![]() |
|
Log-Analyse und Auswertung: Zugang bei Emailproider wg Trojanerverdacht gesperrt und viele Funde mit malewarbytesWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() ![]() | ![]() Zugang bei Emailproider wg Trojanerverdacht gesperrt und viele Funde mit malewarbytes Hallo zusammen, Vodafone/Arcor hatten meinen Zugang blockiert, da wohl mit meiner Adresse Massenmails verschickt wurden. Ich solle meinen Rechner prüfen. Das habe ich nun mit malewarebytes gemacht. Avira premium ist dauerhaft installiert und hat nie angeschlagen. Habe win7 64 bit. Malewarebytes hat weit über 100 Objekte gefunden (alle beginnen mit pub.). Ich bin geschockt, da ich doch sehr vorsichtig bin. Nach diesem Fund habe ich zunächst das Protokoll gesichert: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 04.08.2014 Suchlauf-Zeit: 17:51:37 Logdatei: 1 Protokoll nach erstem Scann.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.08.04.05 Rootkit Datenbank: v2014.08.01.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Self-protection: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: *** Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 361325 Verstrichene Zeit: 20 Min, 37 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 3 PUP.Optional.Spigot.A, C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe, 2400, , [3263ae1407744aec269c513a5ca5b947] PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe, 3084, , [c0d5645e7902e25472d0259445bd15eb] PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings64.exe, 3256, , [c0d5645e7902e25472d0259445bd15eb] Module: 22 PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\enhancedNT.dll, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], Registrierungsschlüssel: 20 PUP.Optional.Spigot.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Application Updater, , [3263ae1407744aec269c513a5ca5b947], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, , [0392378bcfac0135e74fcbd00200d42c], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, , [0392378bcfac0135e74fcbd00200d42c], PUP.Optional.YTDToolbar, HKLM\SOFTWARE\CLASSES\CLSID\{F3FEE66E-E034-436a-86E4-9690573BEE8A}, , [9bfae5dda8d369cda589b3b2fb0732ce], PUP.Optional.YTDToolbar, HKLM\SOFTWARE\CLASSES\CLSID\{F3FEE66E-E034-436A-86E4-9690573BEE8A}\INPROCSERVER32, , [9bfae5dda8d369cda589b3b2fb0732ce], PUP.Optional.YTDToolbar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{F3FEE66E-E034-436A-86E4-9690573BEE8A}, , [9bfae5dda8d369cda589b3b2fb0732ce], PUP.Optional.YTDToolbar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F3FEE66E-E034-436A-86E4-9690573BEE8A}, , [9bfae5dda8d369cda589b3b2fb0732ce], PUP.Optional.YTDToolbar, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{F3FEE66E-E034-436A-86E4-9690573BEE8A}, , [9bfae5dda8d369cda589b3b2fb0732ce], PUP.Optional.YTDToolbar, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{F3FEE66E-E034-436A-86E4-9690573BEE8A}, , [9bfae5dda8d369cda589b3b2fb0732ce], PUP.Optional.Babylon.A, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [781d299955260036299a7ae7ee14d52b], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Delta Chrome Toolbar, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.DataMangr.A, HKLM\SOFTWARE\WOW6432NODE\DataMngr, , [890c447e0675ae880c06687804fe3bc5], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\eooncjejnppfjjklapaamhcdmjbilmde, , [a0f5be04d7a4ea4c759d62b163a15aa6], PUP.Optional.Spigot.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\icdlfehblmklkikfigmjhbmmpmkmpooj, , [c3d2784a403bd0663c0a598dbc46b749], PUP.Optional.Spigot.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\mhkaekfpcppmmioggniknbnbdbcigpkk, , [2372e7dba6d575c11a2de8fef90952ae], PUP.Optional.DataMngr.A, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr, , [eea7843e4a311c1a31babe54669ed52b], PUP.Optional.DataMngr.A, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, , [098c7b47fb80f24433b73dd5b94bea16], PUP.Optional.Spigot.A, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Search Settings, , [eaabf6cc83f8ab8bc8779d96b25228d8], PUP.Optional.Babylon.A, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BABSOLUTION\Redir, , [42535d650576ff3799546fa4f50f7a86], PUP.Optional.Babylon.A, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BABSOLUTION\Updater, , [1481f2d06f0c43f36589789b6f95b34d], Registrierungswerte: 10 PUP.Optional.Spigot.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS|C:\PROGRAM FILES (X86)\APPLICATION UPDATER\APPLICATIONUPDATER.EXE, 1, , [3263ae1407744aec269c513a5ca5b947] PUP.Optional.YTDToolbar, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{F3FEE66E-E034-436A-86E4-9690573BEE8A}, , [9bfae5dda8d369cda589b3b2fb0732ce], PUP.Optional.YTDToolbar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{F3FEE66E-E034-436A-86E4-9690573BEE8A}, YTD Toolbar, , [9bfae5dda8d369cda589b3b2fb0732ce] PUP.Optional.YTDToolbar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{F3FEE66E-E034-436A-86E4-9690573BEE8A}, YTD Toolbar, , [9bfae5dda8d369cda589b3b2fb0732ce] PUP.Optional.YTDToolbar, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{F3FEE66E-E034-436a-86E4-9690573BEE8A}, , [99fcc6fcd0ab24125dd1fd688f734fb1], PUP.Optional.YTDToolbar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{F3FEE66E-E034-436a-86E4-9690573BEE8A}, , [0d886d554239ce681a14d3922ad87987], PUP.Optional.YTDToolbar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{F3FEE66E-E034-436a-86E4-9690573BEE8A}, , [7e17c1017a0165d1ed41283de2206b95], PUP.Optional.Delta.A, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|NTRedirect, C:\Windows\SysWOW64\rundll32.exe "C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\enhancedNT.dll",Run, , [97fe7250b4c7e1550f0aa28fdd274ab6] PUP.Optional.Spigot.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS|C:\PROGRAM FILES (X86)\COMMON FILES\SPIGOT\SEARCH SETTINGS\SEARCHSETTINGS.EXE, 1, , [c0d5645e7902e25472d0259445bd15eb] PUP.Optional.Spigot.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SearchSettings, "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe", , [c0d5645e7902e25472d0259445bd15eb] Registrierungsdaten: 0 (No malicious items detected) Ordner: 16 PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.OpenCandy, C:\Users\Claudia\AppData\Roaming\OpenCandy, , [4e47c3ffc7b469cd86001896ea18c13f], PUP.Optional.OpenCandy, C:\Users\Claudia\AppData\Roaming\OpenCandy\369A3AFB214148E5B1CDF99095D27CFC, , [4e47c3ffc7b469cd86001896ea18c13f], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Local\Temp\mt_ffx\Delta, , [7520b50df289f2446d364767748e9a66], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Local\Temp\mt_ffx\Delta\delta, , [7520b50df289f2446d364767748e9a66], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Local\Temp\mt_ffx\Delta\delta\1.8.22.0, , [7520b50df289f2446d364767748e9a66], PUP.Optional.Conduit.A, C:\Users\Claudia\AppData\Local\Temp\ct3197087, , [880df4ce4d2e9c9a01fbe9c5659dd62a], PUP.Optional.Conduit.A, C:\Users\Claudia\AppData\Local\Temp\ct3197087\xpi, , [880df4ce4d2e9c9a01fbe9c5659dd62a], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\Lang, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\Res, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\GC, , [65309e242358ee4868744a77a0624eb2], PUP.Optional.BabSolution.A, C:\Users\Claudia\AppData\Roaming\BabSolution\CR, , [6e27a022c7b4de582561dee83fc3f30d], PUP.Optional.Spigot.A, C:\Users\Claudia\AppData\LocalLow\Search Settings, , [1d782e948af151e59c34c2048f73eb15], PUP.Optional.Spigot.A, C:\Users\Claudia\AppData\LocalLow\Search Settings\res, , [1d782e948af151e59c34c2048f73eb15], PUP.Optional.Spigot.A, C:\Users\Claudia\AppData\LocalLow\Search Settings\temp, , [1d782e948af151e59c34c2048f73eb15], Dateien: 129 PUP.Optional.Spigot.A, C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe, , [3263ae1407744aec269c513a5ca5b947], PUP.Optional.YTDToolbar, C:\Program Files (x86)\YTD Toolbar\IE\9.6\ytdToolbarIE64.dll, , [9bfae5dda8d369cda589b3b2fb0732ce], PUP.Optional.YTDToolbar, C:\Program Files (x86)\YTD Toolbar\IE\9.6\ytdToolbarIE.dll, , [9bfae5dda8d369cda589b3b2fb0732ce], PUP.Optional.Babylon.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\NTRedirect.dll, , [5243883a3645f2445dd9f4858183c739], PUP.Optional.DeltaTB, C:\Users\Claudia\AppData\Local\Temp\DeltaTB.exe, , [05903d85c6b56fc71083e13ff30dfe02], PUP.Optional.Bandoo, C:\Users\Claudia\AppData\Local\Temp\TJJW7Raz.exe.part, , [385d17ab5a21ba7c4039c84b5ea320e0], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus7C21\CrxUpdater_d.exe, , [e3b21aa86219ef47c7d4304d37cd8b75], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus83FD\CrxUpdater_d.exe, , [8e073092bebd6cca663516673aca0bf5], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus88FD\CrxUpdater_d.exe, , [6a2b2c96bebdf93d0596f38ae91bc33d], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus97AC\CrxUpdater_d.exe, , [c5d0289a6f0cd75f9b00d8a50afa53ad], PUP.Optional.Conduit, C:\Users\Claudia\AppData\Local\Temp\ct3197087\ieLogic.exe, , [7f1603bf4f2c43f3465954dbd729629e], PUP.Optional.Babylon.A, C:\Users\Claudia\AppData\Local\Temp\3878E2C1-BAB0-7891-8762-AADDB9FFAB73\Latest\BExternal.dll, , [455007bb23581c1ac43fd94ad927669a], PUP.Optional.BabSolution.A, C:\Users\Claudia\AppData\Local\Temp\3878E2C1-BAB0-7891-8762-AADDB9FFAB73\Latest\BUSolution.dll, , [ace916ac413a94a20027a571aa5739c7], Trojan.RotBrowse, C:\Users\Claudia\AppData\Local\Temp\3878E2C1-BAB0-7891-8762-AADDB9FFAB73\Latest\ccp.exe, , [1a7bc4fea5d625119098abfc2bd98080], PUP.Optional.Babylon.A, C:\Users\Claudia\AppData\Local\Temp\3878E2C1-BAB0-7891-8762-AADDB9FFAB73\Latest\CrxInstaller.dll, , [c4d111b18dee191d26b651d1bb464eb2], PUP.Optional.Babylon.A, C:\Users\Claudia\AppData\Local\Temp\3878E2C1-BAB0-7891-8762-AADDB9FFAB73\Latest\MntrDLLInstall.dll, , [9500487a5d1ebd79dffe8f939e63b947], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Local\Temp\3878E2C1-BAB0-7891-8762-AADDB9FFAB73\Latest\MyDeltaTB.exe, , [7223a31f542700366684ff7a1ae719e7], PUP.Optional.Babylon.A, C:\Users\Claudia\AppData\Local\Temp\3878E2C1-BAB0-7891-8762-AADDB9FFAB73\Latest\NTRedirect.dll, , [dcb92e94e09b4aecf14585f4e420a957], PUP.Optional.Babylon.A, C:\Users\Claudia\AppData\Local\Temp\3878E2C1-BAB0-7891-8762-AADDB9FFAB73\Latest\Setup.exe, , [563fc6fc3c3fc4721a2e1d019d6308f8], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus5A7E\CrxUpdater_d.exe, , [a4f1f7cba3d8e155afecfc81b054d729], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus7992\CrxUpdater_d.exe, , [c2d315ad3a413ff76a31601d51b3b34d], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus7AD9\CrxUpdater_d.exe, , [43522999314ac076900b4835857f9b65], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8499\CrxUpdater_d.exe, , [a1f406bca6d536004853235abf45c53b], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8526\CrxUpdater_d.exe, , [5d38f5cd097238fe1e7de29b8f7508f8], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8535\CrxUpdater_d.exe, , [c2d34a7883f8092d6c2f2c51a95b03fd], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8564\CrxUpdater_d.exe, , [3c5910b278032e0832696815df255fa1], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8574\CrxUpdater_d.exe, , [fe97c101e7942e08415aa7d68084c43c], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8594\CrxUpdater_d.exe, , [fc9919a90f6c72c4a9f2097457ad8c74], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus869C\CrxUpdater_d.exe, , [a2f3f7cbbcbfb77fd1ca91ec768e956b], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus86EA\CrxUpdater_d.exe, , [761f348ef7849d99801b17660301926e], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus88ED\CrxUpdater_d.exe, , [0194e5dd700b3cfaf2a904790cf8c43c], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus7CDC\CrxUpdater_d.exe, , [484d655d0576d75fe9b22d5044c0e917], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus7F6B\CrxUpdater_d.exe, , [9bfa22a0057683b32b70f28bbe46ff01], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8036\CrxUpdater_d.exe, , [afe6a31f8dee14229a01fd807e865aa6], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus80D2\CrxUpdater_d.exe, , [8f06ead8215aea4c6f2cf885e91b0000], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus816E\CrxUpdater_d.exe, , [187d685ac4b72c0a6635aad3ed1733cd], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus819D\CrxUpdater_d.exe, , [a8edc4feb0cb9b9b9b00aecf5ca8b34d], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus81CC\CrxUpdater_d.exe, , [22730ab87dfe9f972b7089f4bd479e62], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8342\CrxUpdater_d.exe, , [5e373a88c6b5b5817d1e552819eb8b75], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8343\CrxUpdater_d.exe, , [b2e3a31f6912e84e14878eef08fc6799], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8381\CrxUpdater_d.exe, , [d0c517ab87f4f73f564566173cc8fc04], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus83A0\CrxUpdater_d.exe, , [2075e8dab7c473c36833ff7ec1436799], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus83AF\CrxUpdater_d.exe, , [dcb9be041f5ceb4b99023b425fa5c33d], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus89A8\CrxUpdater_d.exe, , [5c395d652e4d62d493083944ed17c739], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus89C8\CrxUpdater_d.exe, , [8114a919651679bd5942532a857f649c], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8A16\CrxUpdater_d.exe, , [801503bfaecd0a2cb2e9e19ce0246e92], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8B1F\CrxUpdater_d.exe, , [484de1e102796fc7c9d269142bd903fd], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8CB4\CrxUpdater_d.exe, , [bcd9e7dbb6c5072ffc9f255839cb35cb], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8D50\CrxUpdater_d.exe, , [31644082a7d440f6e9b2641954b0b54b], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8E3A\CrxUpdater_d.exe, , [c5d011b1364520160d8ec3ba8c78867a], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8E3B\CrxUpdater_d.exe, , [5b3ab909df9cb383bfdc671622e247b9], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8F34\CrxUpdater_d.exe, , [dcb9fac81566ed49405bb1cc3dc706fa], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus95AA\CrxUpdater_d.exe, , [544170525f1c77bfc4d76b12ff050ff1], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\busA073\CrxUpdater_d.exe, , [dcb900c2dd9e79bdcdce9ae3976dca36], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\busAD7D\CrxUpdater_d.exe, , [8f06f7cb4f2c4aec841726578a7a1ee2], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\busBD84\CrxUpdater_d.exe, , [5c396d552358eb4b0a9107760df7619f], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\busE5EB\CrxUpdater_d.exe, , [4b4a962cf98274c2acefc5b8db2923dd], PUP.Optional.Bandoo, C:\Users\Claudia\Downloads\iLividSetup-r477-n-bf.exe, , [eaab843e6417c274e396cf44d928857b], PUP.Optional.Spigot.A, C:\Windows\Installer\19ba9bc.msi, , [5a3bd6ecb8c3ed49695ac2c90100f20e], PUP.Optional.Babylon.A, C:\Windows\System32\Tasks\EPUpdater, , [2b6a15ad483369cd878319c1cf3316ea], PUP.Optional.Babylon.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\searchplugins\babylon.xml, , [dcb9883a24579d99709b1fd331d1ba46], PUP.Optional.Conduit.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\t0ws0aoa.default\searchplugins\conduit.xml, , [3d58a919007b142280b29f53d03215eb], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\Delta.ico, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\BabMaint.exe, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\BUSolution.dll, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\chu.js, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\enhancedNT.dll, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\GUninstaller.exe, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\SetupParams.ini, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\sqlite3.dll, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.OpenCandy, C:\Users\Claudia\AppData\Roaming\OpenCandy\369A3AFB214148E5B1CDF99095D27CFC\3674.ico, , [4e47c3ffc7b469cd86001896ea18c13f], PUP.Optional.OpenCandy, C:\Users\Claudia\AppData\Roaming\OpenCandy\369A3AFB214148E5B1CDF99095D27CFC\EBB77268-338F-4C6A-8590-AD88FED26F4A, , [4e47c3ffc7b469cd86001896ea18c13f], PUP.Optional.OpenCandy, C:\Users\Claudia\AppData\Roaming\OpenCandy\369A3AFB214148E5B1CDF99095D27CFC\OCBrowserHelper_1.0.3.85.dll, , [4e47c3ffc7b469cd86001896ea18c13f], PUP.Optional.OpenCandy, C:\Users\Claudia\AppData\Roaming\OpenCandy\369A3AFB214148E5B1CDF99095D27CFC\setup_471.exe, , [4e47c3ffc7b469cd86001896ea18c13f], PUP.Optional.Conduit.A, C:\Users\Claudia\AppData\Local\Temp\ct3197087\CT3197087.xpi, , [880df4ce4d2e9c9a01fbe9c5659dd62a], PUP.Optional.Conduit.A, C:\Users\Claudia\AppData\Local\Temp\ct3197087\ffLogic.exe, , [880df4ce4d2e9c9a01fbe9c5659dd62a], PUP.Optional.Conduit.A, C:\Users\Claudia\AppData\Local\Temp\ct3197087\statisticsStub.exe, , [880df4ce4d2e9c9a01fbe9c5659dd62a], PUP.Optional.Conduit.A, C:\Users\Claudia\AppData\Local\Temp\ct3197087\version.txt, , [880df4ce4d2e9c9a01fbe9c5659dd62a], PUP.Optional.Conduit.A, C:\Users\Claudia\AppData\Local\Temp\ct3197087\xpi\install.rdf, , [880df4ce4d2e9c9a01fbe9c5659dd62a], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\baidu_ff.xml, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\baidu_ie.xml, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\config.ini, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\searchcom_ff.xml, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\searchcom_ie.xml, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings64.exe, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wthx186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\yahoo_ff.xml, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\yahoo_ie.xml, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\yandextr_ff.xml, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\yandextr_ie.xml, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\yandex_ff.xml, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\yandex_ie.xml, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\Lang\res1031.ini, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\Lang\res1033.ini, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\Lang\res1034.ini, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\Lang\res1036.ini, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\Lang\res1040.ini, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.3.crx, , [65309e242358ee4868744a77a0624eb2], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.4.crx, , [65309e242358ee4868744a77a0624eb2], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx, , [65309e242358ee4868744a77a0624eb2], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\GC\ErrorAssistant_1.2.crx, , [65309e242358ee4868744a77a0624eb2], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\GC\ErrorAssistant_1.3.crx, , [65309e242358ee4868744a77a0624eb2], PUP.Optional.BabSolution.A, C:\Users\Claudia\AppData\Roaming\BabSolution\CR\Delta.crx, , [6e27a022c7b4de582561dee83fc3f30d], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.admin", false);), ,[34612b97136889ad174a4ea26d97ca36] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.aflt", "babsst");), ,[7f160cb61962c175dc85d41c0ff553ad] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");), ,[860f962c85f6270f095832be3acaaf51] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.autoRvrt", "false");), ,[187da41e7902f145f26f19d7bb4924dc] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.dfltLng", "de");), ,[7f1622a03843b77f3f227a7645bf2ad6] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.excTlbr", false);), ,[177e7151eb9079bd253cd51ba65ef808] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.ffxUnstlRst", true);), ,[7c19d8ea5724c6701150c030cb3960a0] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.id", "9d983dab0000000000006c626d82ffaa");), ,[c8cd437fe09b9c9a1f425e927e8654ac] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.instlDay", "15927");), ,[d4c1843e94e70a2c3130d51be123f10f] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.instlRef", "sst");), ,[c3d2259dfa81f6403f227977c83cee12] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.newTab", false);), ,[6a2b3c8688f390a63f2207e956ae0000] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.prdct", "delta");), ,[a6ef10b2e992e254a3be856bd133847c] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.prtnrId", "delta");), ,[2d68a41e2d4e6dc94e13ca26cb390df3] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.rvrt", "false");), ,[12832e94d9a21e182c356e82e71d9967] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.smplGrp", "none");), ,[3d586161c0bb3ef8fa67cb25d232e818] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.tlbrId", "base");), ,[9401675b9cdff244164b14dcd62e649c] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.tlbrSrchUrl", "");), ,[fa9b8240b4c71a1cf66b46aa01037d83] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.vrsn", "1.8.22.0");), ,[9104d5ed0b70b97d3b263bb5c83c3dc3] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.vrsnTs", "1.8.22.011:02:41");), ,[9500249ea9d258de530e767af70d08f8] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.vrsni", "1.8.22.0");), ,[f1a4fbc78fec181e065be010f014e61a] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta_i.babExt", "");), ,[e7aee2e03d3ed363174ade127d8723dd] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta_i.babTrack", "affID=124008&tt=070813_wt4&tsp=4970");), ,[7025685aa9d2c274acb50ce4c2426a96] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta_i.srcExt", "ss");), ,[158082405a213501e57c3fb11fe5bf41] PUP.Optional.Conduit.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\t0ws0aoa.default\prefs.js, Gut: (), Schlecht: (user_pref("CT3197087.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3197087&SearchSource=2&q=");), ,[2273853d0d6e4ee8c2fef2fe4fb54cb4] Physische Sektoren: 0 (No malicious items detected) (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 04.08.2014 Suchlauf-Zeit: 17:51:37 Logdatei: 2 Protokoll nach quarantane.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.08.04.05 Rootkit Datenbank: v2014.08.01.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Self-protection: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: *** Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 361325 Verstrichene Zeit: 20 Min, 37 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 3 PUP.Optional.Spigot.A, C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe, 2400, , [3263ae1407744aec269c513a5ca5b947] PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe, 3084, , [c0d5645e7902e25472d0259445bd15eb] PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings64.exe, 3256, , [c0d5645e7902e25472d0259445bd15eb] Module: 22 PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\enhancedNT.dll, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], Registrierungsschlüssel: 20 PUP.Optional.Spigot.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Application Updater, , [3263ae1407744aec269c513a5ca5b947], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, , [0392378bcfac0135e74fcbd00200d42c], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, , [0392378bcfac0135e74fcbd00200d42c], PUP.Optional.YTDToolbar, HKLM\SOFTWARE\CLASSES\CLSID\{F3FEE66E-E034-436a-86E4-9690573BEE8A}, , [9bfae5dda8d369cda589b3b2fb0732ce], PUP.Optional.YTDToolbar, HKLM\SOFTWARE\CLASSES\CLSID\{F3FEE66E-E034-436A-86E4-9690573BEE8A}\INPROCSERVER32, , [9bfae5dda8d369cda589b3b2fb0732ce], PUP.Optional.YTDToolbar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{F3FEE66E-E034-436A-86E4-9690573BEE8A}, , [9bfae5dda8d369cda589b3b2fb0732ce], PUP.Optional.YTDToolbar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F3FEE66E-E034-436A-86E4-9690573BEE8A}, , [9bfae5dda8d369cda589b3b2fb0732ce], PUP.Optional.YTDToolbar, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{F3FEE66E-E034-436A-86E4-9690573BEE8A}, , [9bfae5dda8d369cda589b3b2fb0732ce], PUP.Optional.YTDToolbar, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{F3FEE66E-E034-436A-86E4-9690573BEE8A}, , [9bfae5dda8d369cda589b3b2fb0732ce], PUP.Optional.Babylon.A, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [781d299955260036299a7ae7ee14d52b], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Delta Chrome Toolbar, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.DataMangr.A, HKLM\SOFTWARE\WOW6432NODE\DataMngr, , [890c447e0675ae880c06687804fe3bc5], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\eooncjejnppfjjklapaamhcdmjbilmde, , [a0f5be04d7a4ea4c759d62b163a15aa6], PUP.Optional.Spigot.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\icdlfehblmklkikfigmjhbmmpmkmpooj, , [c3d2784a403bd0663c0a598dbc46b749], PUP.Optional.Spigot.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\mhkaekfpcppmmioggniknbnbdbcigpkk, , [2372e7dba6d575c11a2de8fef90952ae], PUP.Optional.DataMngr.A, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr, , [eea7843e4a311c1a31babe54669ed52b], PUP.Optional.DataMngr.A, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, , [098c7b47fb80f24433b73dd5b94bea16], PUP.Optional.Spigot.A, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Search Settings, , [eaabf6cc83f8ab8bc8779d96b25228d8], PUP.Optional.Babylon.A, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BABSOLUTION\Redir, , [42535d650576ff3799546fa4f50f7a86], PUP.Optional.Babylon.A, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BABSOLUTION\Updater, , [1481f2d06f0c43f36589789b6f95b34d], Registrierungswerte: 10 PUP.Optional.Spigot.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS|C:\PROGRAM FILES (X86)\APPLICATION UPDATER\APPLICATIONUPDATER.EXE, 1, , [3263ae1407744aec269c513a5ca5b947] PUP.Optional.YTDToolbar, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{F3FEE66E-E034-436A-86E4-9690573BEE8A}, , [9bfae5dda8d369cda589b3b2fb0732ce], PUP.Optional.YTDToolbar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{F3FEE66E-E034-436A-86E4-9690573BEE8A}, YTD Toolbar, , [9bfae5dda8d369cda589b3b2fb0732ce] PUP.Optional.YTDToolbar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{F3FEE66E-E034-436A-86E4-9690573BEE8A}, YTD Toolbar, , [9bfae5dda8d369cda589b3b2fb0732ce] PUP.Optional.YTDToolbar, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{F3FEE66E-E034-436a-86E4-9690573BEE8A}, , [99fcc6fcd0ab24125dd1fd688f734fb1], PUP.Optional.YTDToolbar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{F3FEE66E-E034-436a-86E4-9690573BEE8A}, , [0d886d554239ce681a14d3922ad87987], PUP.Optional.YTDToolbar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{F3FEE66E-E034-436a-86E4-9690573BEE8A}, , [7e17c1017a0165d1ed41283de2206b95], PUP.Optional.Delta.A, HKU\S-1-5-21-2416564229-2236544242-386329244-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|NTRedirect, C:\Windows\SysWOW64\rundll32.exe "C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\enhancedNT.dll",Run, , [97fe7250b4c7e1550f0aa28fdd274ab6] PUP.Optional.Spigot.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS|C:\PROGRAM FILES (X86)\COMMON FILES\SPIGOT\SEARCH SETTINGS\SEARCHSETTINGS.EXE, 1, , [c0d5645e7902e25472d0259445bd15eb] PUP.Optional.Spigot.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SearchSettings, "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe", , [c0d5645e7902e25472d0259445bd15eb] Registrierungsdaten: 0 (No malicious items detected) Ordner: 16 PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.OpenCandy, C:\Users\Claudia\AppData\Roaming\OpenCandy, , [4e47c3ffc7b469cd86001896ea18c13f], PUP.Optional.OpenCandy, C:\Users\Claudia\AppData\Roaming\OpenCandy\369A3AFB214148E5B1CDF99095D27CFC, , [4e47c3ffc7b469cd86001896ea18c13f], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Local\Temp\mt_ffx\Delta, , [7520b50df289f2446d364767748e9a66], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Local\Temp\mt_ffx\Delta\delta, , [7520b50df289f2446d364767748e9a66], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Local\Temp\mt_ffx\Delta\delta\1.8.22.0, , [7520b50df289f2446d364767748e9a66], PUP.Optional.Conduit.A, C:\Users\Claudia\AppData\Local\Temp\ct3197087, , [880df4ce4d2e9c9a01fbe9c5659dd62a], PUP.Optional.Conduit.A, C:\Users\Claudia\AppData\Local\Temp\ct3197087\xpi, , [880df4ce4d2e9c9a01fbe9c5659dd62a], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\Lang, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\Res, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\GC, , [65309e242358ee4868744a77a0624eb2], PUP.Optional.BabSolution.A, C:\Users\Claudia\AppData\Roaming\BabSolution\CR, , [6e27a022c7b4de582561dee83fc3f30d], PUP.Optional.Spigot.A, C:\Users\Claudia\AppData\LocalLow\Search Settings, , [1d782e948af151e59c34c2048f73eb15], PUP.Optional.Spigot.A, C:\Users\Claudia\AppData\LocalLow\Search Settings\res, , [1d782e948af151e59c34c2048f73eb15], PUP.Optional.Spigot.A, C:\Users\Claudia\AppData\LocalLow\Search Settings\temp, , [1d782e948af151e59c34c2048f73eb15], Dateien: 129 PUP.Optional.Spigot.A, C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe, , [3263ae1407744aec269c513a5ca5b947], PUP.Optional.YTDToolbar, C:\Program Files (x86)\YTD Toolbar\IE\9.6\ytdToolbarIE64.dll, , [9bfae5dda8d369cda589b3b2fb0732ce], PUP.Optional.YTDToolbar, C:\Program Files (x86)\YTD Toolbar\IE\9.6\ytdToolbarIE.dll, , [9bfae5dda8d369cda589b3b2fb0732ce], PUP.Optional.Babylon.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\NTRedirect.dll, , [5243883a3645f2445dd9f4858183c739], PUP.Optional.DeltaTB, C:\Users\Claudia\AppData\Local\Temp\DeltaTB.exe, , [05903d85c6b56fc71083e13ff30dfe02], PUP.Optional.Bandoo, C:\Users\Claudia\AppData\Local\Temp\TJJW7Raz.exe.part, , [385d17ab5a21ba7c4039c84b5ea320e0], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus7C21\CrxUpdater_d.exe, , [e3b21aa86219ef47c7d4304d37cd8b75], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus83FD\CrxUpdater_d.exe, , [8e073092bebd6cca663516673aca0bf5], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus88FD\CrxUpdater_d.exe, , [6a2b2c96bebdf93d0596f38ae91bc33d], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus97AC\CrxUpdater_d.exe, , [c5d0289a6f0cd75f9b00d8a50afa53ad], PUP.Optional.Conduit, C:\Users\Claudia\AppData\Local\Temp\ct3197087\ieLogic.exe, , [7f1603bf4f2c43f3465954dbd729629e], PUP.Optional.Babylon.A, C:\Users\Claudia\AppData\Local\Temp\3878E2C1-BAB0-7891-8762-AADDB9FFAB73\Latest\BExternal.dll, , [455007bb23581c1ac43fd94ad927669a], PUP.Optional.BabSolution.A, C:\Users\Claudia\AppData\Local\Temp\3878E2C1-BAB0-7891-8762-AADDB9FFAB73\Latest\BUSolution.dll, , [ace916ac413a94a20027a571aa5739c7], Trojan.RotBrowse, C:\Users\Claudia\AppData\Local\Temp\3878E2C1-BAB0-7891-8762-AADDB9FFAB73\Latest\ccp.exe, , [1a7bc4fea5d625119098abfc2bd98080], PUP.Optional.Babylon.A, C:\Users\Claudia\AppData\Local\Temp\3878E2C1-BAB0-7891-8762-AADDB9FFAB73\Latest\CrxInstaller.dll, , [c4d111b18dee191d26b651d1bb464eb2], PUP.Optional.Babylon.A, C:\Users\Claudia\AppData\Local\Temp\3878E2C1-BAB0-7891-8762-AADDB9FFAB73\Latest\MntrDLLInstall.dll, , [9500487a5d1ebd79dffe8f939e63b947], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Local\Temp\3878E2C1-BAB0-7891-8762-AADDB9FFAB73\Latest\MyDeltaTB.exe, , [7223a31f542700366684ff7a1ae719e7], PUP.Optional.Babylon.A, C:\Users\Claudia\AppData\Local\Temp\3878E2C1-BAB0-7891-8762-AADDB9FFAB73\Latest\NTRedirect.dll, , [dcb92e94e09b4aecf14585f4e420a957], PUP.Optional.Babylon.A, C:\Users\Claudia\AppData\Local\Temp\3878E2C1-BAB0-7891-8762-AADDB9FFAB73\Latest\Setup.exe, , [563fc6fc3c3fc4721a2e1d019d6308f8], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus5A7E\CrxUpdater_d.exe, , [a4f1f7cba3d8e155afecfc81b054d729], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus7992\CrxUpdater_d.exe, , [c2d315ad3a413ff76a31601d51b3b34d], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus7AD9\CrxUpdater_d.exe, , [43522999314ac076900b4835857f9b65], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8499\CrxUpdater_d.exe, , [a1f406bca6d536004853235abf45c53b], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8526\CrxUpdater_d.exe, , [5d38f5cd097238fe1e7de29b8f7508f8], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8535\CrxUpdater_d.exe, , [c2d34a7883f8092d6c2f2c51a95b03fd], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8564\CrxUpdater_d.exe, , [3c5910b278032e0832696815df255fa1], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8574\CrxUpdater_d.exe, , [fe97c101e7942e08415aa7d68084c43c], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8594\CrxUpdater_d.exe, , [fc9919a90f6c72c4a9f2097457ad8c74], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus869C\CrxUpdater_d.exe, , [a2f3f7cbbcbfb77fd1ca91ec768e956b], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus86EA\CrxUpdater_d.exe, , [761f348ef7849d99801b17660301926e], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus88ED\CrxUpdater_d.exe, , [0194e5dd700b3cfaf2a904790cf8c43c], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus7CDC\CrxUpdater_d.exe, , [484d655d0576d75fe9b22d5044c0e917], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus7F6B\CrxUpdater_d.exe, , [9bfa22a0057683b32b70f28bbe46ff01], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8036\CrxUpdater_d.exe, , [afe6a31f8dee14229a01fd807e865aa6], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus80D2\CrxUpdater_d.exe, , [8f06ead8215aea4c6f2cf885e91b0000], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus816E\CrxUpdater_d.exe, , [187d685ac4b72c0a6635aad3ed1733cd], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus819D\CrxUpdater_d.exe, , [a8edc4feb0cb9b9b9b00aecf5ca8b34d], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus81CC\CrxUpdater_d.exe, , [22730ab87dfe9f972b7089f4bd479e62], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8342\CrxUpdater_d.exe, , [5e373a88c6b5b5817d1e552819eb8b75], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8343\CrxUpdater_d.exe, , [b2e3a31f6912e84e14878eef08fc6799], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8381\CrxUpdater_d.exe, , [d0c517ab87f4f73f564566173cc8fc04], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus83A0\CrxUpdater_d.exe, , [2075e8dab7c473c36833ff7ec1436799], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus83AF\CrxUpdater_d.exe, , [dcb9be041f5ceb4b99023b425fa5c33d], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus89A8\CrxUpdater_d.exe, , [5c395d652e4d62d493083944ed17c739], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus89C8\CrxUpdater_d.exe, , [8114a919651679bd5942532a857f649c], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8A16\CrxUpdater_d.exe, , [801503bfaecd0a2cb2e9e19ce0246e92], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8B1F\CrxUpdater_d.exe, , [484de1e102796fc7c9d269142bd903fd], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8CB4\CrxUpdater_d.exe, , [bcd9e7dbb6c5072ffc9f255839cb35cb], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8D50\CrxUpdater_d.exe, , [31644082a7d440f6e9b2641954b0b54b], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8E3A\CrxUpdater_d.exe, , [c5d011b1364520160d8ec3ba8c78867a], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8E3B\CrxUpdater_d.exe, , [5b3ab909df9cb383bfdc671622e247b9], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus8F34\CrxUpdater_d.exe, , [dcb9fac81566ed49405bb1cc3dc706fa], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\bus95AA\CrxUpdater_d.exe, , [544170525f1c77bfc4d76b12ff050ff1], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\busA073\CrxUpdater_d.exe, , [dcb900c2dd9e79bdcdce9ae3976dca36], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\busAD7D\CrxUpdater_d.exe, , [8f06f7cb4f2c4aec841726578a7a1ee2], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\busBD84\CrxUpdater_d.exe, , [5c396d552358eb4b0a9107760df7619f], PUP.Optional.CRX.A, C:\Users\Claudia\AppData\Local\Temp\busE5EB\CrxUpdater_d.exe, , [4b4a962cf98274c2acefc5b8db2923dd], PUP.Optional.Bandoo, C:\Users\Claudia\Downloads\iLividSetup-r477-n-bf.exe, , [eaab843e6417c274e396cf44d928857b], PUP.Optional.Spigot.A, C:\Windows\Installer\19ba9bc.msi, , [5a3bd6ecb8c3ed49695ac2c90100f20e], PUP.Optional.Babylon.A, C:\Windows\System32\Tasks\EPUpdater, , [2b6a15ad483369cd878319c1cf3316ea], PUP.Optional.Babylon.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\searchplugins\babylon.xml, , [dcb9883a24579d99709b1fd331d1ba46], PUP.Optional.Conduit.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\t0ws0aoa.default\searchplugins\conduit.xml, , [3d58a919007b142280b29f53d03215eb], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\Delta.ico, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\BabMaint.exe, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\BUSolution.dll, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\chu.js, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\enhancedNT.dll, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\GUninstaller.exe, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\SetupParams.ini, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\BabSolution\Shared\sqlite3.dll, , [97fe7250b4c7e1550f0aa28fdd274ab6], PUP.Optional.OpenCandy, C:\Users\Claudia\AppData\Roaming\OpenCandy\369A3AFB214148E5B1CDF99095D27CFC\3674.ico, , [4e47c3ffc7b469cd86001896ea18c13f], PUP.Optional.OpenCandy, C:\Users\Claudia\AppData\Roaming\OpenCandy\369A3AFB214148E5B1CDF99095D27CFC\EBB77268-338F-4C6A-8590-AD88FED26F4A, , [4e47c3ffc7b469cd86001896ea18c13f], PUP.Optional.OpenCandy, C:\Users\Claudia\AppData\Roaming\OpenCandy\369A3AFB214148E5B1CDF99095D27CFC\OCBrowserHelper_1.0.3.85.dll, , [4e47c3ffc7b469cd86001896ea18c13f], PUP.Optional.OpenCandy, C:\Users\Claudia\AppData\Roaming\OpenCandy\369A3AFB214148E5B1CDF99095D27CFC\setup_471.exe, , [4e47c3ffc7b469cd86001896ea18c13f], PUP.Optional.Conduit.A, C:\Users\Claudia\AppData\Local\Temp\ct3197087\CT3197087.xpi, , [880df4ce4d2e9c9a01fbe9c5659dd62a], PUP.Optional.Conduit.A, C:\Users\Claudia\AppData\Local\Temp\ct3197087\ffLogic.exe, , [880df4ce4d2e9c9a01fbe9c5659dd62a], PUP.Optional.Conduit.A, C:\Users\Claudia\AppData\Local\Temp\ct3197087\statisticsStub.exe, , [880df4ce4d2e9c9a01fbe9c5659dd62a], PUP.Optional.Conduit.A, C:\Users\Claudia\AppData\Local\Temp\ct3197087\version.txt, , [880df4ce4d2e9c9a01fbe9c5659dd62a], PUP.Optional.Conduit.A, C:\Users\Claudia\AppData\Local\Temp\ct3197087\xpi\install.rdf, , [880df4ce4d2e9c9a01fbe9c5659dd62a], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\baidu_ff.xml, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\baidu_ie.xml, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\config.ini, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\searchcom_ff.xml, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\searchcom_ie.xml, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings64.exe, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wth186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\wthx186.dll, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\yahoo_ff.xml, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\yahoo_ie.xml, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\yandextr_ff.xml, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\yandextr_ie.xml, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\yandex_ff.xml, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\yandex_ie.xml, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\Lang\res1031.ini, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\Lang\res1033.ini, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\Lang\res1034.ini, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\Lang\res1036.ini, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\Search Settings\Lang\res1040.ini, , [c0d5645e7902e25472d0259445bd15eb], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.3.crx, , [65309e242358ee4868744a77a0624eb2], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.4.crx, , [65309e242358ee4868744a77a0624eb2], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx, , [65309e242358ee4868744a77a0624eb2], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\GC\ErrorAssistant_1.2.crx, , [65309e242358ee4868744a77a0624eb2], PUP.Optional.Spigot.A, C:\Program Files (x86)\Common Files\Spigot\GC\ErrorAssistant_1.3.crx, , [65309e242358ee4868744a77a0624eb2], PUP.Optional.BabSolution.A, C:\Users\Claudia\AppData\Roaming\BabSolution\CR\Delta.crx, , [6e27a022c7b4de582561dee83fc3f30d], PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.admin", false);), ,[34612b97136889ad174a4ea26d97ca36] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.aflt", "babsst");), ,[7f160cb61962c175dc85d41c0ff553ad] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");), ,[860f962c85f6270f095832be3acaaf51] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.autoRvrt", "false");), ,[187da41e7902f145f26f19d7bb4924dc] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.dfltLng", "de");), ,[7f1622a03843b77f3f227a7645bf2ad6] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.excTlbr", false);), ,[177e7151eb9079bd253cd51ba65ef808] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.ffxUnstlRst", true);), ,[7c19d8ea5724c6701150c030cb3960a0] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.id", "9d983dab0000000000006c626d82ffaa");), ,[c8cd437fe09b9c9a1f425e927e8654ac] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.instlDay", "15927");), ,[d4c1843e94e70a2c3130d51be123f10f] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.instlRef", "sst");), ,[c3d2259dfa81f6403f227977c83cee12] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.newTab", false);), ,[6a2b3c8688f390a63f2207e956ae0000] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.prdct", "delta");), ,[a6ef10b2e992e254a3be856bd133847c] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.prtnrId", "delta");), ,[2d68a41e2d4e6dc94e13ca26cb390df3] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.rvrt", "false");), ,[12832e94d9a21e182c356e82e71d9967] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.smplGrp", "none");), ,[3d586161c0bb3ef8fa67cb25d232e818] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.tlbrId", "base");), ,[9401675b9cdff244164b14dcd62e649c] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.tlbrSrchUrl", "");), ,[fa9b8240b4c71a1cf66b46aa01037d83] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.vrsn", "1.8.22.0");), ,[9104d5ed0b70b97d3b263bb5c83c3dc3] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.vrsnTs", "1.8.22.011:02:41");), ,[9500249ea9d258de530e767af70d08f8] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.vrsni", "1.8.22.0");), ,[f1a4fbc78fec181e065be010f014e61a] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta_i.babExt", "");), ,[e7aee2e03d3ed363174ade127d8723dd] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta_i.babTrack", "affID=124008&tt=070813_wt4&tsp=4970");), ,[7025685aa9d2c274acb50ce4c2426a96] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta_i.srcExt", "ss");), ,[158082405a213501e57c3fb11fe5bf41] PUP.Optional.Conduit.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\t0ws0aoa.default\prefs.js, Gut: (), Schlecht: (user_pref("CT3197087.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3197087&SearchSource=2&q=");), ,[2273853d0d6e4ee8c2fef2fe4fb54cb4] Physische Sektoren: 0 (No malicious items detected) (end) Habe einen Neustart gemacht. Es erschien wieder kurz das Avira-Fenster bzgl. Registryzugriff. Ein Avirasuchlauf wurde empfohlen. Dieser läuft derzeit und ist bisher ohne Fund. Neuer Bedrohungssuchlauf mit malewarebytes ist fast fertig und bisher auch ohne Befund. Protokoll kann ich dann auch gerne Posten. Ich weiß nun überhaupt nicht, wie ich weiter verfahren soll. Lässt sich erkennen, ob die Funde alle "gefährlich" waren und wenn ja, seit wann die auf dem Rechner waren oder was sie verursachen können? Ich nutze den Rechner für Bankgeschäft, auch beruflich und habe viele wichtigen Zugangsdaten für Loginbereiche im Browser (Firefox) gespeichert. Jetzt ist auch der Suchlauf nach Neustart fertig, immer noch ein paar Funde mit gelber Meldung. Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 04.08.2014 Suchlauf-Zeit: 18:20:26 Logdatei: 3 protokoll nach neustart.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.08.04.05 Rootkit Datenbank: v2014.08.01.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Self-protection: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: *** Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 360651 Verstrichene Zeit: 31 Min, 14 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 0 (No malicious items detected) Registrierungsdaten: 0 (No malicious items detected) Ordner: 0 (No malicious items detected) Dateien: 23 PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.admin", false);), ,[c3d2962cfe7db77f174a5f91f410728e] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.aflt", "babsst");), ,[365f863cdba0330398c95e92d3313ac6] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");), ,[791c774b1368ed4901608967ce36eb15] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.autoRvrt", "false");), ,[7c19a61ca0db350174ed1bd5f410bd43] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.dfltLng", "de");), ,[f1a418aabac148ee7ce5579946bed62a] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.excTlbr", false);), ,[108505bdfa8190a682df915f778d0ff1] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.ffxUnstlRst", true);), ,[9afb0fb39ae17bbbd1909e5246be30d0] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.id", "9d983dab0000000000006c626d82ffaa");), ,[3f56dbe7413a8bab6df402eef41029d7] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.instlDay", "15927");), ,[93025a68e6952b0b9ec3ec04877d7d83] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.instlRef", "sst");), ,[c0d59b270d6e35019ac7e50bbd47718f] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.newTab", false);), ,[bbda99292556999d8ed3a24e7391718f] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.prdct", "delta");), ,[692c70523d3efd394120d9178a7ac937] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.prtnrId", "delta");), ,[4352c7fbeb9077bf9ec3fcf41fe5cb35] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.rvrt", "false");), ,[f99c447e74071a1c6af720d0d232837d] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.smplGrp", "none");), ,[6a2be6dcdf9ccd69600118d8fe061ee2] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.tlbrId", "base");), ,[2f665e645625a6900a57876929dbdd23] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.tlbrSrchUrl", "");), ,[aee70ab83b4087af6bf6fef2ca3a7d83] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.vrsn", "1.8.22.0");), ,[395c7949e893092dc39e21cf7e86768a] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.vrsnTs", "1.8.22.011:02:41");), ,[8015744e196278bef46d40b043c1fa06] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.vrsni", "1.8.22.0");), ,[583dead8b0cb8aac4120ef01ed17a759] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta_i.babExt", "");), ,[9104b30f8eedbc7a94cd9759a85cc23e] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta_i.babTrack", "affID=124008&tt=070813_wt4&tsp=4970");), ,[d5c0d1f1c8b31b1b5a0716dad133a957] PUP.Optional.Delta.A, C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\0d91rvzi.default-1360132898367\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta_i.srcExt", "ss");), ,[cec7be04017a47ef77ea80705aaa817f] Physische Sektoren: 0 (No malicious items detected) (end) LG Geändert von Emily (04.08.2014 um 17:56 Uhr) |
Themen zu Zugang bei Emailproider wg Trojanerverdacht gesperrt und viele Funde mit malewarbytes |
baidu, conduitsearch, conduitsearch entfernen, coupons, malewarbytes, pup.optional.babsolution.a, pup.optional.babylon.a, pup.optional.bandoo, pup.optional.conduit, pup.optional.conduit.a, pup.optional.crx.a, pup.optional.datamangr.a, pup.optional.datamngr.a, pup.optional.delta.a, pup.optional.deltatb, pup.optional.opencandy, pup.optional.spigot.a, pup.optional.ytdtoolbar, trojan.rotbrowse, win32/softonicdownloader.a, win32/somoto.e, win32/toolbar.babylon.e, win32/toolbar.babylon.i, win32/toolbar.babylon.w, win32/toolbar.conduit, win32/toolbar.conduit.b, win32/toolbar.conduit.y, win32/toolbar.widgi.b, yandex |