggestJson.ashx?prefix={searchTerms}, In Quarantäne, [4cfae0b6ec9e7db96f6bcd0fe41f11ef]
PUP.Optional.Trovi.A, HKU\S-1-5-21-3936485591-1274735110-1162047914-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}|DisplayName, Trovi search, In Quarantäne, [fa4ceaac2e5cae881c1dc7a5d62f35cb]
PUP.Optional.FastStart.A, HKU\S-1-5-21-3936485591-1274735110-1162047914-1001\SOFTWARE\MOZILLA\EXTENDS|appid, faststartff@gmail.com, In Quarantäne, [2a1c23738efcc076701835c73cc704fc]
Registrierungsdaten: 13
PUP.Optional.WebsSearches, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://istart.webssearches.com/?type=hp&ts=1423657617&from=cvs&uid=ST2000DL003-9VT166_5YD7FG8PXXXX5YD7FG8P, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1423657617&from=cvs&uid=ST2000DL003-9VT166_5YD7FG8PXXXX5YD7FG8P),Ersetzt,[380efe98dbaf68ce809b10097690ea16]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[70d63e584f3bed49daf4ba6a957115eb]
PUP.Optional.WebsSearches, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://istart.webssearches.com/web/?type=ds&ts=1423657617&from=cvs&uid=ST2000DL003-9VT166_5YD7FG8PXXXX5YD7FG8P&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=ds&ts=1423657617&from=cvs&uid=ST2000DL003-9VT166_5YD7FG8PXXXX5YD7FG8P&q={searchTerms}),Ersetzt,[1f279afcf694a591e9329f7a16f0857b]
PUP.Optional.WebsSearches, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://istart.webssearches.com/?type=hp&ts=1423657617&from=cvs&uid=ST2000DL003-9VT166_5YD7FG8PXXXX5YD7FG8P, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1423657617&from=cvs&uid=ST2000DL003-9VT166_5YD7FG8PXXXX5YD7FG8P),Ersetzt,[47ff3462078372c49e7db26722e418e8]
PUP.Optional.WebsSearches, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://istart.webssearches.com/?type=hp&ts=1423657617&from=cvs&uid=ST2000DL003-9VT166_5YD7FG8PXXXX5YD7FG8P, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1423657617&from=cvs&uid=ST2000DL003-9VT166_5YD7FG8PXXXX5YD7FG8P),Ersetzt,[3313ebab6c1e64d2e437c851ad597987]
PUP.Optional.WebsSearches, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://istart.webssearches.com/web/?type=ds&ts=1423657617&from=cvs&uid=ST2000DL003-9VT166_5YD7FG8PXXXX5YD7FG8P&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=ds&ts=1423657617&from=cvs&uid=ST2000DL003-9VT166_5YD7FG8PXXXX5YD7FG8P&q={searchTerms}),Ersetzt,[60e60c8abcceea4cf328160349bd837d]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[3a0cfd99a9e110268648c85c9c6a728e]
PUP.Optional.HelperBar.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK2q0U14moCf-ET1EM4uw_G-ZsY37hJsW_xeQeSXG80oqs1TiDumWyjqYzXtMXrf3zWd9NFJJLsDHmRokPSt0mJ7AKus0mfsANIy3fskKtv7vN4RgpTkXhAOJloBqJicFbsYvC0lf6sXkD3B8TCooaUQYJiD8GtPTOvc7L_PoBhRgm7BL0EWpFST6ass0u4oJ9kMcqfLbhFA,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK2q0U14moCf-ET1EM4uw_G-ZsY37hJsW_xeQeSXG80oqs1TiDumWyjqYzXtMXrf3zWd9NFJJLsDHmRokPSt0mJ7AKus0mfsANIy3fskKtv7vN4RgpTkXhAOJloBqJicFbsYvC0lf6sXkD3B8TCooaUQYJiD8GtPTOvc7L_PoBhRgm7BL0EWpFST6ass0u4oJ9kMcqfLbhFA,&q={searchTerms}),Ersetzt,[60e63d595f2bd1653bf65fbc43c36c94]
PUP.Optional.HelperBar.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK2q0U14moCf-ET1EM4uw_G-ZsY37hJsW_xeQeSXG80oqs1TiDumWyjqYzXtMXrf3zWd9NFJJLsDHmRokPSt0mJ7AKus0mfsANIy3fskKtv7vN4RgpTkXhAOJloBqJicFbsYvC0lf6sXkD3B8TCooaUQYJiD8GtPTOvc7L_PoBhRgm7BL0EWpFST6ass0u4oJ9kMcqfLbhFA,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK2q0U14moCf-ET1EM4uw_G-ZsY37hJsW_xeQeSXG80oqs1TiDumWyjqYzXtMXrf3zWd9NFJJLsDHmRokPSt0mJ7AKus0mfsANIy3fskKtv7vN4RgpTkXhAOJloBqJicFbsYvC0lf6sXkD3B8TCooaUQYJiD8GtPTOvc7L_PoBhRgm7BL0EWpFST6ass0u4oJ9kMcqfLbhFA,&q={searchTerms}),Ersetzt,[d6701c7a53372313cd654fcc9e686f91]
PUP.Optional.WebsSearches, HKU\S-1-5-21-3936485591-1274735110-1162047914-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://istart.webssearches.com/?type=hp&ts=1423657617&from=cvs&uid=ST2000DL003-9VT166_5YD7FG8PXXXX5YD7FG8P, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1423657617&from=cvs&uid=ST2000DL003-9VT166_5YD7FG8PXXXX5YD7FG8P),Ersetzt,[083ec9cdfb8feb4b1a0289906c9acd33]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-3936485591-1274735110-1162047914-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK2q0U14moCf-ET1EM4uw_G-ZsY37hJsW_xeQeSXG80oqs1TiDumWyjqYzXtMXrf3zWd9NFJJLsDHmRokPSt0mJ7AKus0mfsANIy3fskKtv7vN4RgpTkXhAOJloBqJicFbsYvC0lf6sXkD3B8TCooaUQYJiD8GtPTOvc7L_PoBhRgm7BL0EWpFST6asxLmp2lbCcaYIltizQ,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK2q0U14moCf-ET1EM4uw_G-ZsY37hJsW_xeQeSXG80oqs1TiDumWyjqYzXtMXrf3zWd9NFJJLsDHmRokPSt0mJ7AKus0mfsANIy3fskKtv7vN4RgpTkXhAOJloBqJicFbsYvC0lf6sXkD3B8TCooaUQYJiD8GtPTOvc7L_PoBhRgm7BL0EWpFST6asxLmp2lbCcaYIltizQ,&q={searchTerms}),Ersetzt,[cc7abadcbad0c96d01349784b254b947]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-3936485591-1274735110-1162047914-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK2q0U14moCf-ET1EM4uw_G-ZsY37hJsW_xeQeSXG80oqs1TiDumWyjqYzXtMXrf3zWd9NFJJLsDHmRokPSt0mJ7AKus0mfsANIy3fskKtv7vN4RgpTkXhAOJloBqJicFbsYvC0lf6sXkD3B8TCooaUQYJiD8GtPTOvc7L_PoBhRgm7BL0EWpFST6asxLmp2lbCcaYIltizQ,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK2q0U14moCf-ET1EM4uw_G-ZsY37hJsW_xeQeSXG80oqs1TiDumWyjqYzXtMXrf3zWd9NFJJLsDHmRokPSt0mJ7AKus0mfsANIy3fskKtv7vN4RgpTkXhAOJloBqJicFbsYvC0lf6sXkD3B8TCooaUQYJiD8GtPTOvc7L_PoBhRgm7BL0EWpFST6asxLmp2lbCcaYIltizQ,&q={searchTerms}),Ersetzt,[06404a4cbbcf57dfa88da279c24457a9]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-3936485591-1274735110-1162047914-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK2q0U14moCf-ET1EM4uw_G-ZsY37hJsW_xeQeSXG80oqs1TiDumWyjqYzXtMXrf3zWd9NFJJLsDHmRokPSt0mJ7AKus0mfsANIy3fskKtv7vN4RgpTkXhAOJloBqJicFbsYvC0lf6sXkD3B8TCooaUQYJiD8GtPTOvc7L_PoBhRgm7BL0EWpFST6asxLmp2lbCcaYIltizQ,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK2q0U14moCf-ET1EM4uw_G-ZsY37hJsW_xeQeSXG80oqs1TiDumWyjqYzXtMXrf3zWd9NFJJLsDHmRokPSt0mJ7AKus0mfsANIy3fskKtv7vN4RgpTkXhAOJloBqJicFbsYvC0lf6sXkD3B8TCooaUQYJiD8GtPTOvc7L_PoBhRgm7BL0EWpFST6asxLmp2lbCcaYIltizQ,&q={searchTerms}),Ersetzt,[cc7afd990189dd592e04a8738b7b33cd]
Ordner: 93
PUP.Optional.OpenCandy, C:\Users\Terra6100\AppData\Roaming\OpenCandy, In Quarantäne, [45017422d4b658de1693bfe861a20af6],
PUP.Optional.OpenCandy, C:\Users\Terra6100\AppData\Roaming\OpenCandy\017C800A91CC483A9779CBA95A8192D6, In Quarantäne, [45017422d4b658de1693bfe861a20af6],
PUP.Optional.OpenCandy, C:\Users\Terra6100\AppData\Roaming\OpenCandy\3FAA91F3C4C5407C9B61A75D5126F055, In Quarantäne, [45017422d4b658de1693bfe861a20af6],
PUP.Optional.OpenCandy, C:\Users\Terra6100\AppData\Roaming\OpenCandy\77F76D4C4E404E45BE5D986435A2FB62, In Quarantäne, [45017422d4b658de1693bfe861a20af6],
PUP.Optional.OpenCandy, C:\Users\Terra6100\AppData\Roaming\OpenCandy\84C13CE2811349A0AC2EA87764425DE2, In Quarantäne, [45017422d4b658de1693bfe861a20af6],
PUP.Optional.OpenCandy, C:\Users\Terra6100\AppData\Roaming\OpenCandy\9628EC4F332E4324A148CBEFBB171116, In Quarantäne, [45017422d4b658de1693bfe861a20af6],
PUP.Optional.OpenCandy, C:\Users\Terra6100\AppData\Roaming\OpenCandy\9B7E7755C7844E89BCE1287E3B12E065, In Quarantäne, [45017422d4b658de1693bfe861a20af6],
PUP.Optional.OpenCandy, C:\Users\Terra6100\AppData\Roaming\OpenCandy\B8F2585C78C74B95980ACE222285DE35, In Quarantäne, [45017422d4b658de1693bfe861a20af6],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\img, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img\skin, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog\img, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog\img\skin, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\img, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide\css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\img, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice\css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\img, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img\skin, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\de, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\en, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es_419, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\fr, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\it, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ja, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pl, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_BR, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_PT, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ru, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\tr, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\vi, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_CN, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_TW, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_metadata, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.Mindspark.A, C:\Program Files (x86)\Allin1Convert_8h, In Quarantäne, [c77f7b1bf89216202074248bad569769],
PUP.Optional.Mindspark.A, C:\Program Files (x86)\Allin1Convert_8h\bar, In Quarantäne, [c77f7b1bf89216202074248bad569769],
PUP.Optional.Mindspark.A, C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin, In Quarantäne, [c77f7b1bf89216202074248bad569769],
PUP.Optional.Mindspark.A, C:\Users\Terra6100\AppData\LocalLow\Allin1Convert_8h, In Quarantäne, [390df0a6197187afcb7d437224df21df],
PUP.Optional.Mindspark.A, C:\Users\Terra6100\AppData\LocalLow\Allin1Convert_8h\bar, In Quarantäne, [390df0a6197187afcb7d437224df21df],
PUP.Optional.SearchProtect.A, C:\Users\Terra6100\AppData\Local\SearchProtect, In Quarantäne, [00465d394d3d8ea865b3bdfcfb08837d],
PUP.Optional.SearchProtect.A, C:\Users\Terra6100\AppData\Local\SearchProtect\SearchProtect, In Quarantäne, [00465d394d3d8ea865b3bdfcfb08837d],
PUP.Optional.SearchProtect.A, C:\Users\Terra6100\AppData\Local\SearchProtect\SearchProtect\rep, In Quarantäne, [00465d394d3d8ea865b3bdfcfb08837d],
PUP.Optional.SearchProtect.A, C:\Users\Terra6100\AppData\Local\SearchProtect\SearchProtect\STG, In Quarantäne, [00465d394d3d8ea865b3bdfcfb08837d],
PUP.Optional.SearchProtect.A, C:\Users\Terra6100\AppData\Local\SearchProtect\UI, In Quarantäne, [00465d394d3d8ea865b3bdfcfb08837d],
PUP.Optional.SearchProtect.A, C:\Users\Terra6100\AppData\Local\SearchProtect\UI\rep, In Quarantäne, [00465d394d3d8ea865b3bdfcfb08837d],
PUP.Optional.Betcat.A, C:\Program Files (x86)\Betcat, In Quarantäne, [aa9ca2f409810b2bba39fcc827dcae52],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM, In Quarantäne, [1630bbdb5634ac8af58ee9e714ef916f],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Communicator, In Quarantäne, [1630bbdb5634ac8af58ee9e714ef916f],
Dateien: 187
PUP.Optional.WebCake.A, C:\Program Files (x86)\Movdap\WebCakeIEClient.dll, In Quarantäne, [5ceae8ae9cee45f11d844a480cf7e020],
PUP.Optional.WebCake.A, C:\Users\Terra6100\AppData\Roaming\Movdap\WebCakeDesktop.exe, In Quarantäne, [77cfcec8bad072c494f1c25e946c46ba],
PUP.Optional.Conduit.A, C:\Users\Terra6100\AppData\Roaming\OpenCandy\017C800A91CC483A9779CBA95A8192D6\sp-downloader.exe, In Quarantäne, [c18560366d1d57df66a354fdfc052bd5],
PUP.Optional.Babylon.A, C:\Users\Terra6100\AppData\Roaming\OpenCandy\3FAA91F3C4C5407C9B61A75D5126F055\DeltaTB.exe, In Quarantäne, [80c664321b6f092dc7b20436b94803fd],
PUP.Optional.Delta.A, C:\Users\Terra6100\AppData\Roaming\OpenCandy\84C13CE2811349A0AC2EA87764425DE2\DeltaTB.exe, In Quarantäne, [52f4b0e66e1cc57122cfff3c5ba63ec2],
PUP.Optional.Babylon.A, C:\Users\Terra6100\AppData\Roaming\OpenCandy\B8F2585C78C74B95980ACE222285DE35\DeltaTB.exe, In Quarantäne, [390d84121575fc3ab4c559e1e41d956b],
PUP.Optional.Mindspark.A, C:\Program Files (x86)\8hres.dll, In Quarantäne, [be888214d9b13ff72d93d888fb0b49b7],
PUP.Optional.Mindspark.A, C:\Program Files (x86)\8hUninstall Allin1Convert.dll, In Quarantäne, [44028412d4b693a36b552a36c046bd43],
PUP.Optional.WebCake.A, C:\Program Files (x86)\Movdap\WBDesktop.Updater.exe, In Quarantäne, [6cdae2b43159b97d73f1c17d6a9702fe],
Adware.WebCake, C:\Program Files (x86)\Movdap\WebCakeIEClient.dll, In Quarantäne, [dd693462f595b0861b7ed052e31ded13],
PUP.Optional.Downloader, C:\Users\Terra6100\Downloads\BlueScreenView - CHIP-Installer.exe, In Quarantäne, [2521c1d592f84aecafb7016c31cfe818],
PUP.Optional.SweetIM, C:\Windows\Installer\360f8c.msi, In Quarantäne, [b98d7b1b4f3b38fe3e0c4b00d036f60a],
PUP.Optional.WebsSearches.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_istart.webssearches.com_0.localstorage, In Quarantäne, [4cfaccca0783b77f33689e4bd82b8c74],
PUP.Optional.WebsSearches.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_istart.webssearches.com_0.localstorage-journal, In Quarantäne, [e3636a2c0288be78c3d85e8b1be88c74],
PUP.Optional.Delta.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www2.delta-search.com_0.localstorage, In Quarantäne, [2d19554193f7d4627329b74510f3f40c],
PUP.Optional.Delta.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www2.delta-search.com_0.localstorage-journal, In Quarantäne, [a2a44353fb8fc57179231ede0102b34d],
PUP.Optional.MyStartSearch.A, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\searchplugins\MyStart Search.xml, In Quarantäne, [3412573fa6e45ed884c79489f90ba759],
PUP.Optional.WebsSearches.A, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\searchplugins\webssearches.xml, In Quarantäne, [9ea81a7c0a80999d6be48f8ef50fac54],
PUP.Optional.WebSearch.A, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\searchplugins\Web Search.xml, In Quarantäne, [ae988b0be6a464d213b1f926e61ee719],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pelmeidfhdlhlbjimpabfcbnnojbboma_0.localstorage, In Quarantäne, [0e3813835436ac8ae9e089d318edad53],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pelmeidfhdlhlbjimpabfcbnnojbboma_0.localstorage-journal, In Quarantäne, [380ee9adbdcdde584e7b9dbfa5602ed2],
PUP.Optional.SweetPage.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.sweet-page.com_0.localstorage, In Quarantäne, [8eb81284513987afb5e4f47e37ce15eb],
PUP.Optional.SweetPage.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.sweet-page.com_0.localstorage-journal, In Quarantäne, [9babebab6e1c62d4e1b85121f70e43bd],
PUP.Optional.OpenCandy, C:\Users\Terra6100\AppData\Roaming\OpenCandy\77F76D4C4E404E45BE5D986435A2FB62\TuneUpUtilities2013-2200218-p2v1.exe, In Quarantäne, [45017422d4b658de1693bfe861a20af6],
PUP.Optional.OpenCandy, C:\Users\Terra6100\AppData\Roaming\OpenCandy\84C13CE2811349A0AC2EA87764425DE2\5472.ico, In Quarantäne, [45017422d4b658de1693bfe861a20af6],
PUP.Optional.OpenCandy, C:\Users\Terra6100\AppData\Roaming\OpenCandy\84C13CE2811349A0AC2EA87764425DE2\EBB77268-338F-4C6A-8590-AD88FED26F4A, In Quarantäne, [45017422d4b658de1693bfe861a20af6],
PUP.Optional.OpenCandy, C:\Users\Terra6100\AppData\Roaming\OpenCandy\84C13CE2811349A0AC2EA87764425DE2\OCBrowserHelper_1.0.6.124.exe, In Quarantäne, [45017422d4b658de1693bfe861a20af6],
PUP.Optional.OpenCandy, C:\Users\Terra6100\AppData\Roaming\OpenCandy\9628EC4F332E4324A148CBEFBB171116\TuneUpUtilities2013-2200218_de-DE.exe, In Quarantäne, [45017422d4b658de1693bfe861a20af6],
PUP.Optional.OpenCandy, C:\Users\Terra6100\AppData\Roaming\OpenCandy\9B7E7755C7844E89BCE1287E3B12E065\TuneUp2014GER15day-de-DE-p4v1.exe, In Quarantäne, [45017422d4b658de1693bfe861a20af6],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\background.html, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\index.html, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\jump.html, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\manifest.json, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\bookmarks.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\css\style.css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\img\logo.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\img\searchButton.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\classification.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\css\style.css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img\logo.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img\skin\del.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img\skin\main.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img\skin\selected.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\cloud.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\cloudApp.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\cloudWebsite.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\createWebsite.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\css\style.css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\logo.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\buttonBg.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\categoryBg.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\icons.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\searchBg.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\searchButton.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\searchLeft.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\selected.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\tabsBg.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog\img\skin\headerBg.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\extensions.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\css\style.css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\img\logo.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\gameCenter.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\css\style.css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img\logo.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img\star.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img\star_bg.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img\time.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide\guide.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide\css\style.css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\lastVisited.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\css\style.css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\img\logo.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice\notice.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice\css\style.css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\played.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\css\style.css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\search.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\css\style.css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img\google-new-logo.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img\logo.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img\searchicon.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img\searchicon2.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\setup.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\css\style.css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img\logo.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img\skin\dialBoxStyle.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img\skin\icons.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img\oBookmarks.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img\oDownloads.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img\oExtensions.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img\oHistory.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img\oNewtab.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\cloudWallpaper.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\skins.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\css\style.css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\logo.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin\categoryBg.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin\delete.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin\download.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin\icons.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin\loading.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\weather.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\css\style.css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\logo.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin\line.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin\locationIcon.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin\searchButton.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin\weather.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\css\all.css, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\game.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\icon_128.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\icon_16.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\icon_48.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\NEW.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\shopping.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\weather.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\webstore.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\default.jpg, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\iconsprite.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\idialog_s.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\ios5_button.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\left.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\loading.gif, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\loading2.gif, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\qBoxBg.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_bg.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_bg0.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_left.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_left0.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_right.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_right0.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\right.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\selected.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\titleBg.png, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\all.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\background.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\ga.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\jq.mobi.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\jump.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\pop.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\redirect.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\xagainit.js, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\de\messages.json, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\en\messages.json, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es\messages.json, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es_419\messages.json, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\fr\messages.json, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\it\messages.json, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ja\messages.json, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pl\messages.json, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_BR\messages.json, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_PT\messages.json, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ru\messages.json, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\tr\messages.json, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\vi\messages.json, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_CN\messages.json, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_TW\messages.json, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_metadata\computed_hashes.json, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_metadata\verified_contents.json, In Quarantäne, [e561d8be1c6eac8a6eb45a53ed16c33d],
PUP.Optional.Mindspark.A, C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\8hbrmon.exe, In Quarantäne, [c77f7b1bf89216202074248bad569769],
PUP.Optional.Mindspark.A, C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\8hbrstub.dll, In Quarantäne, [c77f7b1bf89216202074248bad569769],
PUP.Optional.Mindspark.A, C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\AppIntegratorStub64.dll, In Quarantäne, [c77f7b1bf89216202074248bad569769],
PUP.Optional.Mindspark.A, C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\T8RES.DLL, In Quarantäne, [c77f7b1bf89216202074248bad569769],
PUP.Optional.SearchProtect.A, C:\Users\Terra6100\AppData\Local\SearchProtect\SearchProtect\rep\Cvc.dat, In Quarantäne, [00465d394d3d8ea865b3bdfcfb08837d],
PUP.Optional.SearchProtect.A, C:\Users\Terra6100\AppData\Local\SearchProtect\SearchProtect\rep\UserRepository.dat, In Quarantäne, [00465d394d3d8ea865b3bdfcfb08837d],
PUP.Optional.SearchProtect.A, C:\Users\Terra6100\AppData\Local\SearchProtect\SearchProtect\rep\UserSettings.dat, In Quarantäne, [00465d394d3d8ea865b3bdfcfb08837d],
PUP.Optional.SearchProtect.A, C:\Users\Terra6100\AppData\Local\SearchProtect\UI\rep\UIRepository.dat, In Quarantäne, [00465d394d3d8ea865b3bdfcfb08837d],
PUP.Optional.Betcat.A, C:\Program Files (x86)\Betcat\WebCakeLayers.crx, In Quarantäne, [aa9ca2f409810b2bba39fcc827dcae52],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Communicator\mgcommon.dll, In Quarantäne, [1630bbdb5634ac8af58ee9e714ef916f],
PUP.Optional.WebsSearches.A, C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences, Gut: (), Schlecht: ( "homepage": "hxxp://istart.webssearches.com/?type=hp&ts=1423657617&from=cvs&uid=ST2000DL003-9VT166_5YD7FG8PXXXX5YD7FG8P",), Ersetzt,[60e6e9ad52384beb792aa5c10ef847b9]
PUP.Optional.QuickStart.A, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\prefs.js, Gut: (), Schlecht: (user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");), Ersetzt,[20267c1a3159f73fb82480e4a4629967]
PUP.Optional.Babylon.A, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.admin", false);), Ersetzt,[0145bcda3555f2448c836bfbac5acb35]
PUP.Optional.Babylon.A, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\prefs.js, Gut: (), Schlecht: (ferences
/* Do not edit this file.
*
* If you m), Ersetzt,[6adc6135f694fa3ccf4076f048bef60a]
PUP.Optional.Babylon.A, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\prefs.js, Gut: (), Schlecht: (rences
/* Do not edit this file.
*
* If you make changes to this file while the ), Ersetzt,[d57154424149c86e29e6f96dd92d7f81]
PUP.Optional.Babylon.A, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\prefs.js, Gut: (), Schlecht: (e.
*
* If you make changes to this file while the), Ersetzt,[8cbacbcb5e2c04322ae56df9a56123dd]
PUP.Optional.Babylon.A, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\prefs.js, Gut: (), Schlecht: (erences
/* Do not edit this file.
*
* If you ma), Ersetzt,[1135eda96228cc6a7996c0a69670b050]
PUP.Optional.Babylon.A, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\prefs.js, Gut: (), Schlecht: (rences
/* Do not edit this file.
*
* If you make changes to this file w), Ersetzt,[073fc9cdd6b4e45276991650a462de22]
PUP.Optional.Babylon.A, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\prefs.js, Gut: (), Schlecht: ( this file.
*
* If you make changes to this file whil), Ersetzt,[51f53d59820820167f90ed796f97de22]
PUP.Optional.Babylon.A, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
*
* If you make ch), Ersetzt,[55f1593d701a8da9cb44382e25e1bd43]
PUP.Optional.Babylon.A, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\prefs.js, Gut: (), Schlecht: (ences
/* Do not edit this file.
*
* If you make changes ), Ersetzt,[b6904b4bbfcbe353fe11a8bef016b64a]
PUP.Optional.Babylon.A, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\prefs.js, Gut: (), Schlecht: (
/* Do not edit this file.
*
* If you make changes to ), Ersetzt,[2e18f89eadddce687c93d78f40c6946c]
PUP.Optional.Babylon.A, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\prefs.js, Gut: (), Schlecht: (es
/* Do not edit this file.
*
* If you make c), Ersetzt,[78ce7c1aa3e767cff8174125ab5b03fd]
PUP.Optional.Babylon.A, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\prefs.js, Gut: (), Schlecht: (erences
/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be ov), Ersetzt,[85c17c1ac2c8aa8c59b6abbb8f77ff01]
PUP.Optional.Babylon.A, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\prefs.js, Gut: (), Schlecht: (he application is running,
* the changes will be over), Ersetzt,[e95d92045d2d290d0e0197cfc6400000]
PUP.Optional.Babylon.A, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\prefs.js, Gut: (), Schlecht: (ences
/* Do not edit this file.
*
* If you make c), Ersetzt,[b49275210b7fa6908887e77fea1c837d]
PUP.Optional.Babylon.A, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\prefs.js, Gut: (), Schlecht: (nces
/* Do not edit this file.
*
* If you make cha), Ersetzt,[7dc9781e098137ff9a7589ddb254a25e]
PUP.Optional.Babylon.A, C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
*
* If you make changes to thi), Ersetzt,[fe4866300a8065d138d7234346c046ba]
Physische Sektoren: 0
(Keine schädliche Elemente gefunden)
(end) AdwCleaner.txt Code:
# AdwCleaner v4.204 - Bericht erstellt 21/05/2015 um 18:07:48
# Aktualisiert 12/05/2015 von Xplode
# Datenbank : 2015-05-21.2 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : Terra6100 - TERRA6100-PC
# Gestarted von : C:\Users\Terra6100\Desktop\adwcleaner_4.205.exe
# Option : Löschen
***** [ Dienste ] *****
[#] Dienst Gelöscht : APNMCP
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\apn
Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\SweetIM
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\ProgramData\Trymedia
Ordner Gelöscht : C:\Program Files (x86)\AskPartnerNetwork
Ordner Gelöscht : C:\Program Files (x86)\Movdap
Ordner Gelöscht : C:\Program Files (x86)\SmartTweak
Ordner Gelöscht : C:\Program Files (x86)\VideoConverter
Ordner Gelöscht : C:\Windows\SysWOW64\config\systemprofile\AppData\Local\SearchProtect
Ordner Gelöscht : C:\Users\Terra6100\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Terra6100\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Terra6100\AppData\Roaming\Movdap
Ordner Gelöscht : C:\Users\Terra6100\AppData\Roaming\Microsoft\Windows\Start Menu\Video Converter
Ordner Gelöscht : C:\Users\Terra6100\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTweak Software
Ordner Gelöscht : C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
Datei Gelöscht : C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fjoijdanhaiflhibkljeklcghcmmfffh_0.localstorage
Datei Gelöscht : C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fjoijdanhaiflhibkljeklcghcmmfffh_0.localstorage-journal
Datei Gelöscht : C:\Windows\AppPatch\Custom\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Users\Terra6100\AppData\LocalLow\SkwConfig.bin
Datei Gelöscht : C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\foxydeal.sqlite
Datei Gelöscht : C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\invalidprefs.js
Datei Gelöscht : C:\Users\Terra6100\AppData\Roaming\Mozilla\Firefox\Profiles\of0zn99r.default-1349379772395\searchplugins\11-suche.xml
Datei Gelöscht : C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_omni-cdn.getwebcake.com_0.localstorage
Datei Gelöscht : C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_omni-cdn.getwebcake.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_plarium.com_0.localstorage
Datei Gelöscht : C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_plarium.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www-cdn.getwebcake.com_0.localstorage
Datei Gelöscht : C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www-cdn.getwebcake.com_0.localstorage-journal
***** [ Geplante Tasks ] *****
Task Gelöscht : BrowserProtect
***** [ Verknüpfungen ] *****
Verknüpfung Desinfiziert : C:\Users\Public\Desktop\Mozilla Firefox.lnk
Verknüpfung Desinfiziert : C:\Users\Terra6100\Desktop\Google Chrome.lnk
Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Weather\Uninstall.lnk
Verknüpfung Desinfiziert : C:\Users\Terra6100\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\Terra6100\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Verknüpfung Desinfiziert : C:\Users\Terra6100\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Verknüpfung Desinfiziert : C:\Users\Terra6100\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Verknüpfung Desinfiziert : C:\Users\Terra6100\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Verknüpfung Desinfiziert : C:\Users\Terra6100\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk
Verknüpfung Desinfiziert : C:\Users\Terra6100\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaacalgebmfelllfiaoknifldpngjh
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKCU\Software\5d55d88ab23bb945
Schlüssel Gelöscht : HKLM\SOFTWARE\5d55d88ab23bb945
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{44CBC005-6243-4502-8A02-3A096A282664}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80703783-E415-4EE3-AB60-D36981C5A6F1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F297534D-7B06-459D-BC19-2DD8EF69297B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220022442279}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0AFD55C8-ADF8-4A33-A6E1-DEDB7A36AEB4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{80703783-E415-4EE3-AB60-D36981C5A6F1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550055445579}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660066446679}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9945959C-AAD8-4312-8B57-2DE11927E770}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{EEA63863-87BC-4DCA-A5B5-EB97E3B04806}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440044444479}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{41564952-412D-5637-00A7-7A786E7484D7}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{53F6A516-3DCC-48F4-835C-6C670CB39CEA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550055445579}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660066446679}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKCU\Software\filescout
Schlüssel Gelöscht : HKCU\Software\ilivid
Schlüssel Gelöscht : HKCU\Software\IM
Schlüssel Gelöscht : HKCU\Software\ImInstaller
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\smarttweak
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\foxydeal
Schlüssel Gelöscht : HKCU\Software\AppDataLow\foxydeal
Schlüssel Gelöscht : HKLM\SOFTWARE\Babylon
Schlüssel Gelöscht : HKLM\SOFTWARE\iLividSRTB
Schlüssel Gelöscht : HKLM\SOFTWARE\Trymedia Systems
Schlüssel Gelöscht : HKLM\SOFTWARE\SPPDCOM
Schlüssel Gelöscht : HKU\.DEFAULT\Software\AskPartnerNetwork
Schlüssel Gelöscht : HKU\.DEFAULT\Software\AskToolbar
Schlüssel Gelöscht : HKU\.DEFAULT\Software\IM
Schlüssel Gelöscht : HKU\.DEFAULT\Software\ImInstaller
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Search Results Toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 228200
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\AskPartnerNetwork
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\254796BF4AC84B64891B61C529A2E23F
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
***** [ Internetbrowser ] *****
-\\ Internet Explorer v11.0.9600.17801
-\\ Mozilla Firefox v38.0.1 (x86 de)
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("avg.install.userHPSettings", "hxxp://search.babylon.com/?affID=110824&tt=4412_2&babsrc=HP_ss&mntrId=6c6c67e400000000000096f65207ef01");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("avg.install.userSPSettings", "Search the web (Babylon)");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("browser.search.searchengine.iconURL", "hxxp://istart.webssearches.com/favicon.ico");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("browser.search.searchengine.url", "hxxp://istart.webssearches.com/web/?type=ds&ts=1423657617&from=cvs&uid=ST2000DL003-9VT166_5YD7FG8PXXXX5YD7FG8P&q={searchTerms}");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":[\"edit-controls\",\"zoom-controls\",\"new-window-button\",\"privatebrowsing-button\",\"save-page-button\",\"print-but[...]
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.AVIRA-V7.AUC_clientCache", "{\"AUC_CACHE\":{\"jimdo.com\":{\"c\":[1],\"ttl\":1393760399},\"avira.com\":{\"c\":[1],\"ttl\":1384622566},\"facebook.com\":{\"c\":[1],\"ttl\":13935082[...]
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.AVIRA-V7.apn.tldcache", "{\"date\":1392484112547,\"domainList\":[\"ac\",\"com.ac\",\"edu.ac\",\"gov.ac\",\"net.ac\",\"mil.ac\",\"org.ac\",\"ad\",\"nom.ad\",\"ae\",\"co.ae\",\"net[...]
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.AVIRA-V7.com.avira.dnt.rules", "\"{\\\"Version\\\":39,\\\"Companies\\\":[{\\\"company\\\":\\\"Google Inc\\\",\\\"rules\\\":[{\\\"name\\\":\\\"Google Analytics\\\",\\\"category\\\[...]
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.AVIRA-V7.domain", "\"avira.search.ask.com\"");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.admin", false);
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.aflt", "babsst");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.dfltLng", "en");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.excTlbr", false);
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.id", "6c6c67e400000000000096f65207ef01");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.instlDay", "15643");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.instlRef", "sst");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.tlbrId", "tb9");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=6c6c67e400000000000096f65207ef01&q=");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.vrsn", "1.8.3.8");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.vrsni", "1.8.3.8");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.8.3.818:41:39");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.BackPageActive", true);
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.DockingPositionDown", false);
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.SmartbarDisabled", false);
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.Visibility", true);
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.backPageCapacity", 3);
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.backPageCounter", 0);
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.backPageDay", 23);
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.backPageLastEvent", "1392992525697");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.backPageMinInterval", 15);
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.barcodeid", "126842");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.countryiso", "de");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.downloadprovider", "yahootrch");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.externalJsFiles", "{\"d\":\"[{\\\"ExcludeDomains\\\":[\\\"snap.do\\\",\\\"snapdo.com\\\"],\\\"hxxpInjection\\\":\\\"hxxp:\\\\\\/\\\\\\/i.linkuryjs.info\\\\\\/kury\\\\\\[...]
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.fromautoupdate", "false");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.installationid", "5f98b429-4ed2-3d41-c500-bbf3b392b4c3");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.installdate", "23/02/2014");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.keepAliveLastevent", "1393165325");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.lastExternalJsUpdate", "1393175537799");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.publisher", "yahootr");
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.quick_start.enable_search1", false);
[of0zn99r.default-1349379772395\prefs.js] - Zeile Gelöscht : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);
-\\ Google Chrome v
[C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK2q0U14moCf-ET1EM4uw_G-ZsY37hJsW_xeQeSXG80oqs1TiDumWyjqYzXtMXrf3zWd9NFJJLsDHmRokPSt0mJ7AKus0mfsANIy3fskKtv7vN4RgpTkXhAOJloBqJicFbsYvC0lf6sXkD3B8TCooaUQYJiD8GtPTOvc7L_PoBhRgm7BL0EWpFST6ass0u4oJ9kMcqfLbhFA,&q={searchTerms}
[C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325585&octid=EB_ORIGINAL_CTID&ISID=MDA42EBD6-20DB-4F7B-B40C-1714E7BA901C&SearchSource=58&CUI=&UM=6&UP=SPD52C150F-428B-4E84-B593-62CBF40B0DC8&q={searchTerms}&SSPV=
[C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.sweet-page.com/web/?type=dspp&ts=1402819454&from=adks&uid=ST2000DL003-9VT166_5YD7FG8PXXXX5YD7FG8P&q={searchTerms}
[C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.sweet-page.com/web/?type=dspp&ts=1402819454&from=adks&uid=ST2000DL003-9VT166_5YD7FG8PXXXX5YD7FG8P&q={searchTerms}
[C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://istart.webssearches.com/web/?type=ds&ts=1423657617&from=cvs&uid=ST2000DL003-9VT166_5YD7FG8PXXXX5YD7FG8P&q={searchTerms}
[C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://istart.webssearches.com/web/?type=ds&ts=1423657617&from=cvs&uid=ST2000DL003-9VT166_5YD7FG8PXXXX5YD7FG8P&q={searchTerms}
[C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : booedmolknjekdopkepjjeckmjkdpfgl
[C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : bopakagnckmlgajfccecajhnimjiiedh
[C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : eooncjejnppfjjklapaamhcdmjbilmde
[C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : flpcjncodpafbgdpnkljologafpionhb
[C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : ndkhncnongaclekkbelchmeafffimifj
[C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : nikpibnbobmbdbheedjfogjlikpgpnhp
[C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : pelmeidfhdlhlbjimpabfcbnnojbboma
[C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Startup_URLs] : hxxp://istart.webssearches.com/?type=hp&ts=1423657617&from=cvs&uid=ST2000DL003-9VT166_5YD7FG8PXXXX5YD7FG8P
[C:\Users\Terra6100\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Default_Search_Provider_Data] : hxxp://istart.webssearches.com/web/?type=ds&ts=1423657617&from=cvs&uid=ST2000DL003-9VT166_5YD7FG8PXXXX5YD7FG8P&q={searchTerms}
*************************
AdwCleaner[R0].txt - [40788 Bytes] - [03/09/2014 18:01:30]
AdwCleaner[R1].txt - [40847 Bytes] - [03/09/2014 18:32:04]
AdwCleaner[R2].txt - [39394 Bytes] - [03/09/2014 18:43:27]
AdwCleaner[R3].txt - [23729 Bytes] - [21/05/2015 18:05:49]
AdwCleaner[S0].txt - [23482 Bytes] - [21/05/2015 18:07:48]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [23542 Bytes] ########## JRT.txt Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.7.6 (05.21.2015:1)
OS: Windows 7 Home Premium x64
Ran by Terra6100 on 21.05.2015 at 18:17:51,57
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Tasks
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011441179}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011441179}
~~~ Files
Successfully deleted: [File] C:\Windows\syswow64\sho1568.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho17A6.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho5823.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho74BA.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho8B44.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoA049.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoA347.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoAC0A.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoB439.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoC393.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoCE7A.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoD30.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoF426.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoFFA5.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoFFDA.tmp
~~~ Folders
Successfully deleted: [Empty Folder] C:\Users\Terra6100\appdata\local\{14DC320A-C53F-40A5-A883-E45630E5A5FA}
Successfully deleted: [Empty Folder] C:\Users\Terra6100\appdata\local\{5AE8B23D-3FF2-40EC-8C19-13FFB7CE20F4}
Successfully deleted: [Empty Folder] C:\Users\Terra6100\appdata\local\{9FBA5942-DA4B-4D5B-8AAF-6BFAA4714FBB}
Successfully deleted: [Empty Folder] C:\Users\Terra6100\appdata\local\{A00CB449-8B7D-40E0-9451-124B244B2AE4}
~~~ FireFox
Successfully deleted: [Folder] C:\Users\Terra6100\AppData\Roaming\mozilla\firefox\profiles\of0zn99r.default-1349379772395\extensions\toolbar@web.de
Successfully deleted the following from C:\Users\Terra6100\AppData\Roaming\mozilla\firefox\profiles\of0zn99r.default-1349379772395\prefs.js
user_pref(browser.search.searchengine.alias, webssearches);
user_pref(browser.search.searchengine.desc, this is my first firefox searchEngine);
user_pref(browser.search.searchengine.name, webssearches);
user_pref(browser.search.searchengine.ptid, cvs);
user_pref(browser.search.searchengine.uid, ST2000DL003-9VT166_5YD7FG8PXXXX5YD7FG8P);
user_pref(browser.search.selectedEngine, webssearches);
user_pref(extensions.delta.admin, false);
user_pref(extensions.delta.aflt, babsst);
user_pref(extensions.delta.appId, {C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3});
user_pref(extensions.delta.autoRvrt, false);
user_pref(extensions.delta.dfltLng, de);
user_pref(extensions.delta.excTlbr, false);
user_pref(extensions.delta.ffxUnstlRst, true);
user_pref(extensions.delta.id, 6c6c67e400000000000096f65207ef01);
user_pref(extensions.delta.instlDay, 15955);
user_pref(extensions.delta.instlRef, sst);
user_pref(extensions.delta.newTab, false);
user_pref(extensions.delta.prdct, delta);
user_pref(extensions.delta.prtnrId, delta);
user_pref(extensions.delta.rvrt, false);
user_pref(extensions.delta.smplGrp, none);
user_pref(extensions.delta.tlbrId, base);
user_pref(extensions.delta.tlbrSrchUrl, );
user_pref(extensions.delta.vrsn, 1.8.24.6);
user_pref(extensions.delta.vrsnTs, 1.8.24.616:37:29);
user_pref(extensions.delta.vrsni, 1.8.24.6);
user_pref(extensions.delta_i.babExt, );
user_pref(extensions.delta_i.babTrack, affID=121565&tsp=4998);
user_pref(extensions.delta_i.srcExt, ss);
Emptied folder: C:\Users\Terra6100\AppData\Roaming\mozilla\firefox\profiles\of0zn99r.default-1349379772395\minidumps [506 files]
~~~ Chrome
Successfully deleted: [Folder] C:\Users\Terra6100\appdata\local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 21.05.2015 at 18:21:26,50
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |