Hi Leute,

Mein PC ist jetzt schon 5 jahre alt und fährt ziemlich langsam hoch. Besonders wenn der Desktopbildschirm kommt braucht er ewig bis er mal auf meine Klicks reagiert und ich z.B. meinen Browser dann öffenen kann. Wollte deshalb mal Schritt für Schritt meinen PC durchchecken woran es liegen könnte.
bin dabei auf euren Link hier gestoßen.
http://www.trojaner-board.de/71631-p...tml#post425616

Hab mir Malwarebytes runtergeladen und alles entfernt was er gefunden hatt.
Über Schritt 2 steht ich soll mein Vista Indexdienst und Windows Defender abschalten.
wenn ihr auf die entsprechenden Links klickt kommt die Beschreibeung wie das ganze funktioniert. Den Indexdienst hab ich ohne Propleme wie auch auf den Bildern in den Links zu sehen ist an genau der stelle gefunden und abgeschaltet aber ich kann Windows Defender nicht an der Stelle auf dem Bild finden. Etwas weiter unten zwischen "Windows Bilderfassung" und "Windows Dienst für Schriftartencache" taucht bei mir ein Windows Defender auf. In der Beschreibung meines Windows Defender steht "Überprüft den Computer auf unerwünschte Software, plant Überprüfungen und lädt die neuesten Softwaredefinitionen herunter". In der von dem Bild in dem Links steht "Schutz gegen Spyware und möglicherweise unerwünschte Software".
Jetzt meine Frage ist das der Dienst den ich deaktivieren muss?

Sry vielleicht ist die frage auch plöd aber ich will da nix falsch machen nacher stell ich irgendwas um was wichtig ist, bin da ein Leihe wenns so in die Tiefe des Systems geht.

Unter Systemsteuerung > Sicherheit ist Windows Defender noch zu finden und ich kann ihn auch laufen lassen.
So ne Frage am rande noch, hab mal spontan vorhin bissl im Internet geschauht und hab gelesen das Windows Defender vom Markt genommen wird bzw. nicht mehr aktualisiert wird und es dafür jetzt Microsoft Security Essentials geben soll. Wäre es schlau Microsoft Security Essentials zu holen und durch windows defender zu ersetzten?

Ich mach hier mal nen Punkt und warte mal auf antworten

mfg Mexel

@Mexel

Ja, das wäre schlau.Die Installation von MSE würde ich Dir uneingeschränkt empfehlen.
Gibt es hier:
https://www.microsoft.com/de-de/download/details.aspx?id=5201

Defender ist ein Bestandteil der Essentials, von daher sind alle Deine anderen Probleme damit auch vom Tisch.
Solltest Du weitere Virenscanner (Avira, Avast, etc..) installiert haben, deinstallier sie bitte alle vor
der Installation von MSE.
Die sind damit überflüssig geworden und könnten sich im schlimmsten Fall
noch gegenseitig und damit Deinen Rechner ausbremsen.

Gruss

Werner

PS: Das

..vielleicht ist die frage auch plöd aber ..

hast Du extra geschrieben?
Oder ein bisschen zu viel 'Das Leben des Brian' über Ostern geguckt?
Du pöser, pöser Pursche!

@Werner
Hey danke für die schnelle antwort. Ja das mit dem plöd hat wohl echt von "Das Leben des Brian" abgefärbt xD

Kurz noch zu der installation von MSE wenn ich auf deinen Link klicke kann ich 2 exe downloaden "DEDE\amd64\MSEInstall.exe" und "DEDE\x86\MSEInstall.exe" brauch ich beide ? Und muss ich meinene derzeitigen Windows Defender auch entfernen vor der installation.

Wenn ich dann MSE drauf habe, finde ich dann diesen Windows Defender Dienst so wie ich es beschrieben hab oder muss ich dann nach MSE schauhen und den dann deaktivieren sie wie ich es machen wollte?

Hallo @Mexel,

welche der Versionen Du brauchst kannst Du über Start --> Computer (Rechtsklick) -->Eigenschaften feststellen.

Wenn dort hinter Systemtyp '64-Bit Betriebssystem' steht nimmst Du die AMD64 Version,
bei '32-Bit Betriebssystem' die x86 Version.

Die x86-Version geht auf jeden Fall, also kannst Du damit eigentlich nichts falsch machen.
Deinen derzeitigen Defender kannst Du lassen wo er ist, denn der ist Bestandteil der Essentials und wird sowieso upgedated.

Nur MS-fremde Virenscanner solltest Du vorher deinstallieren (und nachher auch deinstalliert lassen!).

Wenn Du die MSE installiert hast, brauchst Du (zunächst einmal) gar nichts machen.
Du bekommst ein Fenster in dem die MSE zunächst ihre Virusdefinitionen aktualisieren und anschliessend
einen Schnelltest durchführen.

So der positiv (im Sinne von nichts gefunden) ausgeht, wird noch einmal Dein Standardbrowser mit
einer MS-was-weiss-ich-Dankeschön-Seite gestartet und das war es.

In dem Fenster kannst Du jetzt noch weitere Feineinstellungen vornehmen (Kompletttest, Benutzerdefiniert,
was soll mit einem Fund je nach eingeschätzter Gefährlichkeit geschehen, etc..)
Danach kannst Du alles schliessen und wirst (hoffentlich) nichts mehr von den MSE zu sehen bekommen.

Wenn Du die Einstellungen später modifizieren willst, kannst Du das Einstellungsfenster über
Start-->Programme mit dem Eintrag 'Microsoft Security Essentials' wieder öffnen.

Ansonsten werden die MSE ab jetzt automatisch bei jedem Systemstart gestartet, laufen im Hintergrund
permanent mit und aktualisieren ihre Virendefinitionen auch im Hintergrund automatisch.

Im optimalen Fall bekommst Du davon überhaupt nichts mit.
Es gibt keine Werbefenster oder andere Einblendungen.

Bei einem Fund poppt kurz ein kleines grünes Fenster auf, in dem Dir mitgeteilt wird dass dies oder das
gefunden wurde und das darauf die von Dir gewünschte Einstellung (in der Regel Quarantäne) angewandt wird.

Das weiss ich allerdings nur deswegen, weil ich bei der Einrichtung durch puren Zufall einen uralten Archivierungsordner
von 1996 zwecks Sicherung auf technisch neueren Datenträgern auf dem Rechner hatte und die MSE
prompt einen Trojaner in einem Word-Dokument, dass mir damals ein Geschäftspartner aus Kalifornien geschickt hatte,
aufspürten.

Interessant war für mich auch, dass zum Zeitpunkt des Kopierens dieses Archivs auf die Festplatte
noch Avast mein aktueller Scanner war und dem das nicht aufgefallen war.

Weitere Erfahrungen kann ich Dir mangels Viren/Trojaner/sonstiger Malware auf meinen Systemen leider nicht schildern.

Das sollte für den Anfang jetzt auch erst einmal reichen.

Gruss

Werner

Hi,

was Werner1958 gesagt hat würde ich so unterschreiben, aber die Funde von MBAM würden mich schon interessieren

Hab mir Malwarebytes runtergeladen und alles entfernt was er gefunden hatt.

Ok

Danke Werner für die äußerst Ausführliche Antwort^^
bist nen Klasse Typ
Hab mir schon gedacht das das erste für 64 bit ist. Jetzt noch kurz ne Frage, wenn du sagst alles deinstallieren was Vieren scannt und nicht mit MSE zu tun hat muss ich dann auch Malwarebytes wieder deinstallieren?
Oder wo ist da der unterschied? Windows defender schütz vor Vieren und Malwarebytes sucht sie oder wie. Hab auch noch Avira (deninstallier ich bevor ich MSE installiere) drauf war das dann bis jetzt überflüssig wenn ich Windows Defender hab bin grad bissl verwirrt kann die ganze Programme ihren Funktionen nicht zuordnen. Im Prinzip macht ja dann Avira das gleiche wie Defender.

Kann mir auch gern jemand anders erklären will hier Werner net überstrapazieren

Dank euch

Hier mein Befund!
Habs mal gegoogelt, da das Zeug alles gleich hies. Sind Malware die mir auf Internetseiten Werbung einblenden.
Habs daher nicht als ernsthafte Bedrohung eingestuft und nicht gepostet aber besser es schaut sich mal nen Profi an nacher hab ich was wichtiges vergessen. Danke das gefragt hast


Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 22.04.2014
Suchlauf-Zeit: 00:08:28
Logdatei:
Administrator: Ja

Version: 2.00.1.1004
Malware Datenbank: v2014.04.21.07
Rootkit Datenbank: v2014.03.27.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows Vista Service Pack 2
CPU: x64
Dateisystem: NTFS
Benutzer: Mexel

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 311224
Verstrichene Zeit: 16 Min, 40 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 48
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, In Quarantäne, [45b6ab81b3c86bcb0fdbb19bfd054db3],
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, In Quarantäne, [45b6ab81b3c86bcb0fdbb19bfd054db3],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\CLASSES\CLSID\{5018CFD2-804D-4C99-9F81-25EAEA2769DE}, In Quarantäne, [7685a28a4e2dab8b01934accb250f907],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5018CFD2-804D-4C99-9F81-25EAEA2769DE}, In Quarantäne, [7685a28a4e2dab8b01934accb250f907],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\CLASSES\Softonic.dskBnd.1, In Quarantäne, [7685a28a4e2dab8b01934accb250f907],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\CLASSES\Softonic.dskBnd, In Quarantäne, [7685a28a4e2dab8b01934accb250f907],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Softonic.dskBnd, In Quarantäne, [7685a28a4e2dab8b01934accb250f907],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Softonic.dskBnd.1, In Quarantäne, [7685a28a4e2dab8b01934accb250f907],
PUP.Optional.Softonic.A, HKU\S-1-5-21-144263595-3707991085-4109004994-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{5018CFD2-804D-4C99-9F81-25EAEA2769DE}, Löschen bei Neustart, [7685a28a4e2dab8b01934accb250f907],
PUP.Optional.Softonic.A, HKU\S-1-5-21-144263595-3707991085-4109004994-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{5018CFD2-804D-4C99-9F81-25EAEA2769DE}, Löschen bei Neustart, [7685a28a4e2dab8b01934accb250f907],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\CLASSES\CLSID\{E87806B5-E908-45FD-AF5E-957D83E58E68}, In Quarantäne, [24d78ba1c0bb2412ade871a5c73b16ea],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\CLASSES\Softonic.SoftonicHlpr.1, In Quarantäne, [24d78ba1c0bb2412ade871a5c73b16ea],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\CLASSES\Softonic.SoftonicHlpr, In Quarantäne, [24d78ba1c0bb2412ade871a5c73b16ea],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Softonic.SoftonicHlpr, In Quarantäne, [24d78ba1c0bb2412ade871a5c73b16ea],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{E87806B5-E908-45FD-AF5E-957D83E58E68}, In Quarantäne, [24d78ba1c0bb2412ade871a5c73b16ea],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Softonic.SoftonicHlpr.1, In Quarantäne, [24d78ba1c0bb2412ade871a5c73b16ea],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E87806B5-E908-45FD-AF5E-957D83E58E68}, In Quarantäne, [24d78ba1c0bb2412ade871a5c73b16ea],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CA0167C2-6295-41B8-9BDA-704B2F5E4CD9}, In Quarantäne, [24d78ba1c0bb2412ade871a5c73b16ea],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\CLASSES\escort.escortIEPane.1, In Quarantäne, [24d78ba1c0bb2412ade871a5c73b16ea],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\CLASSES\escort.escortIEPane, In Quarantäne, [24d78ba1c0bb2412ade871a5c73b16ea],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\escort.escortIEPane, In Quarantäne, [24d78ba1c0bb2412ade871a5c73b16ea],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\escort.escortIEPane.1, In Quarantäne, [24d78ba1c0bb2412ade871a5c73b16ea],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\CLASSES\CLSID\{CA0167C2-6295-41B8-9BDA-704B2F5E4CD9}, In Quarantäne, [24d78ba1c0bb2412ade871a5c73b16ea],
PUP.Optional.Softonic.A, HKU\S-1-5-21-144263595-3707991085-4109004994-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{E87806B5-E908-45FD-AF5E-957D83E58E68}, Löschen bei Neustart, [24d78ba1c0bb2412ade871a5c73b16ea],
PUP.Optional.Softonic.A, HKU\S-1-5-21-144263595-3707991085-4109004994-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{E87806B5-E908-45FD-AF5E-957D83E58E68}, Löschen bei Neustart, [24d78ba1c0bb2412ade871a5c73b16ea],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\CLASSES\srv.SoftonicSrvc, In Quarantäne, [79829d8f2655c274c7ca442d828027d9],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\CLASSES\srv.SoftonicSrvc.1, In Quarantäne, [e516b57766152a0cf29f7df421e1e41c],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\srv.SoftonicSrvc, In Quarantäne, [07f443e92556270fc8c9b2bf10f2ad53],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\srv.SoftonicSrvc.1, In Quarantäne, [40bb012b90eb55e18d04700107fbc43c],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\elchiiiejkobdbblfejjkbphbddgmljf, In Quarantäne, [ef0cc56753287bbbe7ad254ca75bd62a],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\SOFTONIC\Softonic, In Quarantäne, [bc3f939962199e980c895819fb07ef11],
PUP.Optional.DataMngr.A, HKU\S-1-5-21-144263595-3707991085-4109004994-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr, Löschen bei Neustart, [a655cb6176056ec8c2690f870df6966a],
PUP.Optional.DataMngr.A, HKU\S-1-5-21-144263595-3707991085-4109004994-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, Löschen bei Neustart, [d02b3deff9821b1b3eec84120cf7cb35],
PUP.Optional.SnapDo.A, HKU\S-1-5-21-144263595-3707991085-4109004994-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SMARTBAR, Löschen bei Neustart, [44b79894017a93a390797808f40e32ce],
PUP.Optional.Softonic.A, HKU\S-1-5-21-144263595-3707991085-4109004994-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Softonic, Löschen bei Neustart, [9863ad7f5b201026bbd7531e7a88f40c],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{44B50C01-4993-48E2-ADEE-D812BAE2E9A2}, In Quarantäne, [e912cd5ffc7f2b0bccd4ff681ae88080],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\CLASSES\SoftonicApp.appCore.1, In Quarantäne, [e912cd5ffc7f2b0bccd4ff681ae88080],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\CLASSES\SoftonicApp.appCore, In Quarantäne, [e912cd5ffc7f2b0bccd4ff681ae88080],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SoftonicApp.appCore, In Quarantäne, [e912cd5ffc7f2b0bccd4ff681ae88080],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SoftonicApp.appCore.1, In Quarantäne, [e912cd5ffc7f2b0bccd4ff681ae88080],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\CLASSES\CLSID\{44B50C01-4993-48E2-ADEE-D812BAE2E9A2}, In Quarantäne, [e912cd5ffc7f2b0bccd4ff681ae88080],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A5679AB0-C59E-49E7-83C4-5289F844A6E0}, In Quarantäne, [e912cd5ffc7f2b0bccd4ff681ae88080],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\CLASSES\S, In Quarantäne, [e912cd5ffc7f2b0bccd4ff681ae88080],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\S, In Quarantäne, [e912cd5ffc7f2b0bccd4ff681ae88080],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\CLASSES\CLSID\{A5679AB0-C59E-49E7-83C4-5289F844A6E0}, In Quarantäne, [e912cd5ffc7f2b0bccd4ff681ae88080],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{B15F118E-AF21-45E8-A809-29FDD7362565}, In Quarantäne, [e912cd5ffc7f2b0bccd4ff681ae88080],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{B15F118E-AF21-45E8-A809-29FDD7362565}, In Quarantäne, [e912cd5ffc7f2b0bccd4ff681ae88080],
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Softonic, In Quarantäne, [e912cd5ffc7f2b0bccd4ff681ae88080],

Registrierungswerte: 3
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{5018CFD2-804D-4C99-9F81-25EAEA2769DE}, Softonic Toolbar, In Quarantäne, [7685a28a4e2dab8b01934accb250f907]
PUP.Optional.Softonic.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{5018CFD2-804D-4C99-9F81-25EAEA2769DE}, In Quarantäne, [35c6ae7e06753204504448ce1fe34eb2],
PUP.Optional.SnapDo.A, HKU\S-1-5-21-144263595-3707991085-4109004994-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SMARTBAR|publisher, SnapdoOCYB, Löschen bei Neustart, [44b79894017a93a390797808f40e32ce]

Registrierungsdaten: 7
PUP.Optional.SnapDo.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=b5b1f8b9-fdf2-db33-4132-c2a2d7fac251&searchtype=ds&q={searchTerms}&installDate=, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=b5b1f8b9-fdf2-db33-4132-c2a2d7fac251&searchtype=ds&q={searchTerms}&installDate=),Ersetzt,[48b337f5007b88aea0a835eb0afac23e]
PUP.Optional.Snapdo, HKU\S-1-5-21-144263595-3707991085-4109004994-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=b5b1f8b9-fdf2-db33-4132-c2a2d7fac251&searchtype=ds&q={searchTerms}&installDate=, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=b5b1f8b9-fdf2-db33-4132-c2a2d7fac251&searchtype=ds&q={searchTerms}&installDate=),Löschen bei Neustart,[cb30c864760553e3b8f8b772bd47d52b]
PUP.Optional.Conduit.A, HKU\S-1-5-21-144263595-3707991085-4109004994-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://search.conduit.com/?ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPA4C0703B-B8B6-4BE9-93B7-B1BAB6FB9B27&SSPV=, Gut: (hxxp://www.google.com), Schlecht: (hxxp://search.conduit.com/?ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPA4C0703B-B8B6-4BE9-93B7-B1BAB6FB9B27&SSPV=),Löschen bei Neustart,[926974b8a5d62e08baef41dfe61e03fd]
PUP.Optional.Snapdo, HKU\S-1-5-21-144263595-3707991085-4109004994-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=b5b1f8b9-fdf2-db33-4132-c2a2d7fac251&searchtype=ds&q={searchTerms}&installDate=, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=b5b1f8b9-fdf2-db33-4132-c2a2d7fac251&searchtype=ds&q={searchTerms}&installDate=),Löschen bei Neustart,[d02b919b413a9d99446baf7aa361f907]
PUP.Optional.Snapdo, HKU\S-1-5-21-144263595-3707991085-4109004994-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=b5b1f8b9-fdf2-db33-4132-c2a2d7fac251&searchtype=ds&q={searchTerms}&installDate=, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=b5b1f8b9-fdf2-db33-4132-c2a2d7fac251&searchtype=ds&q={searchTerms}&installDate=),Löschen bei Neustart,[b04b3cf0f3886cca179b4bdee024c739]
PUP.Optional.Snapdo, HKU\S-1-5-21-144263595-3707991085-4109004994-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=b5b1f8b9-fdf2-db33-4132-c2a2d7fac251&searchtype=ds&q={searchTerms}&installDate=, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=b5b1f8b9-fdf2-db33-4132-c2a2d7fac251&searchtype=ds&q={searchTerms}&installDate=),Löschen bei Neustart,[d724ae7eeb903006f1c215141ce8a55b]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-144263595-3707991085-4109004994-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=b5b1f8b9-fdf2-db33-4132-c2a2d7fac251&searchtype=ds&q={searchTerms}&installDate=, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=b5b1f8b9-fdf2-db33-4132-c2a2d7fac251&searchtype=ds&q={searchTerms}&installDate=),Löschen bei Neustart,[c23951db79023bfbec5ded33d52f619f]

Ordner: 29
PUP.Optional.Softonic.A, C:\Users\Mexel\AppData\Roaming\Softonic, In Quarantäne, [9368ba72611a053195f9d8999e64fe02],
PUP.Optional.SmartBar.A, C:\Users\Mexel\AppData\Local\Smartbar, Löschen bei Neustart, [92693eee601b0e2852510956b949916f],
PUP.Optional.SmartBar.A, C:\Users\Mexel\AppData\Local\Smartbar\Application, In Quarantäne, [92693eee601b0e2852510956b949916f],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy, Löschen bei Neustart, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\0AF53FBF2B1844CC9344CAA016C1412F, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\1FA3F4118F584DBF8BAF3D5D231CC3A8, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\27005E4B97E74AF18D0346EFB9993859, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\3E435CE81AF04869AC969E92A08657A0, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\4DB1729EAA684B639492EE05E6A5F9AE, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\4F40CEA4EECF4B53B7C7D46F1E30EA3F, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\50E49AF63CCF48ED9F14CC2FCBCFE299, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\6DFA260200FF4E149D595EBF4ED87AFF, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\739CC0FA5424443EB8F692AAF551CA11, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\8ABEC7F0F45846BF9ED72B7923A081E4, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\984FD892D7D2476AA019FFFBE8636028, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\CC881B5EBB1E4B29AC9F284429714F46, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\D34726D6C1134DE190A54B00116589D8, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\F8BEFDFC7CC149DA9ABB0CA23853E1EB, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl, Löschen bei Neustart, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0, Löschen bei Neustart, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\CSS, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\JS, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\PublisherImages, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.Softonic.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf, Löschen bei Neustart, [a15af9330d6edf570b941453f90928d8],
PUP.Optional.Softonic.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0, In Quarantäne, [a15af9330d6edf570b941453f90928d8],
PUP.Optional.Softonic.A, C:\Program Files (x86)\Softonic\Softonic, Löschen bei Neustart, [e912cd5ffc7f2b0bccd4ff681ae88080],
PUP.Optional.Softonic.A, C:\Program Files (x86)\Softonic\Softonic\1.8.21.14, Löschen bei Neustart, [e912cd5ffc7f2b0bccd4ff681ae88080],
PUP.Optional.Softonic.A, C:\Program Files (x86)\Softonic\Softonic\1.8.21.14\bh, In Quarantäne, [e912cd5ffc7f2b0bccd4ff681ae88080],

Dateien: 124
PUP.Optional.Softonic.A, C:\Program Files (x86)\Softonic\Softonic\1.8.21.14\SoftonicTlbr.dll, In Quarantäne, [7685a28a4e2dab8b01934accb250f907],
PUP.Optional.Softonic.A, C:\Program Files (x86)\Softonic\Softonic\1.8.21.14\bh\Softonic.dll, In Quarantäne, [24d78ba1c0bb2412ade871a5c73b16ea],
PUP.Optional.OpenCandy.A, C:\Users\Mexel\AppData\Roaming\OpenCandy\27005E4B97E74AF18D0346EFB9993859\Softonic_chr_p1v6.exe, In Quarantäne, [8b700b21265561d564e238e538cc9967],
PUP.Optional.Babylon.A, C:\Users\Mexel\AppData\Roaming\OpenCandy\3E435CE81AF04869AC969E92A08657A0\DeltaTB.exe, In Quarantäne, [03f87ab25c1f6fc7b05e7190cf32827e],
PUP.Optional.OpenCandy.A, C:\Users\Mexel\AppData\Roaming\OpenCandy\4DB1729EAA684B639492EE05E6A5F9AE\LatestDLMgr.exe, In Quarantäne, [d72479b3ceadb77f454581867889768a],
PUP.Optional.Linkury.A, C:\Users\Mexel\AppData\Roaming\OpenCandy\50E49AF63CCF48ED9F14CC2FCBCFE299\Installer.exe, In Quarantäne, [21da52da45362511ed8f4bb0838003fd],
PUP.Optional.Babylon.A, C:\Users\Mexel\AppData\Roaming\OpenCandy\739CC0FA5424443EB8F692AAF551CA11\DeltaTB.exe, In Quarantäne, [c63535f71d5e39fdbe50b0519071758b],
PUP.Optional.Linkury.A, C:\Users\Mexel\AppData\Roaming\OpenCandy\8ABEC7F0F45846BF9ED72B7923A081E4\Installer.exe, In Quarantäne, [a15a41eb9cdfb08683f9b14a48bbcd33],
PUP.Optional.Babylon.A, C:\Users\Mexel\AppData\Roaming\OpenCandy\984FD892D7D2476AA019FFFBE8636028\DeltaTB.exe, In Quarantäne, [36c50725b8c339fd709ec93832cfc13f],
PUP.Optional.Delta.A, C:\Users\Mexel\AppData\Roaming\OpenCandy\CC881B5EBB1E4B29AC9F284429714F46\DeltaTB.exe, In Quarantäne, [6794ac8035463afc63238b77dc255ba5],
PUP.Optional.Conduit.A, C:\Users\Mexel\AppData\Roaming\OpenCandy\F8BEFDFC7CC149DA9ABB0CA23853E1EB\SSStub_SearchProtect_p1v0.exe, In Quarantäne, [c635909cdd9e60d6affde92edf224fb1],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nss55F0.exe, In Quarantäne, [6695fa32403bdc5a2e5314100af78d73],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nscD942.exe, In Quarantäne, [84778ca01d5e2511bcc5f92b23de47b9],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nscEC27.exe, In Quarantäne, [52a9e646c1ba30064d34ef357c8525db],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nshD877.exe, In Quarantäne, [c338c369314a8babf091150f45bcc739],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsiAF47.exe, In Quarantäne, [877435f7d0ab0a2c97ea170dc0419e62],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsp1761.exe, In Quarantäne, [906b97952655270f037e79ab59a8ae52],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsp1762.exe, In Quarantäne, [34c7c5670576b086067b21033cc5ac54],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsp3454.exe, In Quarantäne, [b9424ddf314a63d3c3befa2a11f0e719],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nss3CF5.exe, In Quarantäne, [7784ef3d24579b9ba7daf62e639efd03],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsxEB6C.exe, In Quarantäne, [976460cc7506a78f5d242bf94fb21fe1],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nssB32D.exe, In Quarantäne, [a6554edec7b49d9998e9fd27af528779],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nssD868.exe, In Quarantäne, [b9429d8f81fa80b6126f79ab778a2fd1],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nssD952.exe, In Quarantäne, [0af166c68cef5cda305170b4dc259c64],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsu4535.exe, In Quarantäne, [de1d0e1e2259e254d4adbe6602ffaf51],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsx428F.exe, In Quarantäne, [d72458d4d4a7e74fea97879db34e926e],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsx9D4.exe, In Quarantäne, [28d3c4685f1c7cba136ec16332cf6c94],
Adware.DomaIQ, C:\Users\Mexel\Downloads\FlashPlayer_V.67672909b.exe, In Quarantäne, [d12ad359d4a71e1805fa964003fdbe42],
PUP.Optional.DownloadSponsor, C:\Users\Mexel\Downloads\LogMeIn Hamachi - CHIP-Downloader.exe, In Quarantäne, [07f4220a215a0a2c36566d9700042ad6],
PUP.Optional.Softonic.A, C:\Users\Mexel\AppData\Roaming\Softonic\sqlite3.dll, In Quarantäne, [9368ba72611a053195f9d8999e64fe02],
PUP.Optional.Conduit.A, C:\Users\Mexel\AppData\Roaming\Mozilla\Firefox\Profiles\x3w0ee0f.default-1384722713719\searchplugins\conduit-search.xml, In Quarantäne, [f10a9993e59685b1519fd79d0101af51],
PUP.Optional.WebSearch.A, C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\gizhrfec.default\searchplugins\Web Search.xml, In Quarantäne, [e2190329fd7e7cba1fbdacc99b67669a],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\0AF53FBF2B1844CC9344CAA016C1412F\TuneUpUtilities2013-2200218_de-DE.exe, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\1FA3F4118F584DBF8BAF3D5D231CC3A8\Trial-14.0.1000.89_de-DE_1004733_DE-2.exe, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\4DB1729EAA684B639492EE05E6A5F9AE\3135.ico, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\4DB1729EAA684B639492EE05E6A5F9AE\TuneUpUtilities2013-2200218-p3v0.exe, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\4F40CEA4EECF4B53B7C7D46F1E30EA3F\Trial-14.0.1000.89_de-DE_1004733_DE-2.exe, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\6DFA260200FF4E149D595EBF4ED87AFF\TuneUpUtilities2013-2200217_de-DE.exe, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\CC881B5EBB1E4B29AC9F284429714F46\5472.ico, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\CC881B5EBB1E4B29AC9F284429714F46\EBB77268-338F-4C6A-8590-AD88FED26F4A, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\CC881B5EBB1E4B29AC9F284429714F46\OCBrowserHelper_1.0.6.125.exe, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.OpenCandy, C:\Users\Mexel\AppData\Roaming\OpenCandy\D34726D6C1134DE190A54B00116589D8\TuneUpUtilities2013-2200218_de-DE.exe, In Quarantäne, [2ccfb676f487d4625a6c144b04fe956b],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\bg.html, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\bg.js, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\GoogleChromeRemotePlugin.dll, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\manifest.json, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\options.htm, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\options.js, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\popup.html, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\popup.js, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\redirect.html, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\redirect.js, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\CSS\border.css, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\down-1.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\down-2.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\down-3.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\down.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\fb.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\fblike.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\gmail.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\google.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\googleplus.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\hide-1.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\hide-2.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\hide-3.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\left.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\maximize-1.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\maximize-2.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\maximize-3.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\mgsplusvideo.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\minimize-1.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\minimize-2.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\minimize-3.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\pinit.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\right.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\searchBox.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\show-1.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\show-2.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\show-3.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\twitter.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\up-1.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\up-2.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\up-3.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\images\up.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\JS\BackPageRemove.js, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\JS\defaultBlockList.js, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\JS\documentEvents.js, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\JS\externalJS.js, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\JS\FBImagePreview.js, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\JS\InternalJS.js, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\JS\jquery-1.9.0.min.js, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\JS\PluginWrapper.js, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\JS\publisherDefinitions.js, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\JS\tabReload.js, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\JS\TopFrameJS.js, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\PublisherImages\homePage.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\PublisherImages\SnapDo.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\PublisherImages\SnapDo128.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\PublisherImages\SnapDo16.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\PublisherImages\SnapDo48.png, In Quarantäne, [a15a2408ed8e1422dc3864ff6c96a65a],
PUP.Optional.Softonic.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\appCntrl.js, In Quarantäne, [a15af9330d6edf570b941453f90928d8],
PUP.Optional.Softonic.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\bg.html, In Quarantäne, [a15af9330d6edf570b941453f90928d8],
PUP.Optional.Softonic.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\bg.js, In Quarantäne, [a15af9330d6edf570b941453f90928d8],
PUP.Optional.Softonic.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\chMntz.dll, In Quarantäne, [a15af9330d6edf570b941453f90928d8],
PUP.Optional.Softonic.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\CrmAdpt.dll, In Quarantäne, [a15af9330d6edf570b941453f90928d8],
PUP.Optional.Softonic.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\ct.js, In Quarantäne, [a15af9330d6edf570b941453f90928d8],
PUP.Optional.Softonic.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\CTB.dll, In Quarantäne, [a15af9330d6edf570b941453f90928d8],
PUP.Optional.Softonic.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\dpk.js, In Quarantäne, [a15af9330d6edf570b941453f90928d8],
PUP.Optional.Softonic.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\hprtkMsg.htm, In Quarantäne, [a15af9330d6edf570b941453f90928d8],
PUP.Optional.Softonic.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\hprtkMsg.js, In Quarantäne, [a15af9330d6edf570b941453f90928d8],
PUP.Optional.Softonic.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\json2.min.js, In Quarantäne, [a15af9330d6edf570b941453f90928d8],
PUP.Optional.Softonic.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\logo.png, In Quarantäne, [a15af9330d6edf570b941453f90928d8],
PUP.Optional.Softonic.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\manifest.json, In Quarantäne, [a15af9330d6edf570b941453f90928d8],
PUP.Optional.Softonic.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\pref.json, In Quarantäne, [a15af9330d6edf570b941453f90928d8],
PUP.Optional.Softonic.A, C:\Program Files (x86)\Softonic\Softonic\1.8.21.14\softonic.crx, In Quarantäne, [e912cd5ffc7f2b0bccd4ff681ae88080],
PUP.Optional.Softonic.A, C:\Program Files (x86)\Softonic\Softonic\1.8.21.14\SoftonicApp.dll, In Quarantäne, [e912cd5ffc7f2b0bccd4ff681ae88080],
PUP.Optional.Softonic.A, C:\Program Files (x86)\Softonic\Softonic\1.8.21.14\SoftonicEng.dll, In Quarantäne, [e912cd5ffc7f2b0bccd4ff681ae88080],
PUP.Optional.Softonic.A, C:\Program Files (x86)\Softonic\Softonic\1.8.21.14\Softonicsrv.exe, In Quarantäne, [e912cd5ffc7f2b0bccd4ff681ae88080],
PUP.Optional.Softonic.A, C:\Program Files (x86)\Softonic\Softonic\1.8.21.14\uninstall.exe, In Quarantäne, [e912cd5ffc7f2b0bccd4ff681ae88080],
PUP.Optional.HelperBar.A, C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\gizhrfec.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.newtab.url", "hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=b5b1f8b9-fdf2-db33-4132-c2a2d7fac251&searchtype=nt&fr=linkury-tb&installDate=13/11/2013&type=hp1000&q="), Ersetzt,[c7348aa293e8bc7a29e12134a65e1be5]
PUP.Optional.HelperBar.A, C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\gizhrfec.default\prefs.js, Gut: (), Schlecht: (user_pref("keyword.URL", "hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=b5b1f8b9-fdf2-db33-4132-c2a2d7fac251&searchtype=ds&fr=linkury-tb&installDate=13/11/2013&type=hp1000&p="), Ersetzt,[20db32faafcc58de8586b2a333d1de22]
PUP.Optional.HelperBar.A, C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\gizhrfec.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.startup.homepage", "hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=b5b1f8b9-fdf2-db33-4132-c2a2d7fac251&searchtype=hp&fr=linkury-tb&installDate=13/11/2013&type=hp1000"), Ersetzt,[5aa15ecebbc046f0265aafa6f212946c]
PUP.Optional.Snapdo.A, C:\Users\Mexel\AppData\Local\Google\Chrome\User Data\Default\Preferences, Gut: (), Schlecht: ({"apps":{"shortcuts_have_been_created":true},"browser":{"last_known_google_url":"hxxp://www.google.de/","last_prompted_google_url":"hxxp://www.google.de/","window_placement":{"bottom":1070,"left":10,"maximized":false,"right":955,"top":10,"work_area_bottom":1080,"work_area_left":0,"work_area_right":1920 ,"work_area_top":0},"show_home_button":true},"countryid_at_install":17477,"default_apps_install_state":2,"default_search_provider":{"id":"1","name":"C onduit Search","prepopulate_id":"0","search_url":"http:\/\/search.conduit.com\/Results.aspx?ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPA4C0703B-B8B6-4BE9-93B7-B1BAB6FB9B27&q={searchTerms}&SSPV=","suggest_url":"","keyword":"conduit.search"},"distribution":{"create_all_shortcuts":true,"do_not_launch_chrome":tr ue,"import_bookmarks":false,"import_history":false,"import_home_page":false,"import_search_engine":false,"make_chrome_default_for_user":false,"ping_de lay":-60,"show_welcome_page":true,"skip_first_run_ui":false},"dns_prefetching":{"host_referral_list":[2,["hxxp://de.search.yahoo.com/",["hxxp://f.linkuryjs.info/",2.27338,"hxxp://h.linkuryjs.info/",2.27338,"hxxp://i.linkuryjs.info/",2.6037,"hxxp://intext.nav-links.com/",2.27338,"hxxp://l.yimg.com/",2.93402,"hxxp://qs.ivwbox.de/",2.27338,"hxxp://widgets.xrosview.com/",4.58562,"hxxp://www.ajaxcdn.org/",2.27338,"hxxp://yahoo.ivwbox.de/",2.6037,"https://s.yimg.com/",2.93402]],["hxxp://feed.helperbar.com/",["hxxp://de.search.yahoo.com/",2.27338]],["hxxp://tools.google.com/",["hxxp://tools.google.com/",2.9934,"hxxp://www.google-analytics.com/",2.38759,"hxxp://www.google.com/",2.38759,"hxxp://www.youtube.com/",2.08469]],["hxxp://www.google.com/",["hxxp://www.google.de/",1.11386]],["hxxp://www.google.de/",["hxxp://ssl.gstatic.com/",2.19937,"hxxp://www.google.de/",4.75784]],["hxxp://www.youtube.com/",["hxxp://i3.ytimg.com/",2.38759,"hxxp://s.ytimg.com/",2.38759]],["hxxp://yahoo.nuggad.net/",["hxxp://ad.yieldmanager.com/",2.93402,"hxxp://ci.nuggad.net/",2.27338,"hxxp://cookex.amp.yahoo.com/",2.27338]]],"startup_list":[1,"hxxp://ads.yimg.com/","hxxp://csc.beap.bc.yahoo.com/","hxxp://de.search.yahoo.com/","hxxp://feed.helperbar.com/","hxxp://l.yimg.com/","hxxp://yahoo.ivwbox.de/","hxxp://yahoo.nuggad.net/","https://clients2.google.com/","https://clients2.googleusercontent.com/","https://s.yimg.com/"]},"download":{"directory_upgrade":true},"extensions":{"alerts":{"initialized":true},"autoupdate":{"next_check":"13029275316678749"},"chrome_url_overri des":{"bookmarks":["chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html"],"newtab":"chrome-extension://amfclgbdpgndipgoegfpkkgobahigbcl/redirect.html"},"known_disabled":["lifbcibllhkdhoafpjfnlhfpfgnpldfl"],"last_chrome_version":"31.0.1650.57","settings":{"amfclgbdpgndipgoegfpkkgobahigbcl":{"ack_external":true,"active_permissions":{"api":["cookies","management","plugin","tabs","webNavigation"],"explicit_host":["hxxp://*/*","https://*/*"],"scriptable_host":["<all_urls>","hxxp://*/*","https://*/*"]},"creation_flags":1,"from_bookmark":false,"from_webstore":false,"granted_permissions":{"api":["cookies","management","plugin","tabs","webNavigation"],"explicit_host":["hxxp://*/*","https://*/*"],"scriptable_host":["<all_urls>","hxxp://*/*","https://*/*"]},"install_time":"13011896408908791","location":1,"manifest":{"chrome_url_overrides":{"newtab":"redirect.html"},"name":"New Tab Page","key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDt7DFf5JV3nSkEFOB8mTacUzbdeOPlqba3Pv+WJe5DLXzssFkS8ZrcgIs7J04d2LazhzE5czs4pESOPe0cuFQ0xc2fNx3I+csmR XaKJk7vpy8GSRHPKvqukFZQaiDp9XgU9mnpbBjrZekAqP/y+Uzy3pKyz1OtXX6PlOoFJqa8eQIDAQAB","version":"1.4","manifest_version":2},"path":"amfclgbdpgndipgoegfpkkgobahigbcl\\1.4_0","state":0,"was_installed_by_ default":false},"aaaaacalgebmfelllfiaoknifldpngjh":{"ack_external":true,"exclude_from_sideload_wipeout":true},"ahfgeienlihckogmohjhadlkjgocpleb":{"act ive_permissions":{"api":["management","webstorePrivate"]},"app_launcher_ordinal":"n","creation_flags":1,"from_bookmark":false,"from_webstore":false,"install_time":"13029274775379749","location":5,"manifest" :{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Chrome Web Store","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy 7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Store","permissions":["webstorePrivate","management"],"version":"0.2"},"page_ordinal":"n","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\31.0.1650.57\\resources\\web_store","was_installed_by_default":false},"eemcgdkfndhakfknompkggombfjjjeno":{"active_ permissions":{"api":["bookmarks","bookmarkManagerPrivate","metricsPrivate","systemPrivate","tabs"],"explicit_host":["chrome://favicon/*","chrome://resources/*"]},"creation_flags":1,"from_bookmark":false,"from_webstore":false,"initial_keybindings_set":true,"install_time":"13029274775378749","location":5,"manif est":{"chrome_url_overrides":{"bookmarks":"main.html"},"content_security_policy":"object-src 'none'; script-src chrome://resources 'self'","description":"Bookmark Manager","incognito":"split","key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQcByy+eN9jzazWF/DPn7NW47sW7lgmpk6eKc0BQM18q8hvEM3zNm2n7HkJv/R6fU+X5mtqkDuKvq5skF6qqUF4oEyaleWDFhd1xFwV7JV+/DU7bZ00w2+6gzqsabkerFpoP33ZRIw7OviJenP0c0uWqDWF8EGSyMhB3txqhOtiQIDAQAB","manifest_version":2,"name":"Bookmark Manager","permissions":["bookmarks","bookmarkManagerPrivate","metricsPrivate","systemPrivate","tabs","chrome://favicon/","chrome://resources/"],"version":"0.1"},"path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\31.0.1650.57\\resources\\bookmark_manager","was_installed_by_default":false},"elchiiiejkobdbblfejjkbphbddgmljf":{" ack_prompt_count":1,"active_permissions":{"api":["contentSettings","notifications","plugin","tabs"],"explicit_host":["hxxp://*/*","https://cnfg.montiera.com/*"],"scriptable_host":["file:///*","hxxp://*/*","https://*/*","https://cnfg.montiera.com/*"]},"creation_flags":1,"from_bookmark":false,"from_webstore":false,"install_time":"13006145318175268","lastpingday":"13029235204778749","location":3,"ma nifest":{"background":{"page":"bg.html"},"content_scripts":[{"all_frames":true,"exclude_globs":["hxxp://search.snapdo.com/*","hxxp://de.search.yahoo.com/*"],"js":["json2.min.js","ct.js"],"matches":["https://cnfg.montiera.com/*","hxxp://*/*","https://*/*","file:///*"]}],"content_security_policy":"script-src 'self' https://cnfg.montiera.com; object-src 'self'","description":"Softonic Chrome Toolbar","icons":{"128":"logo.png","48":"logo.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCQs1iIS0sF09OWNLKGsDfMmsvCXsBgDGH4Iraf8iOI4z9cRRhW+ZB y5JUMbH36GNj8PDQTQOOMQpmA3PfTjtMVBpl/GEDqqHkjt5+rMSxKfbchipiQrUpGzOP+y3WE9E5ZbNbFXl9zY4RfejX7iqBXPOZNKULT3JLfGj6epXxbgwIDAQAB","manifest_version":2,"name":"Softonic Chrome Toolbar","permissions":["tabs","https://cnfg.montiera.com/*","hxxp://*/*","notifications","contentSettings"],"plugins":[{"path":"ctb.dll","public":true}],"version":"1.0"},"path":"elchiiiejkobdbblfejjkbphbddgmljf\\1.0_0","state":1,"was_installed_by_default":false},"ennkphjdgehloodpbhlhldgbnhmacadg":{"ac tive_permissions":{"api":["app.currentWindowInternal","app.runtime","app.window"],"explicit_host":["chrome://settings-frame/*"]},"creation_flags":1,"events":["app.runtime.onLaunched"],"from_bookmark":false,"from_webstore":false,"initial_keybindings_set":true,"install_time":"13029274775381749","location":5,"manifest":{"app":{"backgr ound":{"scripts":["settings_app.js"]}},"description":"Settings","display_in_launcher":false,"icons":{"128":"settings_app_icon_128.png","16":"settings_app_icon_16.png","32":"settings_app_ icon_32.png","48":"settings_app_icon_48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoVDPGX6fvKPVVgc+gnkYlGqHuuapgFDyKhsy4z7UzRLO/95zXPv8h8e5EacqbAQJLUbP6DERH5jowyNEYVxq9GJyntJMwP1ejvoz/52hnY3CCGGCmttmKzzpp5zwLuq3iZf8bslwywfflNUYtaCFSDa0TtrBZz0aOPrAAd/AhNwIDAQAB","manifest_version":2,"name":"Settings","permissions":["chrome://settings-frame/"],"version":"0.2"},"path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\31.0.1650.57\\resources\\settings_app","running":true,"was_installed_by_default":false},"gfdkimpbcpahaombhbimeihdj nejgicl":{"active_permissions":{"api":["app.currentWindowInternal","app.runtime","app.window","feedbackPrivate"],"explicit_host":["chrome://resources/*"]},"creation_flags":1,"events":["feedbackPrivate.onFeedbackRequested"],"from_bookmark":false,"from_webstore":false,"initial_keybindings_set":true,"install_time":"13029274775381749","location":5,"manifest":{"app":{"backgr ound":{"scripts":["js/event_handler.js"]},"content_security_policy":"default-src 'none'; script-src 'self' chrome://resources; style-src 'unsafe-inline' *; img-src *; media-src 'self'"},"description":"User feedback extension","display_in_launcher":false,"display_in_new_tab_page":false,"icons":{"32":"http://www.trojaner-board.de/images/...":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\31.0.1650.57\\resources\\feedback","running":true,"was_installed_by_default":false},"lifbcibllhkdhoafpjfnlhfpfgnpl dfl":{"ack_prompt_count":1,"active_permissions":{"api":["plugin","tabs"],"explicit_host":["hxxp://*/*","https://*/*"],"scriptable_host":["file:///*","hxxp://*/*","https://*/*"]},"creation_flags":1,"external_first_run":true,"from_bookmark":false,"from_webstore":false,"initial_keybindings_set":true,"install_time":"130292747794 01749","location":3,"manifest":{"background_page":"background.html","browser_action":{"default_icon":"skype.png","default_title":"Options"},"content_s cripts":[{"exclude_globs":["hxxp://search.snapdo.com/*"],"all_frames":true,"js":["contentscript.js"],"matches":["hxxp://*/*","file://*/*","https://*/*"],"run_at":"document_end"}],"description":"Skype Click to Call","key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMxFysW3wPKWRPPe3xuJQz3m1ZDLX1hN8EYdP37tRPf7lp8vIhG4xirlXHGK748qcLPc4Lm8WsHDhvS5okN54Kwcnw4T2tBXSCZ JxMmlu14HZ5yc/t969QLTPLIbAsasq4NVo40YuP2B7umxV9BlcxZEB9TEKPEQq8DRoKhj9jBQIDAQAB","name":"Skype Click to Call","permissions":["tabs","hxxp://*/*","https://*/*"],"plugins":[{"path":"npSkypeChromePlugin.dll","public":true}],"version":"5.10.0.9560"},"path":"lifbcibllhkdhoafpjfnlhfpfgnpldfl\\5.10.0.9560_0","state":0,"was_installed_by_default":false},"mfehgcgbbipciphmccgaen jidiccnmng":{"active_permissions":{"api":["cloudPrintPrivate"]},"creation_flags":1,"from_bookmark":false,"from_webstore":false,"install_time":"13029274775379749","location":5,"manifest":{"app":{"launch":{"web_url ":"https://www.google.com/cloudprint"},"urls":["https://www.google.com/cloudprint/enable_chrome_connector"]},"description":"Cloud Print","display_in_launcher":false,"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDqOhnwk4+HXVfGyaNsAQdU/js1Na56diW08oF1MhZiwzSnJsEaeuMN9od9q9N4ZdK3o1xXOSARrYdE+syV7Dl31nf6qz3A6K+D5NHe6sSB9yvYlIiN37jdWdrfxxE0pRYEVYZNTe3bzq3NkcYJlOdt1UPcpJB+isXpAGUKUvt7EQI DAQAB","name":"Cloud Print","permissions":["cloudPrintPrivate"],"version":"0.1"},"path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\31.0.1650.57\\resources\\cloud_print","was_installed_by_default":false},"mgndgikekgjfcpckkfioiadnlibdjbkf":{"app_l auncher_ordinal":"h","creation_flags":1,"from_bookmark":false,"from_webstore":false,"install_time":"13029274775380749","location":5,"manifest":{"app": {"launch":{"web_url":"hxxp://THIS-WILL-BE-REPLACED"}},"description":"Chrome as an app","display_in_launcher":true,"display_in_new_tab_page":false,"icons":{"128":"product_logo_128.png","16":"product_logo_16.png"},"key":"MIGfMA0GCSqGS Ib3DQEBAQUAA4GNADCBiQKBgQDNuYLEQ1QPMcc5HfWI/9jiEf6FdJWqEtgRmIeI7qtjPLBM5oje+Ny2E2mTAhou5qdJiO2CHWdU1DQXY2F7Zu2gZaKZgHLfK4WimHxUT5Xd9/aro/R9PCzjguM1BLusiWYc9xlj1IsZpyiN1hcjU7SCnBhv1feQlv2WSB5KRiXwhQIDAQAB","name":"Chrome","version":"0.1"},"page_ordinal":"n","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\31.0.1650.57\\resources\\chrome_app","was_installed_by_default":false},"nmmhkkegccagdldgiimedpiccmgmieda":{"ack_ex ternal":true,"active_permissions":{"api":["app.currentWindowInternal","app.runtime","app.window","identity","webRequestInternal","webview"],"explicit_host":["https://checkout.google.com/*","https://sandbox.google.com/*","https://www.google.com/*"]},"creation_flags":9,"events":["app.runtime.onLaunched"],"from_bookmark":false,"from_webstore":true,"initial_keybindings_set":true,"install_time":"13029274781018749","lastpingday":"13029235204778749","locat ion":7,"manifest":{"app":{"background":{"scripts":["craw_background.js"]}},"current_locale":"de","default_locale":"en","description":"Google Wallet für digitale Produkte","display_in_launcher":false,"display_in_new_tab_page":false,"icons":{"128":"http://www.trojaner-board.de/images/..."name":"Google Wallet","oauth2":{"auto_approve":true,"client_id":"203784468217.apps.googleusercontent.com","scopes":["https://www.googleapis.com/auth/sierra","https://www.googleapis.com/auth/sierrasandbox"]},"permissions":["identity","webview","https://checkout.google.com/","https://sandbox.google.com/checkout/","https://www.google.com/"],"update_url":"https://clients2.google.com/service/update2/crx","version":"0.0.5.0"},"path":"nmmhkkegccagdldgiimedpiccmgmieda\\0.0.5.0_0","running":true,"state":1,"was_installed_by_default":false}}},"google":{ "services":{"signin":{"LSID":"","SID":""},"username":""}},"homepage":"http:\/\/search.conduit.com\/?ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPA4C0703B-B8B6-4BE9-93B7-B1BAB6FB9B27&SSPV=","homepage_is_newtabpage":false,"intl":{"accept_languages":"de-DE,de,en-US,en"},"invalidator":{"client_id":"sDTGqTV5wu5eYNxq5fe6OQ=="},"net":{"http_server_properties":{"servers":{"clients2.google.com:443":{"alternate_proto col":{"port":443,"protocol_str":"quic"},"settings":{"4":100},"supports_spdy":true},"clients2.googleusercontent.com:443":{"alternate_protocol":{"port": 443,"protocol_str":"quic"},"settings":{"4":100},"supports_spdy":true}},"version":2}},"plugins":{"enabled_internal_pdf3":true,"enabled_nacl":true,"migr ated_to_pepper_flash":true,"removed_old_component_pepper_flash_settings":true},"profile":{"avatar_index":0,"content_settings":{"clear_on_exit_migrated ":true,"pref_version":1},"exit_type":"Normal","exited_cleanly":true,"icon_version":2,"managed_user_id":"","name":"Erster Nutzer"},"session":{"restore_on_startup":4,"restore_on_startup_migrated":true,"urls_to_restore_on_startup":["hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=b5b1f8b9-fdf2-db33-4132-c2a2d7fac251&searchtype=hp&installDate="],"startup_urls":["http:\/\/search.conduit.com\/?ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPA4C0703B-B8B6-4BE9-93B7-B1BAB6FB9B27&SSPV="]},"sync_promo":{"startup_count":10,"user_skipped":true},"tabs":{"use_vertical_tabs":false},"translate_blocked_languages":["de"]}), Ersetzt,[29d24ae2accfc76f945bbb99bb49c33d]
PUP.Optional.SnapDo.A, C:\Users\Mexel\AppData\Roaming\Mozilla\Firefox\Profiles\x3w0ee0f.default-1384722713719\prefs.js, Gut: (), Schlecht: (user_pref("keyword.URL", "hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBTU&co=DE&userid=b5b1f8b9-fdf2-db33-4132-c2a2d7fac251&searchtype=ds&installDate={installDate}&q="), Ersetzt,[16e5bd6fff7cc37385be73e224e0d42c]

Physische Sektoren: 0
(No malicious items detected)


(end)

Naja, ist nur Adware. Allerdings ziemlich viel. Kannst ja mal einen neuen Thread aufmachen...

Plagegeister aller Art und deren Bekämpfung

Und Finger weg von Softonic.

Lohnt sich das ?
hab doch alles entfernt.

Naja, es ist schon viel. Außerdem ist davon auszugehen, dass MBAM nicht alles gekillt hat, und vielleicht sind auch noch schlimmere Sachen drauf. Also würde ich sagen dass es sich lohnt.

Ok habs gemacht, hier der Link falls du es weiter verfolgen willst.

www.trojaner-board.de/152959-mal-jemand-meinen-malwarebytes-befunden-durchchecken.html#post1289757

Du hast aber auch was angesammelt an Adware, herzallerliebst

Da hat einer unserer Experten ja mal was zu tun

Ich werd den Thread im Auge behalten.

Ähm... Und in Zukunft in Code-Tags posten, ja?