Hallo,
ich habe das Thema schon gesehen bei anderen hier und wollte da jetzt allerdings nicht auf eigene Faust herumprobieren nach dem Try and Error - Prinzip.
Also kurz. Ich hab Windows 7 Pro N auf meinem ASUS Laptop und seit geraumer Zeit ist es kein Spass mehr ins Internet zu gehen, da ich dauernd von aufploppenden Popups gestört werde und auch dauernd neue Seiten geöffnet werden. Es ist egal ob Explorer oder Mozilla als Browser genutzt werden. Chrome hatte ich auch schon versucht, aber das war ganz katastrophal.
Ich habe mir FRST heruntergeladen und auch einen Scan durchgeführt:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-09-2014
Ran by Mucky (administrator) on ASUS on 17-09-2014 09:03:48
Running from C:\Users\Mucky\Downloads
Platform: Microsoft Windows 7 Professional N  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVKTray\AVKTray.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\GDKBFltExe32.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(CyberLink Corp.) C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\PCMAgent.exe
(CyberLink) C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files\ASUS\AI TouchMedia\PlayMovie\PMVService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(Somoto) C:\Users\Mucky\AppData\Local\FilesFrog Update Checker\update_checker.exe
(MyPCBackup.com) C:\Program Files\MyPC Backup\MyPC Backup.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\w32x86\3\NetFaxServer.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe
(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
() C:\Users\Mucky\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_11_8_800_174_ActiveX.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [331264 2010-11-26] ()
HKLM\...\Run: [PCMAgent] => C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\PCMAgent.exe [212992 2008-06-11] (CyberLink Corp.)
HKLM\...\Run: [CLMLServer] => C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvc.exe [196608 2008-06-11] (CyberLink)
HKLM\...\Run: [PlayMovie] => C:\Program Files\ASUS\AI TouchMedia\PlayMovie\PMVService.exe [172032 2008-05-19] (CyberLink Corp.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1549608 2009-08-17] (Synaptics Incorporated)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM\...\Run: [GDFirewallTray] => C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1724728 2013-12-19] (G Data Software AG)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files\G Data\InternetSecurity\AVKTray\AVKTray.exe
HKU\S-1-5-21-1307851060-3472154346-1383332600-1000\...\Run: [SDP] => C:\Users\Mucky\AppData\Local\FilesFrog Update Checker\update_checker.exe [201808 2013-01-31] (Somoto)
Startup: C:\Users\Mucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=C0F700215D8F2354&affID=119357&tsp=5005
BHO: LyricsSay-1 -> {11111111-1111-1111-1111-110411151152} -> C:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll (Lyrics)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: LyricsSay-1 - C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\Extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com [2014-04-22]
FF Extension: LyriXeeker-1 - C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\Extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com [2014-04-22]
FF Extension: No Name - C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\Extensions\staged [2014-09-17]
FF Extension: Adblock Plus - C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-23]

Chrome: 
=======
CHR StartupUrls: Default -> "https://www.google.de/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}
CHR CustomProfile: C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-07]
CHR Extension: (Google Drive) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-07]
CHR Extension: (YouTube) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-07]
CHR Extension: (Google-Suche) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-07]
CHR Extension: (Google Wallet) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-07]
CHR Extension: (Google Mail) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-07]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVKProxy; C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe [2244728 2014-02-12] (G Data Software AG)
R2 AVKService; C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe [914552 2013-12-19] (G Data Software AG)
R2 AVKWCtl; C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe [2159472 2014-03-25] (G Data Software AG)
S2 BackupStack; C:\Program Files\MyPC Backup\BackupStack.exe [32808 2013-07-01] (Just Develop It)
R3 GDFwSvc; C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe [2409280 2014-01-30] (G Data Software AG)
R3 GDScan; C:\Program Files\Common Files\G Data\GDScan\GDScan.exe [700024 2014-02-03] (G Data Software AG)
R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\w32x86\3\NetFaxServer.exe [175104 2011-01-24] (Samsung Electronics Co., Ltd.) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [44544 2014-04-22] (G Data Software AG)
R3 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt32.sys [20736 2014-04-22] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [101504 2014-04-22] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [56832 2014-04-22] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd32.sys [53248 2014-04-22] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [29528 2014-04-22] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [50176 2014-04-22] (G Data Software AG)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2007-07-31] (ATK0100)
R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2010-12-23] (Samsung Electronics) [File not signed]
S3 ZOOM_R16MTR; C:\Windows\System32\Drivers\zmr16usbaudio.sys [81920 2013-04-03] (Zoom Corporation.)
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\ASUS\AI TouchMedia\PlayMovie\000.fcl [61424 2008-05-19] (Cyberlink Corp.)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-17 09:01 - 2014-09-17 09:03 - 00053049 _____ () C:\Users\Mucky\Downloads\Addition.txt
2014-09-17 09:00 - 2014-09-17 09:03 - 00012331 _____ () C:\Users\Mucky\Downloads\FRST.txt
2014-09-17 08:59 - 2014-09-17 09:03 - 00000000 ____D () C:\FRST
2014-09-17 08:57 - 2014-09-17 08:57 - 01097728 _____ (Farbar) C:\Users\Mucky\Downloads\FRST.exe
2014-09-17 08:04 - 2014-09-17 08:04 - 00000000 ____D () C:\Windows\LastGood
2014-09-11 11:49 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-09-11 11:49 - 2014-08-23 02:42 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-09-11 11:49 - 2014-07-07 03:40 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-11 11:49 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-11 11:17 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-11 11:17 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-11 11:12 - 2014-09-05 03:52 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-11 11:12 - 2014-09-05 03:47 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-11 11:00 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-10 06:09 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-09-10 06:09 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-09-10 06:09 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-09-10 06:09 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-09-10 06:09 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-09-10 06:09 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-09-10 06:09 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-09-10 06:08 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-09-10 06:08 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-09-01 07:01 - 2014-09-01 07:01 - 00212600 _____ () C:\Windows\system32\SBuySupplies.exe
2014-09-01 07:01 - 2014-09-01 07:01 - 00024064 _____ () C:\Windows\system32\ssn2mlm.dll
2014-08-23 10:44 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-23 10:44 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-23 10:44 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-23 10:44 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-23 10:22 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-23 10:22 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-23 10:22 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-08-23 10:22 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-08-23 10:22 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-08-23 10:22 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-08-23 10:22 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-08-23 10:22 - 2014-03-04 11:17 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-08-23 10:22 - 2014-03-04 11:17 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-08-23 10:22 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-08-23 10:22 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-08-23 10:22 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-08-23 10:22 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-08-23 10:22 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-08-23 10:22 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-08-23 10:21 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-23 10:21 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-08-23 10:21 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-08-23 10:21 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-23 10:21 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-23 10:21 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-23 10:21 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-23 10:21 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-08-23 10:21 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-08-23 10:21 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-08-23 10:21 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-08-23 10:21 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-08-23 10:21 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-08-23 10:20 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-08-23 10:20 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-08-23 10:20 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-08-23 10:20 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-08-23 10:20 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-08-23 10:20 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-08-23 10:20 - 2014-05-30 08:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-08-23 10:20 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-08-23 10:19 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-23 10:18 - 2014-04-12 04:15 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-08-23 10:18 - 2014-04-12 04:15 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-08-23 10:18 - 2014-04-12 04:12 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-08-23 10:18 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-08-23 10:18 - 2014-04-12 04:12 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-08-23 10:18 - 2014-04-12 04:11 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-17 09:03 - 2014-09-17 09:01 - 00053049 _____ () C:\Users\Mucky\Downloads\Addition.txt
2014-09-17 09:03 - 2014-09-17 09:00 - 00012331 _____ () C:\Users\Mucky\Downloads\FRST.txt
2014-09-17 09:03 - 2014-09-17 08:59 - 00000000 ____D () C:\FRST
2014-09-17 09:01 - 2014-02-07 14:30 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-17 08:57 - 2014-09-17 08:57 - 01097728 _____ (Farbar) C:\Users\Mucky\Downloads\FRST.exe
2014-09-17 08:40 - 2013-06-20 16:53 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-09-17 08:40 - 2013-06-20 16:53 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-09-17 08:37 - 2013-09-14 10:37 - 00000180 _____ () C:\Users\Mucky\AppData\Roaming\WB.CFG
2014-09-17 08:37 - 2013-09-14 09:37 - 00000286 _____ () C:\Windows\Tasks\DSite.job
2014-09-17 08:07 - 2009-07-14 06:02 - 00028160 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-17 08:07 - 2009-07-14 06:02 - 00028160 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-17 08:04 - 2014-09-17 08:04 - 00000000 ____D () C:\Windows\LastGood
2014-09-17 08:04 - 2013-06-17 10:23 - 02038306 _____ () C:\Windows\WindowsUpdate.log
2014-09-17 08:00 - 2014-02-07 14:30 - 00001092 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-17 08:00 - 2013-09-14 09:39 - 00001284 _____ () C:\Windows\Tasks\LyriXeeker-1-updater.job
2014-09-17 08:00 - 2013-09-14 09:39 - 00001088 _____ () C:\Windows\Tasks\LyriXeeker-1-enabler.job
2014-09-17 08:00 - 2013-09-14 09:38 - 00001188 _____ () C:\Windows\Tasks\LyriXeeker-1-codedownloader.job
2014-09-17 08:00 - 2013-09-14 09:37 - 00001810 _____ () C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job
2014-09-17 08:00 - 2013-09-13 12:10 - 00001278 _____ () C:\Windows\Tasks\LyricsSay-1-updater.job
2014-09-17 08:00 - 2013-09-13 12:10 - 00001182 _____ () C:\Windows\Tasks\LyricsSay-1-codedownloader.job
2014-09-17 08:00 - 2013-09-13 12:10 - 00001082 _____ () C:\Windows\Tasks\LyricsSay-1-enabler.job
2014-09-17 08:00 - 2013-09-13 12:09 - 00001802 _____ () C:\Windows\Tasks\LyricsSay-1-firefoxinstaller.job
2014-09-17 08:00 - 2009-07-14 06:17 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-17 08:00 - 2009-07-14 06:07 - 00039975 _____ () C:\Windows\setupact.log
2014-09-17 07:59 - 2010-11-20 23:49 - 00134354 _____ () C:\Windows\PFRO.log
2014-09-16 20:36 - 2013-12-02 19:17 - 00120514 _____ () C:\Windows\IE11_main.log
2014-09-16 20:18 - 2013-06-21 11:21 - 00000000 ____D () C:\ProgramData\Samsung
2014-09-16 20:17 - 2013-06-21 11:19 - 00000000 ____D () C:\Program Files\SamsungPrinterLiveUpdate
2014-09-16 10:14 - 2013-06-21 12:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-09-16 10:14 - 2013-06-21 09:41 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-15 08:31 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-09-12 09:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-09-12 09:07 - 2013-09-14 09:37 - 00000000 ____D () C:\Program Files\LyriXeeker-1
2014-09-12 09:07 - 2013-09-13 12:09 - 00000000 ____D () C:\Program Files\LyricsSay-1
2014-09-12 08:29 - 2009-07-14 06:17 - 00032634 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-09-11 13:57 - 2009-07-14 06:02 - 00433200 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-11 13:00 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-09-11 12:59 - 2014-05-30 12:08 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-11 12:55 - 2010-11-20 23:03 - 01593564 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-11 11:45 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-09-09 12:52 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Public\Libraries
2014-09-09 12:43 - 2013-09-14 10:49 - 00000000 ____D () C:\Users\Mucky\Downloads\alt
2014-09-09 08:35 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-09-05 03:52 - 2014-09-11 11:12 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-05 03:47 - 2014-09-11 11:12 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-01 07:01 - 2014-09-01 07:01 - 00212600 _____ () C:\Windows\system32\SBuySupplies.exe
2014-09-01 07:01 - 2014-09-01 07:01 - 00024064 _____ () C:\Windows\system32\ssn2mlm.dll
2014-08-23 11:05 - 2011-04-12 04:25 - 00000000 ____D () C:\Program Files\Windows Journal
2014-08-23 09:57 - 2013-09-11 16:32 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-08-23 03:46 - 2014-09-11 11:49 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 02:42 - 2014-09-11 11:49 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

Some content of TEMP:
====================
C:\Users\Mucky\AppData\Local\Temp\BabylonTB.exe
C:\Users\Mucky\AppData\Local\Temp\BackupSetup.exe
C:\Users\Mucky\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe
C:\Users\Mucky\AppData\Local\Temp\fmp-2.0.7-win32.exe
C:\Users\Mucky\AppData\Local\Temp\IminentSetup.exe
C:\Users\Mucky\AppData\Local\Temp\ose00000.exe
C:\Users\Mucky\AppData\Local\Temp\ose00001.exe
C:\Users\Mucky\AppData\Local\Temp\Setup.exe
C:\Users\Mucky\AppData\Local\Temp\uninst1.exe
C:\Users\Mucky\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\Mucky\AppData\Local\Temp\wajam_download.exe
C:\Users\Mucky\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-16 07:39

==================== End Of Log ============================
         

Der Rechner ist ein Core 2 Duo T5900 mit 2,2 GHz und 3 GB RAM. Das Windows 7 Pro N ist ein 32er System.
Ach ja, als Sicherheit habe ich GData auf dem Rechner installiert.
Wie muss ich jetzt weitermachen?

Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch das Addition.txt Logfile von FRST nachreichen.

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Hallo cosinus,
dank eschonmal für di ewahnsinnig schnelle Reaktion.
Ich hab die letzten Wochen keine Scans durchgeführt, hab aber dauernd Virenmeldungen un dverschiebe dauernd Dateien in die Quarantäne oder lösche diese.
Ich hab nen Sreenshot gemacht von meiner Quarantäne-Liste und al spdf angehangen.

Und hierd die Addition:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 12-09-2014
Ran by Mucky at 2014-09-17 09:04:14
Running from C:\Users\Mucky\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: G Data InternetSecurity (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}
AS: G Data InternetSecurity (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: G Data Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 11 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 11.8.800.174 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
AI TouchMedia (HKLM\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 6.0.1811 - CyberLink Corp.)
AI TouchMedia (Version: 6.0.1811 - CyberLink Corp.) Hidden
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.3.4746 - CDBurnerXP)
Common Desktop Agent (Version: 1.52.0 - OEM) Hidden
DC-Bass Source 1.3.0 (HKLM\...\DC-Bass Source) (Version:  - )
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{650DE870-ECA3-4E63-8D77-778512BE5D4C}) (Version:  - Microsoft)
Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{BF1E7B7B-8FBB-45C8-B170-214AA0F4F6AE}) (Version:  - Microsoft)
DirectVobSub 2.40.4209 (HKLM\...\vsfilter_is1) (Version: 2.40.4209 - MPC-HC Team)
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.1.8 - DivX, LLC)
ElsterFormular (HKLM\...\ElsterFormular) (Version: 15.2.20140326 - Landesfinanzdirektion Thüringen)
FilesFrog Update Checker (HKLM\...\FilesFrog Update Checker) (Version:  - ) <==== ATTENTION
G Data InternetSecurity (HKLM\...\{85203592-3610-4FB9-AA11-15B2255B5A12}) (Version: 25.0.1.2 - G Data Software AG)
Google Chrome (HKLM\...\Google Chrome) (Version: 37.0.2062.120 - Google Inc.)
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
Haali Media Splitter (HKLM\...\HaaliMkx) (Version:  - )
Lagarith Lossless Codec (1.3.27) (HKLM\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version:  - )
LAME v3.99.3 (for Windows) (HKLM\...\LAME_is1) (Version:  - )
LyricsSay-1 (HKLM\...\LyricsSay-1) (Version: 1.28.153.3 - Lyrics) <==== ATTENTION
LyriXeeker-1 (HKLM\...\LyriXeeker-1) (Version: 1.28.153.3 - Lyrics) <==== ATTENTION
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Mathematics (HKLM\...\{4D090F70-6F08-4B60-9357-A1DFD4458F09}) (Version: 4.0 - Microsoft Corporation)
Microsoft Mathematics Add-In for Word and OneNote (HKLM\...\{90150000-00D8-0407-0000-0000000FF1CE}) (Version: 15.0.4481.1008 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Visio MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Visio Professional 2013 (HKLM\...\Office15.VISPROR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visio Professional 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
Mozilla Thunderbird 17.0.7 (x86 de) (HKLM\...\Mozilla Thunderbird 17.0.7 (x86 de)) (Version: 17.0.7 - Mozilla)
MyPC Backup  (HKLM\...\MyPC Backup) (Version:  - MyPC Backup) <==== ATTENTION
Notepad++ (HKLM\...\Notepad++) (Version: 6.3.3 - Notepad++ Team)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.4 - NVIDIA Corporation)
OpenSource Flash Video Splitter 1.0.0.5 (HKLM\...\OpenSource Flash Video Splitter) (Version: 1.0.0.5 - )
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
R16_R24 Driver (HKLM\...\{19CF1A77-C522-4082-8A2B-A9952EE9E372}) (Version: 2.0.0.5 - ZOOM)
RICOH R5U8xx Media Driver ver.3.62.02 (HKLM\...\{59F6A514-9813-47A3-948C-8A155460CC2A}) (Version: 3.62.02 - RICOH)
Samsung Easy Printer Manager (HKLM\...\Samsung Easy Printer Manager) (Version: 1.00.55.00 - Samsung Electronics Co., Ltd.)
Samsung Network PC Fax (HKLM\...\Samsung Network PC Fax) (Version: 1.05.17.00 - Samsung Electronics Co., Ltd.)
Samsung Printer Live Update (HKLM\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)
Samsung Scan Assistant (HKLM\...\Samsung Scan Assistant) (Version: 1.03.28.00 - Samsung Electronics Co., Ltd.)
Samsung SCX-483x 5x3x Series (HKLM\...\Samsung SCX-483x 5x3x Series) (Version:  - Samsung Electronics Co., Ltd.)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{8D2E04ED-3350-4ECE-9D6E-3BC9A9A93A47}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (Version:  - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version:  - Microsoft) Hidden
Steinberg Cubase 5 (HKLM\...\{4A19D6AC-ADE0-4A07-80FF-9C9812C45557}) (Version: 5.1.2 - Steinberg Media Technologies GmbH)
Steinberg Drum Loop Expansion 01 (HKLM\...\{490BF87E-1F75-4453-BF55-9F540543A3CA}) (Version: 1.0.0.1 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Content (HKLM\...\{BD86F1AC-B594-46E4-85DC-1258AC9E2232}) (Version: 1.0.0.003 - Steinberg Media Technologies GmbH)
Steinberg HALionOne (HKLM\...\{E70E7159-93B1-470D-9FBD-D8E9EF34B538}) (Version: 1.1.0.457 - Steinberg Media Technologies GmbH)
Steinberg HALionOne Additional Content Set 01 (HKLM\...\{F3AFD063-8BAD-485E-B641-E7F5A2C5AE71}) (Version: 1.0.0.001 - Steinberg Media Technologies GmbH)
Steinberg HALionOne Expression Set (HKLM\...\{E22AD5D3-EB60-4A8F-835C-6C10E369DCE2}) (Version: 1.0.1.0 - Steinberg Media Technologies GmbH)
Steinberg HALionOne GM Drum Set (HKLM\...\{AC997F93-0757-4ED4-A701-F40C2D654D09}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)
Steinberg HALionOne GM Set (HKLM\...\{F057965A-D974-4C64-ADB1-4381CD4B8956}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)
Steinberg HALionOne Pro Set (HKLM\...\{D82CDA0D-C182-42C8-8FF2-5649C98D6003}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)
Steinberg HALionOne Studio Drum Set (HKLM\...\{865D9ED1-EAC2-436D-AFA7-0B750EB5AAAB}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)
Steinberg HALionOne Studio Set (HKLM\...\{D23CBFDA-C46B-4920-BA70-FC7878A3F05A}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)
Steinberg LoopMash Content (HKLM\...\{4D454CF8-12FD-464D-B57B-B46FE27B78BB}) (Version: 1.0.0.005 - Steinberg Media Technologies GmbH)
Steinberg REVerence Content 01 (HKLM\...\{532B917B-8235-4FA5-BE36-643A8BB053A5}) (Version: 1.0.0.006 - Steinberg Media Technologies GmbH)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.1.1 - Synaptics Incorporated)
Update for Codec Package (HKCU\...\DSite) (Version:  - ) <==== ATTENTION
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Excel 2010 (KB2889836) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9179FC17-97A8-4D98-9E09-05720AF5D44E}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2889861) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.VISPROR_{F47D9DA0-739D-4FEE-A2CD-16B23382F7EE}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2687502) 32-Bit Edition (HKLM\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{7DE7DF97-82FE-4B3A-AB8D-1621F9CC464A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{EAD7BEF9-B28C-425F-B2C5-538CB27EF013}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{089DBFD7-8211-43B2-AAAE-5BDD8C23E3A8}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760344) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{A7610F07-E844-4444-8E1D-D5BC8AD0B4C5}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768012) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{66421820-D3CA-450A-898C-78D7E40108E6}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863843) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{AD7045B8-1D75-4B4C-8120-12F045D206C7}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.VISPROR_{5D6439FF-D651-4B13-B52E-2508AB9DE19D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{5D6439FF-D651-4B13-B52E-2508AB9DE19D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880478) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{7C5CEE0F-6823-4BB7-A28F-76FEC14EB6AC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881001) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{31849233-AD8B-42D7-9AE1-74C79C8E8C03}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881009) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{7A3EF4FF-A9C8-4F7E-8020-A45F7D319387}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881039) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{1B208923-2810-414F-82CC-AFFC1B19563F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881081) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{6171BC1B-907E-44D4-930A-4AE0D9260E65}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883036) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{B8E73381-09B1-4895-ACD0-34385B0F526D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883049) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{1C6260FD-A280-49FE-89D0-CCEC647FBD8E}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 32-Bit Edition (HKLM\...\{90150000-001F-0407-0000-0000000FF1CE}_Office15.VISPROR_{0F5FFEB6-2F66-4592-8A34-CC85FF318951}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 32-Bit Edition (HKLM\...\{90150000-001F-0409-0000-0000000FF1CE}_Office15.VISPROR_{DA288EB3-648C-433C-88AC-71AEAAFAACF7}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 32-Bit Edition (HKLM\...\{90150000-001F-040C-0000-0000000FF1CE}_Office15.VISPROR_{51865C36-97D4-4210-A33E-50BCC8CDDF72}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 32-Bit Edition (HKLM\...\{90150000-001F-0410-0000-0000000FF1CE}_Office15.VISPROR_{D533D4E6-5056-487A-8F18-7FA51AF0E283}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2889848) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.VISPROR_{E1285C4F-1DB7-4A7F-9DEF-22068D09EBFA}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2889848) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{E1285C4F-1DB7-4A7F-9DEF-22068D09EBFA}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2889862) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{96AE4BBC-69CC-4004-8B53-1F40B2461755}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{1BCA67A6-5329-48D0-A088-C097AC7A14BD}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version:  - Microsoft)
Update for Microsoft Visio 2013 (KB2889849) 32-Bit Edition (HKLM\...\{90150000-0054-0407-0000-0000000FF1CE}_Office15.VISPROR_{CB9B82D8-4B8A-4EF1-846B-7E1B9379C7DA}) (Version:  - Microsoft)
Update for Microsoft Visio 2013 (KB2889849) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{CB9B82D8-4B8A-4EF1-846B-7E1B9379C7DA}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.VISPROR_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
Winamp (HKLM\...\Winamp) (Version: 5.64  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
WinZip 18.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DE}) (Version: 18.0.10661 - WinZip Computing, S.L. )
Xvid Video Codec (HKLM\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

23-08-2014 08:35:15 Windows Update
23-08-2014 09:18:47 Windows Update
10-09-2014 04:07:14 Windows Update
10-09-2014 04:54:53 Windows Update
11-09-2014 08:59:29 Windows Update
11-09-2014 10:53:06 Windows Update
12-09-2014 20:05:43 Windows Update
16-09-2014 08:12:14 Windows Update
16-09-2014 18:35:55 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0509C076-8F47-497B-9F8C-DAF34A74B89D} - \LyricsSay-1-codedownloader No Task File <==== ATTENTION
Task: {10D9F1DD-B93E-493D-8CA1-D13C9224CEEA} - \LyriXeeker-1-codedownloader No Task File <==== ATTENTION
Task: {25FA414D-EDD9-43C0-8BDF-2FFCBDB4FE98} - \LyricsSay-1-enabler No Task File <==== ATTENTION
Task: {2D311364-3673-411E-8034-B10EFCC7BB15} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-02-07] (Google Inc.)
Task: {352DE5CD-ADBC-46B7-83A3-3A87685ED04B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {3BA4BBFA-40D1-46CA-BA9C-0BA221E10C89} - \LyriXeeker-1-firefoxinstaller No Task File <==== ATTENTION
Task: {463969CB-450B-4119-817D-602705EF989E} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {47A2578E-B74C-41A8-8432-04FD8C405BFA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-02-07] (Google Inc.)
Task: {99FDB450-4524-4F0F-A38F-A9B4D9A4F682} - System32\Tasks\DSite => C:\Users\Mucky\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe [2013-09-14] () <==== ATTENTION
Task: {B1953FF5-F54F-4FE9-B20D-55231A3CCD37} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {B532E6AD-8269-48EB-91E4-D1056CA9D12F} - \LyricsSay-1-firefoxinstaller No Task File <==== ATTENTION
Task: {BD42470B-934F-42BB-9C19-1DBA6C33BDDB} - \LyricsSay-1-updater No Task File <==== ATTENTION
Task: {D0EC8579-BCCA-4024-B7AA-604011BF3268} - \LyriXeeker-1-updater No Task File <==== ATTENTION
Task: {E85E5E1A-F54E-4AA0-ACEF-E97562CF0481} - \LyriXeeker-1-enabler No Task File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\DSite.job => C:\Users\Mucky\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\LyricsSay-1-codedownloader.job => C:\Program Files\LyricsSay-1\LyricsSay-1-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\LyricsSay-1-enabler.job => C:\Program Files\LyricsSay-1\LyricsSay-1-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\LyricsSay-1-firefoxinstaller.job => C:\Program Files\LyricsSay-1\LyricsSay-1-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\LyricsSay-1-updater.job => C:\Program Files\LyricsSay-1\LyricsSay-1-updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\LyriXeeker-1-codedownloader.job => C:\Program Files\LyriXeeker-1\LyriXeeker-1-codedownloader.exe
Task: C:\Windows\Tasks\LyriXeeker-1-enabler.job => C:\Program Files\LyriXeeker-1\LyriXeeker-1-enabler.exe
Task: C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job => C:\Program Files\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe
Task: C:\Windows\Tasks\LyriXeeker-1-updater.job => C:\Program Files\LyriXeeker-1\LyriXeeker-1-updater.exe

==================== Loaded Modules (whitelisted) =============

2014-09-01 07:01 - 2014-09-01 07:01 - 00024064 _____ () C:\Windows\System32\ssn2mlm.dll
2010-11-26 22:17 - 2010-11-26 22:17 - 00331264 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
2010-11-26 22:17 - 2010-11-26 22:17 - 00049664 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2008-06-11 21:52 - 2008-06-11 21:52 - 00778240 ____N () C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMediaLibrary.dll
2008-06-11 21:52 - 2008-06-11 21:52 - 00007680 ____N () C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvcPS.dll
2013-08-29 02:23 - 2013-08-29 02:23 - 01861968 _____ () C:\Program Files\DivX\DivX Update\DivXUpdate.exe
2013-08-29 02:25 - 2013-08-29 02:25 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2013-07-01 19:47 - 2013-07-01 19:47 - 00012288 _____ () C:\Program Files\MyPC Backup\GetText.dll
2013-07-01 19:43 - 2013-07-01 19:43 - 00904704 _____ () C:\Program Files\MyPC Backup\x86\System.Data.SQLite.dll
2013-06-21 11:19 - 2010-11-24 12:30 - 00274432 _____ () C:\Windows\system32\SaMinDrv.dll
2013-12-19 04:42 - 2013-12-19 04:42 - 00287864 ____N () C:\Program Files\Common Files\G Data\AVKProxy\PktIcpt2.dll
2013-06-21 11:19 - 2014-09-01 07:01 - 00896512 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\ssn2mdu.dll
2013-09-14 09:37 - 2013-09-14 09:37 - 00095232 _____ () C:\Users\Mucky\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/17/2014 09:04:29 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001b2f
ID des fehlerhaften Prozesses: 0x2174
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (09/17/2014 08:10:10 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418231

Error: (09/17/2014 08:01:43 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/16/2014 07:45:51 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/16/2014 09:24:35 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001b2f
ID des fehlerhaften Prozesses: 0x2884
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (09/16/2014 09:21:53 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001b2f
ID des fehlerhaften Prozesses: 0x26bc
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (09/16/2014 08:59:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001b2f
ID des fehlerhaften Prozesses: 0x2ad4
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (09/16/2014 08:32:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001b2f
ID des fehlerhaften Prozesses: 0x1ff4
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (09/16/2014 08:27:47 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea91c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00052d94
ID des fehlerhaften Prozesses: 0x14cc
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (09/16/2014 08:06:06 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001b2f
ID des fehlerhaften Prozesses: 0x4f8
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3


System errors:
=============
Error: (09/17/2014 08:01:26 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (09/17/2014 08:00:36 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (09/17/2014 08:00:36 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.

Error: (09/16/2014 08:36:51 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7

Error: (09/16/2014 10:13:01 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7

Error: (09/16/2014 08:33:55 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (09/11/2014 02:09:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "G Data Personal Firewall" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (09/11/2014 02:09:39 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst G Data Personal Firewall erreicht.

Error: (09/11/2014 01:58:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (09/11/2014 01:58:29 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.


Microsoft Office Sessions:
=========================
Error: (09/17/2014 09:04:29 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f217401cfd2459a1d3189C:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dlldd6639c3-3e38-11e4-82e4-00248c76c64b

Error: (09/17/2014 08:10:10 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418231

Error: (09/17/2014 08:01:43 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/16/2014 07:45:51 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/16/2014 09:24:35 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f288401cfd17f3eeb083dC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll81eefd0f-3d72-11e4-adb4-00248c76c64b

Error: (09/16/2014 09:21:53 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f26bc01cfd17edda61ad8C:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll219f0474-3d72-11e4-adb4-00248c76c64b

Error: (09/16/2014 08:59:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f2ad401cfd17bc4342ebcC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll0752918f-3d6f-11e4-adb4-00248c76c64b

Error: (09/16/2014 08:32:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f1ff401cfd178030c8cc5C:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll45e12753-3d6b-11e4-adb4-00248c76c64b

Error: (09/16/2014 08:27:47 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe11.0.9600.16428525b664cntdll.dll6.1.7601.18247521ea91cc000000500052d9414cc01cfd17174a4f696C:\Program Files\Internet Explorer\iexplore.exeC:\Windows\SYSTEM32\ntdll.dll92f4cd93-3d6a-11e4-adb4-00248c76c64b

Error: (09/16/2014 08:06:06 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f4f801cfd17448ca23a7C:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll8b4f394b-3d67-11e4-adb4-00248c76c64b


==================== Memory info =========================== 

Processor: Intel(R) Core(TM)2 Duo CPU T5900 @ 2.20GHz
Percentage of memory in use: 45%
Total physical RAM: 3071.11 MB
Available physical RAM: 1667.1 MB
Total Pagefile: 6140.52 MB
Available Pagefile: 4114.35 MB
Total Virtual: 2047.88 MB
Available Virtual: 1899.23 MB

==================== Drives ================================

Drive c: (VistaOS) (Fixed) (Total:116.44 GB) (Free:66.12 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Katha Rina) (Fixed) (Total:104.73 GB) (Free:100.76 GB) NTFS
Drive e: (Belkin CD) (CDROM) (Total:0.05 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 97646C29)
Partition 1: (Not Active) - (Size=11.7 GB) - (Type=1C)
Partition 2: (Active) - (Size=116.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=104.7 GB) - (Type=OF Extended)

==================== End Of Log ============================
         

Während ich versucht hab diesen Text zu verfassen haben sich gefühlte 17896 neue Seiten geöffnet....AAArrrgh

Adware/Junkware/Toolbars entfernen

(alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen aus den Desktop!)

1. Schritt: Malwarebytes

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

2. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

3. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

4. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Moin,
ich hab die ganzen Programme installiert und durchlaufen lassen. Der subjektive Eindruk des Rechners ist schonmal sehr positiv. Ich kann wieder vernünftig schreiben
Hier sind die gewünschten txt Files:

MalwareBytes:

 Malwarebytes Anti-Malware 
www.malwarebytes.org


Protection, 17.09.2014 17:29:42, SYSTEM, ASUS, Protection, Malware Protection, Starting, 
Protection, 17.09.2014 17:29:42, SYSTEM, ASUS, Protection, Malware Protection, Started, 
Protection, 17.09.2014 17:29:42, SYSTEM, ASUS, Protection, Malicious Website Protection, Starting, 
Protection, 17.09.2014 17:30:19, SYSTEM, ASUS, Protection, Malicious Website Protection, Started, 
Update, 17.09.2014 17:31:31, SYSTEM, ASUS, Manual, Rootkit Database, 2014.2.20.1, 2014.9.15.1, 
Update, 17.09.2014 17:31:56, SYSTEM, ASUS, Manual, Malware Database, 2014.3.4.9, 2014.9.17.6, 
Protection, 17.09.2014 17:32:17, SYSTEM, ASUS, Protection, Refresh, Starting, 
Protection, 17.09.2014 17:32:17, SYSTEM, ASUS, Protection, Malicious Website Protection, Stopping, 
Protection, 17.09.2014 17:32:17, SYSTEM, ASUS, Protection, Malicious Website Protection, Stopped, 
Protection, 17.09.2014 17:32:24, SYSTEM, ASUS, Protection, Refresh, Success, 
Protection, 17.09.2014 17:32:24, SYSTEM, ASUS, Protection, Malicious Website Protection, Starting, 
Protection, 17.09.2014 17:32:25, SYSTEM, ASUS, Protection, Malicious Website Protection, Started, 
Protection, 17.09.2014 17:47:42, SYSTEM, ASUS, Protection, Malware Protection, Starting, 
Protection, 17.09.2014 17:47:42, SYSTEM, ASUS, Protection, Malware Protection, Started, 
Protection, 17.09.2014 17:47:42, SYSTEM, ASUS, Protection, Malicious Website Protection, Starting, 
Protection, 17.09.2014 17:48:29, SYSTEM, ASUS, Protection, Malicious Website Protection, Started, 

(end)
         

und ein zweites, da ich zwei txt hatte und nicht ersehen kann welches die letzte sein soll:

 Malwarebytes Anti-Malware 
www.malwarebytes.org


Protection, 17.09.2014 17:29:42, SYSTEM, ASUS, Protection, Malware Protection, Starting, 
Protection, 17.09.2014 17:29:42, SYSTEM, ASUS, Protection, Malware Protection, Started, 
Protection, 17.09.2014 17:29:42, SYSTEM, ASUS, Protection, Malicious Website Protection, Starting, 
Protection, 17.09.2014 17:30:19, SYSTEM, ASUS, Protection, Malicious Website Protection, Started, 
Update, 17.09.2014 17:31:31, SYSTEM, ASUS, Manual, Rootkit Database, 2014.2.20.1, 2014.9.15.1, 
Update, 17.09.2014 17:31:56, SYSTEM, ASUS, Manual, Malware Database, 2014.3.4.9, 2014.9.17.6, 
Protection, 17.09.2014 17:32:17, SYSTEM, ASUS, Protection, Refresh, Starting, 
Protection, 17.09.2014 17:32:17, SYSTEM, ASUS, Protection, Malicious Website Protection, Stopping, 
Protection, 17.09.2014 17:32:17, SYSTEM, ASUS, Protection, Malicious Website Protection, Stopped, 
Protection, 17.09.2014 17:32:24, SYSTEM, ASUS, Protection, Refresh, Success, 
Protection, 17.09.2014 17:32:24, SYSTEM, ASUS, Protection, Malicious Website Protection, Starting, 
Protection, 17.09.2014 17:32:25, SYSTEM, ASUS, Protection, Malicious Website Protection, Started, 
Protection, 17.09.2014 17:47:42, SYSTEM, ASUS, Protection, Malware Protection, Starting, 
Protection, 17.09.2014 17:47:42, SYSTEM, ASUS, Protection, Malware Protection, Started, 
Protection, 17.09.2014 17:47:42, SYSTEM, ASUS, Protection, Malicious Website Protection, Starting, 
Protection, 17.09.2014 17:48:29, SYSTEM, ASUS, Protection, Malicious Website Protection, Started, 

(end)
         

adw cleaner:

# AdwCleaner v3.310 - Bericht erstellt am 19/09/2014 um 07:24:10
# Aktualisiert 12/09/2014 von Xplode
# Betriebssystem : Windows 7 Professional N Service Pack 1 (32 bits)
# Benutzername : Mucky - ASUS
# Gestartet von : C:\Users\Mucky\Downloads\AdwCleaner_3.310.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : BackupStack

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\Program Files\MyPC Backup
Ordner Gelöscht : C:\Users\Mucky\AppData\Local\Temp\BrowseFox
Ordner Gelöscht : C:\Users\Mucky\AppData\Local\Temp\OCS
Ordner Gelöscht : C:\Users\Mucky\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Mucky\AppData\Roaming\DSite
Ordner Gelöscht : C:\Users\Mucky\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Mucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
Datei Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\lollipop.lnk
Datei Gelöscht : C:\Users\Mucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\lollipop.lnk
Datei Gelöscht : C:\Users\Mucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
Datei Gelöscht : C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\invalidprefs.js
Datei Gelöscht : C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\user.js

***** [ Tasks ] *****

Task Gelöscht : DSite

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Classes\Applications\lollipop.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\updateBrowseFox_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\updateBrowseFox_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
Schlüssel Gelöscht : HKLM\SOFTWARE\8688debc3db847
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422182256}
Schlüssel Gelöscht : HKCU\Software\BABSOLUTION
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKCU\Software\dsiteproducts
Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions
Schlüssel Gelöscht : HKCU\Software\InstalledThirdPartyPrograms
Schlüssel Gelöscht : HKCU\Software\lollipop
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\LyricsSay-1
Schlüssel Gelöscht : HKLM\SOFTWARE\Delta
Schlüssel Gelöscht : HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\InstalledThirdPartyPrograms
Schlüssel Gelöscht : HKLM\SOFTWARE\systweak
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\DSite
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v28.0 (de)

[ Datei : C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js ]

Zeile gelöscht : user_pref("extensions.a71139f7bcef24ada9c6025f887d7e2e15b12962159ed453c9453d7593ee48c04com41552.41552.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]
Zeile gelöscht : user_pref("extensions.a763ab44b71df436c906e2ee8e1d7b302af951efb381e47b2ac4580df41e44bc7com41856.41856.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]
Zeile gelöscht : user_pref("extensions.crossrider.bic", "14116cdaca06fd7a8e7414641e30849f");
Zeile gelöscht : user_pref("extensions.delta.admin", false);
Zeile gelöscht : user_pref("extensions.delta.aflt", "babsst");
Zeile gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Zeile gelöscht : user_pref("extensions.delta.autoRvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.dfltLng", "de");
Zeile gelöscht : user_pref("extensions.delta.excTlbr", false);
Zeile gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);
Zeile gelöscht : user_pref("extensions.delta.id", "c0f781d600000000000000215d8f2354");
Zeile gelöscht : user_pref("extensions.delta.instlDay", "15962");
Zeile gelöscht : user_pref("extensions.delta.instlRef", "sst");
Zeile gelöscht : user_pref("extensions.delta.newTab", false);
Zeile gelöscht : user_pref("extensions.delta.prdct", "delta");
Zeile gelöscht : user_pref("extensions.delta.prtnrId", "delta");
Zeile gelöscht : user_pref("extensions.delta.rvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.delta.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
Zeile gelöscht : user_pref("extensions.delta.vrsn", "1.8.24.6");
Zeile gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.24.69:38:19");
Zeile gelöscht : user_pref("extensions.delta.vrsni", "1.8.24.6");
Zeile gelöscht : user_pref("extensions.delta_i.babExt", "");
Zeile gelöscht : user_pref("extensions.delta_i.babTrack", "affID=119357&tsp=5005");
Zeile gelöscht : user_pref("extensions.delta_i.srcExt", "ss");

-\\ Google Chrome v37.0.2062.120

[ Datei : C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [5872 octets] - [19/09/2014 07:21:33]
AdwCleaner[S0].txt - [5797 octets] - [19/09/2014 07:24:10]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5857 octets] ##########
         

JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.7 (09.18.2014:2)
OS: Windows 7 Professional N x86
Ran by Mucky on 19.09.2014 at  7:32:18,58
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1307851060-3472154346-1383332600-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411181156}



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Mucky\AppData\Roaming\mozilla\firefox\profiles\owiy37f4.default\minidumps [19 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 19.09.2014 at  7:42:41,57
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

und FRST
txt:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-09-2014
Ran by Mucky (administrator) on ASUS on 19-09-2014 07:50:16
Running from C:\Users\Mucky\Downloads
Platform: Microsoft Windows 7 Professional N  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\w32x86\3\NetFaxServer.exe
(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\AVKTray\AVKTray.exe
(G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\GDKBFltExe32.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(CyberLink Corp.) C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\PCMAgent.exe
(CyberLink) C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files\ASUS\AI TouchMedia\PlayMovie\PMVService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(G Data Software AG) C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [331264 2010-11-26] ()
HKLM\...\Run: [PCMAgent] => C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\PCMAgent.exe [212992 2008-06-11] (CyberLink Corp.)
HKLM\...\Run: [CLMLServer] => C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvc.exe [196608 2008-06-11] (CyberLink)
HKLM\...\Run: [PlayMovie] => C:\Program Files\ASUS\AI TouchMedia\PlayMovie\PMVService.exe [172032 2008-05-19] (CyberLink Corp.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1549608 2009-08-17] (Synaptics Incorporated)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM\...\Run: [GDFirewallTray] => C:\Program Files\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1724728 2013-12-19] (G Data Software AG)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files\G Data\InternetSecurity\AVKTray\AVKTray.exe,

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-23]

Chrome: 
=======
CHR HomePage: Default -> 
CHR StartupUrls: Default -> "https://www.google.de/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}
CHR CustomProfile: C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-07]
CHR Extension: (Google Drive) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-07]
CHR Extension: (YouTube) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-07]
CHR Extension: (Google-Suche) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-07]
CHR Extension: (Google Wallet) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-07]
CHR Extension: (Google Mail) - C:\Users\Mucky\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-07]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVKProxy; C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe [2244728 2014-02-12] (G Data Software AG)
R2 AVKService; C:\Program Files\G Data\InternetSecurity\AVK\AVKService.exe [914552 2013-12-19] (G Data Software AG)
R2 AVKWCtl; C:\Program Files\G Data\InternetSecurity\AVK\AVKWCtl.exe [2159472 2014-03-25] (G Data Software AG)
R3 GDFwSvc; C:\Program Files\G Data\InternetSecurity\Firewall\GDFwSvc.exe [2409280 2014-01-30] (G Data Software AG)
R3 GDScan; C:\Program Files\Common Files\G Data\GDScan\GDScan.exe [700024 2014-02-03] (G Data Software AG)
R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\w32x86\3\NetFaxServer.exe [175104 2011-01-24] (Samsung Electronics Co., Ltd.) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [44544 2014-04-22] (G Data Software AG)
R3 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt32.sys [20736 2014-04-22] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [101504 2014-04-22] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [56832 2014-04-22] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd32.sys [53248 2014-04-22] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [29528 2014-04-22] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [50176 2014-04-22] (G Data Software AG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-09-19] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2007-07-31] (ATK0100)
R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2010-12-23] (Samsung Electronics) [File not signed]
S3 ZOOM_R16MTR; C:\Windows\System32\Drivers\zmr16usbaudio.sys [81920 2013-04-03] (Zoom Corporation.)
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\ASUS\AI TouchMedia\PlayMovie\000.fcl [61424 2008-05-19] (Cyberlink Corp.)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-19 07:42 - 2014-09-19 07:42 - 00001103 _____ () C:\Users\Mucky\Desktop\JRT.txt
2014-09-19 07:31 - 2014-09-19 07:31 - 01019328 _____ (Thisisu) C:\Users\Mucky\Downloads\JRT.exe
2014-09-19 07:31 - 2014-09-19 07:31 - 00000000 ____D () C:\Windows\ERUNT
2014-09-19 07:27 - 2014-09-19 07:27 - 00005937 _____ () C:\Users\Mucky\Desktop\AdwCleaner[S0].txt
2014-09-19 07:23 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-09-19 07:21 - 2014-09-19 07:24 - 00000000 ____D () C:\AdwCleaner
2014-09-19 07:18 - 2014-09-19 07:18 - 01373475 _____ () C:\Users\Mucky\Downloads\AdwCleaner_3.310.exe
2014-09-17 18:17 - 2014-09-17 18:17 - 00001578 _____ () C:\Users\Mucky\Desktop\mbam1.txt
2014-09-17 18:16 - 2014-09-17 18:16 - 00001578 _____ () C:\Users\Mucky\Desktop\mbam.txt
2014-09-17 17:29 - 2014-09-19 07:43 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-17 17:29 - 2014-09-17 17:29 - 00001071 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-17 17:29 - 2014-09-17 17:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-17 17:29 - 2014-09-17 17:29 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-17 17:29 - 2014-09-17 17:29 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-09-17 17:29 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-17 17:29 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-17 17:29 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-17 17:27 - 2014-09-17 17:28 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Mucky\Desktop\mbam-setup-2.0.2.1012.exe
2014-09-17 17:17 - 2014-09-17 17:17 - 00002921 _____ () C:\Users\Mucky\Desktop\Anleitung Cleanen.txt
2014-09-17 09:01 - 2014-09-17 09:04 - 00039439 _____ () C:\Users\Mucky\Downloads\Addition.txt
2014-09-17 09:00 - 2014-09-19 07:50 - 00011389 _____ () C:\Users\Mucky\Downloads\FRST.txt
2014-09-17 08:59 - 2014-09-19 07:50 - 00000000 ____D () C:\FRST
2014-09-17 08:57 - 2014-09-17 08:57 - 01097728 _____ (Farbar) C:\Users\Mucky\Downloads\FRST.exe
2014-09-11 11:49 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-09-11 11:49 - 2014-08-23 02:42 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-09-11 11:49 - 2014-07-07 03:40 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-11 11:49 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-11 11:17 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-11 11:17 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-11 11:12 - 2014-09-05 03:52 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-11 11:12 - 2014-09-05 03:47 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-11 11:00 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-10 06:09 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-09-10 06:09 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-09-10 06:09 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-09-10 06:09 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-09-10 06:09 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-09-10 06:09 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-09-10 06:09 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-09-10 06:08 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-09-10 06:08 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-09-01 07:01 - 2014-09-01 07:01 - 00212600 _____ () C:\Windows\system32\SBuySupplies.exe
2014-09-01 07:01 - 2014-09-01 07:01 - 00024064 _____ () C:\Windows\system32\ssn2mlm.dll
2014-08-23 10:44 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-23 10:44 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-23 10:44 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-23 10:44 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-23 10:22 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-23 10:22 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-23 10:22 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-08-23 10:22 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-08-23 10:22 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-08-23 10:22 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-08-23 10:22 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-08-23 10:22 - 2014-03-04 11:17 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-08-23 10:22 - 2014-03-04 11:17 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-08-23 10:22 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-08-23 10:22 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-08-23 10:22 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-08-23 10:22 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-08-23 10:22 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-08-23 10:22 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-08-23 10:21 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-23 10:21 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-08-23 10:21 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-08-23 10:21 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-23 10:21 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-23 10:21 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-23 10:21 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-23 10:21 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-08-23 10:21 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-08-23 10:21 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-08-23 10:21 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-08-23 10:21 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-08-23 10:21 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-08-23 10:20 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-08-23 10:20 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-08-23 10:20 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-08-23 10:20 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-08-23 10:20 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-08-23 10:20 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-08-23 10:20 - 2014-05-30 08:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-08-23 10:20 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-08-23 10:19 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-23 10:18 - 2014-04-12 04:15 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-08-23 10:18 - 2014-04-12 04:15 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-08-23 10:18 - 2014-04-12 04:12 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-08-23 10:18 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-08-23 10:18 - 2014-04-12 04:12 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-08-23 10:18 - 2014-04-12 04:11 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-19 07:50 - 2014-09-17 09:00 - 00011389 _____ () C:\Users\Mucky\Downloads\FRST.txt
2014-09-19 07:50 - 2014-09-17 08:59 - 00000000 ____D () C:\FRST
2014-09-19 07:47 - 2014-01-06 13:00 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-09-19 07:46 - 2013-09-12 20:13 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-09-19 07:43 - 2014-09-17 17:29 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-19 07:42 - 2014-09-19 07:42 - 00001103 _____ () C:\Users\Mucky\Desktop\JRT.txt
2014-09-19 07:33 - 2009-07-14 06:02 - 00028160 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-19 07:33 - 2009-07-14 06:02 - 00028160 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-19 07:31 - 2014-09-19 07:31 - 01019328 _____ (Thisisu) C:\Users\Mucky\Downloads\JRT.exe
2014-09-19 07:31 - 2014-09-19 07:31 - 00000000 ____D () C:\Windows\ERUNT
2014-09-19 07:30 - 2013-06-17 10:23 - 01148758 _____ () C:\Windows\WindowsUpdate.log
2014-09-19 07:27 - 2014-09-19 07:27 - 00005937 _____ () C:\Users\Mucky\Desktop\AdwCleaner[S0].txt
2014-09-19 07:26 - 2014-02-07 14:30 - 00001092 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-19 07:25 - 2010-11-20 23:49 - 00184926 _____ () C:\Windows\PFRO.log
2014-09-19 07:25 - 2009-07-14 06:17 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-19 07:25 - 2009-07-14 06:07 - 00040311 _____ () C:\Windows\setupact.log
2014-09-19 07:24 - 2014-09-19 07:21 - 00000000 ____D () C:\AdwCleaner
2014-09-19 07:18 - 2014-09-19 07:18 - 01373475 _____ () C:\Users\Mucky\Downloads\AdwCleaner_3.310.exe
2014-09-18 21:38 - 2013-12-02 19:17 - 00133958 _____ () C:\Windows\IE11_main.log
2014-09-17 18:17 - 2014-09-17 18:17 - 00001578 _____ () C:\Users\Mucky\Desktop\mbam1.txt
2014-09-17 18:16 - 2014-09-17 18:16 - 00001578 _____ () C:\Users\Mucky\Desktop\mbam.txt
2014-09-17 18:01 - 2014-02-07 14:30 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-17 17:46 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Registration
2014-09-17 17:29 - 2014-09-17 17:29 - 00001071 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-17 17:29 - 2014-09-17 17:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-17 17:29 - 2014-09-17 17:29 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-17 17:29 - 2014-09-17 17:29 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-09-17 17:28 - 2014-09-17 17:27 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Mucky\Desktop\mbam-setup-2.0.2.1012.exe
2014-09-17 17:17 - 2014-09-17 17:17 - 00002921 _____ () C:\Users\Mucky\Desktop\Anleitung Cleanen.txt
2014-09-17 09:04 - 2014-09-17 09:01 - 00039439 _____ () C:\Users\Mucky\Downloads\Addition.txt
2014-09-17 08:57 - 2014-09-17 08:57 - 01097728 _____ (Farbar) C:\Users\Mucky\Downloads\FRST.exe
2014-09-17 08:40 - 2013-06-20 16:53 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-09-17 08:40 - 2013-06-20 16:53 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-09-16 20:18 - 2013-06-21 11:21 - 00000000 ____D () C:\ProgramData\Samsung
2014-09-16 20:17 - 2013-06-21 11:19 - 00000000 ____D () C:\Program Files\SamsungPrinterLiveUpdate
2014-09-16 10:14 - 2013-06-21 12:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-09-16 10:14 - 2013-06-21 09:41 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-15 08:31 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-09-12 09:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-09-12 08:29 - 2009-07-14 06:17 - 00032634 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-09-11 13:57 - 2009-07-14 06:02 - 00433200 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-11 13:00 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-09-11 12:59 - 2014-05-30 12:08 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-11 12:55 - 2010-11-20 23:03 - 01593564 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-11 11:45 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-09-09 12:52 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Public\Libraries
2014-09-09 12:43 - 2013-09-14 10:49 - 00000000 ____D () C:\Users\Mucky\Downloads\alt
2014-09-09 08:35 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-09-05 03:52 - 2014-09-11 11:12 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-05 03:47 - 2014-09-11 11:12 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-01 07:01 - 2014-09-01 07:01 - 00212600 _____ () C:\Windows\system32\SBuySupplies.exe
2014-09-01 07:01 - 2014-09-01 07:01 - 00024064 _____ () C:\Windows\system32\ssn2mlm.dll
2014-08-23 11:05 - 2011-04-12 04:25 - 00000000 ____D () C:\Program Files\Windows Journal
2014-08-23 09:57 - 2013-09-11 16:32 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-08-23 03:46 - 2014-09-11 11:49 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 02:42 - 2014-09-11 11:49 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

Some content of TEMP:
====================
C:\Users\Mucky\AppData\Local\Temp\BackupSetup.exe
C:\Users\Mucky\AppData\Local\Temp\fmp-2.0.7-win32.exe
C:\Users\Mucky\AppData\Local\Temp\ose00000.exe
C:\Users\Mucky\AppData\Local\Temp\ose00001.exe
C:\Users\Mucky\AppData\Local\Temp\Quarantine.exe
C:\Users\Mucky\AppData\Local\Temp\Setup.exe
C:\Users\Mucky\AppData\Local\Temp\uninst1.exe
C:\Users\Mucky\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-16 07:39

==================== End Of Log ============================
         

--- --- ---


addition:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 12-09-2014
Ran by Mucky at 2014-09-17 09:04:14
Running from C:\Users\Mucky\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: G Data InternetSecurity (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}
AS: G Data InternetSecurity (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: G Data Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 11 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 11.8.800.174 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
AI TouchMedia (HKLM\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 6.0.1811 - CyberLink Corp.)
AI TouchMedia (Version: 6.0.1811 - CyberLink Corp.) Hidden
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.3.4746 - CDBurnerXP)
Common Desktop Agent (Version: 1.52.0 - OEM) Hidden
DC-Bass Source 1.3.0 (HKLM\...\DC-Bass Source) (Version:  - )
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{650DE870-ECA3-4E63-8D77-778512BE5D4C}) (Version:  - Microsoft)
Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{BF1E7B7B-8FBB-45C8-B170-214AA0F4F6AE}) (Version:  - Microsoft)
DirectVobSub 2.40.4209 (HKLM\...\vsfilter_is1) (Version: 2.40.4209 - MPC-HC Team)
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.1.8 - DivX, LLC)
ElsterFormular (HKLM\...\ElsterFormular) (Version: 15.2.20140326 - Landesfinanzdirektion Thüringen)
FilesFrog Update Checker (HKLM\...\FilesFrog Update Checker) (Version:  - ) <==== ATTENTION
G Data InternetSecurity (HKLM\...\{85203592-3610-4FB9-AA11-15B2255B5A12}) (Version: 25.0.1.2 - G Data Software AG)
Google Chrome (HKLM\...\Google Chrome) (Version: 37.0.2062.120 - Google Inc.)
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
Haali Media Splitter (HKLM\...\HaaliMkx) (Version:  - )
Lagarith Lossless Codec (1.3.27) (HKLM\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version:  - )
LAME v3.99.3 (for Windows) (HKLM\...\LAME_is1) (Version:  - )
LyricsSay-1 (HKLM\...\LyricsSay-1) (Version: 1.28.153.3 - Lyrics) <==== ATTENTION
LyriXeeker-1 (HKLM\...\LyriXeeker-1) (Version: 1.28.153.3 - Lyrics) <==== ATTENTION
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Mathematics (HKLM\...\{4D090F70-6F08-4B60-9357-A1DFD4458F09}) (Version: 4.0 - Microsoft Corporation)
Microsoft Mathematics Add-In for Word and OneNote (HKLM\...\{90150000-00D8-0407-0000-0000000FF1CE}) (Version: 15.0.4481.1008 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Visio MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Visio Professional 2013 (HKLM\...\Office15.VISPROR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visio Professional 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
Mozilla Thunderbird 17.0.7 (x86 de) (HKLM\...\Mozilla Thunderbird 17.0.7 (x86 de)) (Version: 17.0.7 - Mozilla)
MyPC Backup  (HKLM\...\MyPC Backup) (Version:  - MyPC Backup) <==== ATTENTION
Notepad++ (HKLM\...\Notepad++) (Version: 6.3.3 - Notepad++ Team)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.4 - NVIDIA Corporation)
OpenSource Flash Video Splitter 1.0.0.5 (HKLM\...\OpenSource Flash Video Splitter) (Version: 1.0.0.5 - )
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
R16_R24 Driver (HKLM\...\{19CF1A77-C522-4082-8A2B-A9952EE9E372}) (Version: 2.0.0.5 - ZOOM)
RICOH R5U8xx Media Driver ver.3.62.02 (HKLM\...\{59F6A514-9813-47A3-948C-8A155460CC2A}) (Version: 3.62.02 - RICOH)
Samsung Easy Printer Manager (HKLM\...\Samsung Easy Printer Manager) (Version: 1.00.55.00 - Samsung Electronics Co., Ltd.)
Samsung Network PC Fax (HKLM\...\Samsung Network PC Fax) (Version: 1.05.17.00 - Samsung Electronics Co., Ltd.)
Samsung Printer Live Update (HKLM\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)
Samsung Scan Assistant (HKLM\...\Samsung Scan Assistant) (Version: 1.03.28.00 - Samsung Electronics Co., Ltd.)
Samsung SCX-483x 5x3x Series (HKLM\...\Samsung SCX-483x 5x3x Series) (Version:  - Samsung Electronics Co., Ltd.)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{8D2E04ED-3350-4ECE-9D6E-3BC9A9A93A47}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (Version:  - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version:  - Microsoft) Hidden
Steinberg Cubase 5 (HKLM\...\{4A19D6AC-ADE0-4A07-80FF-9C9812C45557}) (Version: 5.1.2 - Steinberg Media Technologies GmbH)
Steinberg Drum Loop Expansion 01 (HKLM\...\{490BF87E-1F75-4453-BF55-9F540543A3CA}) (Version: 1.0.0.1 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Content (HKLM\...\{BD86F1AC-B594-46E4-85DC-1258AC9E2232}) (Version: 1.0.0.003 - Steinberg Media Technologies GmbH)
Steinberg HALionOne (HKLM\...\{E70E7159-93B1-470D-9FBD-D8E9EF34B538}) (Version: 1.1.0.457 - Steinberg Media Technologies GmbH)
Steinberg HALionOne Additional Content Set 01 (HKLM\...\{F3AFD063-8BAD-485E-B641-E7F5A2C5AE71}) (Version: 1.0.0.001 - Steinberg Media Technologies GmbH)
Steinberg HALionOne Expression Set (HKLM\...\{E22AD5D3-EB60-4A8F-835C-6C10E369DCE2}) (Version: 1.0.1.0 - Steinberg Media Technologies GmbH)
Steinberg HALionOne GM Drum Set (HKLM\...\{AC997F93-0757-4ED4-A701-F40C2D654D09}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)
Steinberg HALionOne GM Set (HKLM\...\{F057965A-D974-4C64-ADB1-4381CD4B8956}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)
Steinberg HALionOne Pro Set (HKLM\...\{D82CDA0D-C182-42C8-8FF2-5649C98D6003}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)
Steinberg HALionOne Studio Drum Set (HKLM\...\{865D9ED1-EAC2-436D-AFA7-0B750EB5AAAB}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)
Steinberg HALionOne Studio Set (HKLM\...\{D23CBFDA-C46B-4920-BA70-FC7878A3F05A}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)
Steinberg LoopMash Content (HKLM\...\{4D454CF8-12FD-464D-B57B-B46FE27B78BB}) (Version: 1.0.0.005 - Steinberg Media Technologies GmbH)
Steinberg REVerence Content 01 (HKLM\...\{532B917B-8235-4FA5-BE36-643A8BB053A5}) (Version: 1.0.0.006 - Steinberg Media Technologies GmbH)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.1.1 - Synaptics Incorporated)
Update for Codec Package (HKCU\...\DSite) (Version:  - ) <==== ATTENTION
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Excel 2010 (KB2889836) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9179FC17-97A8-4D98-9E09-05720AF5D44E}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2889861) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.VISPROR_{F47D9DA0-739D-4FEE-A2CD-16B23382F7EE}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2687502) 32-Bit Edition (HKLM\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{7DE7DF97-82FE-4B3A-AB8D-1621F9CC464A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{EAD7BEF9-B28C-425F-B2C5-538CB27EF013}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{089DBFD7-8211-43B2-AAAE-5BDD8C23E3A8}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760344) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{A7610F07-E844-4444-8E1D-D5BC8AD0B4C5}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768012) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{66421820-D3CA-450A-898C-78D7E40108E6}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863843) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{AD7045B8-1D75-4B4C-8120-12F045D206C7}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.VISPROR_{5D6439FF-D651-4B13-B52E-2508AB9DE19D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{5D6439FF-D651-4B13-B52E-2508AB9DE19D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880478) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{7C5CEE0F-6823-4BB7-A28F-76FEC14EB6AC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881001) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{31849233-AD8B-42D7-9AE1-74C79C8E8C03}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881009) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{7A3EF4FF-A9C8-4F7E-8020-A45F7D319387}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881039) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{1B208923-2810-414F-82CC-AFFC1B19563F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881081) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{6171BC1B-907E-44D4-930A-4AE0D9260E65}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883036) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{B8E73381-09B1-4895-ACD0-34385B0F526D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883049) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{1C6260FD-A280-49FE-89D0-CCEC647FBD8E}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 32-Bit Edition (HKLM\...\{90150000-001F-0407-0000-0000000FF1CE}_Office15.VISPROR_{0F5FFEB6-2F66-4592-8A34-CC85FF318951}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 32-Bit Edition (HKLM\...\{90150000-001F-0409-0000-0000000FF1CE}_Office15.VISPROR_{DA288EB3-648C-433C-88AC-71AEAAFAACF7}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 32-Bit Edition (HKLM\...\{90150000-001F-040C-0000-0000000FF1CE}_Office15.VISPROR_{51865C36-97D4-4210-A33E-50BCC8CDDF72}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 32-Bit Edition (HKLM\...\{90150000-001F-0410-0000-0000000FF1CE}_Office15.VISPROR_{D533D4E6-5056-487A-8F18-7FA51AF0E283}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2889848) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.VISPROR_{E1285C4F-1DB7-4A7F-9DEF-22068D09EBFA}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2889848) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{E1285C4F-1DB7-4A7F-9DEF-22068D09EBFA}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2889862) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{96AE4BBC-69CC-4004-8B53-1F40B2461755}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{1BCA67A6-5329-48D0-A088-C097AC7A14BD}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version:  - Microsoft)
Update for Microsoft Visio 2013 (KB2889849) 32-Bit Edition (HKLM\...\{90150000-0054-0407-0000-0000000FF1CE}_Office15.VISPROR_{CB9B82D8-4B8A-4EF1-846B-7E1B9379C7DA}) (Version:  - Microsoft)
Update for Microsoft Visio 2013 (KB2889849) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{CB9B82D8-4B8A-4EF1-846B-7E1B9379C7DA}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.VISPROR_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{91150000-0051-0000-0000-0000000FF1CE}_Office15.VISPROR_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
Winamp (HKLM\...\Winamp) (Version: 5.64  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
WinZip 18.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DE}) (Version: 18.0.10661 - WinZip Computing, S.L. )
Xvid Video Codec (HKLM\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

23-08-2014 08:35:15 Windows Update
23-08-2014 09:18:47 Windows Update
10-09-2014 04:07:14 Windows Update
10-09-2014 04:54:53 Windows Update
11-09-2014 08:59:29 Windows Update
11-09-2014 10:53:06 Windows Update
12-09-2014 20:05:43 Windows Update
16-09-2014 08:12:14 Windows Update
16-09-2014 18:35:55 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0509C076-8F47-497B-9F8C-DAF34A74B89D} - \LyricsSay-1-codedownloader No Task File <==== ATTENTION
Task: {10D9F1DD-B93E-493D-8CA1-D13C9224CEEA} - \LyriXeeker-1-codedownloader No Task File <==== ATTENTION
Task: {25FA414D-EDD9-43C0-8BDF-2FFCBDB4FE98} - \LyricsSay-1-enabler No Task File <==== ATTENTION
Task: {2D311364-3673-411E-8034-B10EFCC7BB15} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-02-07] (Google Inc.)
Task: {352DE5CD-ADBC-46B7-83A3-3A87685ED04B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {3BA4BBFA-40D1-46CA-BA9C-0BA221E10C89} - \LyriXeeker-1-firefoxinstaller No Task File <==== ATTENTION
Task: {463969CB-450B-4119-817D-602705EF989E} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {47A2578E-B74C-41A8-8432-04FD8C405BFA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-02-07] (Google Inc.)
Task: {99FDB450-4524-4F0F-A38F-A9B4D9A4F682} - System32\Tasks\DSite => C:\Users\Mucky\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe [2013-09-14] () <==== ATTENTION
Task: {B1953FF5-F54F-4FE9-B20D-55231A3CCD37} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {B532E6AD-8269-48EB-91E4-D1056CA9D12F} - \LyricsSay-1-firefoxinstaller No Task File <==== ATTENTION
Task: {BD42470B-934F-42BB-9C19-1DBA6C33BDDB} - \LyricsSay-1-updater No Task File <==== ATTENTION
Task: {D0EC8579-BCCA-4024-B7AA-604011BF3268} - \LyriXeeker-1-updater No Task File <==== ATTENTION
Task: {E85E5E1A-F54E-4AA0-ACEF-E97562CF0481} - \LyriXeeker-1-enabler No Task File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\DSite.job => C:\Users\Mucky\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\LyricsSay-1-codedownloader.job => C:\Program Files\LyricsSay-1\LyricsSay-1-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\LyricsSay-1-enabler.job => C:\Program Files\LyricsSay-1\LyricsSay-1-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\LyricsSay-1-firefoxinstaller.job => C:\Program Files\LyricsSay-1\LyricsSay-1-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\LyricsSay-1-updater.job => C:\Program Files\LyricsSay-1\LyricsSay-1-updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\LyriXeeker-1-codedownloader.job => C:\Program Files\LyriXeeker-1\LyriXeeker-1-codedownloader.exe
Task: C:\Windows\Tasks\LyriXeeker-1-enabler.job => C:\Program Files\LyriXeeker-1\LyriXeeker-1-enabler.exe
Task: C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job => C:\Program Files\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe
Task: C:\Windows\Tasks\LyriXeeker-1-updater.job => C:\Program Files\LyriXeeker-1\LyriXeeker-1-updater.exe

==================== Loaded Modules (whitelisted) =============

2014-09-01 07:01 - 2014-09-01 07:01 - 00024064 _____ () C:\Windows\System32\ssn2mlm.dll
2010-11-26 22:17 - 2010-11-26 22:17 - 00331264 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
2010-11-26 22:17 - 2010-11-26 22:17 - 00049664 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2008-06-11 21:52 - 2008-06-11 21:52 - 00778240 ____N () C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMediaLibrary.dll
2008-06-11 21:52 - 2008-06-11 21:52 - 00007680 ____N () C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvcPS.dll
2013-08-29 02:23 - 2013-08-29 02:23 - 01861968 _____ () C:\Program Files\DivX\DivX Update\DivXUpdate.exe
2013-08-29 02:25 - 2013-08-29 02:25 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2013-07-01 19:47 - 2013-07-01 19:47 - 00012288 _____ () C:\Program Files\MyPC Backup\GetText.dll
2013-07-01 19:43 - 2013-07-01 19:43 - 00904704 _____ () C:\Program Files\MyPC Backup\x86\System.Data.SQLite.dll
2013-06-21 11:19 - 2010-11-24 12:30 - 00274432 _____ () C:\Windows\system32\SaMinDrv.dll
2013-12-19 04:42 - 2013-12-19 04:42 - 00287864 ____N () C:\Program Files\Common Files\G Data\AVKProxy\PktIcpt2.dll
2013-06-21 11:19 - 2014-09-01 07:01 - 00896512 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\ssn2mdu.dll
2013-09-14 09:37 - 2013-09-14 09:37 - 00095232 _____ () C:\Users\Mucky\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/17/2014 09:04:29 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001b2f
ID des fehlerhaften Prozesses: 0x2174
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (09/17/2014 08:10:10 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418231

Error: (09/17/2014 08:01:43 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/16/2014 07:45:51 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/16/2014 09:24:35 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001b2f
ID des fehlerhaften Prozesses: 0x2884
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (09/16/2014 09:21:53 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001b2f
ID des fehlerhaften Prozesses: 0x26bc
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (09/16/2014 08:59:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001b2f
ID des fehlerhaften Prozesses: 0x2ad4
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (09/16/2014 08:32:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001b2f
ID des fehlerhaften Prozesses: 0x1ff4
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (09/16/2014 08:27:47 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea91c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00052d94
ID des fehlerhaften Prozesses: 0x14cc
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (09/16/2014 08:06:06 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: LyricsSay-1-bho.dll, Version: 1.0.0.1, Zeitstempel: 0x5208ae68
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001b2f
ID des fehlerhaften Prozesses: 0x4f8
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3


System errors:
=============
Error: (09/17/2014 08:01:26 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (09/17/2014 08:00:36 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (09/17/2014 08:00:36 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.

Error: (09/16/2014 08:36:51 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7

Error: (09/16/2014 10:13:01 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7

Error: (09/16/2014 08:33:55 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (09/11/2014 02:09:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "G Data Personal Firewall" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (09/11/2014 02:09:39 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst G Data Personal Firewall erreicht.

Error: (09/11/2014 01:58:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (09/11/2014 01:58:29 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.


Microsoft Office Sessions:
=========================
Error: (09/17/2014 09:04:29 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f217401cfd2459a1d3189C:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dlldd6639c3-3e38-11e4-82e4-00248c76c64b

Error: (09/17/2014 08:10:10 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418231

Error: (09/17/2014 08:01:43 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/16/2014 07:45:51 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/16/2014 09:24:35 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f288401cfd17f3eeb083dC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll81eefd0f-3d72-11e4-adb4-00248c76c64b

Error: (09/16/2014 09:21:53 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f26bc01cfd17edda61ad8C:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll219f0474-3d72-11e4-adb4-00248c76c64b

Error: (09/16/2014 08:59:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f2ad401cfd17bc4342ebcC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll0752918f-3d6f-11e4-adb4-00248c76c64b

Error: (09/16/2014 08:32:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f1ff401cfd178030c8cc5C:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll45e12753-3d6b-11e4-adb4-00248c76c64b

Error: (09/16/2014 08:27:47 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe11.0.9600.16428525b664cntdll.dll6.1.7601.18247521ea91cc000000500052d9414cc01cfd17174a4f696C:\Program Files\Internet Explorer\iexplore.exeC:\Windows\SYSTEM32\ntdll.dll92f4cd93-3d6a-11e4-adb4-00248c76c64b

Error: (09/16/2014 08:06:06 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe11.0.9600.16428525b664cLyricsSay-1-bho.dll1.0.0.15208ae68c000000500001b2f4f801cfd17448ca23a7C:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll8b4f394b-3d67-11e4-adb4-00248c76c64b


==================== Memory info =========================== 

Processor: Intel(R) Core(TM)2 Duo CPU T5900 @ 2.20GHz
Percentage of memory in use: 45%
Total physical RAM: 3071.11 MB
Available physical RAM: 1667.1 MB
Total Pagefile: 6140.52 MB
Available Pagefile: 4114.35 MB
Total Virtual: 2047.88 MB
Available Virtual: 1899.23 MB

==================== Drives ================================

Drive c: (VistaOS) (Fixed) (Total:116.44 GB) (Free:66.12 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Katha Rina) (Fixed) (Total:104.73 GB) (Free:100.76 GB) NTFS
Drive e: (Belkin CD) (CDROM) (Total:0.05 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 97646C29)
Partition 1: (Not Active) - (Size=11.7 GB) - (Type=1C)
Partition 2: (Active) - (Size=116.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=104.7 GB) - (Type=OF Extended)

==================== End Of Log ============================
         

Vielen Dank bis dahin

Bitte die richtigen Logs von MBAM posten und nicht (nur) die Protection Logs.

Ich dachte, dass ich das getan hätte...verwirrendes Zeugs
Hier der nächste Versuch. Das könnte jetzt das Richtige sein...hoffentlich...

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 17.09.2014
Suchlauf-Zeit: 17:32:17
Logdatei: mbam2.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.09.17.06
Rootkit Datenbank: v2014.09.15.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: Mucky

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 278726
Verstrichene Zeit: 11 Min, 13 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 1
PUP.Optional.FilesFrog.A, C:\Users\Mucky\AppData\Local\FilesFrog Update Checker\update_checker.exe, 4216, Löschen bei Neustart, [4f6b9955215a64d271d4dd4651affc04]

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 35
PUP.Optional.Lyrics.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110411151152}, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 
PUP.Optional.Lyrics.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440444154452}, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 
PUP.Optional.Lyrics.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550455155552}, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 
PUP.Optional.Lyrics.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660466156652}, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 
PUP.Optional.Lyrics.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0041552.BHO.1, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 
PUP.Optional.Lyrics.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110411151152}, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 
PUP.Optional.Lyrics.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0041552.BHO, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 
PUP.Optional.Lyrics.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110411151152}, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 
PUP.Optional.Lyrics.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110411151152}, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 
PUP.Optional.Lyrics.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{11111111-1111-1111-1111-110411151152}, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 
PUP.Optional.Lyrics.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{11111111-1111-1111-1111-110411151152}, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 
PUP.Optional.Lyrics.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220422152252}, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 
PUP.Optional.Lyrics.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0041552.Sandbox.1, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 
PUP.Optional.Lyrics.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0041552.Sandbox, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 
PUP.Optional.Lyrics.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110411151152}\INPROCSERVER32, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, In Quarantäne, [2892b13dbcbfed496885d0ef738f1be5], 
PUP.Optional.Babylon.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, In Quarantäne, [7941db134d2e6cca2e511f67887a05fb], 
PUP.Optional.Somoto.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FilesFrog Update Checker, In Quarantäne, [f5c5bd31fd7e64d2d36ba5760cf5a15f], 
PUP.Optional.DataMangr.A, HKLM\SOFTWARE\DataMngr, In Quarantäne, [d6e475798eedbf77cccc4dcbf40f22de], 
PUP.Optional.LyricsSay.A, HKLM\SOFTWARE\LyricsSay-1, In Quarantäne, [91299f4fd5a687af17d08ec2f4101ee2], 
PUP.Optional.LyriXeeker.A, HKLM\SOFTWARE\LyriXeeker-1, In Quarantäne, [dfdb11dd6b10e056dd7c73e0010334cc], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0041856.Sandbox, In Quarantäne, [27935797e39894a236fa5daf13f0d12f], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0041856.Sandbox.1, In Quarantäne, [5268b83698e375c1201045c711f2ff01], 
PUP.Optional.DataMngr.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr, In Quarantäne, [11a969852952e94d7f15bd8e12f2619f], 
PUP.Optional.DataMngr.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, In Quarantäne, [d8e2f1fd8bf0c76f672c6ae15ca801ff], 
PUP.Optional.Somoto.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Somoto, In Quarantäne, [dedc638bfe7da6907bcf37ca41c27f81], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, In Quarantäne, [e1d926c8c8b360d69d5f26390afa57a9], 
PUP.Optional.Babylon.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BABSOLUTION\Updater, In Quarantäne, [a317af3fc0bb79bdf6a180ccf4105aa6], 
PUP.Optional.FilesFrog.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BI, In Quarantäne, [e7d3cb2303786bcb63c90b462cd87b85], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, In Quarantäne, [ab0f7d71631871c52c2b45f06f947c84], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, In Quarantäne, [ceec41adfe7d64d26255a1aad52f9c64], 
PUP.Optional.Lyrics.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Lyrics, In Quarantäne, [e1d9ca2467140333809c77c1ea1919e7], 
PUP.Optional.Somoto.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOMOTO\SDP, In Quarantäne, [45759d516615af872c33cc84d034fd03], 
PUP.Optional.LyricsSay.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\LyricsSay-1, In Quarantäne, [724865892a51171f5268864daf533ec2], 
PUP.Optional.LyriXeeker.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\LyriXeeker-1, In Quarantäne, [e8d2549af784a49228e8c60e17eba45c], 

Registrierungswerte: 4
PUP.Optional.FilesFrog.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SDP, C:\Users\Mucky\AppData\Local\FilesFrog Update Checker\update_checker.exe /auto , In Quarantäne, [4f6b9955215a64d271d4dd4651affc04]
PUP.Optional.FilesFrog.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BI|ui_path_filesfrog, HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker, In Quarantäne, [e7d3cb2303786bcb63c90b462cd87b85]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0L1N1H2O1S, In Quarantäne, [ceec41adfe7d64d26255a1aad52f9c64]
PUP.Optional.Somoto.A, HKU\S-1-5-21-1307851060-3472154346-1383332600-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOMOTO\SDP|affid, awdefreemediaplayer66252, In Quarantäne, [45759d516615af872c33cc84d034fd03]

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 33
Adware.LolliPop.IT, C:\Users\Mucky\AppData\Local\Lollipop, In Quarantäne, [00baa846a3d84cea7ccb969ead57837d], 
PUP.Optional.FilesFrog.A, C:\Users\Mucky\AppData\Local\FilesFrog Update Checker, Löschen bei Neustart, [9f1b8a641b606ec84366a52e50b2ff01], 
PUP.Optional.FilesFrog.A, C:\Users\Mucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker, In Quarantäne, [b604ed01dd9ec472c1e9b51ee0229c64], 
PUP.Optional.LyricsSay.A, C:\Program Files\LyricsSay-1, In Quarantäne, [724865892a51171f5268864daf533ec2], 
PUP.Optional.LyriXeeker.A, C:\Program Files\LyriXeeker-1, In Quarantäne, [e8d2549af784a49228e8c60e17eba45c], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\defaults, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\defaults\preferences, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\userCode, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\locale, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\locale\en-US, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\defaults, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\defaults\preferences, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\userCode, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\locale, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\locale\en-US, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.Updater.A, C:\Users\Mucky\AppData\Roaming\DSite\UpdateProc, In Quarantäne, [3e7c737b55260234e62e5b9629d940c0], 
PUP.Optional.DSearchLink.A, C:\ProgramData\DSearchLink, In Quarantäne, [cded43ab3744a78fae0512eae61c7090], 

Dateien: 264
PUP.Optional.FilesFrog.A, C:\Users\Mucky\AppData\Local\FilesFrog Update Checker\update_checker.exe, Löschen bei Neustart, [4f6b9955215a64d271d4dd4651affc04], 
PUP.Optional.Lyrics.A, C:\Program Files\LyricsSay-1\LyricsSay-1-bho.dll, In Quarantäne, [d0eae80605760135e3f8859e59a8bd43], 
PUP.Optional.Delta.A, C:\ProgramData\DSearchLink\DSearchLink.exe, In Quarantäne, [3c7e3cb24e2de35343b6b104758fc040], 
PUP.Optional.Crossrider, C:\Program Files\LyriXeeker-1\LyriXeeker-1-buttonutil.dll, In Quarantäne, [f1c904ea304b3105a368cbee2cd8c937], 
PUP.Optional.Somoto.A, C:\Users\Mucky\AppData\Local\Temp\UpdateCheckerSetup.exe, In Quarantäne, [8f2baf3f4d2e6cca75c920fb56ab2ed2], 
PUP.Optional.Wajam.A, C:\Users\Mucky\AppData\Local\Temp\wajam_download.exe, In Quarantäne, [8634a24ca8d373c39297272008f828d8], 
PUP.Optional.Babylon.A, C:\Users\Mucky\AppData\Local\Temp\BabylonTB.exe, In Quarantäne, [ad0d945a26552d090d2d74a74ab70ff1], 
PUP.Optional.Iminent.A, C:\Users\Mucky\AppData\Local\Temp\IminentSetup.exe, In Quarantäne, [c7f318d6b1ca78be646af24b3ec3847c], 
PUP.Optional.Somoto, c:\Users\Mucky\AppData\Local\Temp\flvplayerupdate_downloader_by_flvplayerupdate.exe, In Quarantäne, [9327519d96e526101a5122040203c23e], 
PUP.Optional.Babylon.A, C:\Users\Mucky\AppData\Local\Temp\C57015DE-BAB0-7891-B86F-9D20AF292209\Latest\BExternal.dll, In Quarantäne, [3486806e6912d3635dbde93ad927d22e], 
PUP.Optional.Conduit.A, C:\Users\Mucky\AppData\Local\Temp\C57015DE-BAB0-7891-B86F-9D20AF292209\Latest\ccp.exe, In Quarantäne, [10aa7e701f5cd165b16a2f02f40d6f91], 
PUP.Optional.Babylon.A, C:\Users\Mucky\AppData\Local\Temp\C57015DE-BAB0-7891-B86F-9D20AF292209\Latest\CrxInstaller.dll, In Quarantäne, [86346787dba03df9c87d9693f01113ed], 
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Local\Temp\C57015DE-BAB0-7891-B86F-9D20AF292209\Latest\DSearchLink.exe, In Quarantäne, [18a29c5297e47fb74eabbff66e96758b], 
PUP.Optional.Babylon.A, C:\Users\Mucky\AppData\Local\Temp\C57015DE-BAB0-7891-B86F-9D20AF292209\Latest\MntrDLLInstall.dll, In Quarantäne, [e9d12bc39cdff145fc4a0e1ba1603dc3], 
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Local\Temp\C57015DE-BAB0-7891-B86F-9D20AF292209\Latest\MyDeltaTB.exe, In Quarantäne, [0fab41ad3744a393303a82fe4bb66799], 
PUP.Optional.Babylon.A, C:\Users\Mucky\AppData\Local\Temp\C57015DE-BAB0-7891-B86F-9D20AF292209\Latest\Setup.exe, In Quarantäne, [02b8b935a7d4280e6c50a67b77896a96], 
PUP.Optional.ScramblePacker.A, C:\Users\Mucky\AppData\Local\Temp\is1590112554\609283_Setup.EXE, In Quarantäne, [4d6d08e686f53df92f16b5d744bde917], 
PUP.Optional.Babylon.A, C:\Users\Mucky\AppData\Local\Temp\is1590112554\DeltaTB.exe, In Quarantäne, [3e7cb539a1da80b639e3f620c23fdb25], 
PUP.OptionalBundleInstaller.A, C:\Users\Mucky\AppData\Local\Temp\Setup.exe\7908ba6b395e457887e181de34630b3e\Setup.exe, In Quarantäne, [b109e40abebd5bdbc32d998833cdc23e], 
PUP.Optional.Lyrics.A, C:\Windows\Temp\41856_updater.exe, In Quarantäne, [5c5eb43a2b5020166b66220150b18b75], 
PUP.Optional.Somoto.A, C:\Users\Mucky\AppData\Local\FilesFrog Update Checker\uninstall.exe, In Quarantäne, [f5c5bd31fd7e64d2d36ba5760cf5a15f], 
Adware.LolliPop.IT, C:\Users\Mucky\AppData\Local\Lollipop\lollipop.lpd, In Quarantäne, [00baa846a3d84cea7ccb969ead57837d], 
Adware.LolliPop.IT, C:\Users\Mucky\AppData\Local\Lollipop\logo.ico, In Quarantäne, [00baa846a3d84cea7ccb969ead57837d], 
Adware.LolliPop.IT, C:\Users\Mucky\AppData\Local\Lollipop\lollipop_cfg.lpd, In Quarantäne, [00baa846a3d84cea7ccb969ead57837d], 
Adware.LolliPop.IT, C:\Users\Mucky\AppData\Local\Lollipop\lollipop_ps.lpd, In Quarantäne, [00baa846a3d84cea7ccb969ead57837d], 
PUP.Optional.Lyrics.A, C:\Windows\Tasks\LyricsSay-1-codedownloader.job, In Quarantäne, [73470ee03c3f7abc2b3bb998709460a0], 
PUP.Optional.Lyrics.A, C:\Windows\Tasks\LyricsSay-1-enabler.job, In Quarantäne, [f0caa945e59654e22244bb965aaa05fb], 
PUP.Optional.Lyrics.A, C:\Windows\Tasks\LyricsSay-1-firefoxinstaller.job, In Quarantäne, [eecc797508731f171254c58cc3417e82], 
PUP.Optional.Lyrics.A, C:\Windows\Tasks\LyricsSay-1-updater.job, In Quarantäne, [e5d5a84692e94cea22440c45b94b748c], 
PUP.Optional.LyriXeeker.A, C:\Windows\Tasks\LyriXeeker-1-codedownloader.job, In Quarantäne, [b1095e90ec8fb97dd97e0b482dd79967], 
PUP.Optional.LyriXeeker.A, C:\Windows\Tasks\LyriXeeker-1-enabler.job, In Quarantäne, [b406945af8833006490e173c0bf99967], 
PUP.Optional.LyriXeeker.A, C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job, In Quarantäne, [d2e8bf2f1566ec4ae770d57e699bd729], 
PUP.Optional.LyriXeeker.A, C:\Windows\Tasks\LyriXeeker-1-updater.job, In Quarantäne, [0cae519d4a310333e6713221c93b8f71], 
PUP.Optional.FilesFrog.A, C:\Users\Mucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker\Check for Updates.lnk, In Quarantäne, [b604ed01dd9ec472c1e9b51ee0229c64], 
PUP.Optional.FilesFrog.A, C:\Users\Mucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker\Uninstall.lnk, In Quarantäne, [b604ed01dd9ec472c1e9b51ee0229c64], 
PUP.Optional.LyricsSay.A, C:\Program Files\LyricsSay-1\41552.xpi, In Quarantäne, [724865892a51171f5268864daf533ec2], 
PUP.Optional.LyricsSay.A, C:\Program Files\LyricsSay-1\background.html, In Quarantäne, [724865892a51171f5268864daf533ec2], 
PUP.Optional.LyricsSay.A, C:\Program Files\LyricsSay-1\Installer.log, In Quarantäne, [724865892a51171f5268864daf533ec2], 
PUP.Optional.LyricsSay.A, C:\Program Files\LyricsSay-1\LyricsSay-1.ico, In Quarantäne, [724865892a51171f5268864daf533ec2], 
PUP.Optional.LyricsSay.A, C:\Program Files\LyricsSay-1\Uninstall.exe, In Quarantäne, [724865892a51171f5268864daf533ec2], 
PUP.Optional.LyriXeeker.A, C:\Program Files\LyriXeeker-1\41856.xpi, In Quarantäne, [e8d2549af784a49228e8c60e17eba45c], 
PUP.Optional.LyriXeeker.A, C:\Program Files\LyriXeeker-1\background.html, In Quarantäne, [e8d2549af784a49228e8c60e17eba45c], 
PUP.Optional.LyriXeeker.A, C:\Program Files\LyriXeeker-1\Installer.log, In Quarantäne, [e8d2549af784a49228e8c60e17eba45c], 
PUP.Optional.LyriXeeker.A, C:\Program Files\LyriXeeker-1\LyriXeeker-1.ico, In Quarantäne, [e8d2549af784a49228e8c60e17eba45c], 
PUP.Optional.LyriXeeker.A, C:\Program Files\LyriXeeker-1\Uninstall.exe, In Quarantäne, [e8d2549af784a49228e8c60e17eba45c], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome.manifest, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\install.rdf, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\20351907df69514605aea39772d0fcce.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\445e7b69a85d6fac2bca80310c3777fe.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\591b1b8a4a2c0d37b230bff6575426e2.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\60444dc152f23e4cafb9d2615e8490d9.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\baaa6f76e540ec5af9c3840d70c01657.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\background.html, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\bb96b50783be398efa7c0cb618bb8965.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\browser.xul, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\dialog.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\options.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\options.xul, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\search_dialog.xul, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\961d06a957b5d5a16e73954166343819.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\1be980620fc9a0731c0e7089eaf17afe.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\352da808be71cccfd381f45aec52feeb.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\415a8a6cbbf14d1be8b3f22b5b666d7c.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\4d11bd4b657aa8c891739be620596ed3.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\51637b23c6b8d28867020986a935af8a.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\664fb448251a396bea5c884382b497a5.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\78abd6c8bdba5d39a01fc9b7545d8476.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\8e12e291838455b25c018492325cabed.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\9b26e37e8f409ac6782783f4db969306.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\9d051a26310aab6c55e86aecddc3bcfb.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\a781eb12dc3fb0d1153a104590968850.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\bd81eea984b8d0a3dc1892d366a9785c.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\c65022754395f1949916d98e9ecf7388.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\e1e60d24d8d80c89cddc6b311c4dcf6f.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\api\e685fd3d42f9b15bb9fb093a29744fe1.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\b9d1a631cd2a749f0717015b4679b6ac.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\0736eee7ab3a871ddef2c85f1e26831a.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\0f3fc76f34854f4bed0f54609aaa6f59.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\1167533e0a23f9a58ce8cd935b0f8f38.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\12c26b721ec8772bb7710aaf3e2367c1.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\4a294fe26ee0d4afe040f2786441f6df.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\4b37ce66092f5cf25d124b247673a069.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\601e9ffb5bc8454113bb97b59fbd188a.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\8ba9d640d2b08dfff27835f75ad98c9e.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\8f5de51da3dbfb75f943d3a7967d0179.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\9252f9e04faccf6e09a98c9f661db4ed.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\93108d732b16cfef448e963c35cd5820.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\ad8145c32a9d64193a9ba52d61b125af.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\af8220a558867940cb9e08e28adbe284.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\c3120c1e332c3f8db9ea9130323df492.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\c329c9a54ca8a7613e0ba56a732158b0.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\cdaa9bc33fe901fd64bb549e36291fe2.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\ed5920f270514a4049b5405ec158aaaa.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\f58a02c3f4f1821ce5a60f65e024baba.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\f74dba54c3a86a24962f319d0f8445ca.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\chrome\content\core\installer.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\defaults\preferences\prefs.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\manifest.xml, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins.json, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\1.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\13.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\14.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\16.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\17.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\177.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\182.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\183.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\207.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\21.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\22.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\220.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\221.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\226.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\246.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\28.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\298.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\4.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\47.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\64.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\7.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\72.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\78.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\9.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\91.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\plugins\98.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\userCode\background.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\extensionData\userCode\extension.js, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\locale\en-US\translations.dtd, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\button1.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\button2.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\button3.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\button4.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\button5.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\crossrider_statusbar.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\icon128.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\icon16.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\icon24.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\icon48.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\panelarrow-up.png, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\popup.html, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\skin.css, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\71139f7b-cef2-4ada-9c60-25f887d7e2e1@5b129621-59ed-453c-9453-d7593ee48c04.com\skin\update.css, In Quarantäne, [f6c405e9ff7c6bcbeee1ab2db84ab14f], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome.manifest, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\install.rdf, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\background.html, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\baseObject.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\browser.xul, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\dialog.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\main.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\options.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\options.xul, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\platformVersion.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\search_dialog.xul, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\asyncDB.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\background.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\browserAction.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\contextMenu.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\dbManager.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\dom_bg.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\fileManager.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\firefox.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\firefoxNotifications.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\firefoxOmnibox.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\message.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\pageAction.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\request.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\tabs.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\webRequest.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\api\windowsMessagingHandler.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\addressBarChangeObserver.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\console.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\consts.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\delegate.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\extensionDataStore.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\folderIOWrapper.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\httpObserver.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\IDBWrapper.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\installer.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\logFile.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\prefs.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\progressListenerObserver.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\registry.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\reloadObserver.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\reports.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\requestObject.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\searchSettings.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\uninstallObserver.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\updateManager.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\utils.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\chrome\content\core\xhr.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\defaults\preferences\prefs.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\manifest.xml, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins.json, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\13_CrossriderAppUtils.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\14_CrossriderUtils.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\16_FFAppAPIWrapper.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\177_crossriderDashboard.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\17_jQuery.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\182_openUrl.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\246_setup.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\28_initializer.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\298_basic_set_campaign_id.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\47_resources_background.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\183_tabsWrapper.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\1_base.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\207_dbWrapper.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\21_debug.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\220_icm_base_m.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\221_icm_downloads_m.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\226_set_campaign_id_m.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\22_resources.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\4_jquery_1_7_1.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\64_appApiMessage.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\72_appApiValidation.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\78_CrossriderInfo.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\7_hooks.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\91_monetizationLoader.js.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\98_omniCommands.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\plugins\9_search_engine_hook.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\userCode\background.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\extensionData\userCode\extension.js, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\locale\en-US\translations.dtd, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\button1.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\button2.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\button3.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\button4.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\button5.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\crossrider_statusbar.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\icon128.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\icon16.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\icon24.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\icon48.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\panelarrow-up.png, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\popup.html, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\skin.css, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com\skin\update.css, In Quarantäne, [8e2ca8463744f6409837c414da284bb5], 
PUP.Optional.Updater.A, C:\Users\Mucky\AppData\Roaming\DSite\UpdateProc\config.dat, In Quarantäne, [3e7c737b55260234e62e5b9629d940c0], 
PUP.Optional.CrossRider.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.crossrider.bic", "14116cdaca06fd7a8e7414641e30849f");), Ersetzt,[6f4b8f5fe09bff37be0fb0840203e11f]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.admin", false);), Ersetzt,[7248a747cbb01d1954907cb87b8acf31]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.aflt", "babsst");), Ersetzt,[9a2034ba0873979f7272f44064a1de22]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");), Ersetzt,[f3c7707e2c4f1b1ba83cc470e91c7d83]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.autoRvrt", "false");), Ersetzt,[e3d7de101b6093a36c784fe5a5605ca4]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.dfltLng", "de");), Ersetzt,[803aee003447b185a440b480cc394cb4]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.excTlbr", false);), Ersetzt,[2d8dc32b8cef5adc568e7db725e0a759]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.ffxUnstlRst", true);), Ersetzt,[d7e3826c88f365d14a9a8fa50bfaa060]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.id", "c0f781d600000000000000215d8f2354");), Ersetzt,[b80243abfa8192a4925246ee74911be5]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.instlDay", "15962");), Ersetzt,[fcbec32be992b4822fb5ea4a5da84bb5]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.instlRef", "sst");), Ersetzt,[8931945a5c1f1f178163da5a31d4e818]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.newTab", false);), Ersetzt,[ae0c806ea7d480b606de2f057392b749]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.prdct", "delta");), Ersetzt,[13a7648acdae1026fce84aea62a3847c]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.prtnrId", "delta");), Ersetzt,[ab0f39b51c5fc76fcc1853e10bfae020]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.rvrt", "false");), Ersetzt,[11a9f0fe126914228b595bd9ec1905fb]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.smplGrp", "none");), Ersetzt,[3e7cb836542781b5677dea4a33d28e72]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.tlbrId", "base");), Ersetzt,[64569955e695c17519cb0f25a85d0ef2]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.tlbrSrchUrl", "");), Ersetzt,[91298668b7c468ce5b8943f115f0a25e]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.vrsn", "1.8.24.6");), Ersetzt,[2a9031bdafcc092d7b699e96fd087b85]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.vrsnTs", "1.8.24.69:38:19");), Ersetzt,[5565d717cab116203ba9d75dd035b64a]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta.vrsni", "1.8.24.6");), Ersetzt,[4b6f6b83bcbf2511756fc96b42c3c739]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta_i.babExt", "");), Ersetzt,[b208d61884f7e45221c3ab89ee17c63a]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta_i.babTrack", "affID=119357&tsp=5005");), Ersetzt,[5367c22cdc9f3bfbd90bd65e27de3bc5]
PUP.Optional.Delta.A, C:\Users\Mucky\AppData\Roaming\Mozilla\Firefox\Profiles\owiy37f4.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.delta_i.srcExt", "ss");), Ersetzt,[2298b03e710afa3c3ea681b323e28e72]

Physische Sektoren: 0
(No malicious items detected)


(end)
         

Viel Adware eine Nachkontrollte mit ESET bitte!


ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset