![]() |
|
Log-Analyse und Auswertung: Kein Internet-Zugriff nach Adware-Säuberung!Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
| ![]() Kein Internet-Zugriff nach Adware-Säuberung! Gut, dann nochmal im passenden Unterforum... Hallo zusammen, ich habe seit heute ein großes Problem auf meinem Notebook. Beim Installieren von Freeware sind mir wohl einige unerwünschte Programme, hauptsächlich Adware, untergekommen (RocketTab, Omiga-Plus, Vi-View...) Außer, dass ich bei jeder Google-Suche nervige Werbungen hatte, hatte ich kinerlei Probleme. Dennoch habe ich mich dazu entschlossen, heute mal aufzuräumen. Zuerst habe ich es manuell versucht, über Systemsteuereung -> Programme deinstallieren. Einiges auch noch per Hand im Explorer gesucht und gelöscht. Daraufhin hatte ich im Firefox Probleme, viele Websites zu öffnen, es kam immer die Meldung, dass dem Sicherheitszertifikat nicht getraut wird. Also die Sache richtig angegangen, mit Sophos, und dann auch Anti-Malwarebytes drüber gegangen. Besonders letzteres hat viele Dinge entfernt... Nach dem Neustart dann das Problem: Ich kann, trotz bestehender Internetverbindung, kann ich nicht mehr aufs Internet zugreifen. Egal, ob Firefox oder IE. Firefox sagt: "Die verbindung zum Server wurde zurückgesetzt, während die Seite geladen wurde." Keine Chance...an der FIrewall liegts wohl nich, da hab ich nix geändert, und Firefox steht auch drin, dass es natürlich aufs Internet zugreifen darf... Pingtest zeigt: Keine Probleme, kann eigentlich aufs INet zugreifen...kanns irgendwie an der rausgeschmissenen Adware liegen? Ich bin überfragt :/ Code:
ATTFilter ****************** Sophos Anti-Virus Protokoll - 24.07.2014 20:16:58 ************** ... 20140724 135131 Scan 'Computer scannen' gestartet. 20140724 135305 Datei "C:\Program Files (x86)\Browsersafeguard\uninstall.BrowserSafeguard.exe" gehört zu Adware/PUA 'Generic PUA ML' (Typ Andere). 20140724 135305 Datei "C:\Windows\System32\Tasks\BrowserSafeguard Update Task" gehört zu Adware/PUA 'Generic PUA ML' (Typ Andere). 20140724 140236 Datei "C:\Program Files (x86)\Browsersafeguard\uninstall.BrowserSafeguard.exe" gehört zu Adware/PUA 'Generic PUA ML' (Typ Andere). 20140724 140236 Datei "C:\Windows\System32\Tasks\BrowserSafeguard Update Task" gehört zu Adware/PUA 'Generic PUA ML' (Typ Andere). 20140724 140238 Datei "C:\Windows\System32\Tasks\BrowserSafeguard Update Task" wurde bereinigt. 20140724 140239 Datei "C:\Program Files (x86)\Browsersafeguard\uninstall.BrowserSafeguard.exe" wurde bereinigt. 20140724 140239 Adware/PUA 'Generic PUA ML' wurde entfernt. 20140724 140542 Datei "C:\Users\fkrohn\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MTZ3GMPV\rtinstaller[1].exe" gehört zu Adware/PUA 'Generic PUA ML' (Typ Andere). 20140724 140546 Datei "C:\Users\fkrohn\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SWNPN98J\ssupsetup_binstall3[1].exe" gehört zu Adware/PUA 'Generic PUA OM' (Typ Andere). 20140724 140617 Adware/PUA 'Generic PUA ML' wurde erkannt. 20140724 140617 Adware/PUA 'Generic PUA OM' wurde erkannt. 20140724 140617 Scan 'Computer scannen' abgeschlossen. 20140724 140617 Ergebniszusammenfassung für Scan 'Computer scannen': Gescannte Objekte: 199333 Fehler: 0 Objekte in Quarantäne: 2 Behandelte Objekte: 0 ... (18 Objekte) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 24.07.2014 Scan Time: 16:31:42 Logfile: Log.txt Administrator: Yes Version: 2.00.2.1012 Malware Database: v2014.07.24.04 Rootkit Database: v2014.07.17.01 License: Trial Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: fkrohn Scan Type: Threat Scan Result: Completed Objects Scanned: 330262 Time Elapsed: 5 min, 5 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 3 PUP.Optional.IePluginService.A, C:\ProgramData\IePluginServices\PluginService.exe, 2256, Delete-on-Reboot, [d3810b98f6853204a64ce27c61a04db3] PUP.Optional.WPM.A, C:\ProgramData\WindowsProtectManger\wprotectmanager.exe, 2300, Delete-on-Reboot, [2a2abde61e5dea4c8268e2af11f0926e] PUP.Optional.RocketTab.A, C:\Program Files (x86)\Browsersafeguard\BrowserSafeguard.exe, 3828, Delete-on-Reboot, [6de74f545e1db185719054f6758b8779] Modules: 1 PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\DpInterface32.dll, Delete-on-Reboot, [193b8d162b50211574caf8965aa75aa6], Registry Keys: 21 PUP.Optional.IePluginService.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IePluginServices, Quarantined, [d3810b98f6853204a64ce27c61a04db3], PUP.Optional.WPM.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WindowsProtectManger, Quarantined, [2a2abde61e5dea4c8268e2af11f0926e], PUP.Optional.WPM.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WindowsProtectManger, Quarantined, [2a2abde61e5dea4c8268e2af11f0926e], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, Quarantined, [ef65544fa2d953e3358f58068c76f60a], PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, Quarantined, [ef65544fa2d953e3358f58068c76f60a], PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, Quarantined, [ef65544fa2d953e3358f58068c76f60a], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, Quarantined, [ef65544fa2d953e3358f58068c76f60a], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, Quarantined, [ef65544fa2d953e3358f58068c76f60a], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, Quarantined, [ef65544fa2d953e3358f58068c76f60a], PUP.Optional.SupTab.A, HKU\S-1-5-21-556708241-424655353-3447792364-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, Quarantined, [ef65544fa2d953e3358f58068c76f60a], PUP.Optional.SupTab.A, HKU\S-1-5-21-556708241-424655353-3447792364-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, Quarantined, [ef65544fa2d953e3358f58068c76f60a], PUP.Optional.SupraSavings, HKLM\SOFTWARE\suprasavings, Quarantined, [193b5d462556c57173222d99ab57e41c], PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, Quarantined, [9bb9584bea91fa3cc3d2928039cb7888], PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\suprasavings, Quarantined, [fa5a3d66a3d857df152903dd08fad62a], PUP.Optional.ISearch.A, HKLM\SOFTWARE\WOW6432NODE\omiga-plusSoftware, Quarantined, [c98bf0b3136850e67293a976b450ca36], PUP.Optional.WindowsProtectManger.A, HKLM\SOFTWARE\WOW6432NODE\supWindowsProtectManger, Quarantined, [193b8122b5c6979f3b0e418bd72b3ac6], PUP.Optional.BrowserSafeGuard.A, HKLM\SOFTWARE\WOW6432NODE\BROWSERSAFEGUARD, Quarantined, [f1636e354d2ed26415e3ce3e9371ab55], PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, Quarantined, [85cf6b38cfacd95d2e674bc707fd0af6], PUP.Optional.BrowserSafeGuard.A, HKU\S-1-5-21-556708241-424655353-3447792364-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BrowserSafeguardInstalled, Quarantined, [ed67950e46354aec86d7814c41c148b8], PUP.Optional.SupraSavings.A, HKU\S-1-5-21-556708241-424655353-3447792364-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\suprasavings, Quarantined, [ed67a102037837ff1ec45b87c33f58a8], PUP.Optional.Qone8, HKU\S-1-5-21-556708241-424655353-3447792364-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, Quarantined, [ec6803a089f20333355fec26bc48946c], Registry Values: 5 PUP.Optional.RocketTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|BrowserSafeguard, "C:\Program Files (x86)\Browsersafeguard\BrowserSafeguard.exe", Quarantined, [6de74f545e1db185719054f6758b8779] PUP.Optional.BrowserSafeGuard.A, HKLM\SOFTWARE\WOW6432NODE\BROWSERSAFEGUARD|sourceid, google_mp3download-songs.com|google_groovestream-display-DE-300x250-mp3download-songs-33339486203, Quarantined, [f1636e354d2ed26415e3ce3e9371ab55] PUP.Optional.FastStart.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|faststartff@gmail.com, C:\Users\fkrohn\AppData\Roaming\Mozilla\Firefox\Profiles\hnzi79s9.default\extensions\faststartff@gmail.com, Quarantined, [5ff5d1d2fd7ee6509e90d056a36131cf] PUP.Optional.WPM.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WINDOWSPROTECTMANGER|ImagePath, C:\ProgramData\WindowsProtectManger\wprotectmanager.exe -service, Quarantined, [98bc970c3546f5419307e7e8fd05936d] PUP.Optional.FastStart.A, HKU\S-1-5-21-556708241-424655353-3447792364-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS|appid, faststartff@gmail.com, Quarantined, [bd97f5ae2952033383c85577f60c4bb5] Registry Data: 16 PUP.Optional.Skytech.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|AppInit_DLLs, C:\PROGRA~2\SupTab\SEARCH~2.DLL, Good: (), Bad: (C:\PROGRA~2\SupTab\SEARCH~2.DLL),Replaced,[a7ad3d66fb80d85e102e5e30ac55f20e] PUP.Optional.Skytech.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|AppInit_DLLs, C:\PROGRA~2\SupTab\SEARCH~1.DLL, Good: (), Bad: (C:\PROGRA~2\SupTab\SEARCH~1.DLL),Replaced,[e371376cb1ca43f3ba84266823de6e92] PUP.Optional.ISearch.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://isearch.omiga-plus.com/?type=sc&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30, Good: (iexplore.exe), Bad: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://isearch.omiga-plus.com/?type=sc&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30),Replaced,[85cfe0c3225951e5a117703643c1a45c] PUP.Optional.ISearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30&q={searchTerms}, Good: (www.google.com), Bad: (hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30&q={searchTerms}),Replaced,[3b19c5de641743f3c5f54363df25946c] PUP.Optional.ISearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://isearch.omiga-plus.com/?type=hp&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30, Good: (www.google.com), Bad: (hxxp://isearch.omiga-plus.com/?type=hp&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30),Replaced,[e074198aa9d2ab8b9029dcca10f4e917] PUP.Optional.ISearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://isearch.omiga-plus.com/?type=hp&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30, Good: (www.google.com), Bad: (hxxp://isearch.omiga-plus.com/?type=hp&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30),Replaced,[44103d667902a98d6d4e7135c73dae52] PUP.Optional.ISearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30&q={searchTerms}, Good: (www.google.com), Bad: (hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30&q={searchTerms}),Replaced,[193b7f247b00b38313abe1c5887c6997] PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Replaced,[2133c3e0f784171fadba48698e7630d0] PUP.Optional.ISearch.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://isearch.omiga-plus.com/?type=sc&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30, Good: (iexplore.exe), Bad: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://isearch.omiga-plus.com/?type=sc&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30),Replaced,[9fb5f1b2b4c7ef476652693d3acaa759] PUP.Optional.ISearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30&q={searchTerms}, Good: (www.google.com), Bad: (hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30&q={searchTerms}),Replaced,[7adad6cd8af102341aa03e68669e2fd1] PUP.Optional.ISearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://isearch.omiga-plus.com/?type=hp&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30, Good: (www.google.com), Bad: (hxxp://isearch.omiga-plus.com/?type=hp&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30),Replaced,[cf859013cab1340246734e5846be3dc3] PUP.Optional.ISearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://isearch.omiga-plus.com/?type=hp&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30, Good: (www.google.com), Bad: (hxxp://isearch.omiga-plus.com/?type=hp&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30),Replaced,[d97b2e7594e7cf6757641d89c0440df3] PUP.Optional.ISearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30&q={searchTerms}, Good: (www.google.com), Bad: (hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30&q={searchTerms}),Replaced,[b3a1673cf18add59546a505643c1867a] PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Replaced,[afa53a695328ac8ac3a4545dde2604fc] PUP.Optional.ISearch.A, HKU\S-1-5-21-556708241-424655353-3447792364-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://isearch.omiga-plus.com/?type=hp&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30, Good: (www.google.com), Bad: (hxxp://isearch.omiga-plus.com/?type=hp&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30),Replaced,[fb599d0607743006e7cfdacc9371a55b] PUP.Optional.ISearch.A, HKU\S-1-5-21-556708241-424655353-3447792364-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://isearch.omiga-plus.com/?type=hp&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30, Good: (www.google.com), Bad: (hxxp://isearch.omiga-plus.com/?type=hp&ts=1403870062&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30),Replaced,[9cb8a4fffc7f7db9583e3175d03408f8] Folders: 37 PUP.Optional.BrowserSafeGuard.A, C:\Program Files (x86)\Browsersafeguard, Delete-on-Reboot, [db790e957308072ff7ffa567cc386799], PUP.Optional.BrowserSafeGuard.A, C:\Program Files (x86)\Browsersafeguard\Resources, Quarantined, [db790e957308072ff7ffa567cc386799], PUP.Optional.OpenCandy, C:\Users\fkrohn\AppData\Roaming\OpenCandy, Quarantined, [98bcabf82c4f15210bec90167989c937], PUP.Optional.OpenCandy, C:\Users\fkrohn\AppData\Roaming\OpenCandy\10DC4C0CFD5D442FA97A7B8DDC2B3C36, Quarantined, [98bcabf82c4f15210bec90167989c937], PUP.Optional.SupraSavings.A, C:\Program Files\suprasavings, Quarantined, [2430e4bf58236cca5429258982806898], PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices, Delete-on-Reboot, [b3a17e253c3f191df2db5a62e81a639d], PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update, Quarantined, [b3a17e253c3f191df2db5a62e81a639d], PUP.Optional.WPM.A, C:\ProgramData\WindowsProtectManger, Delete-on-Reboot, [ce86f3b03b400d292d475f5e55adb050], PUP.Optional.WPM.A, C:\ProgramData\WindowsProtectManger\log, Quarantined, [ce86f3b03b400d292d475f5e55adb050], PUP.Optional.WPM.A, C:\ProgramData\WindowsProtectManger\update, Quarantined, [ce86f3b03b400d292d475f5e55adb050], PUP.Optional.SystemSpeedup, C:\Users\fkrohn\AppData\Roaming\systweak\ssd, Quarantined, [88ccd5cebfbc68ce39abae1110f2e11f], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab, Delete-on-Reboot, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Users\fkrohn\AppData\Roaming\SupTab, Quarantined, [f95bfba8bfbc2a0c81e853727e84b14f], Files: 78 PUP.Optional.IePluginService.A, C:\ProgramData\IePluginServices\PluginService.exe, Delete-on-Reboot, [d3810b98f6853204a64ce27c61a04db3], PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\DpInterface32.dll, Delete-on-Reboot, [193b8d162b50211574caf8965aa75aa6], PUP.Optional.WPM.A, C:\ProgramData\WindowsProtectManger\wprotectmanager.exe, Delete-on-Reboot, [2a2abde61e5dea4c8268e2af11f0926e], PUP.Optional.RocketTab.A, C:\Program Files (x86)\Browsersafeguard\BrowserSafeguard.exe, Delete-on-Reboot, [6de74f545e1db185719054f6758b8779], PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect64.dll, Quarantined, [a7ad3d66fb80d85e102e5e30ac55f20e], PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect32.dll, Quarantined, [e371376cb1ca43f3ba84266823de6e92], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SupTab.dll, Quarantined, [ef65544fa2d953e3358f58068c76f60a], PUP.Optional.BrowserSafeGuard.A, C:\Program Files (x86)\Browsersafeguard\ewebstorewrapper.dll, Quarantined, [db790e957308072ff7ffa567cc386799], PUP.Optional.BrowserSafeGuard.A, C:\Program Files (x86)\Browsersafeguard\config.dat, Quarantined, [db790e957308072ff7ffa567cc386799], PUP.Optional.BrowserSafeGuard.A, C:\Program Files (x86)\Browsersafeguard\makecert.exe, Quarantined, [db790e957308072ff7ffa567cc386799], PUP.Optional.BrowserSafeGuard.A, C:\Program Files (x86)\Browsersafeguard\TrustedRoot.cer, Quarantined, [db790e957308072ff7ffa567cc386799], PUP.Optional.BrowserSafeGuard.A, C:\Program Files (x86)\Browsersafeguard\Resources\certutil.exe, Quarantined, [db790e957308072ff7ffa567cc386799], PUP.Optional.BrowserSafeGuard.A, C:\Program Files (x86)\Browsersafeguard\Resources\libnspr4.dll, Quarantined, [db790e957308072ff7ffa567cc386799], PUP.Optional.BrowserSafeGuard.A, C:\Program Files (x86)\Browsersafeguard\Resources\libplc4.dll, Quarantined, [db790e957308072ff7ffa567cc386799], PUP.Optional.BrowserSafeGuard.A, C:\Program Files (x86)\Browsersafeguard\Resources\libplds4.dll, Quarantined, [db790e957308072ff7ffa567cc386799], PUP.Optional.BrowserSafeGuard.A, C:\Program Files (x86)\Browsersafeguard\Resources\nss3.dll, Quarantined, [db790e957308072ff7ffa567cc386799], PUP.Optional.BrowserSafeGuard.A, C:\Program Files (x86)\Browsersafeguard\Resources\smime3.dll, Quarantined, [db790e957308072ff7ffa567cc386799], PUP.Optional.BrowserSafeGuard.A, C:\Program Files (x86)\Browsersafeguard\Resources\softokn3.dll, Quarantined, [db790e957308072ff7ffa567cc386799], PUP.Optional.OpenCandy, C:\Users\fkrohn\AppData\Roaming\OpenCandy\10DC4C0CFD5D442FA97A7B8DDC2B3C36\zafwSetupWeb_131_211_000.exe, Quarantined, [98bcabf82c4f15210bec90167989c937], PUP.Optional.SupraSavings.A, C:\Program Files\suprasavings\uninstaller.exe, Quarantined, [2430e4bf58236cca5429258982806898], PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update\conf, Quarantined, [b3a17e253c3f191df2db5a62e81a639d], PUP.Optional.WPM.A, C:\ProgramData\WindowsProtectManger\log\wprotectmanager_2014-06-27[13-54-43-623].log, Quarantined, [ce86f3b03b400d292d475f5e55adb050], PUP.Optional.SystemSpeedup, C:\Users\fkrohn\AppData\Roaming\systweak\ssd\SSDPTstub.exe, Quarantined, [88ccd5cebfbc68ce39abae1110f2e11f], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\DpInterface64.dll, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\DpInterfacef32.dll, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\ient.json, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\install.data, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\RSHP.exe, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SpAPPSv32.dll, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SpAPPSv64.dll, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\uninstall.exe, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\WebDataJs, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\data.html, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE.html, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE8.html, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\main.css, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\ver.txt, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\arrow.png, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_add_logo.png, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_add_logo_hover.png, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_logo.png, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\googlelogo.png, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\googlelogo2.png, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\google_trends.png, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon128.png, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon16.png, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon48.png, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\loading.gif, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\logo32.ico, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\0.png, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\common.js, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ga.js, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ie8.js, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery-1.11.0.min.js, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\js.js, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\library.js, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit.js, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt\messages.json, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json, Quarantined, [6aea129126550d29b7b1e9dc19e925db], PUP.Optional.ISearch.A, C:\Users\fkrohn\AppData\Roaming\Mozilla\Firefox\Profiles\pefkyspb.default-1406209110676\prefs.js, Good: (), Bad: (user_pref("browser.startup.homepage", "hxxp://isearch.omiga-plus.com/?type=hppp&ts=1406211344&from=adks&uid=SKXhynixXSH920XmSATAX256GB_EI44N201310404Q30");), Replaced,[2232505345363ef86eff8e53bb49a759] Physical Sectors: 0 (No malicious items detected) (end) |