| |
| |||||||
Log-Analyse und Auswertung: iStartSurf / Goobzo eingefangen...Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
01.10.2014, 08:48
| #1 |
 |  iStartSurf / Goobzo eingefangen... Guten Morgen, ich habe mir gestern anscheinend was eingefangen, was mir den iStartSurf eingebaut hat...  Habe dann zunächst mal Malwarebytes Anti-Malware drüberlaufen lassen: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 30.09.2014 Suchlauf-Zeit: 21:31:25 Logdatei: mwab1.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.09.30.07 Rootkit Datenbank: v2014.09.19.01 Lizenz: Premium Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Self-protection: Deaktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: C Suchlauf-Art: Hyper-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 266345 Verstrichene Zeit: 9 Min, 30 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Deaktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 8 PUP.Optional.WindowsProtectManger.A, C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe, 2360, Löschen bei Neustart, [d3fc13e04c2f989e30f6773dd72ab34d] PUP.Optional.IePluginService.A, C:\ProgramData\IePluginServices\PluginService.exe, 2964, Löschen bei Neustart, [715ed71c81fadc5a1554d5936b960000] PUP.Optional.WindowsProtectManger.A, C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe, 2360, Löschen bei Neustart, [7e5115de3546c1757babc5ef956c48b8] PUP.Optional.IePluginService.A, C:\ProgramData\IePluginServices\PluginService.exe, 2964, Löschen bei Neustart, [a52aef041b600b2bdb8e45236e932ed2] PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, 3884, Löschen bei Neustart, [735cda198bf04bebe8e1ac4cad55ee12] PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\HpUI.exe, 7516, Löschen bei Neustart, [8946747f205b33038d7f8974b54db64a] PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\Loader32.exe, 7744, Löschen bei Neustart, [8946747f205b33038d7f8974b54db64a] PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\Loader64.exe, 6644, Löschen bei Neustart, [8946747f205b33038d7f8974b54db64a] Module: 4 PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdate.dll, Löschen bei Neustart, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\msvcp110.dll, Löschen bei Neustart, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\msvcr110.dll, Löschen bei Neustart, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\WindowsSupportDll32.dll, Löschen bei Neustart, [8946747f205b33038d7f8974b54db64a], Registrierungsschlüssel: 107 PUP.Optional.WindowsProtectManger.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WindowsMangerProtect, In Quarantäne, [d3fc13e04c2f989e30f6773dd72ab34d], PUP.Optional.WindowsProtectManger.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WindowsMangerProtect, In Quarantäne, [d3fc13e04c2f989e30f6773dd72ab34d], PUP.Optional.IePluginService.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IePluginServices, In Quarantäne, [715ed71c81fadc5a1554d5936b960000], PUP.Optional.QuickShare.A, HKLM\SOFTWARE\CLASSES\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, In Quarantäne, [824d5e954c2f0a2c0ce9eae09b678e72], PUP.Optional.QuickShare.A, HKLM\SOFTWARE\CLASSES\IESmartBar.BHO, In Quarantäne, [824d5e954c2f0a2c0ce9eae09b678e72], PUP.Optional.QuickShare.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, In Quarantäne, [824d5e954c2f0a2c0ce9eae09b678e72], PUP.Optional.QuickShare.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, In Quarantäne, [824d5e954c2f0a2c0ce9eae09b678e72], PUP.Optional.QuickShare.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IESmartBar.BHO, In Quarantäne, [824d5e954c2f0a2c0ce9eae09b678e72], PUP.Optional.QuickShare.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, In Quarantäne, [824d5e954c2f0a2c0ce9eae09b678e72], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [369915de5c1f26106219d8be0ff3b54b], PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, In Quarantäne, [369915de5c1f26106219d8be0ff3b54b], PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [369915de5c1f26106219d8be0ff3b54b], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [369915de5c1f26106219d8be0ff3b54b], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, In Quarantäne, [369915de5c1f26106219d8be0ff3b54b], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [369915de5c1f26106219d8be0ff3b54b], PUP.Optional.Snapdo.T, HKU\S-1-5-21-2598721568-2180320333-3194301025-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}, Löschen bei Neustart, [7e51955ecface4526c73537ba45ea060], PUP.Optional.Snapdo.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006EE092-9658-4FD6-BD8E-A21A348E59F5}, In Quarantäne, [7e51955ecface4526c73537ba45ea060], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, In Quarantäne, [2ea19063bcbf55e1af8ade59fd062ed2], PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [715e3eb59ae162d4125f85e08f75659b], PUP.Optional.Cinema.A, HKLM\SOFTWARE\WOW6432NODE\CinemaGo2.3cV30.09, In Quarantäne, [6f60ad46502b91a5e5dda86a4cb7f907], PUP.Optional.Cinema.A, HKLM\SOFTWARE\WOW6432NODE\CinemaGo2.3cV30.09-nv, In Quarantäne, [11be6390fc7f12245e6443cf9e6512ee], PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\istartsurfSoftware, In Quarantäne, [ffd001f2205b3ff797e85eb7e61d9967], PUP.Optional.WPM.A, HKLM\SOFTWARE\WOW6432NODE\supWindowsMangerProtect, In Quarantäne, [f5da06ed0972e353756d9bde1be9c43c], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\supWPM, In Quarantäne, [d9f651a2b9c2e84e447dc54e8281857b], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE, In Quarantäne, [c20d668dccaff244ba5dfd1f788b36ca], PUP.Optional.QuickStart.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\pelmeidfhdlhlbjimpabfcbnnojbboma, In Quarantäne, [6d620de67cff6acc587b9d9a897a34cc], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\30935, In Quarantäne, [03cc4ca7e99215216dcc5ed9d23129d7], PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [705fbf3490eb2e08cea3ec79a460a957], PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10, In Quarantäne, [25aa38bbaecd072f7679f488d92b5fa1], PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4, In Quarantäne, [be110de639421026549c106c7d870bf5], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPDP, In Quarantäne, [e8e7fef5e09b31057815e72c14ef8080], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, In Quarantäne, [448b4aa98bf0df57d0f0b162bd46e41c], PUP.Optional.WindowsProtectManger.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WindowsMangerProtect, In Quarantäne, [7e5115de3546c1757babc5ef956c48b8], PUP.Optional.WindowsProtectManger.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WindowsMangerProtect, In Quarantäne, [7e5115de3546c1757babc5ef956c48b8], PUP.Optional.IePluginService.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IePluginServices, In Quarantäne, [a52aef041b600b2bdb8e45236e932ed2], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, In Quarantäne, [6966995a7b00f64077c2999e19ea936d], PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [597638bb0f6cec4a145d5a0b09fb4cb4], PUP.Optional.Cinema.A, HKLM\SOFTWARE\WOW6432NODE\CinemaGo2.3cV30.09, In Quarantäne, [8946dd16bfbcf145a51d49c9b44f02fe], PUP.Optional.Cinema.A, HKLM\SOFTWARE\WOW6432NODE\CinemaGo2.3cV30.09-nv, In Quarantäne, [a02fc231f28983b3477b9979de2549b7], PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\istartsurfSoftware, In Quarantäne, [e5ea70837ffc05317e017a9b6f946799], PUP.Optional.WPM.A, HKLM\SOFTWARE\WOW6432NODE\supWindowsMangerProtect, In Quarantäne, [fad502f1661578be25bdcdac976d3bc5], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\supWPM, In Quarantäne, [9b3449aa681354e251702ee5af5430d0], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE, In Quarantäne, [715ee60dc9b25bdb20f77f9d71920000], PUP.Optional.QuickStart.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\pelmeidfhdlhlbjimpabfcbnnojbboma, In Quarantäne, [19b6886be299c175c31045f24eb57e82], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\30935, In Quarantäne, [448b955e5427e0560e2b79beec1727d9], PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [e3ec995a5b20e84e9fd2cd98b94bc838], PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10, In Quarantäne, [1bb4d61de7941b1bfdf204784bb903fd], PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4, In Quarantäne, [06c9876c3f3c94a21ed263192ada6997], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPDP, In Quarantäne, [8e41bb389ddedf576f1e93809a698a76], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, In Quarantäne, [5d729c57255640f6edd3fa19a162cc34], PUP.Optional.WebSearches.A, HKU\S-1-5-21-2598721568-2180320333-3194301025-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\SupHpUISoft, Löschen bei Neustart, [aa25777c7803360056234ec772915ca4], PUP.Optional.Cinema.A, HKU\S-1-5-21-2598721568-2180320333-3194301025-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\APPDATALOW\SOFTWARE\CinemaGo2.3cV30.09, Löschen bei Neustart, [616ecd262d4eac8a16ae749eef14b050], PUP.Optional.CrossRider.A, HKU\S-1-5-21-2598721568-2180320333-3194301025-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Löschen bei Neustart, [e6e910e3017aac8a40d8333b11f36b95], PUP.Optional.CrossRider.A, HKU\S-1-5-21-2598721568-2180320333-3194301025-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Löschen bei Neustart, [ffd060930f6c9d99b2165fb058ab9a66], PUP.Optional.CrossRider.A, HKU\S-1-5-21-2598721568-2180320333-3194301025-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\CinGoV30.09, Löschen bei Neustart, [349bee05d6a5e155969a0212a261d729], PUP.Optional.Qone8, HKU\S-1-5-21-2598721568-2180320333-3194301025-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, Löschen bei Neustart, [07c8b93acab18caaaec201645da704fc], PUP.Optional.Linkury.A, HKU\S-1-5-21-2598721568-2180320333-3194301025-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\SMARTBAR, Löschen bei Neustart, [c00fd12288f330065c2993824eb54cb4], PUP.Optional.GlobalUpdate.T, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdate, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdatem, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickCtrl.10, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickCtrl.10, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.Update3WebControl.4, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.Update3WebControl.4, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\istartsurf uninstall, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.Cinema.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{11111111-1111-1111-1111-110611341141}, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440644344441}, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550655345541}, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660666346641}, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550655345541}, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660666346641}, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440644344441}, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, HKLM\SOFTWARE\CLASSES\8099ae50085e01322ba20c3c038a45100063441.BHO.1, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110611341141}, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110611341141}, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, HKLM\SOFTWARE\CLASSES\8099ae50085e01322ba20c3c038a45100063441.BHO, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\8099ae50085e01322ba20c3c038a45100063441.BHO, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\8099ae50085e01322ba20c3c038a45100063441.BHO.1, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110611341141}, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220622342241}, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, HKLM\SOFTWARE\CLASSES\8099ae50085e01322ba20c3c038a45100063441.Sandbox.1, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, HKLM\SOFTWARE\CLASSES\8099ae50085e01322ba20c3c038a45100063441.Sandbox, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\8099ae50085e01322ba20c3c038a45100063441.Sandbox, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\8099ae50085e01322ba20c3c038a45100063441.Sandbox.1, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{22222222-2222-2222-2222-220622342241}, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110611341141}\INPROCSERVER32, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Linkury.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{31ad400d-1b06-4e33-a59a-90c2c140cba0}, In Quarantäne, [3996846fceada98db364e92c9c6937c9], PUP.Optional.Linkury.A, HKLM\SOFTWARE\CLASSES\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, In Quarantäne, [3996846fceada98db364e92c9c6937c9], PUP.Optional.Linkury.A, HKLM\SOFTWARE\CLASSES\IESmartBar.BHO, In Quarantäne, [3996846fceada98db364e92c9c6937c9], PUP.Optional.Linkury.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, In Quarantäne, [3996846fceada98db364e92c9c6937c9], PUP.Optional.Linkury.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IESmartBar.BHO, In Quarantäne, [3996846fceada98db364e92c9c6937c9], PUP.Optional.Linkury.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, In Quarantäne, [3996846fceada98db364e92c9c6937c9], Registrierungswerte: 11 PUP.Optional.SmartBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, In Quarantäne, [9d32985b86f510266ff268aa55aeae52] PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE|path, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, In Quarantäne, [c20d668dccaff244ba5dfd1f788b36ca] PUP.Optional.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, In Quarantäne, [06c98c678eedf145c998f919d82bb24e] PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPDP|dir, C:\Program Files (x86)\SupTab, In Quarantäne, [e8e7fef5e09b31057815e72c14ef8080] PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, smt, In Quarantäne, [448b4aa98bf0df57d0f0b162bd46e41c] PUP.Optional.SmartBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, In Quarantäne, [b41b0de6fd7e32048fd249c95ca7827e] PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE|path, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, In Quarantäne, [715ee60dc9b25bdb20f77f9d71920000] PUP.Optional.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, In Quarantäne, [6669f7fccab152e47ae770a29271857b] PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPDP|dir, C:\Program Files (x86)\SupTab, In Quarantäne, [8e41bb389ddedf576f1e93809a698a76] PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, smt, In Quarantäne, [5d729c57255640f6edd3fa19a162cc34] PUP.Optional.Linkury.A, HKU\S-1-5-21-2598721568-2180320333-3194301025-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\SMARTBAR|publisher, YahooSM, Löschen bei Neustart, [c00fd12288f330065c2993824eb54cb4] Registrierungsdaten: 20 PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\GOOGLE CHROME\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.istartsurf.com/?type=sc&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728, Gut: (Chrome.exe), Schlecht: ("C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.istartsurf.com/?type=sc&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728),Ersetzt,[11be549fc1babb7bccfa7790bc491ee2] PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728),Ersetzt,[def17182532852e4725265a250b58b75] PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.istartsurf.com/web/?type=ds&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/web/?type=ds&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728&q={searchTerms}),Ersetzt,[7a55fef5fe7d3ff72298798ead58e21e] PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.istartsurf.com/?type=hp&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/?type=hp&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728),Ersetzt,[9c33a74cdf9c80b6bcfc5ea98382ae52] PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.istartsurf.com/?type=hp&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/?type=hp&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728),Ersetzt,[2ba414df4734b383a71536d10203718f] PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[547bf5fe512a26107a579f73b64f6e92] PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\GOOGLE CHROME\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.istartsurf.com/?type=sc&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728, Gut: (Chrome.exe), Schlecht: ("C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.istartsurf.com/?type=sc&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728),Ersetzt,[943b7380ccaf2c0aa91dde29867fcb35] PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728),Ersetzt,[2aa55a99df9c1d19d4f037d041c4c43c] PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.istartsurf.com/web/?type=ds&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/web/?type=ds&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728&q={searchTerms}),Ersetzt,[4a8548ab6d0e47ef7446fd0a0203f907] PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.istartsurf.com/?type=hp&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/?type=hp&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728),Ersetzt,[d2fdd61d2b50c96d6f49b5520df85aa6] PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.istartsurf.com/?type=hp&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/?type=hp&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728),Ersetzt,[6669ee05bebd9a9c734948bf3ec712ee] PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[f9d6ae45bfbc79bdb21f8a8838cdaf51] PUP.Optional.HelperBar.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StLKYZZHUxozG7WbG8M4ZbpPFmdMdnxsM5TEzN82L_XqkqnpRES7zibMXTHfYVQTmdJ3A9Y38Rajp0xQy_QlNlIdcAk1dorWwMxrzKzxD3Y9O3ubFbrxGRyPNwz5QDOxM4hL8CmumsWNpbDJ-RlsIHaqK_h7mMhvWSKVZgcayXP3faQbWGqVR1ixakGalVyPjptb6sCdVv3A,,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StLKYZZHUxozG7WbG8M4ZbpPFmdMdnxsM5TEzN82L_XqkqnpRES7zibMXTHfYVQTmdJ3A9Y38Rajp0xQy_QlNlIdcAk1dorWwMxrzKzxD3Y9O3ubFbrxGRyPNwz5QDOxM4hL8CmumsWNpbDJ-RlsIHaqK_h7mMhvWSKVZgcayXP3faQbWGqVR1ixakGalVyPjptb6sCdVv3A,,&q={searchTerms}),Ersetzt,[18b7bb3815661a1c1fd5798f18ed39c7] PUP.Optional.HelperBar.A, HKU\S-1-5-21-2598721568-2180320333-3194301025-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StLKYZZHUxozG7WbG8M4ZbpPFmdMdnxsM5TEzN82L_XqkqnpRES7zibMXTHfYVQTmdJ3A9Y38Rajp0xQy_QlNlIdcAk1dorWwMxrzKzxD3Y9O3ubFbrxGRyPNwz5QDOxM4hL8CmumsWNpbDJ-RlsIHaqK_h7mMhvWSKVZgcayXP3faQbWGqVR1ixajTQ3lmygRf8WgIv_Dsg,,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StLKYZZHUxozG7WbG8M4ZbpPFmdMdnxsM5TEzN82L_XqkqnpRES7zibMXTHfYVQTmdJ3A9Y38Rajp0xQy_QlNlIdcAk1dorWwMxrzKzxD3Y9O3ubFbrxGRyPNwz5QDOxM4hL8CmumsWNpbDJ-RlsIHaqK_h7mMhvWSKVZgcayXP3faQbWGqVR1ixajTQ3lmygRf8WgIv_Dsg,,&q={searchTerms}),Löschen bei Neustart,[a12e846f700b5fd76c8bbd4be322f30d] PUP.Optional.IStartSurf.A, HKU\S-1-5-21-2598721568-2180320333-3194301025-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.istartsurf.com/?type=hp&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/?type=hp&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728),Löschen bei Neustart,[8946ea092853290d15a8c245d92c14ec] PUP.Optional.IStartSurf.A, HKU\S-1-5-21-2598721568-2180320333-3194301025-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.istartsurf.com/?type=hp&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/?type=hp&ts=1412103685&from=smt&uid=ST500LM012XHN-M500MBB_S2R7J9KD311728),Löschen bei Neustart,[f0df5c97e992cf67a51452b59075b947] PUP.Optional.HelperBar.A, HKU\S-1-5-21-2598721568-2180320333-3194301025-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StLKYZZHUxozG7WbG8M4ZbpPFmdMdnxsM5TEzN82L_XqkqnpRES7zibMXTHfYVQTmdJ3A9Y38Rajp0xQy_QlNlIdcAk1dorWwMxrzKzxD3Y9O3ubFbrxGRyPNwz5QDOxM4hL8CmumsWNpbDJ-RlsIHaqK_h7mMhvWSKVZgcayXP3faQbWGqVR1ixajTQ3lmygRf8WgIv_Dsg,,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StLKYZZHUxozG7WbG8M4ZbpPFmdMdnxsM5TEzN82L_XqkqnpRES7zibMXTHfYVQTmdJ3A9Y38Rajp0xQy_QlNlIdcAk1dorWwMxrzKzxD3Y9O3ubFbrxGRyPNwz5QDOxM4hL8CmumsWNpbDJ-RlsIHaqK_h7mMhvWSKVZgcayXP3faQbWGqVR1ixajTQ3lmygRf8WgIv_Dsg,,&q={searchTerms}),Löschen bei Neustart,[1eb1d91a8cefd16520d656b2f90c14ec] PUP.Optional.HelperBar.A, HKU\S-1-5-21-2598721568-2180320333-3194301025-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StLKYZZHUxozG7WbG8M4ZbpPFmdMdnxsM5TEzN82L_XqkqnpRES7zibMXTHfYVQTmdJ3A9Y38Rajp0xQy_QlNlIdcAk1dorWwMxrzKzxD3Y9O3ubFbrxGRyPNwz5QDOxM4hL8CmumsWNpbDJ-RlsIHaqK_h7mMhvWSKVZgcayXP3faQbWGqVR1ixajTQ3lmygRf8WgIv_Dsg,,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StLKYZZHUxozG7WbG8M4ZbpPFmdMdnxsM5TEzN82L_XqkqnpRES7zibMXTHfYVQTmdJ3A9Y38Rajp0xQy_QlNlIdcAk1dorWwMxrzKzxD3Y9O3ubFbrxGRyPNwz5QDOxM4hL8CmumsWNpbDJ-RlsIHaqK_h7mMhvWSKVZgcayXP3faQbWGqVR1ixajTQ3lmygRf8WgIv_Dsg,,&q={searchTerms}),Löschen bei Neustart,[854a0ee5146796a0be3bfe0a976e12ee] PUP.Optional.HelperBar.A, HKU\S-1-5-21-2598721568-2180320333-3194301025-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StLKYZZHUxozG7WbG8M4ZbpPFmdMdnxsM5TEzN82L_XqkqnpRES7zibMXTHfYVQTmdJ3A9Y38Rajp0xQy_QlNlIdcAk1dorWwMxrzKzxD3Y9O3ubFbrxGRyPNwz5QDOxM4hL8CmumsWNpbDJ-RlsIHaqK_h7mMhvWSKVZgcayXP3faQbWGqVR1ixajTQ3lmygRf8WgIv_Dsg,,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StLKYZZHUxozG7WbG8M4ZbpPFmdMdnxsM5TEzN82L_XqkqnpRES7zibMXTHfYVQTmdJ3A9Y38Rajp0xQy_QlNlIdcAk1dorWwMxrzKzxD3Y9O3ubFbrxGRyPNwz5QDOxM4hL8CmumsWNpbDJ-RlsIHaqK_h7mMhvWSKVZgcayXP3faQbWGqVR1ixajTQ3lmygRf8WgIv_Dsg,,&q={searchTerms}),Löschen bei Neustart,[0cc339ba780356e014e64bbd0afbef11] PUP.Optional.HelperBar.A, HKU\S-1-5-21-2598721568-2180320333-3194301025-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StLKYZZHUxozG7WbG8M4ZbpPFmdMdnxsM5TEzN82L_XqkqnpRES7zibMXTHfYVQTmdJ3A9Y38Rajp0xQy_QlNlIdcAk1dorWwMxrzKzxD3Y9O3ubFbrxGRyPNwz5QDOxM4hL8CmumsWNpbDJ-RlsIHaqK_h7mMhvWSKVZgcayXP3faQbWGqVR1ixajTQ3lmygRf8WgIv_Dsg,,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StLKYZZHUxozG7WbG8M4ZbpPFmdMdnxsM5TEzN82L_XqkqnpRES7zibMXTHfYVQTmdJ3A9Y38Rajp0xQy_QlNlIdcAk1dorWwMxrzKzxD3Y9O3ubFbrxGRyPNwz5QDOxM4hL8CmumsWNpbDJ-RlsIHaqK_h7mMhvWSKVZgcayXP3faQbWGqVR1ixajTQ3lmygRf8WgIv_Dsg,,&q={searchTerms}),Löschen bei Neustart,[458a668dfe7d8da9a15455b3cb3ae917] Ordner: 43 PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices, Löschen bei Neustart, [bd121ad9fb80a591d4b24ca82fd3e818], PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update, In Quarantäne, [bd121ad9fb80a591d4b24ca82fd3e818], PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect, Löschen bei Neustart, [4f801cd79edd8caa46ab11e50af88878], PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\log, In Quarantäne, [4f801cd79edd8caa46ab11e50af88878], PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update, In Quarantäne, [4f801cd79edd8caa46ab11e50af88878], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update, Löschen bei Neustart, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0, Löschen bei Neustart, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Download, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Install, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline\{85F2C001-99DE-4705-9114-9BF8A5ED0EEB}, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.A, C:\Users\C\AppData\Local\Temp\comh.14296, In Quarantäne, [c80710e3eb90a5911ec78e6a0af8ea16], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab, Löschen bei Neustart, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\image, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Users\C\AppData\Roaming\SupTab, In Quarantäne, [6c63569da9d28ea8e528768712f0e818], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\code, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaGo2.3cV30.09, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], Dateien: 207 PUP.Optional.WindowsProtectManger.A, C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe, Löschen bei Neustart, [d3fc13e04c2f989e30f6773dd72ab34d], PUP.Optional.IePluginService.A, C:\ProgramData\IePluginServices\PluginService.exe, Löschen bei Neustart, [715ed71c81fadc5a1554d5936b960000], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SupTab.dll, In Quarantäne, [369915de5c1f26106219d8be0ff3b54b], PUP.Optional.CrossRider.A, C:\Users\C\AppData\Roaming\GKRF.exe, In Quarantäne, [854aea090d6e0135eb858cc9788854ac], PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaGo2.3cV30.09\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-4.exe, In Quarantäne, [01ce8b683c3fd85efd734d08d42cbf41], PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaGo2.3cV30.09\utils.exe, In Quarantäne, [efe0c62dc8b31e18e852d676de2206fa], PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\DpInterface32.dll, In Quarantäne, [2ca3eb08f18a87af459be4b3956c0df3], PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\DpInterface64.dll, In Quarantäne, [efe010e3f28942f4b32d574009f8758b], PUP.Optional.IEPluginService.A, C:\Program Files (x86)\SupTab\RSHP.exe, In Quarantäne, [8649dc17ed8e85b149c9cab1e819f50b], PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect32.dll, In Quarantäne, [0ec11dd65f1cd165489876213fc2fe02], PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect64.dll, In Quarantäne, [b21d04ef9fdc1323e0005c3b3bc6ba46], PUP.Optional.CrossRider.A, C:\Users\C\AppData\Local\Temp\setup.exe, In Quarantäne, [07c84ca71c5f3006d708d4f3758c34cc], PUP.Optional.SearchHijacker.A, C:\Users\C\AppData\Local\Temp\smt_istartsurf.exe, In Quarantäne, [359a9e551e5da294abdae0d07988b54b], PUP.Optional.Installcore, C:\Users\C\AppData\Local\Temp\PartnerInstaller_smtyc.exe, In Quarantäne, [656adf14c5b67db9494d3b530af8f907], PUP.Optional.SmartBar, C:\Users\C\AppData\Local\Temp\MSI3DB7.tmp-\Smartbar.Installer.CustomActions.dll, In Quarantäne, [993601f27a01072fd8799f8fae52fb05], PUP.Optional.SmartBar, C:\Users\C\AppData\Local\Temp\MSIBBF1.tmp-\Smartbar.Installer.CustomActions.dll, In Quarantäne, [2ba4d221b7c4f24452ffc965718f936d], PUP.Optional.SmartBar, C:\Users\C\AppData\Local\Temp\MSIBED1.tmp-\Smartbar.Installer.CustomActions.dll, In Quarantäne, [c00f32c1d3a8b383a4ad37f741bf7987], PUP.Optional.Somoto, C:\Users\C\AppData\Local\Temp\nswDAF2.tmp\setupcl.exe, In Quarantäne, [c30cdf147704ad89b98a768627dd49b7], PUP.Optional.IePluginService.A, C:\Users\C\AppData\Local\Temp\D7F428A1-4F1F-42ad-A5BC-4D31349A6BBA[i]\1.zipDir\tmp\SupTab_v5.8.8.865_noblank.exe, In Quarantäne, [aa25c0336b1059dddc8d90d87d84a45c], PUP.Optional.WindowsProtectManger.A, C:\Users\C\AppData\Local\Temp\D7F428A1-4F1F-42ad-A5BC-4D31349A6BBA[i]\1.zipDir\tmp\wpm_v20.0.0.722.exe, In Quarantäne, [e9e6678cef8c7bbb67bf357f1ce58779], PUP.Optional.Somoto, C:\Users\C\Downloads\DVDshrink32setup_downloader-I9DoJj2va.exe, In Quarantäne, [99364ea5adcee353d9f73952fd0707f9], PUP.Optional.Somoto, C:\Users\C\Downloads\Nicht bestätigt 491037.crdownload, In Quarantäne, [408f15de2d4eda5c5832bd7a7095956b], PUP.Optional.QuickStart.A, C:\Users\C\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx, In Quarantäne, [f9d647acd3a80234aaa14fc4946fe41c], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-1, In Quarantäne, [2ca337bc1c5f092dc44e22fa3bc87987], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-11, In Quarantäne, [25aa30c38af1fa3ca66c26f624dfa060], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-2, In Quarantäne, [7c53ab482c4f67cf6aa88a92bb4848b8], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-3, In Quarantäne, [fdd23ab94932d066b55d60bc5da6ff01], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-4, In Quarantäne, [d9f69360e6950432040eec30b152728e], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-5, In Quarantäne, [eee1e2118deea19527eb34e81ce7a858], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-5_user, In Quarantäne, [943b9b582556092dd53d0d0f15ee9e62], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-6, In Quarantäne, [e7e81ad92e4dc373fd154cd01de622de], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-7, In Quarantäne, [458a975cdf9c79bd63afcc50ac57748c], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-9, In Quarantäne, [58775e951467a88eec262eee32d133cd], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-1.job, In Quarantäne, [804fe50e344760d64c357ffb9272c63a], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-11.job, In Quarantäne, [22ad24cf9dde7abc1071a0dace3645bb], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-2.job, In Quarantäne, [438c846fb1caf93def92ec8ea55f8080], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-3.job, In Quarantäne, [1bb4e40fea91de58562b1565749023dd], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-4.job, In Quarantäne, [804fd71ccab156e0fa8783f71de74fb1], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-5.job, In Quarantäne, [2aa55f940a710432fd84f585cd372ad6], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-5_user.job, In Quarantäne, [9c33e90ac1bad165562b532754b0f10f], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-6.job, In Quarantäne, [725de40f364562d4cfb2bfbbdd27f709], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-7.job, In Quarantäne, [1db29360ef8c7bbba8d9671311f3e020], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-9.job, In Quarantäne, [04cb1ad9aecdd264720f81f90df719e7], PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job, In Quarantäne, [eae521d24635ec4a1d7ae4968f75e11f], PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore, In Quarantäne, [913e16dd5f1cef4775231f5bf90b49b7], PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job, In Quarantäne, [517e846f5d1eae886d2cdf9ba163ad53], PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA, In Quarantäne, [309fa3500774e74fa6f47cfec044718f], PUP.Optional.CrossRider.A, C:\Windows\Tasks\00f4c16a-3315-4f57-8c3c-b6e884b90725.job, In Quarantäne, [854a45ae017a3105a548a0dc9d6736ca], PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\00f4c16a-3315-4f57-8c3c-b6e884b90725, In Quarantäne, [8f408c6792e9ed4912dce19bcd37e719], PUP.Optional.WindowsProtectManger.A, C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe, Löschen bei Neustart, [7e5115de3546c1757babc5ef956c48b8], PUP.Optional.IePluginService.A, C:\ProgramData\IePluginServices\PluginService.exe, Löschen bei Neustart, [a52aef041b600b2bdb8e45236e932ed2], PUP.Optional.QuickStart.A, C:\Users\C\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx, In Quarantäne, [626ded062b5079bd5af1c74c32d11ce4], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-1, In Quarantäne, [b8175c972457d6603ad838e4df2407f9], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-11, In Quarantäne, [359a3bb88cefe5519d7597851be84fb1], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-2, In Quarantäne, [12bddf1413681c1aee241dffe12227d9], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-3, In Quarantäne, [5e716c8798e345f1a76b8696ea196d93], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-4, In Quarantäne, [834cd91add9e7abc8c86ae6e61a2bc44], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-5, In Quarantäne, [f2dd8e657efd00369c76de3eb54e1de3], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-5_user, In Quarantäne, [c20d10e3ed8e7bbbb1616eae8e75d12f], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-6, In Quarantäne, [cf0028cb770448eea96971ab2ed509f7], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-7, In Quarantäne, [d4fb1ad96d0ec07654bed547d03351af], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-9, In Quarantäne, [e9e67380512afd393dd5ed2ffb088e72], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-1.job, In Quarantäne, [0fc0a64d6a115fd7e39e9cde9173d62a], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-11.job, In Quarantäne, [ffd0e80b46353bfb027f205abc48a858], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-2.job, In Quarantäne, [ece3a54e0675979f3948592135cf7789], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-3.job, In Quarantäne, [636c8e65a9d214224f3221591de747b9], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-4.job, In Quarantäne, [9d32dc17dba09f97374a55250df7a957], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-5.job, In Quarantäne, [6b64ce25017a3ff711703545b0540000], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-5_user.job, In Quarantäne, [07c8668d9ae1db5bb2cfcab0b54ff60a], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-6.job, In Quarantäne, [24ab6291c5b6181e0a77d5a520e46898], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-7.job, In Quarantäne, [f9d6a251e79449eda1e0cdad9f65db25], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-9.job, In Quarantäne, [b41b6e857dfe2d095f22f78349bb42be], PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job, In Quarantäne, [ab24d71c6b10bd79ecabf288c83cee12], PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore, In Quarantäne, [1bb4f003f68553e323751e5c749020e0], PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job, In Quarantäne, [d3fc49aa9be0c571c0d9d9a1e024bf41], PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA, In Quarantäne, [933c5e951b6061d56f2b3248e91bfe02], PUP.Optional.CrossRider.A, C:\Windows\Tasks\00f4c16a-3315-4f57-8c3c-b6e884b90725.job, In Quarantäne, [735ca54e7308b97da944ceae9e667a86], PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\00f4c16a-3315-4f57-8c3c-b6e884b90725, In Quarantäne, [14bbda194734ae88be3056267e861ae6], PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update\conf, In Quarantäne, [bd121ad9fb80a591d4b24ca82fd3e818], PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\log\ProtectWindowsManager_2014-09-30[21-02-16-393].log, In Quarantäne, [4f801cd79edd8caa46ab11e50af88878], PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update\conf, In Quarantäne, [4f801cd79edd8caa46ab11e50af88878], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, Löschen bei Neustart, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleCrashHandler.exe, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdate.exe, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateBroker.exe, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateHelper.msi, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateOnDemand.exe, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdate.dll, Löschen bei Neustart, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdateres_en.dll, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psmachine.dll, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psuser.dll, In Quarantäne, [735cda198bf04bebe8e1ac4cad55ee12], PUP.Optional.GlobalUpdate.A, C:\Users\C\AppData\Local\Temp\comh.14296\GoogleCrashHandler.exe, In Quarantäne, [c80710e3eb90a5911ec78e6a0af8ea16], PUP.Optional.GlobalUpdate.A, C:\Users\C\AppData\Local\Temp\comh.14296\GoogleUpdate.exe, In Quarantäne, [c80710e3eb90a5911ec78e6a0af8ea16], PUP.Optional.GlobalUpdate.A, C:\Users\C\AppData\Local\Temp\comh.14296\GoogleUpdateBroker.exe, In Quarantäne, [c80710e3eb90a5911ec78e6a0af8ea16], PUP.Optional.GlobalUpdate.A, C:\Users\C\AppData\Local\Temp\comh.14296\GoogleUpdateHelper.msi, In Quarantäne, [c80710e3eb90a5911ec78e6a0af8ea16], PUP.Optional.GlobalUpdate.A, C:\Users\C\AppData\Local\Temp\comh.14296\GoogleUpdateOnDemand.exe, In Quarantäne, [c80710e3eb90a5911ec78e6a0af8ea16], PUP.Optional.GlobalUpdate.A, C:\Users\C\AppData\Local\Temp\comh.14296\goopdate.dll, In Quarantäne, [c80710e3eb90a5911ec78e6a0af8ea16], PUP.Optional.GlobalUpdate.A, C:\Users\C\AppData\Local\Temp\comh.14296\goopdateres_en.dll, In Quarantäne, [c80710e3eb90a5911ec78e6a0af8ea16], PUP.Optional.GlobalUpdate.A, C:\Users\C\AppData\Local\Temp\comh.14296\npGoogleUpdate4.dll, In Quarantäne, [c80710e3eb90a5911ec78e6a0af8ea16], PUP.Optional.GlobalUpdate.A, C:\Users\C\AppData\Local\Temp\comh.14296\psmachine.dll, In Quarantäne, [c80710e3eb90a5911ec78e6a0af8ea16], PUP.Optional.GlobalUpdate.A, C:\Users\C\AppData\Local\Temp\comh.14296\psuser.dll, In Quarantäne, [c80710e3eb90a5911ec78e6a0af8ea16], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\DpInterface32.dll, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\DpInterface64.dll, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\HpUI.exe, Löschen bei Neustart, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\ient.json, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\install.data, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\Loader32.exe, Löschen bei Neustart, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\Loader64.exe, Löschen bei Neustart, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\msvcp110.dll, Löschen bei Neustart, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\msvcr110.dll, Löschen bei Neustart, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\RSHP.exe, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SearchProtect32.dll, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SearchProtect64.dll, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SupTab.dll, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\uninstall.exe, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\WindowsSupportDll32.dll, Löschen bei Neustart, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\WindowsSupportDll64.dll, Löschen bei Neustart, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\bk_shadow.png, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\btn.png, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\close.png, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\main.xml, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\image\ck_box.png, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\image\ck_check.png, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\data.html, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE.html, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE8.html, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\main.css, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\ver.txt, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\google_trends.png, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon128.png, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon16.png, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon48.png, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\loading.gif, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\logo32.ico, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\common.js, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ga.js, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery-1.11.0.min.js, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\js.js, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\library.js, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit-ie8.js, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit2.0.js, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt\messages.json, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json, In Quarantäne, [8946747f205b33038d7f8974b54db64a], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\278.json, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\MessageBox.xml, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\uninstallDlg2.xml, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\UninstallManager.exe, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\bg.png, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\bg1.png, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\bk_shadow.png, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\button.png, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\button1.png, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\checkbox.png, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\checkbox_select.png, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\checked.png, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\close.png, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\loading_bg.png, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\loading_light.png, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\min.png, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\scrollbar.bmp, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\Thumbs.db, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\unchecked.png, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\code\code1.jpg, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\code\code2.jpg, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\code\code3.jpg, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\code\code4.jpg, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\code\code5.jpg, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\code\code6.jpg, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.IStartSurf.A, C:\Users\C\AppData\Roaming\istartsurf\images\code\Thumbs.db, In Quarantäne, [c8071dd6cead4de9425545ba649eee12], PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaGo2.3cV30.09\70500f3d-d76e-44eb-b5a6-897f01cd81b7.crx, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaGo2.3cV30.09\00f4c16a-3315-4f57-8c3c-b6e884b90725.exe, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaGo2.3cV30.09\1293297481.mxaddon, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaGo2.3cV30.09\154e1d06-ee25-4e0e-9f4c-951459a8f4c8.crx, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaGo2.3cV30.09\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-2.exe, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaGo2.3cV30.09\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-4.exe, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaGo2.3cV30.09\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-5.exe, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaGo2.3cV30.09\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-6.exe, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaGo2.3cV30.09\4e9c6096-f76e-41d8-aeae-04c6c11e91c9-9.exe, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaGo2.3cV30.09\4e9c6096-f76e-41d8-aeae-04c6c11e91c9.crx, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaGo2.3cV30.09\4e9c6096-f76e-41d8-aeae-04c6c11e91c9.xpi, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaGo2.3cV30.09\background.html, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaGo2.3cV30.09\bgNova.html, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaGo2.3cV30.09\CinemaGo2.3cV30.09-bg.exe, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaGo2.3cV30.09\CinemaGo2.3cV30.09-bho.dll, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaGo2.3cV30.09\CinemaGo2.3cV30.09-bho64.dll, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaGo2.3cV30.09\CinemaGo2.3cV30.09-codedownloader.exe, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaGo2.3cV30.09\CinemaGo2.3cV30.09.ico, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaGo2.3cV30.09\utils.exe, In Quarantäne, [d1fe7c776714e84e67d716ef1ce732ce], Physische Sektoren: 0 (No malicious items detected) (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 01.10.2014 Suchlauf-Zeit: 06:01:03 Logdatei: mwam3.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.10.01.01 Rootkit Datenbank: v2014.09.19.01 Lizenz: Premium Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Self-protection: Deaktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: C Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 318373 Verstrichene Zeit: 17 Min, 31 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Aktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 0 (No malicious items detected) Registrierungsdaten: 0 (No malicious items detected) Ordner: 0 (No malicious items detected) Dateien: 0 (No malicious items detected) Physische Sektoren: 0 (No malicious items detected) (end) Das Ding hat mir irgendwie Google Chrome zerhauen (und unter anderem auch über Chrome anscheinend die Installation eines Messengers auf meinem Handy angestoßen). Als ich dann den IE gestartet habe, um Chrome zu installieren, war als Startseite immer noch iStartSurf - und ich wußte, ich brauche mal wieder eure Hilfe... Logs folgen... |
Baum-Darstellung