| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Spyware eingefangen .... !Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
22.07.2014, 00:15
| #1 |
 |  Spyware eingefangen .... ! hallo! Das böse Internet hat mich mal wider reingelegt. Als ich mir den Audiograbber downloaden wollte ( als zuverlässig und sicher empfohlen) .. ähm und dies auch tat bekam ich unerwünschten Besuch. KIS meldetet gleich eine Bedrohung und startete die Aktive Desinfektion. Danach Neustart und dann lies ich erstmal Malewarebyts durchlaufen. Es wurden 85 Einträge gefunden.Diese habe ich in dem Malewarebyts Menü in die Quarantäne verschoben und dann meldete das Programm das alles ok ist. KIS findet auch nix mehr. Allerdings find ich weder die Protokolldatei noch sonst was......... Hmmm Als Typ wurde ein Key diagnostieziert.... (Dann hättet ihr gliech was zum ansehen  )Ok ..... Was nun ?? Ich erwarte in Demut eure Anweisungen gruss rotaran PS: Hier das Log . habs nochgefunden : Code:
ATTFilter <?xml version="1.0" encoding="UTF-16"?>
-<mbam-log>
-<header>
<date>2014/07/22 00:41:04 +0200</date>
<logfile>mbam-log-2014-07-22 (00-41-03).xml</logfile>
<isadmin>yes</isadmin>
</header>
-<engine>
<version>2.00.2.1012</version>
<malware-database>v2014.07.21.09</malware-database>
<rootkit-database>v2014.07.17.01</rootkit-database>
<license>free</license>
<file-protection>disabled</file-protection>
<web-protection>disabled</web-protection>
<self-protection>disabled</self-protection>
</engine>
-<system>
<osversion>Windows 7 Service Pack 1</osversion>
<arch>x64</arch>
<username>mr.x</username>
<filesys>NTFS</filesys>
</system>
-<summary>
<type>threat</type>
<result>completed</result>
<objects>347425</objects>
<time>793</time>
<processes>0</processes>
<modules>0</modules>
<keys>3</keys>
<values>2</values>
<datas>1</datas>
<folders>24</folders>
<files>55</files>
<sectors>0</sectors>
</summary>
-<options>
<memory>enabled</memory>
<startup>enabled</startup>
<filesystem>enabled</filesystem>
<archives>enabled</archives>
<rootkits>enabled</rootkits>
<deeprootkit>disabled</deeprootkit>
<heuristics>enabled</heuristics>
<pup>enabled</pup>
<pum>enabled</pum>
</options>
-<items>
-<key>
<path>HKU\S-1-5-21-648447735-2230146337-2693748210-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>257c6937f289ba7cf33e0e4a2dd554ac</hash>
</key>
-<key>
<path>HKLM\SOFTWARE\WOW6432NODE\SEARCHPROTECT</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>465b237d7902b284d6ab18b1689ab050</hash>
</key>
-<key>
<path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPPD</path>
<vendor>PUP.Optional.SearchProtect</vendor>
<action>success</action>
<hash>722fcbd5de9d5dd97343be0432d0a65a</hash>
</key>
-<value>
<path>HKLM\SOFTWARE\WOW6432NODE\SEARCHPROTECT</path>
<valuename>InstallDir</valuename>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<valuedata>C:\PROGRA~2\SearchProtect</valuedata>
<hash>465b237d7902b284d6ab18b1689ab050</hash>
</value>
-<value>
<path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPPD</path>
<valuename>ImagePath</valuename>
<vendor>PUP.Optional.SearchProtect</vendor>
<action>success</action>
<valuedata>\??\C:\Windows\system32\drivers\SPPD.sys</valuedata>
<hash>722fcbd5de9d5dd97343be0432d0a65a</hash>
</value>
-<data>
<path>HKU\S-1-5-21-648447735-2230146337-2693748210-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path>
<valuename>Start Page</valuename>
<vendor>PUP.Optional.Trovi.A</vendor>
<action>replaced</action>
<valuedata>http://www.trovi.com/?gd=&ctid=CT3322196&octid=EB_ORIGINAL_CTID&ISID=MDD4153E9-21E9-48D7-8C91-3EC782736635&SearchSource=55&CUI=&UM=6&UP=SP345DB048-B58D-4D63-AA1B-A925BA52BB0E&SSPV=</valuedata>
<baddata>http://www.trovi.com/?gd=&ctid=CT3322196&octid=EB_ORIGINAL_CTID&ISID=MDD4153E9-21E9-48D7-8C91-3EC782736635&SearchSource=55&CUI=&UM=6&UP=SP345DB048-B58D-4D63-AA1B-A925BA52BB0E&SSPV=</baddata>
<gooddata>www.google.com</gooddata>
<hash>722ffca4fa81f93d2dc94b5623e140c0</hash>
</data>
-<folder>
<path>C:\Program Files (x86)\SearchProtect</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</folder>
-<folder>
<path>C:\Program Files (x86)\SearchProtect\Main</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</folder>
-<folder>
<path>C:\Program Files (x86)\SearchProtect\Main\bin</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</folder>
-<folder>
<path>C:\Program Files (x86)\SearchProtect\Main\rep</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</folder>
-<folder>
<path>C:\Program Files (x86)\SearchProtect\SearchProtect</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</folder>
-<folder>
<path>C:\Program Files (x86)\SearchProtect\SearchProtect\bin</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</folder>
-<folder>
<path>C:\Program Files (x86)\SearchProtect\SearchProtect\rep</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</folder>
-<folder>
<path>C:\Program Files (x86)\SearchProtect\UI</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</folder>
-<folder>
<path>C:\Program Files (x86)\SearchProtect\UI\bin</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</folder>
-<folder>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</folder>
-<folder>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</folder>
-<folder>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</folder>
-<folder>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\libs</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</folder>
-<folder>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\protection</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</folder>
-<folder>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</folder>
-<folder>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\settings</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</folder>
-<folder>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</folder>
-<folder>
<path>C:\Program Files (x86)\SearchProtect\UI\rep</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</folder>
-<folder>
<path>C:\Users\mr.x\AppData\Local\SearchProtect</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>ddc4e1bf91ea4fe784054a7091712dd3</hash>
</folder>
-<folder>
<path>C:\Users\mr.x\AppData\Local\SearchProtect\SearchProtect</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>ddc4e1bf91ea4fe784054a7091712dd3</hash>
</folder>
-<folder>
<path>C:\Users\mr.x\AppData\Local\SearchProtect\SearchProtect\rep</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>ddc4e1bf91ea4fe784054a7091712dd3</hash>
</folder>
-<folder>
<path>C:\Users\mr.x\AppData\Local\SearchProtect\SearchProtect\STG</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>ddc4e1bf91ea4fe784054a7091712dd3</hash>
</folder>
-<folder>
<path>C:\Users\mr.x\AppData\Local\SearchProtect\UI</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>ddc4e1bf91ea4fe784054a7091712dd3</hash>
</folder>
-<folder>
<path>C:\Users\mr.x\AppData\Local\SearchProtect\UI\rep</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>ddc4e1bf91ea4fe784054a7091712dd3</hash>
</folder>
-<file>
<path>C:\Program Files (x86)\SearchProtect\EULA.txt</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\Main\rep\SystemRepository.dat</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\settings.html</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\style.css</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\bubble.css</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\bubble.html</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-selected.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-default.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-onclick.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-Rollover.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-uninstall.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-with-logo.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgNotif.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettings.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettingsDS.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgUninstall.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnBlue.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnClose.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnSilver.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\button-bg.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_checked.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_def.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-def.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-over-click.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\gray-bg.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-def.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\icon-win.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\info-icon.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-rollover.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-selected.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-def.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-selected.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button2.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Settings-icon.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\text-field.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\v.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\x.png</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.css</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.html</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.css</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.html</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.css</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.html</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.css</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.html</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>08991e82d6a5f046af8054b94db7a759</hash>
</file>
-<file>
<path>C:\Users\mr.x\AppData\Local\SearchProtect\SearchProtect\rep\UserRepository.dat</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>ddc4e1bf91ea4fe784054a7091712dd3</hash>
</file>
-<file>
<path>C:\Users\mr.x\AppData\Local\SearchProtect\SearchProtect\rep\UserSettings.dat</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>ddc4e1bf91ea4fe784054a7091712dd3</hash>
</file>
-<file>
<path>C:\Users\mr.x\AppData\Local\SearchProtect\UI\rep\UIRepository.dat</path>
<vendor>PUP.Optional.SearchProtect.A</vendor>
<action>success</action>
<hash>ddc4e1bf91ea4fe784054a7091712dd3</hash>
</file>
-<file>
<path>C:\Users\mr.x\AppData\Roaming\Mozilla\Firefox\Profiles\i8knnz7q.default\prefs.js</path>
<vendor>PUP.Optional.Trovi</vendor>
<action>replaced</action>
<baddata>user_pref("browser.search.selectedEngine", "Trovi search");</baddata>
<gooddata/>
<hash>178accd4ed8e4ee895a1eaf1fe06738d</hash>
</file>
-<file>
<path>C:\Users\mr.x\AppData\Roaming\Mozilla\Firefox\Profiles\i8knnz7q.default\prefs.js</path>
<vendor>PUP.Optional.Trovi.A</vendor>
<action>replaced</action>
<baddata>user_pref("browser.startup.homepage", "http://www.trovi.com/?gd=&ctid=CT3322196&octid=EB_ORIGINAL_CTID&ISID=MDD4153E9-21E9-48D7-8C91-3EC782736635&SearchSource=55&CUI=&UM=6&UP=SP345DB048-B58D-4D63-AA1B-A925BA52BB0E&SSPV=");</baddata>
<gooddata/>
<hash>722f4060ea91cc6ae7e4a4377f85ba46</hash>
</file>
-<file>
<path>C:\Users\mr.x\AppData\Roaming\Mozilla\Firefox\Profiles\i8knnz7q.default\prefs.js</path>
<vendor>PUP.Optional.Trovi.A</vendor>
<action>replaced</action>
<baddata>user_pref("browser.newtab.url", "http://www.trovi.com/?gd=&ctid=CT3322196&octid=EB_ORIGINAL_CTID&ISID=MDD4153E9-21E9-48D7-8C91-3EC782736635&SearchSource=69&CUI=&SSPV=&Lay=1&UM=6&UP=SP345DB048-B58D-4D63-AA1B-A925BA52BB0E");</baddata>
<gooddata/>
<hash>8021eeb22952f1450cc0578425dfea16</hash>
</file>
</items>
</mbam-log>
__________________ Heghlu'meH QaQ jajvam ! Geändert von rotaran (22.07.2014 um 00:37 Uhr) |
| Themen zu Spyware eingefangen .... ! |
| ansehen, audiograbber, bedrohung, downloaden, eingefangen, gefangen, glaskugel, interne, msil/advancedsystemprotector.d, neustart, quarantäne, spyware, unerwünschte, unerwünschten, win32/bundled.toolbar.google.d, win32/bundled.toolbar.google.e, zuverlässig |
Baum-Darstellung