mbam Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Suchlaufdatum: 30.07.2015
Suchlaufzeit: 20:39
Protokolldatei: mbam.txt
Administrator: Ja
Version: 2.1.8.1057
Malware-Datenbank: v2015.07.30.04
Rootkit-Datenbank: v2015.07.29.02
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert
Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Asoka2
Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 485335
Abgelaufene Zeit: 17 Min., 14 Sek.
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Warnen
PUM: Aktiviert
Prozesse: 0
(keine bösartigen Elemente erkannt)
Module: 0
(keine bösartigen Elemente erkannt)
Registrierungsschlüssel: 10
PUP.Optional.Multiplug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{A2C98B47-B5F4-94AA-281D-4135416774CF}, In Quarantäne, [6983c91e107aa78f8d16edacce33768a],
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE, In Quarantäne, [b73565826624e650fad2ccd18f75db25],
PUP.Optional.FFPluginHp.A, HKLM\SOFTWARE\WOW6432NODE\FFPluginHp, In Quarantäne, [9d4fd017187294a200e7d33e11f2ea16],
PUP.Optional.WebProtector.A, HKLM\SOFTWARE\WOW6432NODE\LiveUpdateWPP, In Quarantäne, [ce1e8e592e5c7abc62582272e91b3cc4],
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\mystartsearchSoftware, In Quarantäne, [a84414d3f5954cea333a2009788b3dc3],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5C2A9ED0-361D-4678-BBB6-FA668315952D}, In Quarantäne, [6d7fe0070684a195a952990136ce04fc],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{82FE22F6-6581-4ED3-B962-D0114CFC8F04}, In Quarantäne, [64881bcc23672f0743b95a405aaa0bf5],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A178FE10-2662-4286-93AB-0477A425A351}, In Quarantäne, [6389af38830756e07189edad80843ec2],
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE, In Quarantäne, [e00c9e496e1c56e0507cc1dcc93b9e62],
PUP.Optional.MyStartSearch.ShrtCln, HKU\S-1-5-21-1300372446-3054197621-2797401273-1007\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [a5470dda3951e94d828a4651ee16946c],
Registrierungswerte: 9
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, In Quarantäne, [b73565826624e650fad2ccd18f75db25]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5c2a9ed0-361d-4678-bbb6-fa668315952d}|AppName, HDvid Codec V1-buttonutil.exe, In Quarantäne, [6d7fe0070684a195a952990136ce04fc]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{82fe22f6-6581-4ed3-b962-d0114cfc8f04}|AppName, HDvid Codec V1-codedownloader.exe, In Quarantäne, [64881bcc23672f0743b95a405aaa0bf5]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{a178fe10-2662-4286-93ab-0477a425a351}|AppName, HDvid Codec V1-bg.exe, In Quarantäne, [6389af38830756e07189edad80843ec2]
PUP.Optional.DefaultSearchProtected.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|defsearchp@gmail.com, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\defsearchp@gmail.com, In Quarantäne, [6389697e3d4de155bc0e089de91b05fb]
PUP.Optional.DeskCut.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|deskCutv2@gmail.com, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com, In Quarantäne, [dc10df08ec9e6fc7ad16808e28db5fa1]
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, In Quarantäne, [e00c9e496e1c56e0507cc1dcc93b9e62]
PUP.Optional.MyStartSearch.ShrtCln, HKU\S-1-5-21-1300372446-3054197621-2797401273-1007\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DisplayName, mystartsearch, In Quarantäne, [a5470dda3951e94d828a4651ee16946c]
PUP.Optional.MyStartSearch.ShrtCln, HKU\S-1-5-21-1300372446-3054197621-2797401273-1007\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, hxxp://www.mystartsearch.com/web/?type=ds&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F&q={searchTerms}, In Quarantäne, [d616cf18fb8f1323943828e69e658e72]
Registrierungsdaten: 10
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\FIREFOX.EXE\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" hxxp://www.mystartsearch.com/?type=sc&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F, Gut: (firefox.exe), Schlecht: ("C:\Program Files (x86)\Mozilla Firefox\firefox.exe" hxxp://www.mystartsearch.com/?type=sc&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F),Ersetzt,[cd1f0bdc078346f06e2b62d4887ddb25]
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\GOOGLE CHROME\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.mystartsearch.com/?type=sc&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F, Gut: (Chrome.exe), Schlecht: ("C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.mystartsearch.com/?type=sc&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F),Ersetzt,[0ddfebfce4a656e0a3f9c96d9b6a3bc5]
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.mystartsearch.com/?type=hp&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/?type=hp&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F),Ersetzt,[608cfee9f99137ffcc4eeb4b22e37a86]
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\FIREFOX.EXE\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" hxxp://www.mystartsearch.com/?type=sc&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F, Gut: (firefox.exe), Schlecht: ("C:\Program Files (x86)\Mozilla Firefox\firefox.exe" hxxp://www.mystartsearch.com/?type=sc&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F),Ersetzt,[ca229d4a8901191d58411d1906ff3bc5]
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\GOOGLE CHROME\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.mystartsearch.com/?type=sc&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F, Gut: (Chrome.exe), Schlecht: ("C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.mystartsearch.com/?type=sc&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F),Ersetzt,[c3293aad187246f063391b1be71eaf51]
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.mystartsearch.com/web/?type=ds&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/web/?type=ds&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F&q={searchTerms}),Ersetzt,[4ca0e0079ded13236cae1a1cdb2ac838]
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.mystartsearch.com/?type=hp&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/?type=hp&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F),Ersetzt,[ce1eeef94f3bca6c908a310507fed828]
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.mystartsearch.com/?type=hp&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/?type=hp&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F),Ersetzt,[18d4a740a7e301350e0cb680ed1802fe]
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.mystartsearch.com/web/?type=ds&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/web/?type=ds&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F&q={searchTerms}),Ersetzt,[2bc15295a2e8ad8947d36dc98481e818]
PUP.Optional.MyStartSearch.ShrtCln, HKU\S-1-5-21-1300372446-3054197621-2797401273-1007\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.mystartsearch.com/?type=hp&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/?type=hp&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F),Ersetzt,[995326c10486f83e9b803501d2337e82]
Ordner: 50
PUP.Optional.MultiPlug, C:\ProgramData\iedhffpnhkkbhcibpjlhhghhkgmfeioh, In Quarantäne, [717b41a60783e94d63467026d0346a96],
PUP.Optional.CutThePrice.A, C:\Program Files (x86)\CutThePrice, In Quarantäne, [01eb0cdb94f6ca6cc11b2ecacf33c53b],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\mz, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\skin, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\include, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\include\tools, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\js\lib, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\js\module, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\js\pack, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\en, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\en-US, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\es, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\es-419, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\fr, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-BE, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-CA, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-CH, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-LU, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\it, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\it-CH, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\pl, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\pt-BR, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\ru, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\ru-MO, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\tr, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\vi, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\zh-CN, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\zh-TW, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\skin, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\defaults, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\defaults\preferences, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\modules, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DefaultSearchProtected.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\defsearchp@gmail.com, In Quarantäne, [c923f4f3365448ee81da67a5a063758b],
PUP.Optional.DefaultSearchProtected.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\defsearchp@gmail.com\chrome, In Quarantäne, [c923f4f3365448ee81da67a5a063758b],
PUP.Optional.DefaultSearchProtected.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\defsearchp@gmail.com\chrome\content, In Quarantäne, [c923f4f3365448ee81da67a5a063758b],
PUP.Optional.DefaultSearchProtected.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\defsearchp@gmail.com\chrome\skin, In Quarantäne, [c923f4f3365448ee81da67a5a063758b],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\chrome, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\chrome\content, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\chrome\skin, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\modules, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\modules\tools, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
Dateien: 153
PUP.Optional.MultiPlug, C:\ProgramData\{f7ba6149-369d-0842-f7ba-a61493698524}\lego_star_wars_ii_the_original_trilogy_europe_en_fr_de_es_it_da.exe, In Quarantäne, [8f5d2bbc0a80f244fb203d8abc4535cb],
Trojan.Agent.H, C:\Program Files (x86)\Anno 2070 Complete Edition\solidcore32.dll, In Quarantäne, [7c70ecfbd6b49c9a91814ae3c141fc04],
PUP.Optional.Multiplug.A, C:\Program Files (x86)\CuatThEPRice\CuatThEPRice.exe, In Quarantäne, [c9231acdabdf290d3e650396639eb24e],
PUP.Optional.Multiplug.A, C:\Program Files (x86)\CutThePrice\581Fnf8Hg4ZmKB.exe, In Quarantäne, [6983c91e107aa78f8d16edacce33768a],
PUP.Optional.TenkiTechnology, C:\Program Files (x86)\FreeHideIP\FreeHideIP.exe, In Quarantäne, [4d9f47a07b0f2f07c4bc35d653b22fd1],
PUP.Optional.Multiplug.A, C:\Program Files (x86)\Reddit Hover Text\Reddit Hover Text.exe, In Quarantäne, [bb3136b1bbcf65d16f34eeab2ed31de3],
PUP.Optional.PricePeep.A, C:\Users\Asoka2\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.pricepeep00.pricepeep.net_0.localstorage, In Quarantäne, [6f7dd215513972c4bc2d35dc44bfc43c],
PUP.Optional.PricePeep.A, C:\Users\Asoka2\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.pricepeep00.pricepeep.net_0.localstorage-journal, In Quarantäne, [e804f9eedcae8fa7ac3da96834cf9c64],
PUP.Optional.MyStartSearch.ShrtCln, C:\Users\Asoka2\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.mystartsearch.com_0.localstorage, In Quarantäne, [6f7d3cab19714de9a15a200126ddb749],
PUP.Optional.MyStartSearch.ShrtCln, C:\Users\Asoka2\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.mystartsearch.com_0.localstorage-journal, In Quarantäne, [68846681b7d356e0bf3c3fe2ba4949b7],
PUP.Optional.MyStartSearch.ShrtCln, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\searchplugins\mystartsearch.xml, In Quarantäne, [b6362cbb1f6bde58d498f633b94ace32],
PUP.Optional.MultiPlug, C:\ProgramData\iedhffpnhkkbhcibpjlhhghhkgmfeioh\lsdb.js, In Quarantäne, [717b41a60783e94d63467026d0346a96],
PUP.Optional.MultiPlug, C:\ProgramData\iedhffpnhkkbhcibpjlhhghhkgmfeioh\background.html, In Quarantäne, [717b41a60783e94d63467026d0346a96],
PUP.Optional.MultiPlug, C:\ProgramData\iedhffpnhkkbhcibpjlhhghhkgmfeioh\content.js, In Quarantäne, [717b41a60783e94d63467026d0346a96],
PUP.Optional.MultiPlug, C:\ProgramData\iedhffpnhkkbhcibpjlhhghhkgmfeioh\Hu162hhJu.js, In Quarantäne, [717b41a60783e94d63467026d0346a96],
PUP.Optional.MultiPlug, C:\ProgramData\iedhffpnhkkbhcibpjlhhghhkgmfeioh\manifest.json, In Quarantäne, [717b41a60783e94d63467026d0346a96],
PUP.Optional.WebProtectorPlus.A, C:\Windows\System32\Tasks\Web Protector Plus, In Quarantäne, [effd3bac8efcb2849b211a7d9b69768a],
PUP.Optional.WebProtectorPlus.A, C:\Windows\System32\Tasks\Web Protector Plus Server, In Quarantäne, [bb314f98484266d0efcee1b6d62e12ee],
PUP.Optional.BestPriceNinja.A, C:\Users\Asoka2\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.bestpriceninja.com_0.localstorage, In Quarantäne, [30bc895e98f29f973efcfaab22e2f40c],
PUP.Optional.BestPriceNinja.A, C:\Users\Asoka2\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.bestpriceninja.com_0.localstorage-journal, In Quarantäne, [ca22bd2ae0aa0f2756e4faab2adae917],
PUP.Optional.BestPriceNinja.A, C:\Users\Asoka2\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.bestpriceninja.com_0.localstorage, In Quarantäne, [06e697503b4f989e8bafabfa8a7a768a],
PUP.Optional.BestPriceNinja.A, C:\Users\Asoka2\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.bestpriceninja.com_0.localstorage-journal, In Quarantäne, [21cb5a8d9eecf83e41f91491966e857b],
PUP.Optional.CutThePrice.A, C:\Program Files (x86)\CutThePrice\581Fnf8Hg4ZmKB.dat, In Quarantäne, [01eb0cdb94f6ca6cc11b2ecacf33c53b],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome.manifest, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\install.rdf, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\background.html, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\bg.js, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\button.xml, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\config.js, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\content.js, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\framework.js, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\framework.png, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\framework.xul, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\icon128.ico, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\icon128.png, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\icon16.ico, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\icon16.png, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\icon18.ico, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\icon18.png, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\icon24.ico, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\icon24.png, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\icon32.ico, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\icon32.png, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\icon48.ico, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\icon48.png, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\icon64.ico, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\icon64.png, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\jquery-1.9.1.min.js, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\options.xul, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\settings.json, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\mz\background.js, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\content\mz\content.js, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.7Go.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Extensions\7go@7go.com\chrome\skin\framework.css, In Quarantäne, [32baedfaa9e1a591eb4e26d7ce34926e],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome.manifest, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\install.rdf, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\index.html, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\quick_start.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\quick_start.xul, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\include\speed_dial.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\include\tools\about_blank_hook.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\include\tools\misc.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\include\tools\popup_image_helper.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\include\tools\urlrequestor.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\js\lib\doT.min.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\js\lib\jquery-2.1.0.min.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\js\lib\jquery.autocomplete.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\js\module\hotSearch.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\js\module\mostgrid.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\js\module\search.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\js\module\stat.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\js\pack\common.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\js\pack\ga.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\content\js\pack\xagainit.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\en\locale.properties, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\en-US\locale.properties, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\es\locale.properties, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\es-419\locale.properties, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\fr\locale.properties, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-BE\locale.properties, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-CA\locale.properties, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-CH\locale.properties, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-LU\locale.properties, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\it\locale.properties, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\it-CH\locale.properties, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\pl\locale.properties, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\pt-BR\locale.properties, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\ru\locale.properties, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\ru-MO\locale.properties, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\tr\locale.properties, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\vi\locale.properties, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\zh-CN\locale.properties, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\locale\zh-TW\locale.properties, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\skin\default_logo.png, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\skin\googlelogo.png, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\skin\google_trends.png, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\skin\icon.png, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\skin\loading.gif, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\skin\logo.png, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\skin\luck.png, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\skin\newtab.ico, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\skin\simple.css, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\chrome\skin\style.css, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\defaults\preferences\fvd.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\defaults\preferences\preferences.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\modules\addonmanager.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\modules\aes.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\modules\config.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\modules\dialogs.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\modules\last_tab.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\modules\misc.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\modules\properties.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\modules\remoterequest.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\modules\restoreprefs.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DeskCut.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\deskCutv2@gmail.com\modules\settings.js, In Quarantäne, [9458f5f20d7d38fec36a050715eeab55],
PUP.Optional.DefaultSearchProtected.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\defsearchp@gmail.com\chrome.manifest, In Quarantäne, [c923f4f3365448ee81da67a5a063758b],
PUP.Optional.DefaultSearchProtected.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\defsearchp@gmail.com\install.rdf, In Quarantäne, [c923f4f3365448ee81da67a5a063758b],
PUP.Optional.DefaultSearchProtected.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\defsearchp@gmail.com\chrome\content\jquery-2.1.0.min.js, In Quarantäne, [c923f4f3365448ee81da67a5a063758b],
PUP.Optional.DefaultSearchProtected.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\defsearchp@gmail.com\chrome\content\toolbar.xul, In Quarantäne, [c923f4f3365448ee81da67a5a063758b],
PUP.Optional.DefaultSearchProtected.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\defsearchp@gmail.com\chrome\skin\icon.png, In Quarantäne, [c923f4f3365448ee81da67a5a063758b],
PUP.Optional.MyStartSearch, C:\Users\Asoka2\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences, Gut: ("session":{"restore_on_startup":4,"startup_urls":["https://www.malwarebytes.org/restorebrowser/"]}}), Schlecht: ("session":{"restore_on_startup":4,"startup_urls":["hxxp://www.mystartsearch.com/?type=hp&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F"]},"software_reporter":{"prompt_reason":0,"prompt_seed":"20150601","prompt_version":"3.21.0"}}), Ersetzt,[539914d34446f54166af5924f51033cd]
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\install.rdf, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\chrome.manifest, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\chrome\content\main.js, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\chrome\content\main.xul, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\chrome\content\tools.js, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\chrome\content\tr.js, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\chrome\content\wp.html, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\chrome\skin\favicon.ico, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\chrome\skin\icon16x16.png, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\chrome\skin\icon32x32.png, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\chrome\skin\loader.css, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\chrome\skin\main.css, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\chrome\skin\notSafe150x30.png, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\chrome\skin\safe150x30.png, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\chrome\skin\wp.css, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\modules\AddonInfo.js, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\modules\FileCacher.js, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\modules\GUID.js, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\modules\MessageDisplayer.js, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\modules\Observer.js, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\modules\PrefMan.js, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\modules\TimePassed.js, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\modules\Timer.js, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\modules\ToolbarButton.js, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\modules\WebsiteVerifier.js, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\modules\tools\DaysPassed.js, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\modules\tools\FFInfo.js, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\modules\tools\Firstrun.js, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.WebProtector.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\extensions\{42c2ce50-98bd-87f8-6695-f76e817ccf5a}\modules\tools\Os.js, In Quarantäne, [f7f5588f6b1fea4cd3e2a4d26d9818e8],
PUP.Optional.QuickStart.A, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");), Ersetzt,[36b65e89b1d9e4525ae0a2d87491f709]
PUP.Optional.MyStartSearch, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.search.defaultenginename", "mystartsearch");), Ersetzt,[945887606d1d2e086442ee8e778eb749]
PUP.Optional.MyStartSearch, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.search.selectedEngine", "mystartsearch");), Ersetzt,[04e82dba4c3e1323386f621ac63f6997]
PUP.Optional.MyStartSearch.ShrtCln, C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\prefs.js, Gut: (browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Schlecht: (browser.startup.homepage", "hxxp://www.mystartsearch.com), Ersetzt,[5e8e04e3236740f6b45e304e897cd62a]
Physische Sektoren: 0
(keine bösartigen Elemente erkannt)
(end)
AdwCleaner Code:
# AdwCleaner v4.208 - Bericht erstellt 30/07/2015 um 21:19:47
# Aktualisiert 09/07/2015 von Xplode
# Datenbank : 2015-07-26.2 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : Asoka2 - ASOKA-PC
# Gestarted von : C:\Users\Asoka2\Downloads\AdwCleaner_4.208.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\73652b5c0000514d
Ordner Gelöscht : C:\ProgramData\{f7ba6149-369d-0842-f7ba-a61493698524}
Ordner Gelöscht : C:\Program Files (x86)\CuatThEPRice
Ordner Gelöscht : C:\Users\Asoka2\AppData\Roaming\RPEng
Datei Gelöscht : C:\Users\Asoka2\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\icpgjfneehieebagbmdbhnlpiopdcmna
Datei Gelöscht : C:\Users\Asoka2\AppData\Roaming\Mozilla\Firefox\Profiles\qurrx98d.default\foxydeal.sqlite
Datei Gelöscht : C:\Users\Asoka2\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_plarium.com_0.localstorage
Datei Gelöscht : C:\Users\Asoka2\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_plarium.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Asoka2\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_primeshare.tv_0.localstorage
Datei Gelöscht : C:\Users\Asoka2\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_primeshare.tv_0.localstorage-journal
Datei Gelöscht : C:\Users\Asoka2\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
Datei Gelöscht : C:\Users\Asoka2\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Asoka2\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.mystartsearch.com_0.localstorage
Datei Gelöscht : C:\Users\Asoka2\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.mystartsearch.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Asoka2\AppData\Local\Comodo\Dragon\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
Datei Gelöscht : C:\Users\Asoka2\AppData\Local\Comodo\Dragon\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
***** [ Geplante Tasks ] *****
Task Gelöscht : Web Protector Plus
Task Gelöscht : Web Protector Plus Server
***** [ Verknüpfungen ] *****
Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Verknüpfung Desinfiziert : C:\Users\Asoka2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\Asoka2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Verknüpfung Desinfiziert : C:\Users\Asoka2\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk
Verknüpfung Desinfiziert : C:\Users\Asoka2\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\Asoka2\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk
Verknüpfung Desinfiziert : C:\Users\Asoka2\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera.lnk
Verknüpfung Desinfiziert : C:\Users\Asoka2\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Mozilla Firefox.lnk
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKCU\Software\Mozilla\Extends
Schlüssel Gelöscht : HKLM\SOFTWARE\3de9d41b-f281-30b1-91c9-93953e0c40d1
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\LiveUpdateWPP
***** [ Internetbrowser ] *****
-\\ Internet Explorer v11.0.9600.17909
-\\ Mozilla Firefox v37.0.1 (x86 de)
[qurrx98d.default\prefs.js] - Zeile Gelöscht : user_pref("browser.search.searchengine.alias", "mystartsearch");
[qurrx98d.default\prefs.js] - Zeile Gelöscht : user_pref("browser.search.searchengine.iconURL", "hxxp://www.mystartsearch.com/favicon.ico");
[qurrx98d.default\prefs.js] - Zeile Gelöscht : user_pref("browser.search.searchengine.name", "mystartsearch");
[qurrx98d.default\prefs.js] - Zeile Gelöscht : user_pref("browser.search.searchengine.url", "hxxp://www.mystartsearch.com/web/?type=ds&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F&q={sea[...]
[qurrx98d.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.F8uAcXZ1yjq9Z6fa.scode", "(function(){try{if(window.location.href.indexOf(\"qdUEqdCHrdU7qHs7qTnGqjaHrE\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\"[...]
[qurrx98d.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.WSKcC4cu2aGK9VLJ.scode", "(function(){try{if(window.location.href.indexOf(\"qdUEqdCHrdU7qHs7qTnGqjaHrE\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\"[...]
[qurrx98d.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.quick_start.enable_search1", false);
[qurrx98d.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);
-\\ Google Chrome v44.0.2403.107
[C:\Users\Asoka2\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Homepage] : hxxp://www.mystartsearch.com/?type=hp&ts=1437953330&z=0302de11cc550a298d6d970g8z4c7mctbw8c3cfz4c&from=wpc&uid=ST31000524AS_5VPD2L1FXXXX5VPD2L1F
-\\ Chromium v
-\\ Comodo Dragon v43.3.3.185
-\\ Opera v30.0.1835.125
*************************
AdwCleaner[R0].txt - [27884 Bytes] - [28/05/2015 01:09:44]
AdwCleaner[R1].txt - [6496 Bytes] - [30/07/2015 21:17:49]
AdwCleaner[S0].txt - [26282 Bytes] - [28/05/2015 01:11:59]
AdwCleaner[S1].txt - [6167 Bytes] - [30/07/2015 21:19:47]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [6226 Bytes] ##########
JRT Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.4 (07.27.2015:1)
OS: Windows 7 Home Premium x64
Ran by Asoka2 on 30.07.2015 at 21:26:14,53
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Tasks
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311431162}
~~~ Files
Successfully deleted: [File] C:\ProgramData\mntemp
Successfully deleted: [File] C:\Users\Asoka2\Appdata\Local\google\chrome\user data\default\local storage\chrome-extension_gkojfkhlekighikafcpjkiklfbnlmeio_0.localstorage
Successfully deleted: [File] C:\Users\Asoka2\Appdata\Local\google\chrome\user data\default\local storage\chrome-extension_gkojfkhlekighikafcpjkiklfbnlmeio_0.localstorage-journal
Successfully deleted: [File] C:\Users\Asoka2\Appdata\Local\google\chrome\user data\default\local storage\hxxp_static.audienceinsights.net_0.localstorage
Successfully deleted: [File] C:\Users\Asoka2\Appdata\Local\google\chrome\user data\default\local storage\hxxp_static.audienceinsights.net_0.localstorage-journal
Successfully deleted: [File] C:\Users\Asoka2\Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.metrolyrics.com_0.localstorage
Successfully deleted: [File] C:\Users\Asoka2\Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.metrolyrics.com_0.localstorage-journal
Successfully deleted: [File] C:\Windows\SysWOW64\REN2655.tmp
Successfully deleted: [File] C:\Windows\SysWOW64\REN59F3.tmp
~~~ Folders
Successfully deleted: [Folder] C:\Program Files\003
Successfully deleted: [Folder] C:\Users\Asoka2\Appdata\Local\crashrpt
Successfully deleted: [Folder] C:\Windows\SysWOW64\ai_recyclebin
~~~ FireFox
Successfully deleted the following from C:\Users\Asoka2\AppData\Roaming\mozilla\firefox\profiles\qurrx98d.default\prefs.js
user_pref(browser.search.searchengine.desc, this is my first firefox searchEngine);
user_pref(browser.search.searchengine.ptid, wpc);
user_pref(browser.search.searchengine.uid, ST31000524AS_5VPD2L1FXXXX5VPD2L1F);
Emptied folder: C:\Users\Asoka2\AppData\Roaming\mozilla\firefox\profiles\qurrx98d.default\minidumps [10 files]
~~~ Chrome
[C:\Users\Asoka2\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset
[C:\Users\Asoka2\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
[C:\Users\Asoka2\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset
[C:\Users\Asoka2\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 30.07.2015 at 21:35:02,48
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
So funktioniert es:
Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
SecurityCheck und:
dann auf 
und dann auf 
. 
