Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
anyprotect, fortunitas, linkury entdeckt! Weitere Maßnahmen?

anyprotect, fortunitas, linkury entdeckt! Weitere Maßnahmen?


Plagegeister aller Art und deren Bekämpfung: anyprotect, fortunitas, linkury entdeckt! Weitere Maßnahmen?

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

 
Vorheriger Beitrag Vorheriger Beitrag   Nächster Beitrag Nächster Beitrag
Alt 19.04.2014, 11:51   #1
slayerdaniel
 
anyprotect, fortunitas, linkury entdeckt! Weitere Maßnahmen? - Standard

anyprotect, fortunitas, linkury entdeckt! Weitere Maßnahmen?


Hallo, ich habe den Laptop meines Bruders gestern bekommen, da er den Verdacht hatte, dass sich einen Trojaner, Virus o.ä. im System eingenistet hat aufgrund komischer Pop Ups, Ads.
Nunja, ich habe den Rechner vorhin gestartet und bin auf Amazon und da war direkt eine Ad-Toolbar-Overlay mit Gutscheinen etc, wenn ich bei Amazon in die Suchmaske klickte direkt ein Pop-Up zu seinem ominösen Windows Repair Programm.
Avast Free ist aktuell die Antivirensoftware und hat komischerweise nichts erkannt. Dort habe ich lediglich manuell 5 Browserplugins entfernen können.
Gut, habe ich erst mal Malwarebytes Anti-Malware herunter geladen und eben drüber gejagt und irgendwas um die 1.600 Funde erhalten
Alle in die Quarantäne, aber Anyprotect hat sich eben trotzdem schon wieder geöffnet..
was kann ich weiterhin tun?

Log von Malwarebytes Anti Malware kommt gleich

Zu viele Zeichen, muss ich aufteilen!

Zitat:
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 19.04.2014
Scan Time: 12:27:40
Logfile:
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.04.19.05
Rootkit Database: v2014.03.27.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Chameleon: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Marcel

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 239737
Time Elapsed: 13 min, 10 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 8
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService\PluginService.exe, 1564, Delete-on-Reboot, [37fad854fd7e4ee82614f16059a8a55b]
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\ExtensionUpdaterService.exe, 2428, Delete-on-Reboot, [1e1324081e5d81b572f792eeb84ae020]
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Wajam Internet Enhancer\WajamInternetEnhancerService.exe, 3804, Delete-on-Reboot, [40f1a08c205b69cd4891317e61a28878]
PUP.Optional.Iminent.A, C:\Program Files (x86)\Iminent\WinkHandler.exe, 1832, Delete-on-Reboot, [c66b909ca5d669cd72440d72ea1801ff]
PUP.Optional.Iminent.A, C:\Program Files (x86)\Iminent\WinkHandler.exe, 1168, Delete-on-Reboot, [c66b909ca5d669cd72440d72ea1801ff]
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\Smartbar.exe, 2420, Delete-on-Reboot, [ee43dd4fc9b247efb6e9781bcf345da3]
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Wajam Internet Enhancer\WajamInternetEnhancer.exe, 2272, Delete-on-Reboot, [bd7447e51f5c1125a8b9cc92e61c4eb2]
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\Lrcnta.exe, 4128, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c]

Modules: 41
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Wajam Internet Enhancer\FiddlerCore.dll, Delete-on-Reboot, [bd7447e51f5c1125a8b9cc92e61c4eb2],
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Wajam Internet Enhancer\Newtonsoft.Json.dll, Delete-on-Reboot, [bd7447e51f5c1125a8b9cc92e61c4eb2],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\AxInterop.WMPLib.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\Interop.WMPLib.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\lrcnt.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\MACTrackBarLib.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\sgml.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\sgmu.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\sidb.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.ChromeLocalPlugin.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.FireFoxLocalPlugin.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\siem.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\spbe.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\spbl.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\sppsm.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\sppsm.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\spusm.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\srau.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\srbs.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\srbu.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\srns.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\srpdm.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\srsbs.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\srut.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\srut.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\sipb.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\sismlp.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],

Registry Keys: 106
PUP.Optional.IePluginService.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IePluginService, Quarantined, [37fad854fd7e4ee82614f16059a8a55b],
PUP.Optional.IePluginService.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IePlugins, Quarantined, [37fad854fd7e4ee82614f16059a8a55b],
PUP.Optional.Fortunitas.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update Fortunitas, Quarantined, [09286ac23e3d8ea8f494f156c43dd729],
PUP.Optional.Fortunitas.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Util Fortunitas, Quarantined, [ee434ae2f9821b1b2f59d176778a639d],
PUP.Optional.VBates, HKLM\SOFTWARE\CLASSES\CLSID\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}, Quarantined, [dc55b17b8bf00d2948fed048de24f30d],
PUP.Optional.VBates, HKLM\SOFTWARE\CLASSES\CLSID\{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}\INPROCSERVER32, Quarantined, [dc55b17b8bf00d2948fed048de24f30d],
PUP.Optional.VBates, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}, Quarantined, [dc55b17b8bf00d2948fed048de24f30d],
PUP.Optional.VBates, HKLM\SOFTWARE\CLASSES\TYPELIB\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}, Quarantined, [dc55b17b8bf00d2948fed048de24f30d],
PUP.Optional.VBates, HKLM\SOFTWARE\CLASSES\INTERFACE\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}, Quarantined, [dc55b17b8bf00d2948fed048de24f30d],
PUP.Optional.VBates, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}, Quarantined, [dc55b17b8bf00d2948fed048de24f30d],
PUP.Optional.VBates, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}, Quarantined, [dc55b17b8bf00d2948fed048de24f30d],
PUP.Optional.VBates, HKLM\SOFTWARE\CLASSES\Extension.ExtensionHelperObject.1, Quarantined, [dc55b17b8bf00d2948fed048de24f30d],
PUP.Optional.VBates, HKLM\SOFTWARE\CLASSES\Extension.ExtensionHelperObject, Quarantined, [dc55b17b8bf00d2948fed048de24f30d],
PUP.Optional.VBates, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Extension.ExtensionHelperObject, Quarantined, [dc55b17b8bf00d2948fed048de24f30d],
PUP.Optional.VBates, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}, Quarantined, [dc55b17b8bf00d2948fed048de24f30d],
PUP.Optional.VBates, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}, Quarantined, [dc55b17b8bf00d2948fed048de24f30d],
PUP.Optional.VBates, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Extension.ExtensionHelperObject.1, Quarantined, [dc55b17b8bf00d2948fed048de24f30d],
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\CLASSES\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, Quarantined, [ef423af26714270ff2566fdc7f83ba46],
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\CLASSES\IESmartBar.BHO, Quarantined, [ef423af26714270ff2566fdc7f83ba46],
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, Quarantined, [ef423af26714270ff2566fdc7f83ba46],
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, Quarantined, [ef423af26714270ff2566fdc7f83ba46],
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IESmartBar.BHO, Quarantined, [ef423af26714270ff2566fdc7f83ba46],
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, Quarantined, [b57c3def4d2ed85e68712f1cf30fa060],
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, Quarantined, [b57c3def4d2ed85e68712f1cf30fa060],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, Quarantined, [45ec62ca2655d363b96d1635e022ff01],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.BrowserHelperObject.1, Quarantined, [45ec62ca2655d363b96d1635e022ff01],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.BrowserHelperObject, Quarantined, [45ec62ca2655d363b96d1635e022ff01],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IminentWebBooster.BrowserHelperObject, Quarantined, [45ec62ca2655d363b96d1635e022ff01],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, Quarantined, [45ec62ca2655d363b96d1635e022ff01],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, Quarantined, [45ec62ca2655d363b96d1635e022ff01],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IminentWebBooster.BrowserHelperObject.1, Quarantined, [45ec62ca2655d363b96d1635e022ff01],
PUP.Optional.Iminent.A, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, Quarantined, [45ec62ca2655d363b96d1635e022ff01],
PUP.Optional.Iminent.A, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, Quarantined, [45ec62ca2655d363b96d1635e022ff01],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}, Quarantined, [bd743bf16a11d75f847b90bbf210ae52],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, Quarantined, [151ca389126940f66f9170dcfb07da26],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, Quarantined, [bf726cc032496bcb544071da0af87b85],
PUP.Optional.MediaEnhance.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110411411150}, Quarantined, [39f855d794e752e45d34f5802dd5ee12],
PUP.Optional.MediaEnhance.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440444414450}, Quarantined, [39f855d794e752e45d34f5802dd5ee12],
PUP.Optional.MediaEnhance.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550455415550}, Quarantined, [39f855d794e752e45d34f5802dd5ee12],
PUP.Optional.MediaEnhance.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660466416650}, Quarantined, [39f855d794e752e45d34f5802dd5ee12],
PUP.Optional.MediaEnhance.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550455415550}, Quarantined, [39f855d794e752e45d34f5802dd5ee12],
PUP.Optional.MediaEnhance.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660466416650}, Quarantined, [39f855d794e752e45d34f5802dd5ee12],
PUP.Optional.MediaEnhance.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440444414450}, Quarantined, [39f855d794e752e45d34f5802dd5ee12],
PUP.Optional.MediaEnhance.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110411411150}, Quarantined, [39f855d794e752e45d34f5802dd5ee12],
PUP.Optional.MediaEnhance.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220422412250}, Quarantined, [39f855d794e752e45d34f5802dd5ee12],
PUP.Optional.MediaEnhance.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110411411150}\INPROCSERVER32, Quarantined, [39f855d794e752e45d34f5802dd5ee12],
PUP.Optional.MediaEnhance.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\media enhance, Quarantined, [39f855d794e752e45d34f5802dd5ee12],
PUP.Optional.Linkury.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\LPTSystemUpdater, Quarantined, [6ac745e769122412f8be2c4c28dad52b],
PUP.Optional.Awesomehp.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\awesomehp uninstaller, Quarantined, [0d2487a58deee84ecca897e4dc26d729],
PUP.Optional.Fortunitas.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Fortunitas, Quarantined, [ef42e14b710ae94d59f5f38a49b940c0],
PUP.Optional.VbatesHelper.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\V-bates Updater, Quarantined, [1e1324081e5d81b572f792eeb84ae020],
PUP.Optional.VbatesHelper.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}_is1, Quarantined, [1e1324081e5d81b572f792eeb84ae020],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\Iminent, Quarantined, [ee431319cbb01323d5e3c3bc06fcee12],
PUP.Optional.VbatesHelper.A, HKLM\SOFTWARE\V-bates, Quarantined, [76bb75b7ec8f0c2a0d5ec5bbcf3355ab],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent, Quarantined, [939ea587b3c846f070ce1a905da655ab],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.ScriptExtender, Quarantined, [151c0e1e3447a2945e990590da299b65],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.ScriptExtender.1, Quarantined, [ed44a4881c5f5dd9e4134055b251f60a],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\APPID\Iminent.WebBooster.InternetExplorer.DLL, Quarantined, [2e0306265724b87e26d11b82b251817f],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\19979, Quarantined, [68c966c6de9d0036e3f3224fe71bbb45],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, Quarantined, [1f1268c43942f83e379f7ef3e022827e],
PUP.Optional.Awesomehp.A, HKLM\SOFTWARE\WOW6432NODE\awesomehpSoftware, Quarantined, [4ee31b11d8a3c1754c4ef68551b11be5],
PUP.Optional.Fortunitas.A, HKLM\SOFTWARE\WOW6432NODE\Fortunitas, Quarantined, [5cd57daf4833d561d7792756bb47a35d],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, Quarantined, [bb7675b72d4eb581dcdcdaa58b77a65a],
PUP.Optional.MediaEnhance.A, HKLM\SOFTWARE\WOW6432NODE\media enhance, Quarantined, [38f9ab81dba0a690d0c52e47dc26c937],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\Plus-HD9.5vj, Quarantined, [6bc6ab81d7a40f27c9e3ea83a65cf808],
PUP.Optional.VbatesHelper.A, HKLM\SOFTWARE\WOW6432NODE\V-bates, Quarantined, [a38ea48884f7b28457149ce423df2fd1],
PUP.Optional.Wajam.A, HKLM\SOFTWARE\WOW6432NODE\Wajam, Quarantined, [45ec58d48eed90a6ab335b5428dbbe42],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent, Quarantined, [40f1c5677dfe30066dd105a5a65d43bd],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IminentWebBooster.ScriptExtender, Quarantined, [270a4ce00c6f85b115e29cf9a55e5ea2],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IminentWebBooster.ScriptExtender.1, Quarantined, [65ccf93353283ef8ab4cb9dc6a99ef11],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\Iminent.WebBooster.InternetExplorer.DLL, Quarantined, [121f200c4c2fd5619a5d6b32dc2718e8],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\igdhbblpcellaljokkpfhcjlagemhgjl, Quarantined, [121fac804f2c68ce2097671839c918e8],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\19979, Quarantined, [56db250722592a0ccd09640da85a20e0],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\21636, Quarantined, [60d13bf10e6d8ea86a6c7ef346bce41c],
PUP.Optional.Umbrella.A, HKLM\SOFTWARE\WOW6432NODE\UMBRELLA, Quarantined, [b27f0428146782b4751a118519ea748c],
PUP.Optional.Wajam.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Wajam Internet Enhancer Service, Quarantined, [40f1a08c205b69cd4891317e61a28878],
PUP.Optional.Iminent.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WinkHandler, Quarantined, [c66b909ca5d669cd72440d72ea1801ff],
PUP.Optional.MediaEnhance.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\media enhance, Quarantined, [949dfd2f67142f073f54e293837fff01],
PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD9.5vj, Quarantined, [73bef13bb8c376c00b997df0b0523fc1],
PUP.Optional.Fortunitas.A, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Fortunitas, Quarantined, [f93840ec2f4cba7cb09ff18c6d95946c],
PUP.Optional.Iminent.A, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Iminent, Quarantined, [b77a89a302793df91f9a354a837fa957],
PUP.Optional.SmartBar, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SmartbarBackup, Quarantined, [db564fdd0e6db48295f6e0cdc93aec14],
PUP.Optional.SmartBar, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SmartbarLog, Quarantined, [cc65cb61186376c0c5c58e1f56adf20e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [71c08e9ea9d267cf28623c6ddd260af6],
PUP.Optional.MediaEnhance.A, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\media enhance, Quarantined, [e54c9e8e92e9b77fe6ad175e31d1916f],
PUP.Optional.PlusHD.A, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD9.5vj, Quarantined, [6cc580ac1d5e77bffaaa98d5709231cf],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, Quarantined, [b57c0725d3a8a195a8172d51b84adf21],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, Quarantined, [ce639a92daa1ce68be372470897a9769],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\19979, Quarantined, [151ccf5dcdae9d9953840170f70bdc24],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, Quarantined, [1c15f13b502bb482e4f3165b61a113ed],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\freeven, Quarantined, [ad841418accfa49205390a6bf2103ac6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\HDshoplus, Quarantined, [f8392c0046354de93a9c2a451de53dc3],
PUP.Optional.Softonic.A, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, Quarantined, [36fb969677043cfab138f874b250e61a],
PUP.Optional.Wajam.A, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WAJAM, Quarantined, [80b174b887f4fe38133e8b0d49ba827e],
PUP.Optional.Wajam.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Wajam, Quarantined, [bd7447e51f5c1125a8b9cc92e61c4eb2],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511311166}, Quarantined, [bb761d0fec8fec4a2bc6fc6b9c663dc3],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544314466}, Quarantined, [bb761d0fec8fec4a2bc6fc6b9c663dc3],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555315566}, Quarantined, [bb761d0fec8fec4a2bc6fc6b9c663dc3],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566316666}, Quarantined, [bb761d0fec8fec4a2bc6fc6b9c663dc3],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555315566}, Quarantined, [bb761d0fec8fec4a2bc6fc6b9c663dc3],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566316666}, Quarantined, [bb761d0fec8fec4a2bc6fc6b9c663dc3],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544314466}, Quarantined, [bb761d0fec8fec4a2bc6fc6b9c663dc3],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511311166}, Quarantined, [bb761d0fec8fec4a2bc6fc6b9c663dc3],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220522312266}, Quarantined, [bb761d0fec8fec4a2bc6fc6b9c663dc3],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511311166}\INPROCSERVER32, Quarantined, [bb761d0fec8fec4a2bc6fc6b9c663dc3],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Plus-HD9.5vj, Quarantined, [bb761d0fec8fec4a2bc6fc6b9c663dc3],

Registry Values: 10
PUP.Optional.VBates, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}, C:\Program Files\V-bates\Firefox, Quarantined, [dc55b17b8bf00d2948fed048de24f30d]
PUP.Optional.VBates, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}, C:\Program Files\V-bates\Firefox, Quarantined, [dc55b17b8bf00d2948fed048de24f30d]
PUP.Optional.VBates, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}, Quarantined, [ae83d25a6e0da88e400671a743bf718f],
PUP.Optional.VBates, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}, Quarantined, [f83959d3bac14ee80e38d642af5319e7],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|IminentMessenger, C:\Program Files (x86)\Iminent\Iminent.Messengers.exe, Quarantined, [db56f933c0bb0c2a3a058210a3609967]
PUP.Optional.Umbrella.A, HKLM\SOFTWARE\WOW6432NODE\UMBRELLA|MUpdBlock, {
"MASSUPDATE" : {
"CHROME_MBAR" : {
"Checked" : 1,
"RetryIdx" : 0,
"Version" : 1
},
"FIREFOX_MBAR" : {
"Checked" : 1,
"RetryIdx" : 0,
"Version" : 1
},
"IEXPLORE_BHO" : {
"Checked" : 1,
"RetryIdx" : 0,
"Version" : 4
}
}
}
, Quarantined, [b27f0428146782b4751a118519ea748c]
PUP.Optional.Linkury.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\LPTSYSTEMUPDATER|ImagePath, "C:\Program Files (x86)\LPT\srpts.exe", Quarantined, [b180cb61d8a39d99833574049270fd03]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0Z1N1J, Quarantined, [ce639a92daa1ce68be372470897a9769]
PUP.Optional.SmartBar.A, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Browser Infrastructure Helper, C:\Users\Marcel\AppData\Local\Smartbar\Application\Smartbar.exe startup, Quarantined, [ee43dd4fc9b247efb6e9781bcf345da3]
PUP.Optional.Wajam.A, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WAJAM|affiliate_id, 6447, Quarantined, [80b174b887f4fe38133e8b0d49ba827e]

Registry Data: 13
PUP.Optional.Awesomehp.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1394348395&from=tugs&uid=WDCXWD5000LPVT-24G33T1_WD-WX91A437589575895, Good: (iexplore.exe), Bad: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1394348395&from=tugs&uid=WDCXWD5000LPVT-24G33T1_WD-WX91A437589575895),Replaced,[ec45fc301d5e3df924a04dd18a7a40c0]
PUP.Optional.Awesomehp.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.awesomehp.com/web/?type=ds&ts=1394348395&from=tugs&uid=WDCXWD5000LPVT-24G33T1_WD-WX91A437589575895&q={searchTerms}, Good: (hxxp://www.google.com), Bad: (hxxp://www.awesomehp.com/web/?type=ds&ts=1394348395&from=tugs&uid=WDCXWD5000LPVT-24G33T1_WD-WX91A437589575895&q={searchTerms}),Replaced,[cb66f7352457a88e7551da44659f58a8]
PUP.Optional.Awesomehp.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.awesomehp.com/?type=hp&ts=1394348395&from=tugs&uid=WDCXWD5000LPVT-24G33T1_WD-WX91A437589575895, Good: (hxxp://www.google.com), Bad: (hxxp://www.awesomehp.com/?type=hp&ts=1394348395&from=tugs&uid=WDCXWD5000LPVT-24G33T1_WD-WX91A437589575895),Replaced,[5bd60a22daa173c3dbe671ad758f3bc5]
PUP.Optional.Awesomehp.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.awesomehp.com/?type=hp&ts=1394348395&from=tugs&uid=WDCXWD5000LPVT-24G33T1_WD-WX91A437589575895, Good: (hxxp://www.google.com), Bad: (hxxp://www.awesomehp.com/?type=hp&ts=1394348395&from=tugs&uid=WDCXWD5000LPVT-24G33T1_WD-WX91A437589575895),Replaced,[d958121a483306302c9c1c0229db01ff]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Replaced,[d65b72bab4c70e287d07d94f27dd9868]
PUP.Optional.Awesomehp.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1394348395&from=tugs&uid=WDCXWD5000LPVT-24G33T1_WD-WX91A437589575895, Good: (iexplore.exe), Bad: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1394348395&from=tugs&uid=WDCXWD5000LPVT-24G33T1_WD-WX91A437589575895),Replaced,[062b5bd1453661d51ea6859907fda25e]
PUP.Optional.Awesomehp.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.awesomehp.com/web/?type=ds&ts=1394348395&from=tugs&uid=WDCXWD5000LPVT-24G33T1_WD-WX91A437589575895&q={searchTerms}, Good: (hxxp://www.google.com), Bad: (hxxp://www.awesomehp.com/web/?type=ds&ts=1394348395&from=tugs&uid=WDCXWD5000LPVT-24G33T1_WD-WX91A437589575895&q={searchTerms}),Replaced,[01309696d5a64de9d1f586988a7afc04]
PUP.Optional.Awesomehp.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.awesomehp.com/?type=hp&ts=1394348395&from=tugs&uid=WDCXWD5000LPVT-24G33T1_WD-WX91A437589575895, Good: (hxxp://www.google.com), Bad: (hxxp://www.awesomehp.com/?type=hp&ts=1394348395&from=tugs&uid=WDCXWD5000LPVT-24G33T1_WD-WX91A437589575895),Replaced,[6bc63def4f2c0b2b6160f7278381e11f]
PUP.Optional.Awesomehp.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.awesomehp.com/?type=hp&ts=1394348395&from=tugs&uid=WDCXWD5000LPVT-24G33T1_WD-WX91A437589575895, Good: (hxxp://www.google.com), Bad: (hxxp://www.awesomehp.com/?type=hp&ts=1394348395&from=tugs&uid=WDCXWD5000LPVT-24G33T1_WD-WX91A437589575895),Replaced,[3001250722593501cafe74aa0202f010]
PUP.Optional.SnapDo.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna07UB9XHbTQJt5XMXvsOeA4v_VZ3u9V9PIqTZTWPuoFRXLsNPVb4bEQCa0ARUt7auGjGDeM07rLANDMIBy6aXVNgommhffqEIxaJx_14QDhF3sy3u7SceeF5oGFDkilVg,,&q={searchTe rms}, Good: (www.google.com), Bad: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna07UB9XHbTQJt5XMXvsOeA4v_VZ3u9V9PIqTZTWPuoFRXLsNPVb4bEQCa0ARUt7auGjGDeM07rLANDMIBy6aXVNgommhffqEIxaJx_14QDhF3sy3u7SceeF5oGFDkilVg,,&q={searchTe rms}),Replaced,[1b16ce5e04770630cfbc908e887c9f61]
PUP.Optional.Awesomehp.A, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.awesomehp.com/?type=hp&ts=1394348395&from=tugs&uid=WDCXWD5000LPVT-24G33T1_WD-WX91A437589575895, Good: (hxxp://www.google.com), Bad: (hxxp://www.awesomehp.com/?type=hp&ts=1394348395&from=tugs&uid=WDCXWD5000LPVT-24G33T1_WD-WX91A437589575895),Replaced,[b9784ce07a011c1a962caa7402023dc3]
PUP.Optional.Snapdo, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna07UB9XHbTQJt5XMXvsOeA4v_VZ3u9V9PIqTZTWPuoFRXLsNPVb4bEQCa0ARUt7auGjGDeM07rLANDMIBy6aXVNgommhffqEIxaJx_14QDhF3sy3u7SceeF5oGFDkilVg,,&q={searchTe rms}, Good: (hxxp://www.google.com), Bad: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna07UB9XHbTQJt5XMXvsOeA4v_VZ3u9V9PIqTZTWPuoFRXLsNPVb4bEQCa0ARUt7auGjGDeM07rLANDMIBy6aXVNgommhffqEIxaJx_14QDhF3sy3u7SceeF5oGFDkilVg,,&q={searchTe rms}),Replaced,[ce6377b593e83cfaf50129fe36cee51b]
PUP.Optional.Snapdo, HKU\S-1-5-21-1897134699-3643682095-233984033-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna07UB9XHbTQJt5XMXvsOeA4v_VZ3u9V9PIqTZTWPuoFRXLsNPVb4bEQCa0ARUt7auGjGDeM07rLANDMIBy6aXVNgommhffqEIxaJx_14QDhF3sy3u7SceeF5oGFDkilVg,,&q={searchTe rms}, Good: (hxxp://www.google.com), Bad: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna07UB9XHbTQJt5XMXvsOeA4v_VZ3u9V9PIqTZTWPuoFRXLsNPVb4bEQCa0ARUt7auGjGDeM07rLANDMIBy6aXVNgommhffqEIxaJx_14QDhF3sy3u7SceeF5oGFDkilVg,,&q={searchTe rms}),Replaced,[b57c111b7902f83e05f284a3c14316ea]

Folders: 72
PUP.Optional.MediaEnhance.A, C:\Program Files (x86)\media enhance, Quarantined, [39f855d794e752e45d34f5802dd5ee12],
PUP.Optional.Linkury.A, C:\Users\Marcel\AppData\Local\LPT, Quarantined, [b27f72ba700b94a21f96b2c632d0817f],
PUP.Optional.Linkury.A, C:\Users\Marcel\AppData\Local\LPT\Configs, Quarantined, [b27f72ba700b94a21f96b2c632d0817f],
PUP.Optional.Linkury.A, C:\Users\Marcel\AppData\Local\LPT\Resources, Quarantined, [b27f72ba700b94a21f96b2c632d0817f],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT, Quarantined, [6ac745e769122412f8be2c4c28dad52b],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Configs, Quarantined, [6ac745e769122412f8be2c4c28dad52b],
PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Resources, Quarantined, [6ac745e769122412f8be2c4c28dad52b],
PUP.Optional.Awesomehp.A, C:\Users\Marcel\AppData\Roaming\awesomehp, Quarantined, [0d2487a58deee84ecca897e4dc26d729],
PUP.Optional.Awesomehp.A, C:\Users\Marcel\AppData\Roaming\awesomehp\images, Quarantined, [0d2487a58deee84ecca897e4dc26d729],
PUP.Optional.Fortunitas.A, C:\Program Files (x86)\Fortunitas, Quarantined, [ef42e14b710ae94d59f5f38a49b940c0],
PUP.Optional.Fortunitas.A, C:\Program Files (x86)\Fortunitas\bin, Quarantined, [ef42e14b710ae94d59f5f38a49b940c0],
PUP.Optional.Fortunitas.A, C:\Program Files (x86)\Fortunitas\bin\plugins, Quarantined, [ef42e14b710ae94d59f5f38a49b940c0],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates, Delete-on-Reboot, [1e1324081e5d81b572f792eeb84ae020],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox, Quarantined, [1e1324081e5d81b572f792eeb84ae020],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome, Quarantined, [1e1324081e5d81b572f792eeb84ae020],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\content, Quarantined, [1e1324081e5d81b572f792eeb84ae020],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\content\libraries, Quarantined, [1e1324081e5d81b572f792eeb84ae020],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\content\resources, Quarantined, [1e1324081e5d81b572f792eeb84ae020],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\locale, Quarantined, [1e1324081e5d81b572f792eeb84ae020],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\locale\en-US, Quarantined, [1e1324081e5d81b572f792eeb84ae020],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\skin, Quarantined, [1e1324081e5d81b572f792eeb84ae020],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\defaults, Quarantined, [1e1324081e5d81b572f792eeb84ae020],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\defaults\preferences, Quarantined, [1e1324081e5d81b572f792eeb84ae020],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\libraries, Quarantined, [1e1324081e5d81b572f792eeb84ae020],
PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\resources, Quarantined, [1e1324081e5d81b572f792eeb84ae020],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Temp\smartbar, Delete-on-Reboot, [35fcc26a6b1054e267476d13d32fa65a],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Temp\smartbar\RadioTVIcons, Delete-on-Reboot, [35fcc26a6b1054e267476d13d32fa65a],
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam, Delete-on-Reboot, [bd7447e51f5c1125a8b9cc92e61c4eb2],
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Logos, Quarantined, [bd7447e51f5c1125a8b9cc92e61c4eb2],
PUP.Optional.Wajam.A, C:\Program Files (x86)\Wajam\Wajam Internet Enhancer, Delete-on-Reboot, [bd7447e51f5c1125a8b9cc92e61c4eb2],
PUP.Optional.Iminent.A, C:\Users\Marcel\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl, Quarantined, [75bc2903dba041f512584b13ce34e51b],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\CSS, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\ar, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\Configs, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\de, Delete-on-Reboot, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\es, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\fr, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\he, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\helperbar@helperbar.com, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\it, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\nl, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\pt, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\ru, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Application\tr, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Common, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Common\Configs, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Common\icons, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Common\iconsWide, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\Common\ServicesPlugins, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\DistributionFiles, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\DistributionFiles\Configs, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\DistributionFiles\Profiles, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\DistributionFiles\RollBack, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.SmartBar.A, C:\Users\Marcel\AppData\Local\Smartbar\DistributionFiles\RollBack\Profiles, Quarantined, [58d91a123f3c2f07d19e154912f0649c],
PUP.Optional.Iminent.A, C:\Users\Marcel\AppData\Local\Temp\Iminent, Quarantined, [3df4fb313f3cbb7bbbf09ec0a85a3ec2],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam, Quarantined, [75bc45e7adce1c1a7a9ba0c0669c43bd],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Search, Quarantined, [75bc45e7adce1c1a7a9ba0c0669c43bd],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Shopping, Quarantined, [75bc45e7adce1c1a7a9ba0c0669c43bd],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam\Uninstall Wajam, Quarantined, [75bc45e7adce1c1a7a9ba0c0669c43bd],
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService, Delete-on-Reboot, [8ea38ca04338171f1c45c899ed15c43c],
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService\update, Quarantined, [8ea38ca04338171f1c45c899ed15c43c],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD9.5vj, Quarantined, [bb761d0fec8fec4a2bc6fc6b9c663dc3],

 

Themen zu anyprotect, fortunitas, linkury entdeckt! Weitere Maßnahmen?
anyprotect, appdatalow, heuristics.shuriken, linkury, preferences, pup.optional.awesomehp.a, pup.optional.bundleinstaller.a, pup.optional.conduit.a, pup.optional.crossrider.a, pup.optional.domaiq, pup.optional.fortunitas.a, pup.optional.genericext.a, pup.optional.iepluginservice.a, pup.optional.iminent, pup.optional.linkury.a, pup.optional.mediaenhance.a, pup.optional.pcperformer.a, pup.optional.plushd.a, pup.optional.quickshare.a, pup.optional.regcleanpro, pup.optional.shoppinghelper.a, pup.optional.skytech.a, pup.optional.suptab.a, pup.optional.umbrella.a, pup.optional.vbates, pup.optional.vbateshelper.a, pup.optional.wajam, pup.optional.wajam.a, pup.optional.wpmanager


« Trojan.Gen.2 auf dem Rechner | Antivir zeigt viele laufenden Prozesse als Virus an »


Ähnliche Themen: anyprotect, fortunitas, linkury entdeckt! Weitere Maßnahmen?


  1. Windows8: Antivirus: PUA/Linkury.Gen2 und .iona 79 Viren, 2 Trojaner und 3500 Fehler entdeckt.
    Log-Analyse und Auswertung - 05.10.2015 (7)
  2. Spionage-Trojaner Regin: Symantec entdeckt 49 weitere Module
    Nachrichten - 30.08.2015 (0)
  3. Nervige Popups, Videos so wie ständiges selbst Installieren von Anyprotect und Mystartserac
    Plagegeister aller Art und deren Bekämpfung - 17.06.2015 (14)
  4. Pua/Linkury.gen 2
    Plagegeister aller Art und deren Bekämpfung - 14.04.2015 (15)
  5. Win32 Anyprotect gelöscht, aber Kernel32.dll anscheinend noch infiziert
    Log-Analyse und Auswertung - 13.04.2015 (5)
  6. Windows 7 - Avira meldet TR/BProtector.Gen, PUA/Linkury.Gen2 und weitere
    Log-Analyse und Auswertung - 08.03.2015 (16)
  7. Vorbeugende Maßnahmen gegen Sweetpage / Mysearch u.ä.
    Antiviren-, Firewall- und andere Schutzprogramme - 03.06.2014 (13)
  8. Fortunitas entfernen
    Anleitungen, FAQs & Links - 17.12.2013 (2)
  9. Maßnahmen zur PC Instandhaltung
    Alles rund um Windows - 08.11.2012 (3)
  10. Forscher entdeckt weitere Java-Lücke
    Nachrichten - 26.09.2012 (0)
  11. FCC-Gremium empfiehlt Maßnahmen für mehr Netzsicherheit
    Nachrichten - 23.03.2012 (0)
  12. Anleitung: Maßnahmen zur Absicherung des Rechners
    Anleitungen, FAQs & Links - 07.03.2011 (0)
  13. iX: Features und Maßnahmen gegen Browser-Angriffe
    Nachrichten - 26.01.2011 (0)
  14. Nach PC-Absturz Trojaner msa.exe und weitere entdeckt
    Plagegeister aller Art und deren Bekämpfung - 31.08.2009 (6)
  15. Prunnet.exe und weitere Viren entdeckt. HiJackThis Log-Auswertung bitte.
    Log-Analyse und Auswertung - 12.01.2009 (0)
  16. Maßnahmen gegen Trojaner Spy.Banker.Gen
    Log-Analyse und Auswertung - 25.01.2008 (8)
  17. Trojaner ntos und mswin......exe - Maßnahmen ausreichend?
    Plagegeister aller Art und deren Bekämpfung - 15.01.2008 (1)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema anyprotect, fortunitas, linkury entdeckt! Weitere Maßnahmen? - Hallo, ich habe den Laptop meines Bruders gestern bekommen, da er den Verdacht hatte, dass sich einen Trojaner, Virus o.ä. im System eingenistet hat aufgrund komischer Pop Ups, Ads. Nunja, - anyprotect, fortunitas, linkury entdeckt! Weitere Maßnahmen?...
Archiv
Du betrachtest: anyprotect, fortunitas, linkury entdeckt! Weitere Maßnahmen? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19