Win32 Injector-BSY[TRJ] AVAST Virenfund

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 26.05.2014
Suchlauf-Zeit: 17:14:59
Logdatei: log.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.05.26.02
Rootkit Datenbank: v2014.05.21.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: xxxxxxx

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 276881
Verstrichene Zeit: 15 Min, 42 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 16
PUP.Optional.SystemK.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\F06DEFF2-5B9C-490D-910F-35D3A91196222, In Quarantäne, [f00ac194b7c479bdb7e0ec908e7325db], 
PUP.Optional.Linkey.A, HKU\S-1-5-21-3143199781-2537010271-4102635995-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}, In Quarantäne, [10ea80d5c8b3152132a535f84fb3cd33], 
PUP.Optional.Linkey.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}, In Quarantäne, [10ea80d5c8b3152132a535f84fb3cd33], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}, In Quarantäne, [f406f263c4b7171f80adc99bd131ba46], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, In Quarantäne, [c93188cd007b46f0200e620259a99d63], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, In Quarantäne, [5aa0aea73f3c072fa723b9ee30d2f50b], 
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\SYSTEMK\General, In Quarantäne, [b347a2b33843db5b491a1a7f3bc75ea2], 
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\SYSTEMK, In Quarantäne, [26d441141269a393214359406f93a45c], 
PUP.Optional.Iminent.A, HKU\S-1-5-21-3143199781-2537010271-4102635995-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Iminent, In Quarantäne, [df1b2f268af148eeedded5d27b87867a], 
PUP.Optional.Softonic.A, HKU\S-1-5-21-3143199781-2537010271-4102635995-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, In Quarantäne, [3ebc72e386f5cf670766573eb74b3bc5], 
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E1842850-FB16-4471-B327-7343FBAED55C}, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\CLASSES\CLSID\{E1842850-FB16-4471-B327-7343FBAED55C}, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{93D511B5-143B-4A99-ABFC-B5B78AD0AE1B}, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{AA760BA8-5862-4BC5-9263-4452CBC0B264}, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{AA760BA8-5862-4BC5-9263-4452CBC0B264}, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{93D511B5-143B-4A99-ABFC-B5B78AD0AE1B}, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 

Registrierungswerte: 1
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\SYSTEMK|browser,  ie ff cr, In Quarantäne, [26d441141269a393214359406f93a45c]

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 5
PUP.Optional.SystemK.A, C:\ProgramData\systemk, In Quarantäne, [02f87ed72655d2645caf5f39d82a22de], 
PUP.Optional.OpenCandy, C:\Users\Anton Peter\AppData\Roaming\OpenCandy, In Quarantäne, [b446f36293e8f541578d2c4a8b7738c8], 
PUP.Optional.OpenCandy, C:\Users\Anton Peter\AppData\Roaming\OpenCandy\377096233C024DD0A5268197586506F2, In Quarantäne, [b446f36293e8f541578d2c4a8b7738c8], 
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk, Löschen bei Neustart, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64, Löschen bei Neustart, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 

Dateien: 32
PUP.Optional.SystemK.A, C:\Program Files (x86)\Settings Manager\systemk\x64\systemkmgrc1.cfg, In Quarantäne, [f00ac194b7c479bdb7e0ec908e7325db], 
PUP.Optional.Linkey.A, C:\Users\Anton Peter\AppData\Local\Temp\~nsu.tmp\Au_.exe, In Quarantäne, [52a895c094e7261064136efdbd44e31d], 
PUP.Optional.AztecMedia.A, C:\Users\Anton Peter\AppData\Local\Temp\nsh98A4.tmp\Helper.dll, In Quarantäne, [8d6d97be3a41fc3ad2fca6a514f03ac6], 
PUP.Optional.AztecMedia.A, C:\Users\Anton Peter\AppData\Local\Temp\nsh98A4.tmp\Starter.exe, In Quarantäne, [dc1e361ffe7df4420eb125269272b64a], 
PUP.Optional.Softonic.A, C:\Users\Anton Peter\Downloads\SoftonicDownloader_fuer_k-lite-codec-pack.exe, In Quarantäne, [cd2d9bbac8b3cf672a8336ea7889d927], 
PUP.Optional.Iminent.A, C:\Users\Anton Peter\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage, In Quarantäne, [ae4c282d2a51bc7ad1ee810ed0328878], 
PUP.Optional.SystemK.A, C:\ProgramData\systemk\general.cfg, In Quarantäne, [02f87ed72655d2645caf5f39d82a22de], 
PUP.Optional.SystemK.A, C:\ProgramData\systemk\coordinator.cfg, In Quarantäne, [02f87ed72655d2645caf5f39d82a22de], 
PUP.Optional.SystemK.A, C:\ProgramData\systemk\S-1-5-21-3143199781-2537010271-4102635995-1001.cfg, In Quarantäne, [02f87ed72655d2645caf5f39d82a22de], 
PUP.Optional.SystemK.A, C:\ProgramData\systemk\stats.cfg, In Quarantäne, [02f87ed72655d2645caf5f39d82a22de], 
PUP.Optional.DefaultSearch.A, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml, In Quarantäne, [c337f065ff7c93a34318990011f17b85], 
PUP.Optional.OpenCandy, C:\Users\Anton Peter\AppData\Roaming\OpenCandy\377096233C024DD0A5268197586506F2\PokkiInstaller.exe, In Quarantäne, [b446f36293e8f541578d2c4a8b7738c8], 
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\favicon.ico, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\Helper.dll, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\Internet Explorer Settings.exe, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\syskldr.dll, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\syskldr_u.dll, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\systemk.dll, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\systemkbho.dll, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\systemkbho.dll, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\systemkChrome.dll, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\systemkmgrc1.cfg, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\tbicon.exe, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\Uninstall.exe, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\Internet Explorer Settings.exe, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll, Löschen bei Neustart, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\syskldr.dll, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\syskldr_u.dll, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\systemk\x64\systemk.dll, In Quarantäne, [17e3a9ac2d4eb97ddb14c1bcf909b34d], 
PUP.Optional.DefaultSearch.A, C:\Users\Anton Peter\AppData\Local\Google\Chrome\User Data\Default\Preferences, Gut: (), Schlecht: (        "homepage" : "hxxp://www.default-search.net?sid=476&aid=122&itype=a&ver=12692&tm=358&src=hmp",), Ersetzt,[32c8ea6b7209e94df68a1272bb490ff1]
PUP.Optional.DefaultSearch.A, C:\Users\Anton Peter\AppData\Local\Google\Chrome\User Data\Default\Preferences, Gut: (), Schlecht: (    "homepage" : "hxxp://www.default-search.net?sid=476&aid=122&itype=a&ver=12692&tm=358&src=hmp",), Ersetzt,[e51571e45a211a1cb9c7e69eac58db25]
PUP.Optional.DefaultSearch.A, C:\Users\Anton Peter\AppData\Local\Google\Chrome\User Data\Default\Preferences, Gut: (), Schlecht: (        "search_url" : "hxxp://www.default-search.net/search?sid=476&aid=122&itype=a&ver=12692&tm=358&src=ds&p={searchTerms}"), Ersetzt,[b64482d32d4e66d0057c057f9e666997]

Physische Sektoren: 0
(No malicious items detected)


(end)