Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Malware Bytes , logfile erhalten

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 15.09.2014, 20:10   #1
wegomyway
 
Malware Bytes , logfile erhalten - Standard

Malware Bytes , logfile erhalten



Ich hab von einem Arbeitskollegen derenTochter folgendes Log erhalten. Ihr Freund , so ihre Aussage , hatte sich einen Virus ufn PeeCee eingehandelt (fragt mich nicht wie das festgestellt wurde, Aussage war das der PeeCee sich irgendwie komisch verhält bzw. verhalten hat nachdem ihr freund irgendwas installiert hat)
ich habe ihr halt geschrieben sie soll MB mal laufen lassen und mir das Log zukommen lassen
ich würde mich freuen wenn ihr als experten da mal drüber blickt ... ich find das ist ne Menge, aber das zuzuordnen fällt mir schwer :

<?xml version="1.0" encoding="UTF-8" ?>
<mbam-log>
<header>
<date>2014/09/15 19:12:58 +0200</date>
<logfile>mbam-log-2014-09-15 (19-12-06).xml</logfile>
<isadmin>yes</isadmin>
</header>
<engine>
<version>2.00.2.1012</version>
<malware-database>v2014.09.15.09</malware-database>
<rootkit-database>v2014.09.15.01</rootkit-database>
<license>free</license>
<file-protection>disabled</file-protection>
<web-protection>disabled</web-protection>
<self-protection>disabled</self-protection>
</engine>
<system>
<osversion>Windows 8.1</osversion>
<arch>x64</arch>
<username></username>
<filesys>NTFS</filesys>
</system>
<summary>
<type>threat</type>
<result>completed</result>
<objects>303265</objects>
<time>548</time>
<processes>2</processes>
<modules>1</modules>
<keys>56</keys>
<values>7</values>
<datas>8</datas>
<folders>37</folders>
<files>94</files>
<sectors>0</sectors>
</summary>
<options>
<memory>enabled</memory>
<startup>enabled</startup>
<filesystem>enabled</filesystem>
<archives>enabled</archives>
<rootkits>disabled</rootkits>
<deeprootkit>disabled</deeprootkit>
<heuristics>enabled</heuristics>
<pup>enabled</pup>
<pum>enabled</pum>
</options>
<items>
<process><path>C:\ProgramData\IePluginServices\PluginService.exe</path><vendor>PUP.Optional.IePluginService.A</vendor><action>delete-on-reboot</action><pid>1148</pid><hash>06efea03fb80c96dfc4b7fe7a9583fc1</hash></process>
<process><path>C:\ProgramData\WindowsProtectManger\wprotectmanager.exe</path><vendor>PUP.Optional.WPM.A</vendor><action>delete-on-reboot</action><pid>1312</pid><hash>40b5737ac2b9e5512d3f6237cf32a35d</hash></process>
<module><path>C:\Program Files (x86)\SupTab\DpInterface32.dll</path><vendor>PUP.Optional.Skytech.A</vendor><action>delete-on-reboot</action><hash>52a3965793e885b1655ba6efe31edd23</hash></module>
<key><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IePluginServices</path><vendor>PUP.Optional.IePluginService.A</vendor><action>success</action><hash>06efea03fb80c96dfc4b7fe7a9583fc1</hash></key>
<key><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WindowsProtectManger</path><vendor>PUP.Optional.WPM.A</vendor><action>success</action><hash>40b5737ac2b9e5512d3f6237cf32a35d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WindowsProtectManger</path><vendor>PUP.Optional.WPM.A</vendor><action>success</action><hash>40b5737ac2b9e5512d3f6237cf32a35d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>bc3924c989f2072f305e695529d9bf41</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>0fe613da740775c1543b219dba48fb05</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>629312db0576ea4ca2bbe2a7aa58e11f</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>738294595f1c3bfb87fa41f40ff1f10f</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>738294595f1c3bfb87fa41f40ff1f10f</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>738294595f1c3bfb87fa41f40ff1f10f</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>738294595f1c3bfb87fa41f40ff1f10f</hash></key>
<key><path>HKLM\SOFTWARE\Iminent</path><vendor>PUP.Optional.Iminent.A</vendor><action>success</action><hash>41b4effe057655e1baf4e84bc63dc937</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\CrossriderApp0059603.BHO</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>a550db12a8d33ff7137e7b8ea55e4fb1</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\CrossriderApp0059603.BHO.1</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>f40100ede8930f279bf6d435ab5832ce</hash></key>
<key><path>HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>fff647a62b50f83e56143ceade25f30d</hash></key>
<key><path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}</path><vendor>PUP.Optional.Qone8</vendor><action>success</action><hash>04f1fbf22e4d48eeb2fea7ad1ee6867a</hash></key>
<key><path>HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\DatamngrCoordinator.exe</path><vendor>PUP.Optional.DataMangr.A</vendor><action>success</action><hash>f500e00d0b7073c377bfdd2ea95a20e0</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\FREE_SOFTTODAY</path><vendor>PUP.Optional.Eorezo.A</vendor><action>success</action><hash>bb3a10dd98e386b0d687a866bd466d93</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\supWindowsProtectManger</path><vendor>PUP.Optional.WindowsProtectManger.A</vendor><action>success</action><hash>12e3c12caad1a096f56ae32bad56ff01</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\webssearchesSoftware</path><vendor>PUP.Optional.WebsSearches.A</vendor><action>success</action><hash>24d1af3e3645d6604902141223e00bf5</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0059603.BHO</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>738216d7097275c1c5ccdd2c12f18977</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0059603.BHO.1</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>16df836aea91a591563bcc3d14efa957</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>9d581cd17b007fb756ee5ead70932ad6</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\21636</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>c72e8865e596171f92d8c75fca3937c9</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}</path><vendor>PUP.Optional.Qone8</vendor><action>success</action><hash>1adb44a9374486b03878054f838113ed</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\DatamngrCoordinator.exe</path><vendor>PUP.Optional.DataMangr.A</vendor><action>success</action><hash>7a7b48a539421125fe3859b2c83baa56</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10</path><vendor>PUP.Optional.GlobalUpdate.A</vendor><action>success</action><hash>896c935a79021c1ae16a1f4d788c0cf4</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4</path><vendor>PUP.Optional.GlobalUpdate.A</vendor><action>success</action><hash>6293ba33aecd57df97b5125a4eb68080</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\SUPDP</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>46af40ad7dfe41f5dfd3ce34e023649c</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\SUPTAB</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>ac49e30a91ea3105e401b0522dd643bd</hash></key>
<key><path>HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Fraven 1.1</path><vendor>PUP.Optional.Feven.A</vendor><action>success</action><hash>f005509deb90162091eaef22bd46b44c</hash></key>
<key><path>HKU\S-1-5-21-2940267510-147821796-3909958549-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\freesofttoday</path><vendor>PUP.Optional.FreeSoftToday.A</vendor><action>success</action><hash>da1b4e9f077450e651d4c7a40bf927d9</hash></key>
<key><path>HKU\S-1-5-21-2940267510-147821796-3909958549-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\TutoTag</path><vendor>PUP.Optional.Tuto4PC.A</vendor><action>success</action><hash>f005e7062f4ccf67c0bf70fc12f2b44c</hash></key>
<key><path>HKU\S-1-5-21-2940267510-147821796-3909958549-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>d42177768cef79bdf366f76643c156aa</hash></key>
<key><path>HKU\S-1-5-21-2940267510-147821796-3909958549-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Fraven 1.1</path><vendor>PUP.Optional.Feven.A</vendor><action>success</action><hash>3db8d8151467ae8837441bf62fd452ae</hash></key>
<key><path>HKU\S-1-5-21-2940267510-147821796-3909958549-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>75802ac3b1ca3501aa2a56a8d42e1ae6</hash></key>
<key><path>HKU\S-1-5-21-2940267510-147821796-3909958549-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\setup</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>dd18f2fb91ea62d488264c1ad52f916f</hash></key>
<key><path>HKU\S-1-5-21-2940267510-147821796-3909958549-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS</path><vendor>PUP.Optional.FastStart.A</vendor><action>success</action><hash>fef7a34aceadcc6a5e78ec13e61c48b8</hash></key>
<key><path>HKU\S-1-5-21-2940267510-147821796-3909958549-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader</path><vendor>PUP.Optional.Softonic.A</vendor><action>success</action><hash>45b0faf33c3fa98dd21573ae05fe54ac</hash></key>
<key><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdate</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></key>
<key><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdatem</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></key>
<key><path>HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickCtrl.10</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickCtrl.10</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5645E0E7-FC12-43BF-A6E4-F9751942B298}</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5645E0E7-FC12-43BF-A6E4-F9751942B298}</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\globalUpdate.Update3WebControl.4</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.Update3WebControl.4</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></key>
<key><path>HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511961103}</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>d2238d607dfed0669658669e877e827e</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511961103}</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>d2238d607dfed0669658669e877e827e</hash></key>
<value><path>HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE</path><valuename>path</valuename><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><valuedata>C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe</valuedata><hash>9d581cd17b007fb756ee5ead70932ad6</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN</path><valuename>fst_de_69</valuename><vendor>PUP.Optional.FirstSeenToday.A</vendor><action>success</action><valuedata></valuedata><hash>c2330ce1f9825ed8ee971e017192fa06</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS</path><valuename>faststartff@gmail.com</valuename><vendor>PUP.Optional.FastStart.A</vendor><action>success</action><valuedata>C:\Users\sascha\AppData\Roaming\Mozilla\Firefox\Profiles\jy75wg5h.default\extensions\faststartff@gmail.com</valuedata><hash>ef06e904a7d489ad1f1dc8a0778dda26</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\SUPDP</path><valuename>dir</valuename><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><valuedata>C:\Program Files (x86)\SupTab</valuedata><hash>46af40ad7dfe41f5dfd3ce34e023649c</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\SUPTAB</path><valuename>ptid</valuename><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><valuedata>tugs</valuedata><hash>ac49e30a91ea3105e401b0522dd643bd</hash></value>
<value><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WINDOWSPROTECTMANGER</path><valuename>ImagePath</valuename><vendor>PUP.Optional.WPM.A</vendor><action>success</action><valuedata>C:\ProgramData\WindowsProtectManger\wprotectmanager.exe -service</valuedata><hash>896c13da047751e53d6729e820e33ac6</hash></value>
<value><path>HKU\S-1-5-21-2940267510-147821796-3909958549-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS</path><valuename>appid</valuename><vendor>PUP.Optional.FastStart.A</vendor><action>success</action><valuedata>faststartff@gmail.com</valuedata><hash>fef7a34aceadcc6a5e78ec13e61c48b8</hash></value>
<data><path>HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS</path><valuename>AppInit_DLLs</valuename><vendor>PUP.Optional.Skytech.A</vendor><action>replaced</action><valuedata>C:\PROGRA~2\SupTab\SEARCH~2.DLL</valuedata><baddata>C:\PROGRA~2\SupTab\SEARCH~2.DLL</baddata><gooddata></gooddata><hash>37be727ba9d2f046b10f425348b9fd03</hash></data>
<data><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS</path><valuename>AppInit_DLLs</valuename><vendor>PUP.Optional.Skytech.A</vendor><action>replaced</action><valuedata>C:\PROGRA~2\SupTab\SEARCH~1.DLL</valuedata><baddata>C:\PROGRA~2\SupTab\SEARCH~1.DLL</baddata><gooddata></gooddata><hash>b3420ae3522979bd427e15805fa27a86</hash></data>
<data><path>HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND</path><valuename></valuename><vendor>PUP.Optional.WebsSearches.A</vendor><action>replaced</action><valuedata>C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&amp;ts=1404106766&amp;from=tugs&amp;uid=ST500LM011XHM501II_S24QJ9EC605348</valuedata><baddata>C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&amp;ts=1404106766&amp;from=tugs&amp;uid=ST500LM011XHM501II_S24QJ9EC605348</baddata><gooddata>iexplore.exe</gooddata><hash>b83d0ce1691245f11698a94b26de30d0</hash></data>
<data><path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Default_Search_URL</valuename><vendor>PUP.Optional.WebsSearches.A</vendor><action>replaced</action><valuedata>hxxp://istart.webssearches.com/web/?type=ds&amp;ts=1404106766&amp;from=tugs&amp;uid=ST500LM011XHM501II_S24QJ9EC605348&amp;q={searchTerms}</valuedata><baddata>hxxp://istart.webssearches.com/web/?type=ds&amp;ts=1404106766&amp;from=tugs&amp;uid=ST500LM011XHM501II_S24QJ9EC605348&amp;q={searchTerms}</baddata><gooddata>www.google.com</gooddata><hash>6c890be2700bc274fda88173927205fb</hash></data>
<data><path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Default_Page_URL</valuename><vendor>PUP.Optional.WebsSearches.A</vendor><action>replaced</action><valuedata>hxxp://istart.webssearches.com/?type=hp&amp;ts=1404106766&amp;from=tugs&amp;uid=ST500LM011XHM501II_S24QJ9EC605348</valuedata><baddata>hxxp://istart.webssearches.com/?type=hp&amp;ts=1404106766&amp;from=tugs&amp;uid=ST500LM011XHM501II_S24QJ9EC605348</baddata><gooddata>www.google.com</gooddata><hash>14e1e508a8d360d6bee55a9adb29936d</hash></data>
<data><path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Start Page</valuename><vendor>PUP.Optional.WebsSearches.A</vendor><action>replaced</action><valuedata>hxxp://istart.webssearches.com/?type=hp&amp;ts=1404106766&amp;from=tugs&amp;uid=ST500LM011XHM501II_S24QJ9EC605348</valuedata><baddata>hxxp://istart.webssearches.com/?type=hp&amp;ts=1404106766&amp;from=tugs&amp;uid=ST500LM011XHM501II_S24QJ9EC605348</baddata><gooddata>www.google.com</gooddata><hash>1dd827c65526fa3cfcab579d9a6ab64a</hash></data>
<data><path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES</path><valuename>DefaultScope</valuename><vendor>PUP.Optional.Qone8</vendor><action>replaced</action><valuedata>{33BB0A4E-99AF-4226-BDF6-49120163DE86}</valuedata><baddata>{33BB0A4E-99AF-4226-BDF6-49120163DE86}</baddata><gooddata>{0633EE93-D776-472f-A0FF-E1416B8B2E3A}</gooddata><hash>51a4d617b3c8c6700acabd4139cbe917</hash></data>
<data><path>HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND</path><valuename></valuename><vendor>PUP.Optional.WebsSearches.A</vendor><action>replaced</action><valuedata>C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&amp;ts=1404106766&amp;from=tugs&amp;uid=ST500LM011XHM501II_S24QJ9EC605348</valuedata><baddata>C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&amp;ts=1404106766&amp;from=tugs&amp;uid=ST500LM011XHM501II_S24QJ9EC605348</baddata><gooddata>iexplore.exe</gooddata><hash>a154effec9b2d066644a8470d0340ef2</hash></data>
<folder><path>C:\ProgramData\IePluginServices</path><vendor>PUP.Optional.IePluginServices.A</vendor><action>delete-on-reboot</action><hash>ea0bfdf0fc7f70c6095c7f687e84ee12</hash></folder>
<folder><path>C:\ProgramData\IePluginServices\update</path><vendor>PUP.Optional.IePluginServices.A</vendor><action>success</action><hash>ea0bfdf0fc7f70c6095c7f687e84ee12</hash></folder>
<folder><path>C:\ProgramData\WindowsProtectManger</path><vendor>PUP.Optional.WPM.A</vendor><action>delete-on-reboot</action><hash>9c599b5294e7d95db05c07e1748e619f</hash></folder>
<folder><path>C:\ProgramData\WindowsProtectManger\log</path><vendor>PUP.Optional.WPM.A</vendor><action>success</action><hash>9c599b5294e7d95db05c07e1748e619f</hash></folder>
<folder><path>C:\ProgramData\WindowsProtectManger\update</path><vendor>PUP.Optional.WPM.A</vendor><action>success</action><hash>9c599b5294e7d95db05c07e1748e619f</hash></folder>
<folder><path>C:\Program Files (x86)\globalUpdate\Update</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></folder>
<folder><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></folder>
<folder><path>C:\Program Files (x86)\globalUpdate\Update\Download</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></folder>
<folder><path>C:\Program Files (x86)\globalUpdate\Update\Install</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></folder>
<folder><path>C:\Program Files (x86)\globalUpdate\Update\Offline</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></folder>
<folder><path>C:\Program Files (x86)\globalUpdate\Update\Offline\{0CC21F22-D00C-4289-BD89-B238EC9AB10B}</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab</path><vendor>PUP.Optional.SupTab.A</vendor><action>delete-on-reboot</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\img</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\img\weather</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\js</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\en-US</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\es-419</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\es-ES</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\fr-BE</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\fr-CA</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\fr-CH</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\fr-FR</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\fr-LU</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\it-CH</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\it-IT</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\pl</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\pt</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\pt-BR</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\ru</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\ru-MO</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\tr-TR</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\vi-VI</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\zh-CN</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Program Files (x86)\SupTab\web\_locales\zh-TW</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></folder>
<folder><path>C:\Users\sascha\AppData\Roaming\SupTab</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>5b9a9558cead0f274ca80de299698c74</hash></folder>
<file><path>C:\ProgramData\IePluginServices\PluginService.exe</path><vendor>PUP.Optional.IePluginService.A</vendor><action>delete-on-reboot</action><hash>06efea03fb80c96dfc4b7fe7a9583fc1</hash></file>
<file><path>C:\Program Files (x86)\SupTab\DpInterface32.dll</path><vendor>PUP.Optional.Skytech.A</vendor><action>delete-on-reboot</action><hash>52a3965793e885b1655ba6efe31edd23</hash></file>
<file><path>C:\ProgramData\WindowsProtectManger\wprotectmanager.exe</path><vendor>PUP.Optional.WPM.A</vendor><action>delete-on-reboot</action><hash>40b5737ac2b9e5512d3f6237cf32a35d</hash></file>
<file><path>C:\Program Files (x86)\SupTab\SearchProtect64.dll</path><vendor>PUP.Optional.Skytech.A</vendor><action>success</action><hash>37be727ba9d2f046b10f425348b9fd03</hash></file>
<file><path>C:\Program Files (x86)\SupTab\SearchProtect32.dll</path><vendor>PUP.Optional.Skytech.A</vendor><action>success</action><hash>b3420ae3522979bd427e15805fa27a86</hash></file>
<file><path>C:\Program Files (x86)\SupTab\DpInterface64.dll</path><vendor>PUP.Optional.Skytech.A</vendor><action>success</action><hash>946188659fdca6902c94a9eca25f08f8</hash></file>
<file><path>C:\Program Files (x86)\SupTab\DpInterfacef32.dll</path><vendor>PUP.Optional.Skytech.A</vendor><action>success</action><hash>995c1fce6b10290db60aafe654addb25</hash></file>
<file><path>C:\Program Files (x86)\SupTab\RSHP.exe</path><vendor>PUP.Optional.IEPluginService.A</vendor><action>success</action><hash>08edc528700bd95d41ad0b6d31d03ec2</hash></file>
<file><path>C:\Program Files (x86)\SupTab\SpAPPSv32.dll</path><vendor>PUP.Optional.Skytech.A</vendor><action>success</action><hash>7d78717c0a7179bd8937fb9a1ae708f8</hash></file>
<file><path>C:\Program Files (x86)\SupTab\SpAPPSv64.dll</path><vendor>PUP.Optional.Skytech.A</vendor><action>success</action><hash>01f417d6f289e5517c44742115ec6e92</hash></file>
<file><path>C:\Program Files (x86)\SupTab\SupTab.dll</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>738294595f1c3bfb87fa41f40ff1f10f</hash></file>
<file><path>C:\Users\sascha\Downloads\SoftonicDownloader_fuer_auslogics-registry-cleaner.exe</path><vendor>PUP.Optional.Softonic.A</vendor><action>success</action><hash>cd2829c43e3dcb6b43c6250ba55c49b7</hash></file>
<file><path>C:\Windows\System32\Tasks\b37f039f-a8ac-448f-ae4d-eba866185131-1</path><vendor>PUP.Optional.CrossRider.T</vendor><action>success</action><hash>03f2cb22a3d8da5c95aa1cef33d0847c</hash></file>
<file><path>C:\Windows\System32\Tasks\b37f039f-a8ac-448f-ae4d-eba866185131-11</path><vendor>PUP.Optional.CrossRider.T</vendor><action>success</action><hash>23d229c488f361d550ef06054bb802fe</hash></file>
<file><path>C:\Windows\System32\Tasks\b37f039f-a8ac-448f-ae4d-eba866185131-2</path><vendor>PUP.Optional.CrossRider.T</vendor><action>success</action><hash>bf36f2fba6d553e3dc63ee1da063ae52</hash></file>
<file><path>C:\Windows\System32\Tasks\b37f039f-a8ac-448f-ae4d-eba866185131-3</path><vendor>PUP.Optional.CrossRider.T</vendor><action>success</action><hash>02f3cb2287f4bf7795aa9b70d52eaf51</hash></file>
<file><path>C:\Windows\System32\Tasks\b37f039f-a8ac-448f-ae4d-eba866185131-4</path><vendor>PUP.Optional.CrossRider.T</vendor><action>success</action><hash>e80d618c87f4fd393b047d8e788b31cf</hash></file>
<file><path>C:\Windows\System32\Tasks\b37f039f-a8ac-448f-ae4d-eba866185131-5</path><vendor>PUP.Optional.CrossRider.T</vendor><action>success</action><hash>52a3f4f9c5b60234c37c7398d13214ec</hash></file>
<file><path>C:\Windows\System32\Tasks\b37f039f-a8ac-448f-ae4d-eba866185131-5_user</path><vendor>PUP.Optional.CrossRider.T</vendor><action>success</action><hash>18dd4ba2017a69cd75ca53b8d0337d83</hash></file>
<file><path>C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\webssearches.xml</path><vendor>PUP.Optional.WebsSearches.A</vendor><action>success</action><hash>33c227c6f08bf244212c61c5bd46e719</hash></file>
<file><path>C:\Windows\Tasks\b37f039f-a8ac-448f-ae4d-eba866185131-1.job</path><vendor>PUP.Optional.CrossRider.T</vendor><action>success</action><hash>5c99638ab8c3b3833a893e2be420f709</hash></file>
<file><path>C:\Windows\Tasks\b37f039f-a8ac-448f-ae4d-eba866185131-11.job</path><vendor>PUP.Optional.CrossRider.T</vendor><action>success</action><hash>3abbd31a99e256e09a293930699b8b75</hash></file>
<file><path>C:\Windows\Tasks\b37f039f-a8ac-448f-ae4d-eba866185131-2.job</path><vendor>PUP.Optional.CrossRider.T</vendor><action>success</action><hash>bf3629c47ffc80b683404524689c768a</hash></file>
<file><path>C:\Windows\Tasks\b37f039f-a8ac-448f-ae4d-eba866185131-3.job</path><vendor>PUP.Optional.CrossRider.T</vendor><action>success</action><hash>ae47e10c94e74bebcaf9dc8d729203fd</hash></file>
<file><path>C:\Windows\Tasks\b37f039f-a8ac-448f-ae4d-eba866185131-4.job</path><vendor>PUP.Optional.CrossRider.T</vendor><action>success</action><hash>db1a01ecaccf0a2c863d4a1f956f5da3</hash></file>
<file><path>C:\Windows\Tasks\b37f039f-a8ac-448f-ae4d-eba866185131-5.job</path><vendor>PUP.Optional.CrossRider.T</vendor><action>success</action><hash>24d113dae2996bcba71c591011f3e41c</hash></file>
<file><path>C:\Windows\Tasks\b37f039f-a8ac-448f-ae4d-eba866185131-5_user.job</path><vendor>PUP.Optional.CrossRider.T</vendor><action>success</action><hash>e015826bdd9e59dd428182e77e86ee12</hash></file>
<file><path>C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job</path><vendor>PUP.Optional.GlobalUpdate.A</vendor><action>success</action><hash>37be25c87b003303e1f83f2a53b19a66</hash></file>
<file><path>C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore</path><vendor>PUP.Optional.GlobalUpdate.A</vendor><action>success</action><hash>668fcb225d1ed3636b6f41288282619f</hash></file>
<file><path>C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job</path><vendor>PUP.Optional.GlobalUpdate.A</vendor><action>success</action><hash>c035d61723583bfba536274235cf9e62</hash></file>
<file><path>C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA</path><vendor>PUP.Optional.GlobalUpdate.A</vendor><action>success</action><hash>8372d6173744f04616c6bcad768e57a9</hash></file>
<file><path>C:\ProgramData\IePluginServices\update\conf</path><vendor>PUP.Optional.IePluginServices.A</vendor><action>success</action><hash>ea0bfdf0fc7f70c6095c7f687e84ee12</hash></file>
<file><path>C:\ProgramData\WindowsProtectManger\log\wprotectmanager_2014-06-30[07-39-56-208].log</path><vendor>PUP.Optional.WPM.A</vendor><action>success</action><hash>9c599b5294e7d95db05c07e1748e619f</hash></file>
<file><path>C:\ProgramData\WindowsProtectManger\update\conf</path><vendor>PUP.Optional.WPM.A</vendor><action>success</action><hash>9c599b5294e7d95db05c07e1748e619f</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleCrashHandler.exe</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdate.exe</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateBroker.exe</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateHelper.msi</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateOnDemand.exe</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdate.dll</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdateres_en.dll</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psmachine.dll</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></file>
<file><path>C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psuser.dll</path><vendor>PUP.Optional.GlobalUpdate.T</vendor><action>success</action><hash>13e21cd11c5fee48f5b863888181d32d</hash></file>
<file><path>C:\Program Files (x86)\SupTab\ient.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\install.data</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\uninstall.exe</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\WebDataJs</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\data.html</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\indexIE.html</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\indexIE8.html</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\main.css</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\ver.txt</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\arrow.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\default_add_logo.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\default_add_logo_hover.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\default_logo.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\googlelogo.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\googlelogo2.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\google_trends.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\icon128.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\icon16.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\icon48.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\loading.gif</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\logo32.ico</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\img\weather\0.png</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\js\common.js</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\js\ga.js</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\js\ie8.js</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\js\jquery-1.11.0.min.js</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\js\js.js</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\js\library.js</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\js\xagainit.js</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\pt\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
<file><path>C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json</path><vendor>PUP.Optional.SupTab.A</vendor><action>success</action><hash>73828e5fb5c682b4c82ba04f6c96926e</hash></file>
</items>
</mbam-log>

was bleibt ... neu aufsetzen ?

Geändert von wegomyway (15.09.2014 um 20:18 Uhr)

 

Themen zu Malware Bytes , logfile erhalten
aufsetzen, browser, downloader, explorer, festgestellt, firefox, free, helper, iexplore.exe, install.exe, internet, internet explorer, logfile, malware, microsoft, msil/mypcbackup.b, pup.optional.faststart.a, service.exe, software, system, system32, virus, win32/installcore.pk, windows, windowsprotectmanger




Ähnliche Themen: Malware Bytes , logfile erhalten


  1. Infektion mit spyware.passwords.ed (Scan mit malware bytes)
    Plagegeister aller Art und deren Bekämpfung - 19.01.2015 (15)
  2. Dropper- und Trojanerfund durch avast und malware bytes
    Plagegeister aller Art und deren Bekämpfung - 24.07.2014 (13)
  3. GDATA und Malware Bytes Anti Malware Premium sinnvoll
    Antiviren-, Firewall- und andere Schutzprogramme - 20.06.2014 (1)
  4. Komme nicht mehr über die Systemsteuerung ins System + Teamviever blockiert? Malware Bytes findet Einträge?
    Plagegeister aller Art und deren Bekämpfung - 14.06.2014 (11)
  5. AntiVir & Malware Bytes - Dieses Programm wurde duch eine Gruppenrichtlinie geblockt
    Log-Analyse und Auswertung - 08.06.2014 (9)
  6. 4 infizierte Objekte gefunden mit Malware Bytes
    Plagegeister aller Art und deren Bekämpfung - 05.01.2014 (19)
  7. Inkasso Mail mit Zip-Anhang geöffnet, Trojaner Fund mit Malware Bytes
    Log-Analyse und Auswertung - 19.05.2013 (25)
  8. Groupon Trojaner. Email leider geoeffnet.Malware bytes findet nichts. Trotzdem noch Gefahr?
    Plagegeister aller Art und deren Bekämpfung - 24.03.2013 (12)
  9. Explorer_exe. Virus oder nicht (19 viren malware bytes gefunden)
    Log-Analyse und Auswertung - 16.01.2013 (4)
  10. Virus "exp/cve-2012-1723.A.597" von antivir gefunden; malware-bytes findet nichts
    Plagegeister aller Art und deren Bekämpfung - 12.12.2012 (29)
  11. (2x) Malware Bytes Report
    Mülltonne - 03.06.2012 (1)
  12. links falsch, kein sound im web, malware bytes schutz schlägt fehl
    Log-Analyse und Auswertung - 11.07.2011 (26)
  13. Malware Bytes
    Log-Analyse und Auswertung - 11.07.2011 (1)
  14. malware bytes meldet immer wieder "stolen data"
    Log-Analyse und Auswertung - 29.04.2011 (2)
  15. Antivir meldet Virus trotz angeblicher ENtfernung durch Malware Bytes
    Log-Analyse und Auswertung - 12.07.2010 (1)
  16. unbekannte ip wird von malware bytes geblockt
    Plagegeister aller Art und deren Bekämpfung - 23.03.2010 (2)
  17. HJT-Log Malware Bytes Logs
    Log-Analyse und Auswertung - 19.06.2008 (3)

Zum Thema Malware Bytes , logfile erhalten - Ich hab von einem Arbeitskollegen derenTochter folgendes Log erhalten. Ihr Freund , so ihre Aussage , hatte sich einen Virus ufn PeeCee eingehandelt (fragt mich nicht wie das festgestellt wurde, - Malware Bytes , logfile erhalten...
Archiv
Du betrachtest: Malware Bytes , logfile erhalten auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.