Rechner lahm gelegt durch Pop-Ups, Werbefenster, Browserfenster

sommertag · 19.10.2014, 15:58

Hallo Forum!
Nach dem Rechnerstart (Lenovo Notebook) lässt sich im Explorer (langsam) navigieren. Es handelt sich nicht um mein Rechner und folgendes wurde mir gesagt:
Aussage des Nutzers (nicht selbst getestet): Unzählige Browserfenster öffnen sich, sobald man einen Browser startet. Viele Aufforderungen zum Installieren von Software.

Ich bin mir nicht sicher, ob ich mit dem Rechner in das lokale Netzwerk gehen soll, um online gehen zu können, daher belasse ich ihn offline bisher.

Es gibt installierte Software auf dem Rechner, die von allein startet. Da ich nicht weiss, wie man eventuelle Log Files exportieren kann (und ich auch nur ungerne einen USB Stick an den Rechner hängen möchte) und in euren Richtlinien steht, dass man erstmal nichts unternehmen soll, hier die Ergebnisse von den Softwares:

- Advanced System Protector: "Die Datenbankdefinitionen in Ihrem System sind entweder veraltet oder es sind keine vorhanden. Wir empfehlen ihnen, jetzt eine Aktualisierung durchzuführen".
- PC Speed Maximizer:
"192 zu säubernde und otpimierende Registrierungseinträge"
"251 zu säubernde temporäre Registriertungswerte"
"11867 zu säubernde temporäre Internetdateien und -ordner"
"3162 zu entfernde besuchte Websiten und Cookies"
"1 zu säuberndes Protokoll in Chats in AOL, Yahoo, MSN und anderen"
"527 zu säubernde zurückgelassene Dateien"
"14 zu entfernende ungültige Verknüpfungen"
"24 Leistungs und Optimierungseinstellungen"
"7 beim Start geladene Programme. Programme entfernen und Start beschleunigen"
- RegCleanPro:
"Systemverwandte Fehler: 79"
"Com- und ActiveX Fehler: 89"
"Benutzerbezogene Fehler: 6"
"Start- und Deinstallationsfehler: 526"

Des Weiteren sind unten rechts noch 2 Popups, die darüber informieren, dass der Computer nicht gesichert ist und eines, welches auf Gefährungen hinweist.

Wie gehe ich vor? Ich habe nicht weiter ausgeführt und auch keine Bereinigung mit den oben genannten Programmen gestartet. Da ich ratlos bin, bin ich über Hilfe sehr dankbar.

Liebe Grüße und Danke im Voraus

schrauber · 19.10.2014, 16:07

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

sommertag · 19.10.2014, 16:38

Hi,
hier die FRST.txt und Addition.txt
FRST

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-10-2014 01
Ran by ALFIR (administrator) on ALFIR-PC on 19-10-2014 17:25:28
Running from C:\Users\ALFIR\Desktop\Trojanerboard
Loaded Profile: ALFIR (Available profiles: ALFIR)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe
(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
(Just Develop It) C:\Program Files (x86)\MyPC Backup\BackupStack.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgemca.exe
(Activeris) C:\Program Files (x86)\Activeris AntiMalware\ActiverisAntiMalware.exe
(SaveSense) C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe
(Uniblue Systems Ltd) C:\Program Files (x86)\Uniblue\SpeedUpMyPC\spmonitor.exe
() C:\Program Files (x86)\Re-markit-soft\Re-markitw.exe
(Systweak) C:\Program Files (x86)\ASP\AdvancedSystemProtector.exe
(globalUpdate) C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
() C:\Program Files (x86)\RCP\RegCleanPro.exe
() C:\Program Files (x86)\Re-markit-soft\Re-markitBG175.exe
(Lenovo.) C:\Windows\System32\TPHDEXLG64.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
() C:\Program Files (x86)\CommonShare\updateCommonShare.exe
(Smart PC Solutions) C:\Program Files (x86)\PC Speed Maximizer\PCSpeedMaximizer.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(Smart PC Solutions) C:\Program Files (x86)\PC Speed Maximizer\SPMSmartScan.exe
() C:\Program Files (x86)\CommonShare\updater.exe
() C:\Program Files (x86)\CommonShare\bin\utilCommonShare.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
() C:\Users\ALFIR\AppData\Roaming\VOPackage\VOsrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() C:\Users\ALFIR\AppData\Local\fst_de_19\upfst_de_19.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
(PC Utilities Software Limited) C:\Program Files (x86)\Optimizer Pro\OptProReminder.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
() C:\Program Files (x86)\fst_de_19\fst_de_19.exe
(MyPCBackup.com) C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\McUICnt.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoUpdateCheck.exe
( ) C:\Users\ALFIR\AppData\Roaming\VOPackage\VOPackage.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TUDefragBackend64.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [AVG_TRAY] => C:\Program Files (x86)\AVG\AVG2012\avgtray.exe [2587008 2012-04-05] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [fst_de_19] => C:\Program Files (x86)\fst_de_19\fst_de_19.exe [3984336 2014-05-19] ()
HKLM-x32\...\RunOnce: [upfst_de_19.exe] => C:\Users\ALFIR\AppData\Local\fst_de_19\upfst_de_19.exe [3267568 2014-05-19] ()
HKU\S-1-5-21-4139373105-4022997019-1243156706-1001\...\Run: [Google+ Auto Backup] => C:\Users\ALFIR\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3619096 2014-01-06] (Google Inc.)
HKU\S-1-5-21-4139373105-4022997019-1243156706-1001\...\Run: [Optimizer Pro] => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [135112 2014-05-15] (PC Utilities Software Limited)
HKU\S-1-5-21-4139373105-4022997019-1243156706-1001\...\MountPoints2: {3896de0c-473a-11e1-aa85-f0def1832e5b} - E:\Startme.exe
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [232896 2014-07-22] (Client Connect LTD)
AppInit_DLLs:  C:\PROGRA~2\OPTIMI~1\OPTPRO~3.DLL => C:\Program Files (x86)\Optimizer Pro\OptProCrash_x64.dll [2720144 2014-05-19] ()
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [187328 2014-07-22] (Client Connect LTD)
AppInit_DLLs-x32:  c:\progra~2\optimi~1\optpro~2.dll => c:\Program Files (x86)\Optimizer Pro\OptProCrash.dll [2900424 2014-05-19] ()
Startup: C:\Users\ALFIR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
ShortcutTarget: ctfmon.lnk -> C:\Users\ALFIR\AppData\Local\Temp\er_00_0_l.exe ()
Startup: C:\Users\ALFIR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
ShellIconOverlayIdentifiers: [VeriFace Enc] -> {771C7324-DA80-49D3-8017-753B0AF60951} => C:\windows\system32\IcnOvrly.dll ()
BootExecute: autocheck autochk * C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restart
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:13827;https=127.0.0.1:13827
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.trovi.com/?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M696A8035-311A-495E-BD0B-6CF21CCF1754&SearchSource=55&CUI=&UM=2&UP=SP8DA8C1DA-6E09-45DA-8A90-659F48E38300&SSPV=
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=1699eb32-b5f0-45ea-bdc2-eac8cd0729a7&searchtype=ds&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=1699eb32-b5f0-45ea-bdc2-eac8cd0729a7&searchtype=ds&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/
URLSearchHook: HKLM-x32 - DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
URLSearchHook: HKLM-x32 - FLV Runner Toolbar - {3bbd3c14-4c16-4989-8366-95bc9179779d} - C:\Program Files (x86)\FLV_Runner\prxtbFLV_.dll No File
URLSearchHook: HKLM-x32 - entrusted Toolbar - {e44a1809-4d10-4ab8-b343-3326b64c7cdd} - C:\Program Files (x86)\entrusted\prxtbentr.dll No File
URLSearchHook: HKCU - entrusted Toolbar - {e44a1809-4d10-4ab8-b343-3326b64c7cdd} - C:\Program Files (x86)\entrusted\prxtbentr.dll No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112&q={searchTerms}
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = 
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112&q={searchTerms}
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=1699eb32-b5f0-45ea-bdc2-eac8cd0729a7&searchtype=ds&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112&q={searchTerms}
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M696A8035-311A-495E-BD0B-6CF21CCF1754&SearchSource=58&CUI=&UM=2&UP=SP8DA8C1DA-6E09-45DA-8A90-659F48E38300&q={searchTerms}&SSPV=
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=1699eb32-b5f0-45ea-bdc2-eac8cd0729a7&searchtype=ds&q={searchTerms}
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M696A8035-311A-495E-BD0B-6CF21CCF1754&SearchSource=58&CUI=&UM=2&UP=SP8DA8C1DA-6E09-45DA-8A90-659F48E38300&q={searchTerms}&SSPV=
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112&q={searchTerms}
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENN
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=12af1cda000000000000f0def1832e5b&r=825
SearchScopes: HKCU - {8D9D191E-2CD8-4972-9163-8FF4084A6418} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3281675&CUI=UN27821689112273927&UM=2
SearchScopes: HKCU - {E8B34460-05B9-45C2-8092-32B0A0CFFB40} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dvd_14_17_ff&cd=2XzuyEtN2Y1L1Qzu0FtD0D0E0FtCzztAtB0EyD0BtC0C0D0AtN0D0Tzu0SzzyEyCtN1L2XzutBtFtBtDtFyDtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0E0E0AyEyCtGtAyC0DyDtGtA0DtDzytG0CtA0AtBtGtC0FzyyB0E0AyC0CyDyEyByC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StB0DyEzyzy0Azy0BtGtD0EtDzztGyC0ByC0BtGzz0C0BtCtGtDtC0D0AyBzy0FtCtCyByCtC2Q&cr=1633643052&ir=
BHO: HQ-V-Pro-v1.9 -> {11111111-1111-1111-1111-110511311172} -> C:\Program Files (x86)\HQ-V-Pro-v1.9\HQ-V-Pro-v1.9-bho64.dll (HQ-Video)
BHO: MPlayerplus_01 -> {11111111-1111-1111-1111-110511421146} -> C:\Program Files (x86)\MPlayerplus_01\MPlayerplus_01-bho64.dll (Freeven)
BHO: AVG Do Not Track -> {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} -> C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.)
BHO: Snap.DoEngine -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} -> C:\windows\system32\mscoree.dll (Microsoft Corporation)
BHO: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll (AVG Technologies CZ, s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: LuckyCoupon -> {BC4B2312-A62F-66E5-4A6D-74DEA33430D7} -> C:\ProgramData\LuckyCoupon\jP1.x64.dll ()
BHO: PriNcieaCouPon -> {C9EC7C3D-3221-7201-5935-9B947446348C} -> C:\ProgramData\PriNcieaCouPon\d.x64.dll ()
BHO: SalesMaaggnEt -> {D427A720-EE46-0F48-87CF-1B53AF31865C} -> C:\ProgramData\SalesMaaggnEt\K8Kj_tlEq.x64.dll ()
BHO: DVDVideoSoft WebPageAdjuster Class -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO: FlexIobleShhOpper -> {F2107D31-FE64-3B6A-FA91-E9C0103DB2B2} -> C:\ProgramData\FlexIobleShhOpper\fT.x64.dll ()
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: SaveSense -> {0f21b1e5-5afc-43c9-9c66-515046e92ec2} -> C:\Program Files (x86)\SaveSense\SaveSenseIE.dll (SaveSense)
BHO-x32: HQ-V-Pro-v1.9 -> {11111111-1111-1111-1111-110511311172} -> C:\Program Files (x86)\HQ-V-Pro-v1.9\HQ-V-Pro-v1.9-bho.dll (HQ-Video)
BHO-x32: MPlayerplus_01 -> {11111111-1111-1111-1111-110511421146} -> C:\Program Files (x86)\MPlayerplus_01\MPlayerplus_01-bho.dll (Freeven)
BHO-x32: AVG Do Not Track -> {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} -> C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.)
BHO-x32: Snap.DoEngine -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} -> C:\windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: FLV Runner Toolbar -> {3bbd3c14-4c16-4989-8366-95bc9179779d} -> C:\Program Files (x86)\FLV_Runner\prxtbFLV_.dll No File
BHO-x32: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> C:\Program Files (x86)\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
BHO-x32: Re-markit -> {609467CB-A447-E4FA-5EEE-CEE0E56F306B} -> C:\Program Files (x86)\Re-markit-soft\175.dll ()
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: DVDVideoSoftTB Toolbar -> {872b5b88-9db5-4310-bdd0-ac189557e5f5} -> C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: CommonShare -> {b0022d3c-ca81-4a57-ba00-31650a761234} -> C:\Program Files (x86)\CommonShare\CommonSharebho.dll (CommonShare)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: LuckyCoupon -> {BC4B2312-A62F-66E5-4A6D-74DEA33430D7} -> C:\ProgramData\LuckyCoupon\jP1.dll ()
BHO-x32: PriNcieaCouPon -> {C9EC7C3D-3221-7201-5935-9B947446348C} -> C:\ProgramData\PriNcieaCouPon\d.dll ()
BHO-x32: SalesMaaggnEt -> {D427A720-EE46-0F48-87CF-1B53AF31865C} -> C:\ProgramData\SalesMaaggnEt\K8Kj_tlEq.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: entrusted Toolbar -> {e44a1809-4d10-4ab8-b343-3326b64c7cdd} -> C:\Program Files (x86)\entrusted\prxtbentr.dll No File
BHO-x32: Softonic Helper Object -> {E87806B5-E908-45FD-AF5E-957D83E58E68} -> C:\Program Files (x86)\Softonic\Softonic\1.8.21.14\bh\Softonic.dll (Softonic.com)
BHO-x32: DVDVideoSoft WebPageAdjuster Class -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
BHO-x32: FlexIobleShhOpper -> {F2107D31-FE64-3B6A-FA91-E9C0103DB2B2} -> C:\ProgramData\FlexIobleShhOpper\fT.dll ()
Toolbar: HKLM - Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\windows\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - FLV Runner Toolbar - {3bbd3c14-4c16-4989-8366-95bc9179779d} - C:\Program Files (x86)\FLV_Runner\prxtbFLV_.dll No File
Toolbar: HKLM-x32 - Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\windows\SysWOW64\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - entrusted Toolbar - {e44a1809-4d10-4ab8-b343-3326b64c7cdd} - C:\Program Files (x86)\entrusted\prxtbentr.dll No File
Toolbar: HKLM-x32 - Softonic Toolbar - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - C:\Program Files (x86)\Softonic\Softonic\1.8.21.14\SoftonicTlbr.dll (Softonic.com)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKCU - No Name - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} -  No File
Toolbar: HKCU - No Name - {3BBD3C14-4C16-4989-8366-95BC9179779D} -  No File
Toolbar: HKCU - No Name - {E44A1809-4D10-4AB8-B343-3326B64C7CDD} -  No File
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default
FF DefaultSearchEngine: webssearches
FF DefaultSearchUrl: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&CUI=UN37918983096761116&UM=2&SearchSource=3&q={searchTerms}
FF SearchEngineOrder.1: Sichere Suche
FF SelectedSearchEngine: webssearches
FF Homepage: hxxp://istart.webssearches.com/?type=hppp&ts=1410362525&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112
FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=mcafee&type=A112DE80003&p=
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @playstation.com/PsndlCheck,version=1.00 -> C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 -> C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.updaterss.com/SaveSenseLive Update;version=3 -> C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll (SaveSense)
FF Plugin-x32: @tools.updaterss.com/SaveSenseLive Update;version=9 -> C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll (SaveSense)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\user.js
FF SearchPlugin: C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\searchplugins\Mysearchdial.xml
FF SearchPlugin: C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\searchplugins\softonic.xml
FF SearchPlugin: C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\searchplugins\trovi-search.xml
FF SearchPlugin: C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\searchplugins\yahoo-msd.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\webssearches.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: MediaPlayerplus - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\Extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com [2014-07-27]
FF Extension: EixtrAShopppeiRR - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\Extensions\ciasawj@yiyuiiii-.com [2014-09-05]
FF Extension: HQ-V-Pro-v1.9 - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\Extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com [2014-09-02]
FF Extension: SaVErPro - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\Extensions\f1mua@eaifbo.com [2014-06-17]
FF Extension: KiangCoupon - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\Extensions\gsaco@uavg-.net [2014-09-02]
FF Extension: Snap.Do  - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\Extensions\helperbar@helperbar.com [2010-01-24]
FF Extension: HQ-Video-Pro-1.9 Clone - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\Extensions\LUHVPJSG96971825@HMOZFYC10427095.com [2014-09-10]
FF Extension: Quick Start - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\Extensions\quick_start@gmail.com [2014-05-26]
FF Extension: FloashCouipon - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\Extensions\ud4_m@yjgd-yacui.edu [2014-07-30]
FF Extension: SaveSense - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\Extensions\{8b337819-d1e8-48d3-8178-168ae8c99c36} [2013-11-27]
FF Extension: entrusted  - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\Extensions\{e44a1809-4d10-4ab8-b343-3326b64c7cdd} [2013-09-10]
FF Extension: Suche App - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\Extensions\{47744fca-0011-4ba5-ba33-24ae19355a42}.xpi [2014-07-27]
FF Extension: MySearchDial - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}.xpi [2014-04-25]
FF Extension: CommonShare - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\Extensions\{e4a6645a-3f85-4e1f-aa41-8367978844db}.xpi [2014-09-10]
FF HKLM-x32\...\Firefox\Extensions: [{1E73965B-8B48-48be-9C8D-68B920ABC1C4}] - C:\Program Files (x86)\AVG\AVG2012\Firefox4
FF Extension: AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\Firefox4 [2012-06-27]
FF HKLM-x32\...\Firefox\Extensions: [{F53C93F1-07D5-430c-86D4-C9531B27DFAF}] - C:\Program Files (x86)\AVG\AVG2012\Firefox\DoNotTrack
FF Extension: AVG Do Not Track - C:\Program Files (x86)\AVG\AVG2012\Firefox\DoNotTrack [2012-06-27]
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2010-02-22]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2013-11-27]
FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com
FF HKCU\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF HKCU\...\Firefox\Extensions: [{D2B1635C-3660-A50D-0853-6CBFDB7D714E}] - C:\Program Files (x86)\Re-markit-soft\175.xpi
FF Extension: Re-markit - C:\Program Files (x86)\Re-markit-soft\175.xpi [2014-07-27]

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default
CHR Extension: (No Name) - C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\Extensions\deghekbbihbapplmbffglehkdhkeibbm [2014-05-19]
CHR Extension: (Softonic Chrome Toolbar) - C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf [2013-11-27]
CHR Extension: (SaveSense) - C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\Extensions\khcceooakamlehbimaepcldnnlnkcmfk [2013-11-27]
CHR Extension: (No Name) - C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\Extensions\majjphhgppkndjjkmhhnbgafooenebhd [2014-05-19]
CHR Extension: (Re-markit) - C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\Extensions\pgjfhonoojkgegblnpiaeeplobkdamcd [2014-07-27]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2014-09-10]
CHR HKCU\...\Chrome\Extension: [amfclgbdpgndipgoegfpkkgobahigbcl] - C:\Users\ALFIR\AppData\Local\Smartbar/Application\1Extension.crx [2012-12-02]
CHR HKCU\...\Chrome\Extension: [kdfbddbdpnahdahmamlolacimfdbeckk] - C:\Users\ALFIR\AppData\Local\CRE\kdfbddbdpnahdahmamlolacimfdbeckk.crx [2013-03-11]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2010-02-22]
CHR HKLM-x32\...\Chrome\Extension: [elchiiiejkobdbblfejjkbphbddgmljf] - C:\Program Files (x86)\Softonic\Softonic\1.8.21.14\Softonic.crx [2013-06-11]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2014-09-10]
CHR HKLM-x32\...\Chrome\Extension: [jmfkcklnlgedgbglfkkgedjfmejoahla] - C:\Program Files (x86)\AVG\AVG2012\Chrome\safesearch.crx [2012-04-05]
CHR HKLM-x32\...\Chrome\Extension: [kdfbddbdpnahdahmamlolacimfdbeckk] - C:\Users\ALFIR\AppData\Local\CRE\kdfbddbdpnahdahmamlolacimfdbeckk.crx [2013-03-11]
CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\Program Files (x86)\AVG\AVG2012\Chrome\donottrack.crx [2012-04-20]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 70e6ca8c; c:\Program Files (x86)\Optimizer Pro\OptProCrash.dll [2900424 2014-05-19] ()
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [365568 2011-06-08] (Advanced Micro Devices, Inc.) [File not signed]
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe [5106744 2012-04-30] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [193288 2012-02-14] (AVG Technologies CZ, s.r.o.)
R2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [36392 2014-03-14] (Just Develop It) <==== ATTENTION
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-05-19] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-05-19] (globalUpdate) [File not signed]
R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [705136 2014-04-11] (Cherished Technololgy LIMITED)
R2 McAfee SiteAdvisor Service; c:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [156904 2014-09-02] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
S2 NewPlayerUpdaterService; C:\Program Files (x86)\NewPlayer\NewPlayerUpdaterService.exe [11776 2014-05-05] () [File not signed]
R2 Re-markit; C:\Program Files (x86)\Re-markit-soft\Re-markitBG175.exe [160768 2014-07-27] () [File not signed] <==== ATTENTION
S2 savesenselive; C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920 2013-11-27] (SaveSense)
S3 savesenselivem; C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920 2013-11-27] (SaveSense)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2402080 2013-01-28] (TuneUp Software)
R2 Update CommonShare; C:\Program Files (x86)\CommonShare\updateCommonShare.exe [323360 2014-09-11] ()
R2 UpdaterSvcCommonShare; C:\Program Files (x86)\CommonShare\updater.exe [135968 2014-09-10] ()
R2 Util CommonShare; C:\Program Files (x86)\CommonShare\bin\utilCommonShare.exe [323360 2014-09-11] ()
R2 vosr; C:\Users\ALFIR\AppData\Roaming\VOPackage\VOsrv.exe [51712 2014-05-19] () [File not signed] <==== ATTENTION
R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [549008 2014-05-12] (Cherished Technololgy LIMITED)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [124496 2011-12-23] (AVG Technologies CZ, s.r.o. )
R3 AVGIDSFilter; C:\Windows\System32\DRIVERS\avgidsfiltera.sys [29776 2011-12-23] (AVG Technologies CZ, s.r.o. )
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [28480 2012-04-19] (AVG Technologies CZ, s.r.o. )
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [289872 2012-02-22] (AVG Technologies CZ, s.r.o.)
R1 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [47696 2011-12-23] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [36944 2012-01-31] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [383808 2012-03-19] (AVG Technologies CZ, s.r.o.)
R3 AVMCOWAN; C:\Windows\System32\DRIVERS\AVMCOWAN.sys [79872 2009-06-10] (AVM GmbH)
S3 CVPNDRVA; C:\windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] ()
S3 FUS2BASE; C:\Windows\System32\DRIVERS\fus2base.sys [696832 2009-06-10] (AVM Berlin)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-11-16] (TuneUp Software)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [228736 2010-12-13] (Vimicro Corporation)
R3 vmuvcflt; C:\Windows\System32\Drivers\vmuvcflt.sys [8320 2010-08-16] (Vimicro Corporation)
R1 {e4a6645a-3f85-4e1f-aa41-8367978844db}Gw64; C:\Windows\System32\drivers\{e4a6645a-3f85-4e1f-aa41-8367978844db}Gw64.sys [61120 2014-09-09] (StdLib)
U3 BcmSqlStartupSvc; No ImagePath
U2 CLKMSVC10_3A60B698; No ImagePath
U2 CLKMSVC10_C3B3B687; No ImagePath
U2 DriverService; No ImagePath
U2 IAStorDataMgrSvc; No ImagePath
U2 iATAgentService; No ImagePath
U2 idealife Update Service; No ImagePath
U3 IGRS; No ImagePath
U2 IviRegMgr; No ImagePath
U2 nvUpdatusService; No ImagePath
U2 Oasis2Service; No ImagePath
U2 PCCarerService; No ImagePath
U2 ReadyComm.DirectRouter; No ImagePath
U2 RichVideo; No ImagePath
U2 RtLedService; No ImagePath
U2 SeaPort; No ImagePath
U2 SoftwareService; No ImagePath
U3 SQLWriter; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-19 17:25 - 2014-10-19 17:25 - 00000000 ___DC () C:\FRST
2014-10-19 17:23 - 2014-10-19 17:25 - 00000000 ____D () C:\Users\ALFIR\Desktop\Trojanerboard
2014-10-19 15:58 - 2014-10-19 15:58 - 00001408 _____ () C:\Users\ALFIR\Desktop\Registry kostenlos entrümpeln!.lnk

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-19 17:24 - 2011-08-25 11:43 - 03416128 _____ () C:\windows\system32\TPAPSLOG.LOG
2014-10-19 17:24 - 2011-08-23 23:42 - 11963198 _____ () C:\windows\system32\perfh007.dat
2014-10-19 17:24 - 2011-08-23 23:42 - 03790858 _____ () C:\windows\system32\perfc007.dat
2014-10-19 17:24 - 2009-07-14 07:13 - 00006308 _____ () C:\windows\system32\PerfStringBackup.INI
2014-10-19 17:22 - 2013-04-22 23:43 - 00064914 _____ () C:\windows\setupact.log
2014-10-19 17:15 - 2013-11-27 23:10 - 00000930 _____ () C:\windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job
2014-10-19 17:10 - 2013-11-27 23:09 - 00000292 _____ () C:\windows\Tasks\SaveSense.job
2014-10-19 17:01 - 2014-05-19 17:44 - 00000000 ____D () C:\Users\ALFIR\AppData\Local\fst_de_19
2014-10-19 16:55 - 2014-04-25 17:54 - 00000292 _____ () C:\windows\Tasks\MySearchDial.job
2014-10-19 16:51 - 2011-08-25 11:05 - 01812178 _____ () C:\windows\WindowsUpdate.log
2014-10-19 16:41 - 2011-08-25 11:49 - 03107675 ____C () C:\FaceProv.log
2014-10-19 16:41 - 2011-08-25 11:43 - 00409856 _____ () C:\windows\system32\TPHDLOG0.LOG
2014-10-19 16:40 - 2013-06-05 18:23 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-10-19 16:38 - 2011-10-25 19:22 - 00001108 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-19 16:08 - 2014-09-10 17:28 - 00003090 _____ () C:\windows\System32\Tasks\RegClean Pro
2014-10-19 16:06 - 2009-07-14 06:45 - 00021072 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-19 16:06 - 2009-07-14 06:45 - 00021072 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-19 16:04 - 2014-09-10 17:30 - 00003076 _____ () C:\windows\System32\Tasks\Advanced-System Protector_startup
2014-10-19 16:03 - 2014-04-25 17:59 - 00003248 _____ () C:\windows\System32\Tasks\PC Speed Maximizer Schedule
2014-10-19 15:59 - 2014-09-11 19:10 - 00003106 _____ () C:\windows\System32\Tasks\Activeris AntiMalware_startup
2014-10-19 15:59 - 2014-07-27 22:47 - 00000406 _____ () C:\windows\Tasks\Re-markit Update.job
2014-10-19 15:59 - 2013-11-27 23:00 - 00000258 _____ () C:\windows\Tasks\SpeedUpMyPC.job
2014-10-19 15:56 - 2014-07-27 22:47 - 00000386 _____ () C:\windows\Tasks\Re-markit_wd.job
2014-10-19 15:56 - 2014-05-19 17:48 - 00001522 _____ () C:\windows\Tasks\d73553dc-f069-47b3-8808-35e7c4b13dc7-5.job
2014-10-19 15:56 - 2014-05-19 17:48 - 00001504 _____ () C:\windows\Tasks\b63a3699-d7c6-4910-9152-63b9d486f4a5-5.job
2014-10-19 15:56 - 2014-05-19 17:48 - 00001440 _____ () C:\windows\Tasks\d73553dc-f069-47b3-8808-35e7c4b13dc7-1.job
2014-10-19 15:56 - 2014-05-19 17:48 - 00001420 _____ () C:\windows\Tasks\d73553dc-f069-47b3-8808-35e7c4b13dc7-2.job
2014-10-19 15:56 - 2014-05-19 17:47 - 00003796 _____ () C:\windows\Tasks\d73553dc-f069-47b3-8808-35e7c4b13dc7-3.job
2014-10-19 15:56 - 2014-05-19 17:47 - 00002204 _____ () C:\windows\Tasks\d73553dc-f069-47b3-8808-35e7c4b13dc7-4.job
2014-10-19 15:56 - 2014-05-19 17:47 - 00001382 _____ () C:\windows\Tasks\b63a3699-d7c6-4910-9152-63b9d486f4a5-2.job
2014-10-19 15:56 - 2014-05-19 17:46 - 00001398 _____ () C:\windows\Tasks\b63a3699-d7c6-4910-9152-63b9d486f4a5-1.job
2014-10-19 15:56 - 2014-05-19 17:45 - 00003454 _____ () C:\windows\Tasks\b63a3699-d7c6-4910-9152-63b9d486f4a5-3.job
2014-10-19 15:56 - 2014-05-19 17:45 - 00002394 _____ () C:\windows\Tasks\b63a3699-d7c6-4910-9152-63b9d486f4a5-4.job
2014-10-19 15:56 - 2014-05-19 17:45 - 00000910 _____ () C:\windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-10-19 15:56 - 2013-11-27 23:10 - 00000926 _____ () C:\windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job
2014-10-19 15:56 - 2013-11-27 23:00 - 00000336 _____ () C:\windows\Tasks\spmonitor.job
2014-10-19 15:56 - 2011-10-25 19:22 - 00001104 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-19 15:56 - 2011-08-25 11:51 - 00658210 _____ () C:\windows\system32\fastboot.set
2014-10-19 15:56 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT

Files to move or delete:
====================
c:\Program Files (x86)\Optimizer Pro\OptProCrash.dll
C:\ProgramData\lsass.exe
C:\ProgramData\l_0_00_re.pad


Some content of TEMP:
====================
C:\Users\ALFIR\AppData\Local\Temp\dlLogic.exe
C:\Users\ALFIR\AppData\Local\Temp\dltr.exe
C:\Users\ALFIR\AppData\Local\Temp\er_00_0_l.exe
C:\Users\ALFIR\AppData\Local\Temp\GCVerifier.dll
C:\Users\ALFIR\AppData\Local\Temp\nsa3BA2.exe
C:\Users\ALFIR\AppData\Local\Temp\nsl4C08.exe
C:\Users\ALFIR\AppData\Local\Temp\nsq3408.exe
C:\Users\ALFIR\AppData\Local\Temp\nsw6315.exe
C:\Users\ALFIR\AppData\Local\Temp\Sqlite3.dll
C:\Users\ALFIR\AppData\Local\Temp\v2487024567.471.exe
C:\Users\ALFIR\AppData\Local\Temp\v2487024723.32.exe
C:\Users\ALFIR\AppData\Local\Temp\v2487025940.795.exe
C:\Users\ALFIR\AppData\Local\Temp\v2487026766.689.exe
C:\Users\ALFIR\AppData\Local\Temp\v2487027266.52.exe
C:\Users\ALFIR\AppData\Local\Temp\v2487027500.34.exe
C:\Users\ALFIR\AppData\Local\Temp\v2487031883.673.exe
C:\Users\ALFIR\AppData\Local\Temp\verifier.exe
C:\Users\ALFIR\AppData\Local\Temp\_Re-markitV37.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-19 00:00

==================== End Of Log ============================

--- --- ---

Addition:
FRST Additions Logfile:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-10-2014 01
Ran by ALFIR at 2014-10-19 17:27:19
Running from C:\Users\ALFIR\Desktop\Trojanerboard
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: AVG Anti-Virus Free Edition 2012 (Enabled - Out of date) {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
AS: AVG Anti-Virus Free Edition 2012 (Enabled - Out of date) {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
AC3Filter 1.63b (HKLM-x32\...\AC3Filter_is1) (Version: 1.63b - Alexander Vigovsky)
Active Protection System (HKLM-x32\...\{F493761C-E465-4B9E-9FC1-A312F161DE0A}) (Version: 1.70.11 - Lenovo)
Activeris AntiMalware (HKLM-x32\...\94EAE98D-444B-4817-858C-13DB943DF4F1_Activeris_A~741EE3A2_is1) (Version: 1.0.0.1 - Activeris) <==== ATTENTION
ActiveState Komodo Edit 7.0.2 (HKLM-x32\...\{C9BEFDFB-A2DD-4D88-881C-3B303CCE384E}) (Version: 7.0.2 - ActiveState Software Inc.)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader X (10.1.7) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.7 - Adobe Systems Incorporated)
Advanced-System Protector (HKLM-x32\...\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~4A5BE654_is1) (Version: 2.1.1000.13727 - Systweak Software) <==== ATTENTION
Advertising Center (x32 Version: 0.0.0.2 - Nero AG) Hidden
AMD APP SDK Runtime (Version: 2.4.650.9 - Advanced Micro Devices Inc.) Hidden
AMD Fuel (Version: 2011.0607.2212.38019 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.60607.2201 - ATI Technologies Inc.) Hidden
AMD VISION Engine Control Center (x32 Version: 2011.0607.2212.38019 - Ihr Firmenname) Hidden
Apple Application Support (HKLM-x32\...\{45C56AA7-ED1B-4800-A97F-EDDF3F3520B1}) (Version: 2.3.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2F72F540-1F60-4266-9506-952B21D6640D}) (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ATI AVIVO64 Codecs (Version: 11.6.0.10607 - ATI Technologies Inc.) Hidden
ATI Catalyst Install Manager (HKLM\...\{D119A8C4-21EE-9FE3-F63F-2A18FFA66B02}) (Version: 3.0.829.0 - ATI Technologies, Inc.)
AVG 2012 (HKLM\...\AVG) (Version: 2012.0.2180 - AVG Technologies)
AVG 2012 (Version: 12.0.2180 - AVG Technologies) Hidden
AVG 2012 (Version: 12.0.2437 - AVG Technologies) Hidden
Benutzerhandbuch (x32 Version: 1.0.0.6 - Lenovo) Hidden
BlockOut 2.4 (HKLM-x32\...\BlockOut II_is1) (Version:  - )
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CapsLK OSD (HKLM-x32\...\{BA1E422A-80A8-4AA0-B67B-CAA3D04C5162}) (Version: 1.01 - Wistron Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0607.2212.38019 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2011.0607.2212.38019 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2011.0607.2212.38019 - ATI) Hidden
Catalyst Control Center Profiles Mobile (x32 Version: 2011.0607.2212.38019 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Czech (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Danish (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Dutch (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help English (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Finnish (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help French (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help German (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Greek (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Italian (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Japanese (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Korean (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Polish (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Russian (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Spanish (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Swedish (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Thai (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Turkish (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
ccc-utility64 (Version: 2011.0607.2212.38019 - ATI) Hidden
ChampionDeals (HKLM-x32\...\{37476589-E48E-439E-A706-56189E2ED4C4}_is1) (Version:  - ChampionDeals) <==== ATTENTION
Cisco Systems VPN Client 5.0.07.0290 (HKLM\...\{467D5E81-8349-4892-9E81-C3674ED8E451}) (Version: 5.0.7 - Cisco Systems, Inc.)
CommonShare (HKLM\...\CommonShare) (Version: 2014.09.10.132652 - CommonShare)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.48.0.0 - Conexant)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{650DE870-ECA3-4E63-8D77-778512BE5D4C}) (Version:  - Microsoft)
DMUninstaller (HKLM-x32\...\DMUninstaller) (Version:  - ) <==== ATTENTION
DolbyFiles (x32 Version: 0.1 - Nero AG) Hidden
DVDVideoSoftTB Toolbar (HKLM-x32\...\DVDVideoSoftTB Toolbar) (Version: 6.8.5.1 - DVDVideoSoftTB)
Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 6.0.2.0 - Lenovo)
Energy Management (x32 Version: 6.0.2.0 - Lenovo) Hidden
entrusted Toolbar (HKLM-x32\...\entrusted Toolbar) (Version: 6.11.2.6 - entrusted) <==== ATTENTION
FlexIobleShhOpper (HKLM-x32\...\{A30F3754-C0DC-8242-F3A9-52B360AE9798}) (Version:  - FlexibLeShopper) <==== ATTENTION
FLV Runner Toolbar (HKLM-x32\...\FLV_Runner Toolbar) (Version: 6.8.9.0 - FLV Runner) <==== ATTENTION
Free YouTube to MP3 Converter version 3.12.17.1127 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.17.1127 - DVDVideoSoft Ltd.)
fst_de_19 (HKLM-x32\...\fst_de_19_is1) (Version:  - FreeSoftToday) <==== ATTENTION
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.0 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
HQ-V-Pro-v1.9 (HKLM-x32\...\HQ-V-Pro-v1.9) (Version: 1.34.5.12 - HQ-Video) <==== ATTENTION
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
iTunes (HKLM\...\{0225AD21-F3E2-4916-BFF3-65D3F9052582}) (Version: 11.0.2.26 - Apple Inc.)
Java Auto Updater (x32 Version: 2.0.6.1 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 30 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216030FF}) (Version: 6.0.300 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Lenovo EasyCamera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332}) (Version: 1.10.1213.1 - Vimicro)
Lenovo EE Boot Optimizer (HKLM\...\Lenovo EE Boot Optimizer) (Version: 0.0.1.7 - Lenovo)
Lenovo Games Console (HKLM-x32\...\Lenovo Games Console) (Version: 1.2.6.436 - Oberon Media Inc.)
Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 7.0.1628 - CyberLink Corp.)
Lenovo OneKey Recovery (Version: 7.0.1628 - CyberLink Corp.) Hidden
Lenovo YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.1.3623 - CyberLink Corp.)
Lenovo YouCam (x32 Version: 3.1.3623 - CyberLink Corp.) Hidden
Lenovo_Wireless_Driver (HKLM-x32\...\{28ABE740-47F3-441B-9437-852F6A64EFF8}) (Version: 3.1.14.0 - Lenovo)
LuckyCoupon (HKLM-x32\...\{BA5D43C9-D633-D0EC-CFEA-2ABA974B333D}) (Version:  - LucckyCoupuon) <==== ATTENTION
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
McAfee SiteAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 3.7.139 - McAfee, Inc.)
Media Go (HKLM-x32\...\{167A1F6A-9BF2-4B24-83DB-C6D659F680EA}) (Version: 2.0.317 - Sony)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - KB2467175 (HKLM-x32\...\{a0fe116e-9a8a-466f-aee0-625cb7c207e3}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 32.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0 (x86 de)) (Version: 32.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MPlayerplus_01 (HKLM-x32\...\MPlayerplus_01) (Version: 1.34.5.12 - Freeven) <==== ATTENTION
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyPC Backup  (HKLM\...\MyPC Backup) (Version:  - JDi Backup Ltd) <==== ATTENTION
Mysearchdial (HKLM-x32\...\mysearchdial) (Version:  - Mysearchdial) <==== ATTENTION
Nero 9 Essentials (HKLM-x32\...\{ac00b897-1547-49da-8211-0c6c18b0de4c}) (Version:  - Nero AG)
Nero BurnRights (x32 Version: 3.4.13.100 - Nero AG) Hidden
Nero BurnRights Help (x32 Version: 3.4.4.100 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 9.0.0.1 - Nero AG) Hidden
Nero CoverDesigner (x32 Version: 4.4.15.100 - Nero AG) Hidden
Nero CoverDesigner Help (x32 Version: 4.4.9.100 - Nero AG) Hidden
Nero Disc Copy Gadget (x32 Version: 2.4.34.0 - Nero AG) Hidden
Nero Disc Copy Gadget Help (x32 Version: 2.4.34.0 - Nero AG) Hidden
Nero DiscSpeed (x32 Version: 5.4.13.100 - Nero AG) Hidden
Nero DiscSpeed Help (x32 Version: 5.4.4.100 - Nero AG) Hidden
Nero DriveSpeed (x32 Version: 4.4.12.100 - Nero AG) Hidden
Nero DriveSpeed Help (x32 Version: 4.4.4.100 - Nero AG) Hidden
Nero Express Help (x32 Version: 9.4.27.100 - Nero AG) Hidden
Nero InfoTool (x32 Version: 6.4.12.100 - Nero AG) Hidden
Nero InfoTool Help (x32 Version: 6.4.4.100 - Nero AG) Hidden
Nero Installer (x32 Version: 4.4.9.0 - Nero AG) Hidden
Nero Online Upgrade (x32 Version: 1.3.0.0 - Nero AG) Hidden
Nero PhotoSnap (x32 Version: 2.4.28.0 - Nero AG) Hidden
Nero PhotoSnap Help (x32 Version: 2.4.28.0 - Nero AG) Hidden
Nero Recode (x32 Version: 4.4.38.1 - Nero AG) Hidden
Nero Recode Help (x32 Version: 4.4.38.1 - Nero AG) Hidden
Nero ShowTime (x32 Version: 5.4.0.100 - Nero AG) Hidden
Nero ShowTime (x32 Version: 5.4.24.100 - Nero AG) Hidden
Nero StartSmart (x32 Version: 9.4.19.100 - Nero AG) Hidden
Nero StartSmart Help (x32 Version: 9.4.19.100 - Nero AG) Hidden
Nero StartSmart OEM (x32 Version: 9.4.10.100 - Nero AG) Hidden
Nero Vision (x32 Version: 6.4.16.100 - Nero AG) Hidden
Nero Vision Help (x32 Version: 6.4.15.100 - Nero AG) Hidden
NeroExpress (x32 Version: 9.4.27.100 - Nero AG) Hidden
neroxml (x32 Version: 1.0.0 - Nero AG) Hidden
NewPlayer (HKLM-x32\...\NewPlayer) (Version: v2.1.1.9 - ) <==== ATTENTION
Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version:  - ) <==== ATTENTION
PC Speed Maximizer v3.2 (HKLM-x32\...\PC Speed Maximizer_is1) (Version: 3.2 - SoftCity)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PlayStation(R)Network Downloader (HKLM-x32\...\{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}) (Version: 2.07.00849 - Sony Computer Entertainment Inc.)
PlayStation(R)Store (HKLM-x32\...\{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}) (Version: 4.5.16.13625 - Sony Computer Entertainment Inc.)
PowerXpressHybrid (x32 Version: 1.00.0000 - ATI) Hidden
PriNcieaCouPon (HKLM-x32\...\{D86C82B0-1F02-816A-5F3D-6466F6A67566}) (Version:  - PrineCieCoaupon) <==== ATTENTION
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.31.1025.2010 - Realtek)
Realtek USB 2.0 Reader Driver (HKLM-x32\...\{62BBB2F0-E220-4821-A564-730807D2C34D}) (Version: 6.1.7600.10008 - Realtek Semiconductor Corp.)
RegClean-Pro (HKLM-x32\...\RegClean-Pro_is1) (Version: 6.21 - Systweak Inc) <==== ATTENTION
Re-markit (HKLM-x32\...\DBD5527E-9DDF-2BF0-9B71-93D32BDD7FDD) (Version:  - Re-markit-software) <==== ATTENTION
SalesMaaggnEt (HKLM-x32\...\{3119AFD3-545C-0955-573A-494F62E61990}) (Version:  - SalessMaignet)
SaveSense (HKCU\...\SaveSense) (Version:  - SaveSense) <==== ATTENTION
SaveSense (remove only) (HKLM-x32\...\SaveSense) (Version: 5.3.0.6 - SaveSense) <==== ATTENTION
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.16.10.61 - Client Connect LTD) <==== ATTENTION
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.7.8773 - Skype Technologies S.A.)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Snap.Do (HKLM-x32\...\{DB39E18E-8B2A-4305-B28A-BE635CF13453}) (Version: 1.6.1.634 - ReSoft Ltd.) <==== ATTENTION
Softonic toolbar  on IE and Chrome (HKLM-x32\...\Softonic) (Version: 1.8.21.14 - Softonic) <==== ATTENTION
SpeedUpMyPC (HKLM-x32\...\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1) (Version: 5.3.4.4 - Uniblue Systems Ltd) <==== ATTENTION
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.1.20.0 - Synaptics Incorporated)
TuneUp Utilities 2007 (HKLM-x32\...\{C8BB4912-12D9-42AE-B571-E580D8CD1B5B}) (Version: 6.0.2200 - TuneUp Software)
TuneUp Utilities 2013 (HKLM-x32\...\TuneUp Utilities 2013) (Version: 13.0.3020.2 - TuneUp Software)
TuneUp Utilities 2013 (x32 Version: 13.0.3020.2 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3020.2 - TuneUp Software) Hidden
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Excel 2010 (KB2889836) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9179FC17-97A8-4D98-9E09-05720AF5D44E}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2687502) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{7DE7DF97-82FE-4B3A-AB8D-1621F9CC464A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{EAD7BEF9-B28C-425F-B2C5-538CB27EF013}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{089DBFD7-8211-43B2-AAAE-5BDD8C23E3A8}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version:  - Microsoft)
UserGuide (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.6 - Lenovo)
VeriFace (HKLM-x32\...\VeriFace) (Version: 4.0.0.1224 - Lenovo)
Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)
VO Package (HKLM-x32\...\VOPackage) (Version: 1.0.0.0 - ) <==== ATTENTION
webssearches uninstaller (HKLM-x32\...\webssearches uninstaller) (Version:  - webssearches) <==== ATTENTION
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows-Treiberpaket - Lenovo (ACPIVPC) System  (12/02/2010 6.1.0.1) (HKLM\...\EA12B1FB53CE4E387C31A85236C41EF559B5E392) (Version: 12/02/2010 6.1.0.1 - Lenovo)
WinZip 17.0 (HKLM-x32\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240D6}) (Version: 17.0.10283 - WinZip Computing, S.L. )
WPM18.8.0.304 (HKLM-x32\...\WPM) (Version: 18.8.0.304 - Cherished Technololgy LIMITED) <==== ATTENTION

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

22-06-2014 19:09:24 Windows-Sicherung
17-07-2014 20:28:08 Windows-Sicherung
27-07-2014 20:54:50 Windows Update
27-07-2014 20:54:51 Windows-Sicherung
28-07-2014 18:06:19 Windows Update
18-08-2014 18:47:30 Windows-Sicherung
02-09-2014 10:13:26 Windows Update
02-09-2014 19:36:16 Windows-Sicherung
02-09-2014 19:43:21 Windows Update
03-09-2014 20:06:25 Windows Update
10-09-2014 15:35:44 Windows-Sicherung
10-09-2014 16:51:33 Windows Update
11-09-2014 16:44:43 Windows Modules Installer
11-09-2014 16:47:31 Windows Modules Installer
14-09-2014 18:16:22 Windows-Sicherung
19-10-2014 14:07:40 Windows-Sicherung

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {02EEEA3C-F197-4BF8-86E4-AC8B3E862DEF} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-10] (Adobe Systems Incorporated)
Task: {088DECCC-FB98-4C2C-A212-9601629ED8BA} - System32\Tasks\b63a3699-d7c6-4910-9152-63b9d486f4a5-5 => C:\Program Files (x86)\HQ-V-Pro-v1.9\b63a3699-d7c6-4910-9152-63b9d486f4a5-5.exe [2014-05-19] (HQ-Video)
Task: {08A70134-6D94-4303-9D75-49E715C8F31C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-25] (Google Inc.)
Task: {0D9B16CB-6545-4E69-B253-2E59C84905D7} - System32\Tasks\1-Klick-Wartung => C:\Program Files (x86)\TuneUp Utilities 2007\SystemOptimizer.exe [2007-04-26] (TuneUp Software GmbH)
Task: {15A19162-D6E8-493F-A76F-C7E03D486FBB} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe [2013-01-28] (TuneUp Software)
Task: {1A5986DD-A76A-4B5D-A215-22CBF95A833C} - System32\Tasks\d73553dc-f069-47b3-8808-35e7c4b13dc7-3 => C:\Program Files (x86)\MPlayerplus_01\d73553dc-f069-47b3-8808-35e7c4b13dc7-3.exe [2014-05-19] (Freeven)
Task: {1EACAC85-536E-4F05-B99A-24E598790D0A} - System32\Tasks\MirageAgent => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2010-12-24] (CyberLink)
Task: {218CD5A2-EC26-4CF9-A0E2-D84F1D1EFCE9} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-05-19] (globalUpdate) <==== ATTENTION
Task: {24A8CD68-749B-49A2-858F-2F1FDF95093E} - System32\Tasks\b63a3699-d7c6-4910-9152-63b9d486f4a5-2 => C:\Program Files (x86)\HQ-V-Pro-v1.9\b63a3699-d7c6-4910-9152-63b9d486f4a5-2.exe [2014-05-19] (HQ-Video)
Task: {2B5AD5F5-9186-4A52-B543-B4298AF3AA55} - System32\Tasks\b63a3699-d7c6-4910-9152-63b9d486f4a5-4 => C:\Program Files (x86)\HQ-V-Pro-v1.9\b63a3699-d7c6-4910-9152-63b9d486f4a5-4.exe [2014-05-19] (HQ-Video)
Task: {2FFB940B-B77C-4A87-9922-4AA4FEBB4625} - System32\Tasks\d73553dc-f069-47b3-8808-35e7c4b13dc7-2 => C:\Program Files (x86)\MPlayerplus_01\d73553dc-f069-47b3-8808-35e7c4b13dc7-2.exe [2014-05-19] (Freeven)
Task: {3AAA4E5E-F24E-457E-B018-CE15457DD669} - System32\Tasks\b63a3699-d7c6-4910-9152-63b9d486f4a5-1 => C:\Program Files (x86)\HQ-V-Pro-v1.9\HQ-V-Pro-v1.9-codedownloader.exe [2014-05-19] (HQ-Video)
Task: {3D973091-8BCF-408B-AB3C-0129DDFA5EC1} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {3FF889E6-A3FD-4CB3-864B-B6E54A1F5A85} - System32\Tasks\PC Speed Maximizer Schedule => C:\Program Files (x86)\PC Speed Maximizer\SPMLauncher.exe [2014-04-22] (Smart PC Solutions)
Task: {436BB5AE-F893-4E63-99C0-FD0EAD210395} - System32\Tasks\SaveSense => C:\Users\ALFIR\AppData\Roaming\SaveSense\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: {47E1108C-5A7C-4D33-96B9-4EF67A1999D5} - System32\Tasks\b63a3699-d7c6-4910-9152-63b9d486f4a5-3 => C:\Program Files (x86)\HQ-V-Pro-v1.9\b63a3699-d7c6-4910-9152-63b9d486f4a5-3.exe [2014-05-19] (HQ-Video)
Task: {5235F45F-E48A-4FAB-AF1E-1271DDAD4ED0} - System32\Tasks\Re-markit_wd => C:\Program Files (x86)\Re-markit-soft\Re-markitw.exe [2014-07-27] () <==== ATTENTION
Task: {55DC90BB-F2CF-48AD-9733-9BC9A887669A} - System32\Tasks\spmonitor => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\spmonitor.exe [2012-11-22] (Uniblue Systems Ltd)
Task: {64379FBA-70C4-47FF-BA88-3EAC061DBC67} - System32\Tasks\SpeedUpMyPC => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\sump.exe [2012-11-22] (Uniblue Systems Ltd) <==== ATTENTION
Task: {82CF1EB1-7A62-482D-9FF1-5CAD76E064C6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-25] (Google Inc.)
Task: {8817AE6A-1E71-48F1-B685-B03FCEDCD8A8} - System32\Tasks\d73553dc-f069-47b3-8808-35e7c4b13dc7-4 => C:\Program Files (x86)\MPlayerplus_01\d73553dc-f069-47b3-8808-35e7c4b13dc7-4.exe [2014-05-19] (Freeven)
Task: {8B3E7BC5-6898-45B2-8B75-8C677BE3C2A2} - System32\Tasks\SaveSenseLiveUpdateTaskMachineCore => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [2013-11-27] (SaveSense) <==== ATTENTION
Task: {A046AC15-3DB9-4261-B094-655114AB9BE4} - System32\Tasks\Advanced-System Protector_startup => C:\Program Files (x86)\ASP\AdvancedSystemProtector.exe [2014-08-25] (Systweak) <==== ATTENTION
Task: {A5D75B26-ABA7-4726-A72F-AA43ACAB5F9A} - System32\Tasks\MySearchDial => C:\Users\ALFIR\AppData\Roaming\mysearchdial\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: {ADE3F51C-8843-42AA-96F8-9963F45095ED} - System32\Tasks\d73553dc-f069-47b3-8808-35e7c4b13dc7-1 => C:\Program Files (x86)\MPlayerplus_01\MPlayerplus_01-codedownloader.exe [2014-05-19] (Freeven)
Task: {B0B05244-675C-46E1-8CB4-A6A4317FC346} - System32\Tasks\RegClean Pro => C:\Program Files (x86)\RCP\RegCleanPro.exe [2014-08-05] () <==== ATTENTION
Task: {BEAFF61F-4AAF-405E-917C-C43C812FC6A5} - System32\Tasks\Re-markit Update => C:\Program Files (x86)\Re-markit-soft\Re-markitj73.exe [2014-07-27] () <==== ATTENTION
Task: {CE0150FF-0DE8-4AC7-AC69-839194DFB698} - System32\Tasks\d73553dc-f069-47b3-8808-35e7c4b13dc7-5 => C:\Program Files (x86)\MPlayerplus_01\d73553dc-f069-47b3-8808-35e7c4b13dc7-5.exe [2014-05-19] (Freeven)
Task: {DA10E2D8-BB9A-4374-A736-2CF4D9F6DA2E} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files (x86)\RCP\RegCleanPro.exe [2014-08-05] () <==== ATTENTION
Task: {DD4763B0-38AD-40B7-B09B-49754BD7EDC9} - System32\Tasks\SaveSenseLiveUpdateTaskMachineUA => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [2013-11-27] (SaveSense) <==== ATTENTION
Task: {E9250826-DACB-416B-8778-DF240CD0068A} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-05-19] (globalUpdate) <==== ATTENTION
Task: {EC8F2F87-4EC2-4F3C-81DF-829678F1E698} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {F173DBD9-3747-4078-B8E5-2E9E8F31EE0D} - System32\Tasks\RegClean Pro_DEFAULT => C:\Program Files (x86)\RCP\RegCleanPro.exe [2014-08-05] () <==== ATTENTION
Task: {FAB29A35-2C92-4F42-88AF-8F2EC1A74AA6} - System32\Tasks\Activeris AntiMalware_startup => C:\Program Files (x86)\Activeris AntiMalware\ActiverisAntiMalware.exe [2014-01-23] (Activeris) <==== ATTENTION
Task: C:\windows\Tasks\1-Klick-Wartung.job => C:\Program Files (x86)\TuneUp Utilities 2007\SystemOptimizer.exe
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\b63a3699-d7c6-4910-9152-63b9d486f4a5-1.job => C:\Program Files (x86)\HQ-V-Pro-v1.9\HQ-V-Pro-v1.9-codedownloader.exe
Task: C:\windows\Tasks\b63a3699-d7c6-4910-9152-63b9d486f4a5-2.job => C:\Program Files (x86)\HQ-V-Pro-v1.9\b63a3699-d7c6-4910-9152-63b9d486f4a5-2.exe
Task: C:\windows\Tasks\b63a3699-d7c6-4910-9152-63b9d486f4a5-3.job => C:\Program Files (x86)\HQ-V-Pro-v1.9\b63a3699-d7c6-4910-9152-63b9d486f4a5-3.exe
Task: C:\windows\Tasks\b63a3699-d7c6-4910-9152-63b9d486f4a5-4.job => C:\Program Files (x86)\HQ-V-Pro-v1.9\b63a3699-d7c6-4910-9152-63b9d486f4a5-4.exe
Task: C:\windows\Tasks\b63a3699-d7c6-4910-9152-63b9d486f4a5-5.job => C:\Program Files (x86)\HQ-V-Pro-v1.9\b63a3699-d7c6-4910-9152-63b9d486f4a5-5.exe
Task: C:\windows\Tasks\d73553dc-f069-47b3-8808-35e7c4b13dc7-1.job => C:\Program Files (x86)\MPlayerplus_01\MPlayerplus_01-codedownloader.exe
Task: C:\windows\Tasks\d73553dc-f069-47b3-8808-35e7c4b13dc7-2.job => C:\Program Files (x86)\MPlayerplus_01\d73553dc-f069-47b3-8808-35e7c4b13dc7-2.exe
Task: C:\windows\Tasks\d73553dc-f069-47b3-8808-35e7c4b13dc7-3.job => C:\Program Files (x86)\MPlayerplus_01\d73553dc-f069-47b3-8808-35e7c4b13dc7-3.exe
Task: C:\windows\Tasks\d73553dc-f069-47b3-8808-35e7c4b13dc7-4.job => C:\Program Files (x86)\MPlayerplus_01\d73553dc-f069-47b3-8808-35e7c4b13dc7-4.exe
Task: C:\windows\Tasks\d73553dc-f069-47b3-8808-35e7c4b13dc7-5.job => C:\Program Files (x86)\MPlayerplus_01\d73553dc-f069-47b3-8808-35e7c4b13dc7-5.exe
Task: C:\windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\MySearchDial.job => C:\Users\ALFIR\AppData\Roaming\MYSEAR~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\windows\Tasks\Re-markit Update.job => C:\Program Files (x86)\Re-markit-soft\Re-markitj73.exe <==== ATTENTION
Task: C:\windows\Tasks\Re-markit_wd.job => C:\Program Files (x86)\Re-markit-soft\Re-markitw.exe <==== ATTENTION
Task: C:\windows\Tasks\RegClean Pro_DEFAULT.job => C:\Program Files (x86)\RCP\RegCleanPro.exe <==== ATTENTION
Task: C:\windows\Tasks\RegClean Pro_UPDATES.job => C:\Program Files (x86)\RCP\RegCleanPro.exe <==== ATTENTION
Task: C:\windows\Tasks\SaveSense.job => C:\Users\ALFIR\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATTENTION
Task: C:\windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATTENTION
Task: C:\windows\Tasks\SidebarExecute.job => C:\Program Files\Windows Sidebar\sidebar.exe
Task: C:\windows\Tasks\SpeedUpMyPC.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\sump.exe <==== ATTENTION
Task: C:\windows\Tasks\spmonitor.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\spmonitor.exe

==================== Loaded Modules (whitelisted) =============

2014-05-19 17:45 - 2014-05-19 17:45 - 02720144 _____ () C:\Program Files (x86)\Optimizer Pro\OptProCrash_x64.dll
2011-06-08 00:09 - 2011-06-08 00:09 - 00073728 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-03-14 16:00 - 2014-03-14 16:00 - 01102336 _____ () C:\Program Files (x86)\MyPC Backup\x64\System.Data.SQLite.dll
2014-03-14 16:06 - 2014-03-14 16:06 - 00012288 _____ () C:\Program Files (x86)\MyPC Backup\GetText.dll
2011-08-25 11:49 - 2011-08-25 11:49 - 01508192 _____ () C:\windows\system32\IcnOvrly.dll
2014-07-27 22:47 - 2014-07-27 22:47 - 00097792 _____ () C:\Program Files (x86)\Re-markit-soft\Re-markitw.exe
2014-09-10 17:28 - 2014-08-05 19:14 - 08077672 _____ () C:\Program Files (x86)\RCP\RegCleanPro.exe
2014-07-27 22:47 - 2014-07-27 22:47 - 00160768 _____ () C:\Program Files (x86)\Re-markit-soft\Re-markitBG175.exe
2014-09-10 15:37 - 2014-09-11 17:35 - 00323360 _____ () C:\Program Files (x86)\CommonShare\updateCommonShare.exe
2014-09-10 15:37 - 2014-09-10 15:37 - 00135968 _____ () C:\Program Files (x86)\CommonShare\updater.exe
2014-09-10 17:32 - 2014-09-11 17:26 - 00323360 _____ () C:\Program Files (x86)\CommonShare\bin\utilCommonShare.exe
2014-05-19 07:35 - 2014-05-19 07:35 - 00051712 _____ () C:\Users\ALFIR\AppData\Roaming\VOPackage\VOsrv.exe
2014-05-19 17:44 - 2014-05-19 09:55 - 03267568 _____ () C:\Users\ALFIR\AppData\Local\fst_de_19\upfst_de_19.exe
2014-05-19 17:44 - 2014-05-19 10:07 - 03984336 _____ () C:\Program Files (x86)\fst_de_19\fst_de_19.exe
2014-05-19 17:45 - 2014-05-19 17:45 - 02900424 _____ () c:\Program Files (x86)\Optimizer Pro\OptProCrash.dll
2013-01-28 13:08 - 2013-01-28 13:08 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-01-28 13:08 - 2013-01-28 13:08 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-05-19 17:45 - 2012-09-26 15:31 - 00886272 _____ () C:\Program Files (x86)\Activeris AntiMalware\System.Data.SQLite.dll
2014-05-19 17:45 - 2014-01-23 19:04 - 01718264 _____ () C:\Program Files (x86)\Activeris AntiMalware\acrissys.dll
2014-07-27 22:47 - 2014-07-27 22:47 - 00171520 _____ () C:\Program Files (x86)\Re-markit-soft\Re-markitBG175.dll
2014-09-10 17:29 - 2012-07-25 12:03 - 00886272 _____ () C:\Program Files (x86)\ASP\System.Data.SQLite.dll
2014-09-10 17:29 - 2014-08-25 18:35 - 01730928 _____ () C:\Program Files (x86)\ASP\aspsys.dll
2014-04-25 17:54 - 2014-04-22 11:27 - 00520234 _____ () C:\Program Files (x86)\PC Speed Maximizer\sqlite3.dll
2012-06-27 01:35 - 2012-06-27 01:35 - 00226792 ____N () C:\Users\ALFIR\AppData\Local\Temp\er_00_0_l.exe
2013-12-12 04:43 - 2014-09-04 15:00 - 03715184 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-10-19 16:27 - 2014-10-19 16:27 - 00117248 _____ () C:\Users\ALFIR\AppData\Local\Temp\nsm622E.tmp\IpConfig.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: CVPND => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^vpngui.exe.lnk => C:\windows\pss\vpngui.exe.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^ALFIR^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^ctfmon.lnk => C:\windows\pss\ctfmon.lnk.Startup
MSCONFIG\startupfolder: C:^Users^ALFIR^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk => C:\windows\pss\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk.Startup
MSCONFIG\startupreg: 331BigDog => C:\Program Files (x86)\USB Camera\VM331_STI.EXE
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: Browser Infrastructure Helper => C:\Users\ALFIR\AppData\Local\Smartbar\Application\SnapDo.exe startup
MSCONFIG\startupreg: Energy Management => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
MSCONFIG\startupreg: EnergyUtility => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe
MSCONFIG\startupreg: Google Update => "C:\Users\ALFIR\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: GoogleChromeAutoLaunch_CFB05A67CC714AB1E9A472539A900E13 => "C:\Users\ALFIR\AppData\Local\Google\Chrome\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Lenovo EE Boot Optimizer => C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SynTPEnh => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
MSCONFIG\startupreg: TpShocks => C:\Windows\System32\TpShocks.exe
MSCONFIG\startupreg: UpdatePRCShortCut => "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
MSCONFIG\startupreg: VeriFaceManager => C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
MSCONFIG\startupreg: YouCam Mirage => "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
MSCONFIG\startupreg: YouCam Tray => "C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe" /s
MSCONFIG\startupreg: {BA1E422A-80A8-4AA0-B67B-CAA3D04C5162} => "C:\Program Files\CapsLK OSD\64\CAPSOSD.EXE"

========================= Accounts: ==========================

Administrator (S-1-5-21-4139373105-4022997019-1243156706-500 - Administrator - Disabled)
ALFIR (S-1-5-21-4139373105-4022997019-1243156706-1001 - Administrator - Enabled) => C:\Users\ALFIR
Gast (S-1-5-21-4139373105-4022997019-1243156706-501 - Limited - Disabled)

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Cisco Systems VPN Adapter for 64-bit Windows
Description: Cisco Systems VPN Adapter for 64-bit Windows
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: CVirtA
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/19/2014 05:24:21 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (10/19/2014 05:24:21 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (10/19/2014 05:24:21 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (10/19/2014 04:43:28 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (10/19/2014 04:43:28 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (10/19/2014 04:43:28 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (10/19/2014 04:17:18 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: Die Sicherung war nicht erfolgreich. Fehler: "Auf diesem Laufwerk ist nicht genügend Speicherplatz zum Speichern der Sicherung verfügbar. Löschen Sie ältere Sicherungen und nicht benötigte Daten, um Speicherplatz freizugeben, oder ändern Sie die Sicherungseinstellungen. (0x81000005)"

Error: (10/19/2014 04:03:57 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.

Error: (10/19/2014 04:03:57 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.

Error: (10/19/2014 04:03:57 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.


System errors:
=============
Error: (10/19/2014 03:56:52 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (10/19/2014 03:56:52 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "AVGIDSAgent" wurde mit folgendem dienstspezifischem Fehler beendet: %%-536753637.

Error: (10/19/2014 03:56:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NewPlayer Updater Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (10/19/2014 03:56:39 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst NewPlayer Updater Service erreicht.

Error: (09/14/2014 08:30:01 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (09/14/2014 08:06:47 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (09/14/2014 08:06:47 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "AVGIDSAgent" wurde mit folgendem dienstspezifischem Fehler beendet: %%-536753637.

Error: (09/14/2014 04:56:17 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (09/14/2014 04:56:17 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "AVGIDSAgent" wurde mit folgendem dienstspezifischem Fehler beendet: %%-536753637.

Error: (09/14/2014 04:51:00 PM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1001) (User: NT-AUTORITÄT)
Description: Fehler beim Starten des Assistenten für das Sprachpaket-Setup. Führen Sie einen Neustart des Systems aus, und führen Sie den Assistenten erneut aus.


Microsoft Office Sessions:
=========================
Error: (10/19/2014 05:24:21 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (10/19/2014 05:24:21 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (10/19/2014 05:24:21 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (10/19/2014 04:43:28 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (10/19/2014 04:43:28 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (10/19/2014 04:43:28 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (10/19/2014 04:17:18 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: Auf diesem Laufwerk ist nicht genügend Speicherplatz zum Speichern der Sicherung verfügbar. Löschen Sie ältere Sicherungen und nicht benötigte Daten, um Speicherplatz freizugeben, oder ändern Sie die Sicherungseinstellungen. (0x81000005)

Error: (10/19/2014 04:03:57 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (10/19/2014 04:03:57 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000

Error: (10/19/2014 04:03:57 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000


==================== Memory info =========================== 

Processor: AMD E-350 Processor
Percentage of memory in use: 49%
Total physical RAM: 3688.67 MB
Available physical RAM: 1869.31 MB
Total Pagefile: 7375.52 MB
Available Pagefile: 4726.17 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:654.69 GB) (Free:551.78 GB) NTFS
Drive d: (LENOVO) (Fixed) (Total:29 GB) (Free:0.01 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 24CDCAB3)
Partition 1: (Active) - (Size=200 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=654.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=29 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=14.8 GB) - (Type=12)

==================== End Of Log ============================

--- --- ---

schrauber · 20.10.2014, 10:57

Versuchst Du nen Weltrekord aufzustellen? Wer sich die meiste Adware installiert?

Lade Dir bitte von hier

Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche im Uninstallerfeld nach den Programmen:

Activeris AntiMalware

Advanced-System Protector

ChampionDeals

DMUninstaller

entrusted Toolbar

FlexIobleShhOpper

FLV Runner Toolbar

fst_de_19

HQ-V-Pro-v1.9

LuckyCoupon

MPlayerplus_01

MyPC Backup

Mysearchdial

NewPlayer

Optimizer Pro v3.2

PriNcieaCouPon

RegClean-Pro

Re-markit

SaveSense

SaveSense

Search Protect

Snap.Do

Softonic toolbar on IE and Chrome (HKLM-x32\...\Softonic) (Version: 1.8.21.14 - Softonic) <==== ATTENTION

SpeedUpMyPC

VO Package

webssearches uninstaller

WPM18.8.0.304
Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

sommertag · 24.10.2014, 00:14

hey schrauber,
danke schonmal für Deine Hilfe bisher.
Habe die Programme, von denen, die Du aufgelistet hast, die ich gefunden habe, entfernt.
Ein paar der genannten Software konnte ich im Revo Uninstaller nicht finden.

Ich habe dann den Rechner neugestartet. Der PC Speed Maximizer fing dann wieder automatisch an, nach Schädlingen etc. zu suchen. Als ich ihn sofort geschlossen habe, hatte er bereits Probleme mit Regisrtry Einträgen beklagt.

Ich habe dann alles, was ich an Firewalls und Antivirensoftware gefunden habe, deativiert und Combofix gestartet. Damit der Rechner währenddessen nicht einschläft und die Routine ggf. abgebrochen wird, habe ich ein paar mal die Maus bewegt (Ich weiss, dass Du darauf hingewiesen hast, dass man die Maus nicht bewegen soll, aber als ich Combofix ueber Abends vorm Schlafengehen anstellte, war am nächsten morgen die Untersuchung nicht abgeschlossen bzw. abgebrochen/eingefroren).

Hier nun die Combofix.txt:

Combofix Logfile:

Code:

ATTFilter

ComboFix 14-10-21.01 - ALFIR 24.10.2014   0:35.2.2 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3689.2557 [GMT 2:00]
ausgeführt von:: c:\users\ALFIR\Desktop\Trojanerboard\ComboFix.exe
AV: AVG Anti-Virus Free Edition 2012 *Disabled/Outdated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2012 *Disabled/Outdated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Vorheriger Suchlauf -------
.
c:\program files (x86)\MyPC Backup\aff.conf
c:\program files (x86)\MyPC Backup\AlphaVSS.51.x86.dll
c:\program files (x86)\MyPC Backup\AlphaVSS.52.x64.dll
c:\program files (x86)\MyPC Backup\AlphaVSS.52.x86.dll
c:\program files (x86)\MyPC Backup\AlphaVSS.60.x64.dll
c:\program files (x86)\MyPC Backup\AlphaVSS.60.x86.dll
c:\program files (x86)\MyPC Backup\AlphaVSS.Common.dll
c:\program files (x86)\MyPC Backup\AWSSDK.dll
c:\program files (x86)\MyPC Backup\BackupStack.exe
c:\program files (x86)\MyPC Backup\Config\api.ts2
c:\program files (x86)\MyPC Backup\Configuration Updater.exe
c:\program files (x86)\MyPC Backup\Crypto32.dll
c:\program files (x86)\MyPC Backup\Crypto64.dll
c:\program files (x86)\MyPC Backup\Database\mpcb_backup_conf.db
c:\program files (x86)\MyPC Backup\Database\mpcb_backup_id.db
c:\program files (x86)\MyPC Backup\Database\mpcb_file_cache.db
c:\program files (x86)\MyPC Backup\Database\mpcb_queues.db
c:\program files (x86)\MyPC Backup\Database\mpcb_settings.db
c:\program files (x86)\MyPC Backup\Database\mpcb_sig_cache.db
c:\program files (x86)\MyPC Backup\Database\mpcb_version_queue.db
c:\program files (x86)\MyPC Backup\de_DE.mo
c:\program files (x86)\MyPC Backup\diffstack.dll
c:\program files (x86)\MyPC Backup\es_ES.mo
c:\program files (x86)\MyPC Backup\fr_FR.mo
c:\program files (x86)\MyPC Backup\GetText.dll
c:\program files (x86)\MyPC Backup\it_IT.mo
c:\program files (x86)\MyPC Backup\log\AUTH.log
c:\program files (x86)\MyPC Backup\log\BACKOFF.log
c:\program files (x86)\MyPC Backup\log\BACKUP.log
c:\program files (x86)\MyPC Backup\log\BACKUP_COMPLETE.log
c:\program files (x86)\MyPC Backup\log\CLIENT.log
c:\program files (x86)\MyPC Backup\log\EXTERNAL_DRIVE.log
c:\program files (x86)\MyPC Backup\log\GRID_RECOVERY.log
c:\program files (x86)\MyPC Backup\log\GRID_RECOVERY_INIT.log
c:\program files (x86)\MyPC Backup\log\LICENCE.log
c:\program files (x86)\MyPC Backup\log\NETWORK_SHARES.log
c:\program files (x86)\MyPC Backup\log\PERF_MON.log
c:\program files (x86)\MyPC Backup\log\REMOTING.log
c:\program files (x86)\MyPC Backup\log\REQUEST.log
c:\program files (x86)\MyPC Backup\log\SERVICE.log
c:\program files (x86)\MyPC Backup\log\SHELL.log
c:\program files (x86)\MyPC Backup\log\UPDATER.log
c:\program files (x86)\MyPC Backup\log\UTC_MIGRATION.log
c:\program files (x86)\MyPC Backup\log\WAIT_HANDLES.log
c:\program files (x86)\MyPC Backup\LogicNP.EZShellExtensions.dll
c:\program files (x86)\MyPC Backup\MPCBClient.dll
c:\program files (x86)\MyPC Backup\MPCBContextMenu.dll
c:\program files (x86)\MyPC Backup\MPCBIconOverlays.dll
c:\program files (x86)\MyPC Backup\MyPC Backup.exe
c:\program files (x86)\MyPC Backup\mypcbackup.ico
c:\program files (x86)\MyPC Backup\ObjectListView.dll
c:\program files (x86)\MyPC Backup\pt_PT.mo
c:\program files (x86)\MyPC Backup\RegisterExtensionDotNet20_x64.exe
c:\program files (x86)\MyPC Backup\RegisterExtensionDotNet20_x86.exe
c:\program files (x86)\MyPC Backup\Resources\keycache\_269ca798-6a38-4c42-a683-0b0c3fbf93d6_backupKeyCache.block
c:\program files (x86)\MyPC Backup\Resources\keycache\_269ca798-6a38-4c42-a683-0b0c3fbf93d6_backupKeyCache.tree
c:\program files (x86)\MyPC Backup\Resources\keycache\_28519b27-f8cc-403c-a835-d068af1ffb71_backupKeyCache.block
c:\program files (x86)\MyPC Backup\Resources\keycache\_28519b27-f8cc-403c-a835-d068af1ffb71_backupKeyCache.tree
c:\program files (x86)\MyPC Backup\Resources\keycache\_364212fb-4b70-4f63-96b5-e659cb280b2d_backupKeyCache.block
c:\program files (x86)\MyPC Backup\Resources\keycache\_364212fb-4b70-4f63-96b5-e659cb280b2d_backupKeyCache.tree
c:\program files (x86)\MyPC Backup\Resources\keycache\_44091a49-9f60-4f0f-ae17-361d98d3a3dd_backupKeyCache.block
c:\program files (x86)\MyPC Backup\Resources\keycache\_44091a49-9f60-4f0f-ae17-361d98d3a3dd_backupKeyCache.tree
c:\program files (x86)\MyPC Backup\Resources\keycache\_6a4accc6-e47e-4bd2-9d88-923f60743aa3_backupKeyCache.block
c:\program files (x86)\MyPC Backup\Resources\keycache\_6a4accc6-e47e-4bd2-9d88-923f60743aa3_backupKeyCache.tree
c:\program files (x86)\MyPC Backup\Resources\keycache\_86384b76-8b05-4995-9261-77bab5b6b2a5_backupKeyCache.block
c:\program files (x86)\MyPC Backup\Resources\keycache\_86384b76-8b05-4995-9261-77bab5b6b2a5_backupKeyCache.tree
c:\program files (x86)\MyPC Backup\Resources\keycache\_b04850f8-cd37-4b31-879b-6b76fc2973f6_backupKeyCache.block
c:\program files (x86)\MyPC Backup\Resources\keycache\_b04850f8-cd37-4b31-879b-6b76fc2973f6_backupKeyCache.tree
c:\program files (x86)\MyPC Backup\RestartExplorer.exe
c:\program files (x86)\MyPC Backup\Service Start.exe
c:\program files (x86)\MyPC Backup\Shared Stack.dll
c:\program files (x86)\MyPC Backup\Signup Wizard.exe
c:\program files (x86)\MyPC Backup\syncicon.ico
c:\program files (x86)\MyPC Backup\syncing.ico
c:\program files (x86)\MyPC Backup\tick.ico
c:\program files (x86)\MyPC Backup\uninst.exe
c:\program files (x86)\MyPC Backup\UnRegisterExtensions.exe
c:\program files (x86)\MyPC Backup\Updater.exe
c:\program files (x86)\MyPC Backup\x64\System.Data.SQLite.dll
c:\program files (x86)\MyPC Backup\x86\System.Data.SQLite.dll
c:\program files (x86)\SaveSense\icon.ico
c:\program files (x86)\SaveSense\SaveSense.crx
c:\program files (x86)\SaveSense\SaveSense.xpi
c:\program files (x86)\SaveSense\SaveSenseIE.dll
c:\program files (x86)\SaveSense\SaveSenseIE64.dll
c:\program files (x86)\SaveSense\SaveSenseUpdateVer.exe
c:\program files (x86)\SaveSense\uninst.exe
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdate.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_am.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_ar.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_bg.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_bn.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_ca.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_cs.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_da.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_de.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_el.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_en-GB.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_en.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_es-419.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_es.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_et.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_fa.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_fi.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_fil.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_fr.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_gu.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_hi.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_hr.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_hu.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_id.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_is.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_it.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_iw.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_ja.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_kn.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_ko.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_lt.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_lv.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_ml.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_mr.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_ms.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_nl.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_no.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_pl.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_pt-BR.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_pt-PT.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_ro.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_ru.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_sk.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_sl.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_sr.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_sv.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_sw.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_ta.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_te.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_th.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_tr.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_uk.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_ur.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_vi.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_zh-CN.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\goopdateres_zh-TW.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\psmachine.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\psuser.dll
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\SaveSenseLive.exe
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveBroker.exe
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveHandler.exe
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveHelper.msi
c:\program files (x86)\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveOnDemand.exe
c:\program files (x86)\SaveSenseLive\Update\SaveSenseLive.exe
c:\programdata\374311380\BITA45C.tmp
c:\programdata\l_0_00_re.pad
c:\programdata\SaveSenseLive\Update\Log\SaveSenseLive.log
c:\users\ALFIR\AppData\Local\Temp\__tmp_2b11360c
c:\users\ALFIR\AppData\Local\Temp\__tmp_321a17b9
c:\users\ALFIR\AppData\Local\Temp\er_00_0_l.exe
c:\users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\ciasawj@yiyuiiii-.com\bootstrap.js
c:\users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\ciasawj@yiyuiiii-.com\chrome.manifest
c:\users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\ciasawj@yiyuiiii-.com\content\bg.js
c:\users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\ciasawj@yiyuiiii-.com\content\ng8.js
c:\users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\ciasawj@yiyuiiii-.com\install.rdf
c:\users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\f1mua@eaifbo.com\bootstrap.js
c:\users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\f1mua@eaifbo.com\chrome.manifest
c:\users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\f1mua@eaifbo.com\content\bg.js
c:\users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\f1mua@eaifbo.com\install.rdf
c:\users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\gsaco@uavg-.net\bootstrap.js
c:\users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\gsaco@uavg-.net\chrome.manifest
c:\users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\gsaco@uavg-.net\content\bg.js
c:\users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\gsaco@uavg-.net\content\izuJ6.js
c:\users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\gsaco@uavg-.net\install.rdf
c:\users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\ud4_m@yjgd-yacui.edu\bootstrap.js
c:\users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\ud4_m@yjgd-yacui.edu\chrome.manifest
c:\users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\ud4_m@yjgd-yacui.edu\content\bg.js
c:\users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\ud4_m@yjgd-yacui.edu\install.rdf
c:\windows\s.bat
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_savesenselive
-------\Service_BackupStack
-------\Service_savesenselivem
-------\Service_BackupStack
-------\Service_savesenselivem
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-09-23 bis 2014-10-23  ))))))))))))))))))))))))))))))
.
.
2014-10-23 22:45 . 2014-10-23 22:45	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-10-22 21:09 . 2014-10-22 21:09	--------	d-----w-	c:\program files (x86)\SalesMaaggnEt
2014-10-22 20:39 . 2014-10-22 20:39	--------	d-----w-	c:\program files (x86)\PriNcieaCouPon
2014-10-22 20:34 . 2014-10-22 20:34	--------	d-----w-	c:\program files (x86)\LuckyCoupon
2014-10-22 20:30 . 2014-10-22 20:30	--------	d-----w-	c:\program files (x86)\predm
2014-10-22 20:26 . 2014-10-22 20:26	--------	d-----w-	c:\program files (x86)\FlexIobleShhOpper
2014-10-22 20:05 . 2014-10-22 20:05	--------	d-----w-	c:\program files (x86)\VS Revo Group
2014-10-19 15:25 . 2014-10-19 15:28	--------	dc----w-	C:\FRST
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-09-10 16:55 . 2011-10-25 20:27	101694776	----a-w-	c:\windows\system32\MRT.exe
2014-09-10 16:41 . 2012-06-07 15:44	701104	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2014-09-10 16:41 . 2012-01-22 21:59	71344	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-09-10 15:21 . 2012-08-06 12:35	23256	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-09-09 11:48 . 2014-09-10 15:34	61120	----a-w-	c:\windows\system32\drivers\{e4a6645a-3f85-4e1f-aa41-8367978844db}Gw64.sys
2014-08-23 02:07 . 2014-09-10 16:31	404480	----a-w-	c:\windows\system32\gdi32.dll
2014-08-23 01:45 . 2014-09-10 16:31	311808	----a-w-	c:\windows\SysWow64\gdi32.dll
2014-08-23 00:59 . 2014-09-10 16:31	3163648	----a-w-	c:\windows\system32\win32k.sys
2014-08-19 18:05 . 2014-09-11 16:49	374968	----a-w-	c:\windows\system32\iedkcs32.dll
2014-08-18 23:01 . 2014-09-11 16:49	23591424	----a-w-	c:\windows\system32\mshtml.dll
2014-08-18 22:29 . 2014-09-11 16:49	2724864	----a-w-	c:\windows\system32\mshtml.tlb
2014-08-18 22:29 . 2014-09-11 16:49	4096	----a-w-	c:\windows\system32\ieetwcollectorres.dll
2014-08-18 22:20 . 2014-09-11 16:49	2793984	----a-w-	c:\windows\system32\iertutil.dll
2014-08-18 22:19 . 2014-09-11 16:49	5833728	----a-w-	c:\windows\system32\jscript9.dll
2014-08-18 22:15 . 2014-09-11 16:49	547328	----a-w-	c:\windows\system32\vbscript.dll
2014-08-18 22:15 . 2014-09-11 16:49	66048	----a-w-	c:\windows\system32\iesetup.dll
2014-08-18 22:14 . 2014-09-11 16:49	48640	----a-w-	c:\windows\system32\ieetwproxystub.dll
2014-08-18 22:14 . 2014-09-11 16:49	83968	----a-w-	c:\windows\system32\MshtmlDac.dll
2014-08-18 22:08 . 2014-09-11 16:49	51200	----a-w-	c:\windows\system32\jsproxy.dll
2014-08-18 22:08 . 2014-09-11 16:49	4232704	----a-w-	c:\windows\SysWow64\jscript9.dll
2014-08-18 22:08 . 2014-09-11 16:49	33792	----a-w-	c:\windows\system32\iernonce.dll
2014-08-18 22:05 . 2014-09-11 16:49	596480	----a-w-	c:\windows\system32\ieui.dll
2014-08-18 22:03 . 2014-09-11 16:49	139264	----a-w-	c:\windows\system32\ieUnatt.exe
2014-08-18 22:03 . 2014-09-11 16:49	111616	----a-w-	c:\windows\system32\ieetwcollector.exe
2014-08-18 22:03 . 2014-09-11 16:49	758272	----a-w-	c:\windows\system32\jscript9diag.dll
2014-08-18 21:57 . 2014-09-11 16:49	2724864	----a-w-	c:\windows\SysWow64\mshtml.tlb
2014-08-18 21:56 . 2014-09-11 16:49	940032	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2014-08-18 21:51 . 2014-09-11 16:49	446464	----a-w-	c:\windows\system32\dxtmsft.dll
2014-08-18 21:46 . 2014-09-11 16:49	454656	----a-w-	c:\windows\SysWow64\vbscript.dll
2014-08-18 21:45 . 2014-09-11 16:49	61952	----a-w-	c:\windows\SysWow64\iesetup.dll
2014-08-18 21:45 . 2014-09-11 16:49	72704	----a-w-	c:\windows\system32\JavaScriptCollectionAgent.dll
2014-08-18 21:44 . 2014-09-11 16:49	51200	----a-w-	c:\windows\SysWow64\ieetwproxystub.dll
2014-08-18 21:44 . 2014-09-11 16:49	61952	----a-w-	c:\windows\SysWow64\MshtmlDac.dll
2014-08-18 21:40 . 2014-09-11 16:49	195584	----a-w-	c:\windows\system32\msrating.dll
2014-08-18 21:39 . 2014-09-11 16:49	85504	----a-w-	c:\windows\system32\mshtmled.dll
2014-08-18 21:38 . 2014-09-11 16:49	289280	----a-w-	c:\windows\system32\dxtrans.dll
2014-08-18 21:36 . 2014-09-11 16:49	112128	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2014-08-18 21:35 . 2014-09-11 16:49	597504	----a-w-	c:\windows\SysWow64\jscript9diag.dll
2014-08-18 21:25 . 2014-09-11 16:49	727040	----a-w-	c:\windows\system32\msfeeds.dll
2014-08-18 21:25 . 2014-09-11 16:49	707072	----a-w-	c:\windows\system32\ie4uinit.exe
2014-08-18 21:23 . 2014-09-11 16:49	2104832	----a-w-	c:\windows\system32\inetcpl.cpl
2014-08-18 21:23 . 2014-09-11 16:49	1249280	----a-w-	c:\windows\system32\mshtmlmedia.dll
2014-08-18 21:22 . 2014-09-11 16:49	60416	----a-w-	c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2014-08-18 21:16 . 2014-09-11 16:49	13588480	----a-w-	c:\windows\system32\ieframe.dll
2014-08-18 21:15 . 2014-09-11 16:49	2310656	----a-w-	c:\windows\system32\wininet.dll
2014-08-18 21:08 . 2014-09-11 16:49	2014208	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2014-08-18 21:07 . 2014-09-11 16:49	1068032	----a-w-	c:\windows\SysWow64\mshtmlmedia.dll
2014-08-18 20:55 . 2014-09-11 16:49	1447424	----a-w-	c:\windows\system32\urlmon.dll
2014-08-18 20:46 . 2014-09-11 16:49	1812992	----a-w-	c:\windows\SysWow64\wininet.dll
2014-08-18 20:38 . 2014-09-11 16:49	775168	----a-w-	c:\windows\system32\ieapfltr.dll
2014-08-05 17:14 . 2014-09-10 15:28	20328	----a-w-	c:\windows\system32\roboot64.exe
2014-08-01 11:53 . 2014-09-10 16:35	1031168	----a-w-	c:\windows\system32\TSWorkspace.dll
2014-08-01 11:35 . 2014-09-10 16:35	793600	----a-w-	c:\windows\SysWow64\TSWorkspace.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
2014-04-11 02:05	513648	----a-w-	c:\program files (x86)\SupTab\SupTab.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{b0022d3c-ca81-4a57-ba00-31650a761234}]
2014-09-10 15:28	250656	----a-w-	c:\program files (x86)\CommonShare\CommonSharebho.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
2013-11-27 23:23	294456	----a-w-	c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Google+ Auto Backup"="c:\users\ALFIR\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" [2014-01-06 3619096]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AVG_TRAY"="c:\program files (x86)\AVG\AVG2012\avgtray.exe" [2012-04-05 2587008]
.
c:\users\ALFIR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
ctfmon.lnk - c:\windows\System32\rundll32.exe c:\users\ALFIR\AppData\Local\Temp\er_00_0_l.exe,FQ10 [2009-7-14 45568]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.8.150\SSScheduler.exe [2014-4-9 332016]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute	REG_MULTI_SZ   	autocheck autochk *\0c:\progra~2\AVG\AVG2012\avgrsa.exe /sync /restart
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2012\avgidsagent.exe;c:\program files (x86)\AVG\AVG2012\avgidsagent.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 IePluginService;IePlugin Service;c:\programdata\IePluginService\PluginService.exe;c:\programdata\IePluginService\PluginService.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 Wpm;Wpm Service;c:\programdata\WPM\wprotectmanager.exe;c:\programdata\WPM\wprotectmanager.exe [x]
R3 FUS2BASE;AVM FRITZ!Card USB;c:\windows\system32\DRIVERS\fus2base.sys;c:\windows\SYSNATIVE\DRIVERS\fus2base.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.8.150\McCHSvc.exe;c:\program files\McAfee Security Scan\3.8.150\McCHSvc.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys;c:\windows\SYSNATIVE\DRIVERS\wsvd.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x]
S0 fbfmon;fbfmon;c:\windows\system32\drivers\fbfmon.sys;c:\windows\SYSNATIVE\drivers\fbfmon.sys [x]
S0 LHDmgr;LHDmgr;c:\windows\System32\DRIVERS\LhdX64.sys;c:\windows\SYSNATIVE\DRIVERS\LhdX64.sys [x]
S0 TPDIGIMN;TPDIGIMN;c:\windows\System32\DRIVERS\ApsHM64.sys;c:\windows\SYSNATIVE\DRIVERS\ApsHM64.sys [x]
S1 {e4a6645a-3f85-4e1f-aa41-8367978844db}Gw64;{e4a6645a-3f85-4e1f-aa41-8367978844db}Gw64;c:\windows\system32\drivers\{e4a6645a-3f85-4e1f-aa41-8367978844db}Gw64.sys;c:\windows\SYSNATIVE\drivers\{e4a6645a-3f85-4e1f-aa41-8367978844db}Gw64.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x]
S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x]
S1 BPntDrv;BPntDrv;c:\windows\system32\drivers\BPntDrv.sys;c:\windows\SYSNATIVE\drivers\BPntDrv.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe [x]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~2\mcafee\SITEAD~1\mcsacore.exe;c:\progra~2\mcafee\SITEAD~1\mcsacore.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [x]
S2 Update CommonShare;Update CommonShare;c:\program files (x86)\CommonShare\updateCommonShare.exe;c:\program files (x86)\CommonShare\updateCommonShare.exe [x]
S2 UpdaterSvcCommonShare;UpdaterSvcCommonShare;c:\program files (x86)\CommonShare\updater.exe;c:\program files (x86)\CommonShare\updater.exe [x]
S2 Util CommonShare;Util CommonShare;c:\program files (x86)\CommonShare\bin\utilCommonShare.exe;c:\program files (x86)\CommonShare\bin\utilCommonShare.exe [x]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys;c:\windows\SYSNATIVE\DRIVERS\AcpiVpc.sys [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x]
S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfiltera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsfiltera.sys [x]
S3 AVMCOWAN;AVM ISDN CoNDIS WAN CAPI Driver;c:\windows\system32\DRIVERS\AVMCOWAN.sys;c:\windows\SYSNATIVE\DRIVERS\AVMCOWAN.sys [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
S3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUVStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUVStor.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
S3 vm331avs;Digital Camera 1;c:\windows\system32\Drivers\vm331avs.sys;c:\windows\SYSNATIVE\Drivers\vm331avs.sys [x]
S3 vmuvcflt;Vimicro USB Camera Filter;c:\windows\system32\Drivers\vmuvcflt.sys;c:\windows\SYSNATIVE\Drivers\vmuvcflt.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2014-06-20 c:\windows\Tasks\1-Klick-Wartung.job
- c:\program files (x86)\TuneUp Utilities 2007\SystemOptimizer.exe [2007-04-26 18:08]
.
2014-10-23 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-07 16:41]
.
2014-10-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-25 17:22]
.
2014-10-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-25 17:22]
.
2012-06-27 c:\windows\Tasks\SidebarExecute.job
- c:\program files\Windows Sidebar\sidebar.exe [2010-11-21 03:24]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
2013-11-27 23:23	357432	----a-w-	c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VeriFace Enc]
@="{771C7324-DA80-49D3-8017-753B0AF60951}"
[HKEY_CLASSES_ROOT\CLSID\{771C7324-DA80-49D3-8017-753B0AF60951}]
2011-08-25 09:49	1508192	----a-w-	c:\windows\System32\IcnOvrly.dll
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.trovi.com/?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M696A8035-311A-495E-BD0B-6CF21CCF1754&SearchSource=55&CUI=&UM=2&UP=SP8DA8C1DA-6E09-45DA-8A90-659F48E38300&SSPV=
uLocal Page = c:\windows\system32\blank.htm
uDefault_Search_URL = hxxp://www.google.com/ie
mDefault_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112&q={searchTerms}
mDefault_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112
mStart Page = hxxp://istart.webssearches.com/?type=hp&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112&q={searchTerms}
uSearchAssistant = hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=1699eb32-b5f0-45ea-bdc2-eac8cd0729a7&searchtype=ds&q={searchTerms}
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Free YouTube Download - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
IE: Free YouTube to MP3 Converter - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
FF - ProfilePath - c:\users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&CUI=UN37918983096761116&UM=2&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - webssearches
FF - prefs.js: browser.startup.homepage - hxxp://istart.webssearches.com/?type=hppp&ts=1410362525&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112
user_pref(extensions.autoDisableScopes,14);
FF - user.js: extensions.shownSelectionUI - true
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{e44a1809-4d10-4ab8-b343-3326b64c7cdd} - (no file)
BHO-{0f21b1e5-5afc-43c9-9c66-515046e92ec2} - c:\program files (x86)\SaveSense\SaveSenseIE.dll
Toolbar-Locked - (no file)
Toolbar-{3bbd3c14-4c16-4989-8366-95bc9179779d} - (no file)
Toolbar-{e44a1809-4d10-4ab8-b343-3326b64c7cdd} - (no file)
Wow6432Node-HKLM-Run-fst_de_19 - (no file)
c:\users\ALFIR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk - c:\program files (x86)\MyPC Backup\MyPC Backup.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
WebBrowser-{872B5B88-9DB5-4310-BDD0-AC189557E5F5} - (no file)
WebBrowser-{3BBD3C14-4C16-4989-8366-95BC9179779D} - (no file)
WebBrowser-{E44A1809-4D10-4AB8-B343-3326B64C7CDD} - (no file)
AddRemove-Activeris AntiMalware_is1 - c:\program files (x86)\Activeris AntiMalware\unins000.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_152_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_152_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_15_0_0_152_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_15_0_0_152_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_152.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.15"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_152.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_152.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_152.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-10-24  00:50:30
ComboFix-quarantined-files.txt  2014-10-23 22:50
.
Vor Suchlauf: 21 Verzeichnis(se), 594.118.373.376 Bytes frei
Nach Suchlauf: 22 Verzeichnis(se), 594.627.129.344 Bytes frei
.
- - End Of File - - E13041B109D3CB0AF091EABB1FF5C37A

--- --- ---
A36C5E4F47E84449FF07ED3517B43A31

[/CODE]

schrauber · 24.10.2014, 16:57

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

sommertag · 30.10.2014, 02:30

Hallo schrauber,

da die vier Logs zusammen zu viele Zeichen für einen Forumbeitrag haben, habe ich sie, den Anweisungen des Trojanerboards folgend, als Anhang hochgeladen.

Lieber Gruß

schrauber · 30.10.2014, 20:27

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

sommertag · 30.10.2014, 22:06

Hey schrauber,
dann hier die Logs in aufgeteilten Posts. Ich habe bewusst nicht mehrere Posts verwendet, da in euren FAQ darauf hingewiesen wird, dass 'antworten auf einen eigenen Post' zur Folge hat, dass das Thema oder der Thread als 'in Arbeit' betrachtet und entsprechend nicht mehr weiter bearbeitet wird - gilt das nur für den ersten Post?

Hier der ERSTE TEIL der MBAM Log (Log des zweiten Versuches, beim ersten hat der Rechner sich am Ende aufgehängt)

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 30.10.2014
Suchlauf-Zeit: 01:04:50
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.3.1025
Malware Datenbank: v2014.09.19.05
Rootkit Datenbank: v2014.09.18.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: ALFIR

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 329269
Verstrichene Zeit: 19 Min, 4 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 4
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService\PluginService.exe, 1592, Löschen bei Neustart, [a7daf5fa671447ef8f50a2c48081b24e]
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\updateCommonShare.exe, 2176, Löschen bei Neustart, [cfb28768f685171f7e6d0c98c041867a]
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\bin\utilCommonShare.exe, 3204, Löschen bei Neustart, [245d2ac52a5111256784dacaa06160a0]
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\updater.exe, 3152, Löschen bei Neustart, [453c5e91f586c2745f0234dc927141bf]

Module: 1
PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\DpInterface32.dll, Löschen bei Neustart, [176aa946b0cbd85ef863bfd725dc4fb1], 

Registrierungsschlüssel: 117
PUP.Optional.IePluginService.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IePluginService, In Quarantäne, [a7daf5fa671447ef8f50a2c48081b24e], 
PUP.Optional.CommonShare.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update CommonShare, In Quarantäne, [cfb28768f685171f7e6d0c98c041867a], 
PUP.Optional.CommonShare.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Util CommonShare, In Quarantäne, [245d2ac52a5111256784dacaa06160a0], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\APPID\{A2D3FB7A-6873-45E8-AF96-57092D721828}, In Quarantäne, [cbb6529df88382b477d3eba39a68c23e], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.OnDemandCOMClassSvc, In Quarantäne, [cbb6529df88382b477d3eba39a68c23e], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.OnDemandCOMClassSvc.1.0, In Quarantäne, [cbb6529df88382b477d3eba39a68c23e], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.OnDemandCOMClassSvc, In Quarantäne, [cbb6529df88382b477d3eba39a68c23e], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.OnDemandCOMClassSvc.1.0, In Quarantäne, [cbb6529df88382b477d3eba39a68c23e], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{A2D3FB7A-6873-45E8-AF96-57092D721828}, In Quarantäne, [cbb6529df88382b477d3eba39a68c23e], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A2D3FB7A-6873-45E8-AF96-57092D721828}, In Quarantäne, [cbb6529df88382b477d3eba39a68c23e], 
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, In Quarantäne, [c0c1bb34cfac7eb891ffad158280ee12], 
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, In Quarantäne, [c0c1bb34cfac7eb891ffad158280ee12], 
PUP.Optional.SaveSense, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{0f21b1e5-5afc-43c9-9c66-515046e92ec2}, In Quarantäne, [641d529d09722115bf2f962ef50d42be], 
PUP.Optional.SaveSense, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{0F21B1E5-5AFC-43C9-9C66-515046E92EC2}, In Quarantäne, [641d529d09722115bf2f962ef50d42be], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [94edc02f98e363d34e37b4d933cfab55], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [94edc02f98e363d34e37b4d933cfab55], 
PUP.Optional.CommonShare.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{b0022d3c-ca81-4a57-ba00-31650a761234}, In Quarantäne, [fd8405eaabd0290d3c84058319e91ce4], 
PUP.Optional.CommonShare.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{B0022D3C-CA81-4A57-BA00-31650A761234}, In Quarantäne, [fd8405eaabd0290d3c84058319e91ce4], 
PUP.Optional.Snapdo.T, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}, In Quarantäne, [f889f8f7c1ba71c5d613a61fe31f53ad], 
PUP.Optional.Snapdo.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006EE092-9658-4FD6-BD8E-A21A348E59F5}, In Quarantäne, [f889f8f7c1ba71c5d613a61fe31f53ad], 
PUP.Optional.SearchProtect.A, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}, In Quarantäne, [0e7317d8a7d4e155db563653bc46f20e], 
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}, In Quarantäne, [fa87c22d2a51e551ab879eebc43efc04], 
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}, In Quarantäne, [fa87c22d2a51e551ab879eebc43efc04], 
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{e4a6645a-3f85-4e1f-aa41-8367978844db}Gw64, In Quarantäne, [176a0ce3bdbef244ca118688986b22de], 
PUP.Optional.CommonShare.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CommonShare, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UpdaterSvcCommonShare, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, HKLM\SOFTWARE\CLASSES\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLive.OneClickCtrl.9, In Quarantäne, [364b846b2f4c71c5298cf568e71dbe42], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLive.OneClickProcessLauncherMachine, In Quarantäne, [cab789661e5d7eb89322d28b9272f50b], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLive.OneClickProcessLauncherMachine.1.0, In Quarantäne, [31507d7217643ef8318498c50ff532ce], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLive.Update3WebControl.3, In Quarantäne, [70114ca3f4874beb7d382b32ca3ae917], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.CoCreateAsync, In Quarantäne, [88f99a55334865d1e8cd213c7e86a060], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.CoCreateAsync.1.0, In Quarantäne, [354ce00fa3d8c76fb005164755af4eb2], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.CoreClass, In Quarantäne, [e79a10df84f7c76ffcb938256f958d73], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.CoreClass.1, In Quarantäne, [3a47dd1287f466d01c99471619eb649c], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.CoreMachineClass, In Quarantäne, [562b6a85e9923df906afca939371e41c], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.CoreMachineClass.1, In Quarantäne, [067b46a9017aca6c7a3b65f827dd649c], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.CredentialDialogMachine, In Quarantäne, [cdb47b74abd0999d3c792c3161a3e21e], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.CredentialDialogMachine.1.0, In Quarantäne, [6819c12e6a114cea2e872b322bd947b9], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.OnDemandCOMClassMachine, In Quarantäne, [275a10df4932e4529f1619440ff510f0], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.OnDemandCOMClassMachine.1.0, In Quarantäne, [d8a9cd227efdff3705b0afae1ce8be42], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.OnDemandCOMClassMachineFallback, In Quarantäne, [1f628b6413688ea8c5f06bf25ba98d73], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.OnDemandCOMClassMachineFallback.1.0, In Quarantäne, [8bf67877fe7d66d0b4015c017f85837d], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.ProcessLauncher, In Quarantäne, [f48d8d627704f6405c59302d5fa5c040], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.ProcessLauncher.1.0, In Quarantäne, [b7ca42ad7b00fd39981dafaeab591de3], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.Update3COMClassService, In Quarantäne, [97ea36b9cfac53e35263d885897bb44c], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.Update3COMClassService.1.0, In Quarantäne, [235eea057704989e8c29134a6b9912ee], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.Update3WebMachine, In Quarantäne, [b6cb519ed6a543f3843199c421e3fe02], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.Update3WebMachine.1.0, In Quarantäne, [e59c0be49ddeb383615487d640c411ef], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.Update3WebMachineFallback, In Quarantäne, [b4cdd9160a7174c2b9fc37263ec649b7], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.Update3WebMachineFallback.1.0, In Quarantäne, [2a573db215668caad6dfee6fd82c9b65], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.Update3WebSvc, In Quarantäne, [1170ea059fdc3600af06a8b59b69a65a], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.Update3WebSvc.1.0, In Quarantäne, [b2cf07e878039a9c15a0f06d828217e9], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\APPID\SaveSenseLive.exe, In Quarantäne, [542dc22d7efda195b202d08d2ada5da3], 
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [cbb6a54a3f3c9e988c0776e45aaa56aa], 
PUP.Optional.CommonShare.A, HKLM\SOFTWARE\WOW6432NODE\CommonShare, In Quarantäne, [7d04e40b0d6ec3737fe3f51bb15255ab], 
PUP.Optional.DealPly.A, HKLM\SOFTWARE\WOW6432NODE\DealPlyLive, In Quarantäne, [5a27a649a5d6b482afa32927f1131de3], 
Adware.EoRezo, HKLM\SOFTWARE\WOW6432NODE\FreeSoftToday, In Quarantäne, [add4ef00661541f51ad21143828207f9], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\SaveSenseLive, In Quarantäne, [542d48a75625ab8b6d4d1e3f05ffbd43], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\supWPM, In Quarantäne, [047d8966186375c102c85fa9ad56b050], 
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\webssearchesSoftware, In Quarantäne, [4c35856a95e62115a18a89a3b94aba46], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLive.OneClickCtrl.9, In Quarantäne, [fb86a649f58659dd41741c4139cbd32d], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLive.OneClickProcessLauncherMachine, In Quarantäne, [d9a841aed4a7a0964570c29b020202fe], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLive.OneClickProcessLauncherMachine.1.0, In Quarantäne, [9be698573c3f3cfa219498c516eebb45], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLive.Update3WebControl.3, In Quarantäne, [acd59659b1ca33038c298ad3659f11ef], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.CoCreateAsync, In Quarantäne, [235efff098e3f640cce9f36a966ea25e], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.CoCreateAsync.1.0, In Quarantäne, [4d347a7516659e9855605ffe4cb80df3], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.CoreClass, In Quarantäne, [ec951ad57506a393b203e479b351ae52], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.CoreClass.1, In Quarantäne, [93ee737ca4d746f0169f75e840c46f91], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.CoreMachineClass, In Quarantäne, [2e53658ad0ab9c9aa80dda83ae56eb15], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.CoreMachineClass.1, In Quarantäne, [a0e1b7380774d561d8dd60fd52b2748c], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.CredentialDialogMachine, In Quarantäne, [d0b14ea13645979f7c393528dc281ee2], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.CredentialDialogMachine.1.0, In Quarantäne, [1b668b64ee8d1323169f421b8282758b], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.OnDemandCOMClassMachine, In Quarantäne, [d1b0e708d6a5c373c9ecf96428dc12ee], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.OnDemandCOMClassMachine.1.0, In Quarantäne, [f48d618e05765adc496c9bc215ef20e0], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.OnDemandCOMClassMachineFallback, In Quarantäne, [96eb806f88f3cd69922378e510f428d8], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.OnDemandCOMClassMachineFallback.1.0, In Quarantäne, [ef9249a6b7c477bf754068f51ee61be5], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.ProcessLauncher, In Quarantäne, [85fc44ab403be0565f56580554b06d93], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.ProcessLauncher.1.0, In Quarantäne, [483904ebb4c75fd70ca9233a22e2718f], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.Update3COMClassService, In Quarantäne, [651cee018fecf541e0d50d50b0545ba5], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.Update3COMClassService.1.0, In Quarantäne, [f1907976007bd56100b5431a46be718f], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.Update3WebMachine, In Quarantäne, [6f129b54a7d4a690c6ef293432d217e9], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.Update3WebMachine.1.0, In Quarantäne, [4c357d7282f90a2cc9ec4518867ed22e], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.Update3WebMachineFallback, In Quarantäne, [2c555699473452e4397ccd9042c2ed13], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.Update3WebMachineFallback.1.0, In Quarantäne, [037ed6199be0a78f585d223bc93b31cf], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.Update3WebSvc, In Quarantäne, [1c65f9f6a0db181ee1d473ea7f85619f], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.Update3WebSvc.1.0, In Quarantäne, [2958945b75065bdbc7ee352847bd8e72], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\SaveSenseLive.exe, In Quarantäne, [59288966116ae056d8dc67f60afa21df], 
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [552c11de9be0a2947b18a6b42dd7ad53], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@tools.updaterss.com/SaveSenseLive Update;version=3, In Quarantäne, [bfc2bd327a015cda4375035a8282ae52], 
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@tools.updaterss.com/SaveSenseLive Update;version=9, In Quarantäne, [671a6a85aecde353c5f3ec718e767090], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, In Quarantäne, [7c05a24db8c3aa8cdeebb751da29c23e], 
PUP.Optional.SystemSpeedup, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\ssd, In Quarantäne, [275a25caaecd38fe4a0033e024df8b75], 
PUP.Optional.WpManager.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WPM, In Quarantäne, [126ff8f752293cfa075e540b0afabd43], 
PUP.Optional.HQPro.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HQ-V-Pro-v1.9, In Quarantäne, [532efcf33d3e2a0cedab0e0f08fb4fb1], 
PUP.Optional.MPlayerplus.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\MPlayerplus_01, In Quarantäne, [8af738b77a01be7829901905d33019e7], 
PUP.Optional.CommonShare.A, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CommonShare, In Quarantäne, [1f62bb345724a5911c4742cee61d1ae6], 
PUP.Optional.FreeSoftToday.A, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\freesofttoday, In Quarantäne, [572ad01fc3b8bb7be225a5cc42c232ce], 
PUP.Optional.SaveSense.A, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SaveSenseLive, In Quarantäne, [f58c1cd381faad897542e37ad92bd62a], 
PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\TutoTag, In Quarantäne, [afd247a8a9d2a492045c363c39cb758b], 
PUP.Optional.PriceGong.A, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, In Quarantäne, [e59c0ae5314aeb4b5eb35dd69b689b65], 
PUP.Optional.Conduit.A, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CONDUIT\FF, In Quarantäne, [354c2fc08af1fa3c5c103321fa0a24dc], 
PUP.Optional.SmartBar, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\amfclgbdpgndipgoegfpkkgobahigbcl, In Quarantäne, [a7dabf30304bea4c14152443c53fff01], 
PUP.Optional.DVDVideoSoftTB.A, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\nikpibnbobmbdbheedjfogjlikpgpnhp, In Quarantäne, [2160836c1467e74f22e91be9d1326c94], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, In Quarantäne, [6d14d51ac0bb2511c3d57cbcdf24d828], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, In Quarantäne, [c7bac12e2c4fa3938078e76753b1c53b], 
PUP.Optional.Ciuvo.A, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\ciuvo.com, In Quarantäne, [c1c08b64f6850531a15be133d42f41bf], 
PUP.Optional.SuperFish.A, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com, In Quarantäne, [1968ec035f1cab8bc63552c2a261d927], 
PUP.Optional.Qone8, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [d6ab96591863c076d2c0ec6e63a1758b], 
PUP.Optional.SystemSpeedup, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\ssd, In Quarantäne, [1c653cb376054aec7ecb8f84de256997], 

Registrierungswerte: 12
PUP.Optional.Conduit.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{3bbd3c14-4c16-4989-8366-95bc9179779d}, In Quarantäne, [7908bf304239270f148c9dec17eb53ad], 
PUP.Optional.Conduit.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{3BBD3C14-4C16-4989-8366-95BC9179779D}, FLV Runner Toolbar, In Quarantäne, [7908bf304239270f148c9dec17eb53ad]
PUP.Optional.Conduit.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{3BBD3C14-4C16-4989-8366-95BC9179779D}, In Quarantäne, [7908bf304239270f148c9dec17eb53ad], 
PUP.Optional.Conduit.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{3bbd3c14-4c16-4989-8366-95bc9179779d}, In Quarantäne, [374ac8276f0ccb6b6e32e6a37d851be5], 
PUP.Optional.SmartBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, In Quarantäne, [f38e638ced8e9b9b6ce9a5620003cc34]
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY|AppPath, C:\Program Files (x86)\Mysearchdial\1.8.29.0\, In Quarantäne, [423f28c76615e94d6bf6c8a6cb3927d9]
PUP.Optional.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, In Quarantäne, [cfb2905fec8f34024213e027db28cd33]
PUP.Optional.QuickStart.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|quick_start@gmail.com, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com, In Quarantäne, [fa87bd32cbb0f83e36afb4786e9555ab]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, tugs, In Quarantäne, [7c05a24db8c3aa8cdeebb751da29c23e]
PUP.Optional.WpManager.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WPM|ImagePath, C:\ProgramData\WPM\wprotectmanager.exe -service, In Quarantäne, [126ff8f752293cfa075e540b0afabd43]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0R0DtO0U1C1S1U1StR0J1Q2P1J1K1I2R, In Quarantäne, [c7bac12e2c4fa3938078e76753b1c53b]
PUP.Optional.QuickStart.A, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS|appid, quick_start@gmail.com, In Quarantäne, [6c156f807209043228e28e8945bed42c]

Registrierungsdaten: 9
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://istart.webssearches.com/?type=hp&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112),Ersetzt,[6e13b53ab1ca2412444985761de76799]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[077aeb042259ba7c4674d62fef1631cf]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://istart.webssearches.com/web/?type=ds&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=ds&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112&q={searchTerms}),Ersetzt,[c1c07679413a6cca3d4e52a9b84cc23e]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://istart.webssearches.com/?type=hp&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112),Ersetzt,[8cf54ca3146720164940ea11ba4a669a]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://istart.webssearches.com/?type=hp&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112),Ersetzt,[a0e141ae700b9e98f994b4479c6822de]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[394834bb2e4d72c478421ee76c99718f]
PUP.Optional.Trovi.A, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.trovi.com/?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M696A8035-311A-495E-BD0B-6CF21CCF1754&SearchSource=55&CUI=&UM=2&UP=SP8DA8C1DA-6E09-45DA-8A90-659F48E38300&SSPV=, Gut: (www.google.com), Schlecht: (hxxp://www.trovi.com/?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M696A8035-311A-495E-BD0B-6CF21CCF1754&SearchSource=55&CUI=&UM=2&UP=SP8DA8C1DA-6E09-45DA-8A90-659F48E38300&SSPV=),Ersetzt,[aed343ac92e90c2ada21cb2f7f85c040]
PUP.Optional.Snapdo, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=1699eb32-b5f0-45ea-bdc2-eac8cd0729a7&searchtype=ds&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=1699eb32-b5f0-45ea-bdc2-eac8cd0729a7&searchtype=ds&q={searchTerms}),Ersetzt,[225fa7488fec70c62117dd2849bcad53]
PUP.Optional.Snapdo, HKU\S-1-5-21-4139373105-4022997019-1243156706-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=1699eb32-b5f0-45ea-bdc2-eac8cd0729a7&searchtype=ds&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=1699eb32-b5f0-45ea-bdc2-eac8cd0729a7&searchtype=ds&q={searchTerms}),Ersetzt,[1c65bd329cdf55e1c176c540d035a15f]

Ordner: 152
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare, Löschen bei Neustart, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\bin, Löschen bei Neustart, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\bin\plugins, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.OpenCandy, C:\Users\ALFIR\AppData\Roaming\OpenCandy, In Quarantäne, [6021d619f289f145ca0e23b2758d649c], 
PUP.Optional.OpenCandy, C:\Users\ALFIR\AppData\Roaming\OpenCandy\03FDA9940E0B456B9286A7369D12712F, In Quarantäne, [6021d619f289f145ca0e23b2758d649c], 
PUP.Optional.OpenCandy, C:\Users\ALFIR\AppData\Roaming\OpenCandy\2355EE09311C4EC88DAC0A08761A8BE9, In Quarantäne, [6021d619f289f145ca0e23b2758d649c], 
PUP.Optional.OpenCandy, C:\Users\ALFIR\AppData\Roaming\OpenCandy\A848C5E516B2449BB3099EE8AD9A8F8E, In Quarantäne, [6021d619f289f145ca0e23b2758d649c], 
PUP.Optional.OpenCandy, C:\Users\ALFIR\AppData\Roaming\OpenCandy\AFB229EB37F34E6F83F073F1D6F485D7, In Quarantäne, [6021d619f289f145ca0e23b2758d649c], 
PUP.Optional.OpenCandy, C:\Users\ALFIR\AppData\Roaming\OpenCandy\B5D4F86407144E82ABC5DDF3BF700BA6, In Quarantäne, [6021d619f289f145ca0e23b2758d649c], 
PUP.Optional.OpenCandy, C:\Users\ALFIR\AppData\Roaming\OpenCandy\F6A9CD3E9AA4418EA5BD67FD775E84A2, In Quarantäne, [6021d619f289f145ca0e23b2758d649c], 
PUP.Optional.OpenCandy, C:\Users\ALFIR\AppData\Roaming\OpenCandy\F85E1E56B33F4D7F903D6B20AA6C65AB, In Quarantäne, [6021d619f289f145ca0e23b2758d649c], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Local\SaveSenseLive, In Quarantäne, [40414fa08fec9e9883bd4592c43eb749], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Local\SaveSenseLive\CrashReports, In Quarantäne, [40414fa08fec9e9883bd4592c43eb749], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\khcceooakamlehbimaepcldnnlnkcmfk, In Quarantäne, [08795d92bfbc3600b4cb95420cf626da], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\khcceooakamlehbimaepcldnnlnkcmfk\3.5.0.0_0, In Quarantäne, [08795d92bfbc3600b4cb95420cf626da], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\khcceooakamlehbimaepcldnnlnkcmfk\3.5.0.0_0\images, In Quarantäne, [08795d92bfbc3600b4cb95420cf626da], 
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService, Löschen bei Neustart, [c3beef00bdbe7abc61279246f80a30d0], 
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService\update, In Quarantäne, [c3beef00bdbe7abc61279246f80a30d0], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\{8b337819-d1e8-48d3-8178-168ae8c99c36}, In Quarantäne, [f1902cc3cab1989e6d2cc31829d907f9], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\{8b337819-d1e8-48d3-8178-168ae8c99c36}\content, In Quarantäne, [f1902cc3cab1989e6d2cc31829d907f9], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\{8b337819-d1e8-48d3-8178-168ae8c99c36}\content\images, In Quarantäne, [f1902cc3cab1989e6d2cc31829d907f9], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\{8b337819-d1e8-48d3-8178-168ae8c99c36}\defaults, In Quarantäne, [f1902cc3cab1989e6d2cc31829d907f9], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\{8b337819-d1e8-48d3-8178-168ae8c99c36}\defaults\preferences, In Quarantäne, [f1902cc3cab1989e6d2cc31829d907f9], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\deghekbbihbapplmbffglehkdhkeibbm, In Quarantäne, [e0a1c8274932f2446882aa315fa3936d], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.56_0, In Quarantäne, [e0a1c8274932f2446882aa315fa3936d], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\include, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\include\tools, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js\lib, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js\module, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js\pack, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\en, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\en-US, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\es, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\es-419, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\fr, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\fr-BE, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\fr-CA, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\fr-CH, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\fr-LU, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\it, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\it-CH, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\pl, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\pt-BR, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\ru, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\ru-MO, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\tr, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\vi, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\zh-CN, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\zh-TW, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\skin, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\skin\weather, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\defaults, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\defaults\preferences, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\modules, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\majjphhgppkndjjkmhhnbgafooenebhd, In Quarantäne, [5031608f02796acc7e4bd408847eb24e], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\majjphhgppkndjjkmhhnbgafooenebhd\1.26.34_0, In Quarantäne, [5031608f02796acc7e4bd408847eb24e], 
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\elchiiiejkobdbblfejjkbphbddgmljf, In Quarantäne, [d7aac12e5c1fc86ea5a21ebfe41e7b85], 
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0, In Quarantäne, [d7aac12e5c1fc86ea5a21ebfe41e7b85], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Logs, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\AddedAppDialog, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\DefualtImages, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\DetectedAppDialog, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\EngineFirstTimeDialog, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\NewSearchProtectorDialog, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\NewSearchProtectorDialog\images, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorBubbleDialog, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorBubbleDialog\images, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorDialog, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorDialog\Images, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorRetakeoverDialog, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorRetakeoverDialog\Images, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\ToolbarFirstTimeDialog, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\ToolbarFirstTimeDialog\images, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\ToolbarUntrustedAppsApprovalDialog, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\UninstallDialog, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\UntrustedAddedAppDialog, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\UntrustedAppApprovalDialog, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\UntrustedAppPendingDialog, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\EmailNotifier, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\ExternalComponent, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\MyStuffApps, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\plugins, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.5.3, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.5.3\bin, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.6.12, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.6.12\bin, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\RadioPlayer, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318\AppsMetaData, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318\DynamicDialogs, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318\ToolbarHiddenLogin, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318\ToolbarHiddenSettings, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318\ToolbarLogin, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318\ToolbarSettings, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318\ToolbarTranslation, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_en, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_en\ToolbarTranslation, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\SearchInNewTab, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\UserDefinedItems, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Program Files (x86)\FLV_Runner, In Quarantäne, [532e16d9a9d26accc201f0fbab57c739], 
PUP.Optional.SystemSpeedup, C:\Users\ALFIR\AppData\Roaming\Systweak\ssd, In Quarantäne, [5b266a850f6c3df9861c46a84ab807f9], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab, Löschen bei Neustart, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Users\ALFIR\AppData\Roaming\SupTab, In Quarantäne, [c7bacc2316650234fa254fa5a26031cf], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\api, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\defaults, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\defaults\preferences, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\extensionData, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\extensionData\plugins, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\extensionData\userCode, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\locale, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\locale\en-US, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\skin, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 

Dateien: 608
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService\PluginService.exe, Löschen bei Neustart, [a7daf5fa671447ef8f50a2c48081b24e], 
PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\DpInterface32.dll, Löschen bei Neustart, [176aa946b0cbd85ef863bfd725dc4fb1], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\updateCommonShare.exe, Löschen bei Neustart, [cfb28768f685171f7e6d0c98c041867a], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\bin\utilCommonShare.exe, Löschen bei Neustart, [245d2ac52a5111256784dacaa06160a0], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SupTab.dll, In Quarantäne, [94edc02f98e363d34e37b4d933cfab55], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\CommonSharebho.dll, In Quarantäne, [fd8405eaabd0290d3c84058319e91ce4], 
PUP.Optional.OpenCandy.A, C:\Users\ALFIR\AppData\Roaming\OpenCandy\03FDA9940E0B456B9286A7369D12712F\Setupsft_chr_p1v7.exe, In Quarantäne, [4e3336b9d3a848ee0c5557847d87847c], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Roaming\OpenCandy\AFB229EB37F34E6F83F073F1D6F485D7\sas.exe, In Quarantäne, [a4ddaf4091ea41f5cd415ff4d62b05fb], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Roaming\OpenCandy\AFB229EB37F34E6F83F073F1D6F485D7\SaveSense_p1v2.exe, In Quarantäne, [d3ae6e815328e05628e67ad9837e09f7], 
PUP.Optional.SupTab.A, C:\Users\ALFIR\AppData\Roaming\SupTab\SupTab.dll, In Quarantäne, [c5bcd01f017a3ef83b476acbcb357d83], 
PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\DpInterface64.dll, In Quarantäne, [88f97b743546979fa8b3fc9a20e10ef2], 
PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\DpInterfacef32.dll, In Quarantäne, [2b5635ba09723006a5b6603610f121df], 
PUP.Optional.IEPluginService.A, C:\Program Files (x86)\SupTab\RSHP.exe, In Quarantäne, [a2df18d7ee8de254790f5d1c5ea306fa], 
PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect32.dll, In Quarantäne, [f28f48a702798bab0e4d2571d1305ba5], 
PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect64.dll, In Quarantäne, [0879bc3387f41a1c481320765da4758b], 
PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SpAPPSv32.dll, In Quarantäne, [7e0314dbb5c6142238239ff7ff02956b], 
PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SpAPPSv64.dll, In Quarantäne, [bec315da017abf771c3fd6c058a90ef2], 
PUP.Optional.RegCleanPro, C:\Windows\System32\roboot64.exe, In Quarantäne, [6b16ae41eb9056e04051c0edfe03837d], 
PUP.Optional.OutBrowse, C:\Users\ALFIR\Downloads\iTunes.exe, In Quarantäne, [136e856a9cdfaa8c6d483c68bc45cb35], 
PUP.Optional.DomaIQ, C:\Users\ALFIR\Downloads\New_player.exe, In Quarantäne, [1a67757a0b7062d4fe7a90b507f920e0], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\Local\Conduit\CT3201318\FLV_RunnerAutoUpdateHelper.exe, In Quarantäne, [c1c007e8a6d569cd194dff1f738da858], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\Local\Conduit\CT3281675\entrustedAutoUpdateHelper.exe, In Quarantäne, [8af700ef7209f541f571b96533cdaf51], 
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{e4a6645a-3f85-4e1f-aa41-8367978844db}Gw64.sys, In Quarantäne, [176a0ce3bdbef244ca118688986b22de], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\CommonShare.ico, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\0, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\CommonShareUninstall.exe, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\updateCommonShare.InstallState, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\updater.exe, Löschen bei Neustart, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\bin\7za.exe, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\bin\bau, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\bin\BrowserAdapterS.7z, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\bin\CommonShare.BrowserAdapter.exe, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\bin\CommonShare.BrowserAdapter64.exe, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\bin\CommonShare.PurBrowse64.exe, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\bin\CommonShare.PurBrowseG.zip, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\bin\e4a6645a3f854e1faa41.dll, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\bin\e4a6645a3f854e1faa4164.dll, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\bin\utilCommonShare.InstallState, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\bin\{e4a6645a-3f85-4e1f-aa41-8367978844db}.dll, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\bin\{e4a6645a-3f85-4e1f-aa41-8367978844db}64.dll, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\bin\plugins\CommonShare.Bromon.dll, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\bin\plugins\CommonShare.BroStats.dll, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\bin\plugins\CommonShare.BrowserAdapterS.dll, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Program Files (x86)\CommonShare\bin\plugins\CommonShare.PurBrowseG.dll, In Quarantäne, [453c5e91f586c2745f0234dc927141bf], 
PUP.Optional.CommonShare.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\{e4a6645a-3f85-4e1f-aa41-8367978844db}.xpi, In Quarantäne, [522f5c93dc9f00362f388b8549bacb35], 
PUP.Optional.Trovi.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\searchplugins\trovi-search.xml, In Quarantäne, [720f06e9aecddb5b2e799a86af54d52b], 
PUP.Optional.MySearchDial.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}.xpi, In Quarantäne, [f09141ae2358cc6a1ba70d1ab74cef11], 
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\searchplugins\softonic.xml, In Quarantäne, [3b4640af15666acc616851d95fa47d83], 
PUP.Optional.WebsSearches.A, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\webssearches.xml, In Quarantäne, [2c55ef00cfacf24455d86ebe15ee37c9], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\searchplugins\conduit.xml, In Quarantäne, [0c75ec03b1ca76c038ae1d1060a3de22], 
PUP.Optional.MySearchDial.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\searchplugins\Mysearchdial.xml, In Quarantäne, [037eb9362c4f91a5b2b276b8fe058d73], 
PUP.Optional.WebSearch.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\searchplugins\Web Search.xml, In Quarantäne, [f190a04f2655df574c7ab777b84b956b], 
Trojan.Delf, C:\ProgramData\lsass.exe, In Quarantäne, [740d08e7770452e4c5cc0d5c18eba060], 
Trojan.Ransom.Gen, C:\Users\ALFIR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk, In Quarantäne, [3f42ba35f88368ce0c5f60b74bb949b7], 
PUP.Optional.OpenCandy, C:\Users\ALFIR\AppData\Roaming\OpenCandy\2355EE09311C4EC88DAC0A08761A8BE9\5260.ico, In Quarantäne, [6021d619f289f145ca0e23b2758d649c], 
PUP.Optional.OpenCandy, C:\Users\ALFIR\AppData\Roaming\OpenCandy\2355EE09311C4EC88DAC0A08761A8BE9\conduitinstaller.exe, In Quarantäne, [6021d619f289f145ca0e23b2758d649c], 
PUP.Optional.OpenCandy, C:\Users\ALFIR\AppData\Roaming\OpenCandy\2355EE09311C4EC88DAC0A08761A8BE9\EBB77268-338F-4C6A-8590-AD88FED26F4A, In Quarantäne, [6021d619f289f145ca0e23b2758d649c], 
PUP.Optional.OpenCandy, C:\Users\ALFIR\AppData\Roaming\OpenCandy\2355EE09311C4EC88DAC0A08761A8BE9\OCBrowserHelper_1.0.5.112.dll, In Quarantäne, [6021d619f289f145ca0e23b2758d649c], 
PUP.Optional.OpenCandy, C:\Users\ALFIR\AppData\Roaming\OpenCandy\A848C5E516B2449BB3099EE8AD9A8F8E\TuneUpUtilities2013-2200217_de-DE.exe, In Quarantäne, [6021d619f289f145ca0e23b2758d649c], 
PUP.Optional.OpenCandy, C:\Users\ALFIR\AppData\Roaming\OpenCandy\B5D4F86407144E82ABC5DDF3BF700BA6\3708.ico, In Quarantäne, [6021d619f289f145ca0e23b2758d649c], 
PUP.Optional.OpenCandy, C:\Users\ALFIR\AppData\Roaming\OpenCandy\B5D4F86407144E82ABC5DDF3BF700BA6\EBB77268-338F-4C6A-8590-AD88FED26F4A, In Quarantäne, [6021d619f289f145ca0e23b2758d649c], 
PUP.Optional.OpenCandy, C:\Users\ALFIR\AppData\Roaming\OpenCandy\B5D4F86407144E82ABC5DDF3BF700BA6\OCBrowserHelper_1.0.3.85.dll, In Quarantäne, [6021d619f289f145ca0e23b2758d649c], 
PUP.Optional.OpenCandy, C:\Users\ALFIR\AppData\Roaming\OpenCandy\B5D4F86407144E82ABC5DDF3BF700BA6\SnapDo.exe, In Quarantäne, [6021d619f289f145ca0e23b2758d649c], 
PUP.Optional.OpenCandy, C:\Users\ALFIR\AppData\Roaming\OpenCandy\B5D4F86407144E82ABC5DDF3BF700BA6\SnapDo_ALL_p1v4.exe, In Quarantäne, [6021d619f289f145ca0e23b2758d649c], 
PUP.Optional.OpenCandy, C:\Users\ALFIR\AppData\Roaming\OpenCandy\F6A9CD3E9AA4418EA5BD67FD775E84A2\saSetup.exe, In Quarantäne, [6021d619f289f145ca0e23b2758d649c], 
PUP.Optional.OpenCandy, C:\Users\ALFIR\AppData\Roaming\OpenCandy\F85E1E56B33F4D7F903D6B20AA6C65AB\speedupmypcDE.exe, In Quarantäne, [6021d619f289f145ca0e23b2758d649c], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\khcceooakamlehbimaepcldnnlnkcmfk\3.5.0.0_0\background.js, In Quarantäne, [08795d92bfbc3600b4cb95420cf626da], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\khcceooakamlehbimaepcldnnlnkcmfk\3.5.0.0_0\info.txt, In Quarantäne, [08795d92bfbc3600b4cb95420cf626da], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\khcceooakamlehbimaepcldnnlnkcmfk\3.5.0.0_0\manifest.json, In Quarantäne, [08795d92bfbc3600b4cb95420cf626da], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\khcceooakamlehbimaepcldnnlnkcmfk\3.5.0.0_0\images\icon128.png, In Quarantäne, [08795d92bfbc3600b4cb95420cf626da], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\khcceooakamlehbimaepcldnnlnkcmfk\3.5.0.0_0\images\icon16.png, In Quarantäne, [08795d92bfbc3600b4cb95420cf626da], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\khcceooakamlehbimaepcldnnlnkcmfk\3.5.0.0_0\images\icon48.png, In Quarantäne, [08795d92bfbc3600b4cb95420cf626da], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\h.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\1.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\15289.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\15434.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\15530.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\15579.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\15819.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\16359.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\16657.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\16663.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\16702.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\16881.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\17033.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\1728.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\17781.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\2229.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\2257.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\2260.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\2626.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\4489.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\6115.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\6561.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\6627.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\6707.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\6733.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\7031.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\8073.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\83.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\8584.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\9514.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\a.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\b.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\c.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\d.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\e.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\f.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\g.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\i.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\j.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\k.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\l.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\m.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\mru.xml, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\n.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\o.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\p.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\q.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\r.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\s.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\t.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\u.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\v.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\w.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\wlu.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\x.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\y.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.PriceGong.A, C:\Users\ALFIR\AppData\LocalLow\PriceGong\Data\z.txt, In Quarantäne, [433e5f9005762115c98d4396a45e0ff1], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\{8b337819-d1e8-48d3-8178-168ae8c99c36}\chrome.manifest, In Quarantäne, [f1902cc3cab1989e6d2cc31829d907f9], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\{8b337819-d1e8-48d3-8178-168ae8c99c36}\install.rdf, In Quarantäne, [f1902cc3cab1989e6d2cc31829d907f9], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\{8b337819-d1e8-48d3-8178-168ae8c99c36}\content\savesense.xul, In Quarantäne, [f1902cc3cab1989e6d2cc31829d907f9], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\{8b337819-d1e8-48d3-8178-168ae8c99c36}\content\images\icon32.png, In Quarantäne, [f1902cc3cab1989e6d2cc31829d907f9], 
PUP.Optional.SaveSense.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\{8b337819-d1e8-48d3-8178-168ae8c99c36}\defaults\preferences\defaults.js, In Quarantäne, [f1902cc3cab1989e6d2cc31829d907f9], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome.manifest, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\install.rdf, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\index.html, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\quick_start.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\quick_start.xul, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\include\speed_dial.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\include\tools\about_blank_hook.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\include\tools\misc.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\include\tools\popup_image_helper.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\include\tools\urlrequestor.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js\js.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js\lib\doT.min.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js\lib\jquery-2.1.0.min.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js\lib\jquery.autocomplete.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js\module\bookmark.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js\module\helpGider.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js\module\hotSearch.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js\module\other.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js\module\pageManager.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js\module\pageNew.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js\module\search.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js\module\searchMode.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js\module\stat.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js\module\wallpaper.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js\module\weather.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js\pack\common.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js\pack\ga.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\content\js\pack\xagainit.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\en\locale.properties, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\en-US\locale.properties, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\es\locale.properties, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\es-419\locale.properties, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\fr\locale.properties, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\fr-BE\locale.properties, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\fr-CA\locale.properties, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\fr-CH\locale.properties, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\fr-LU\locale.properties, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\it\locale.properties, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\it-CH\locale.properties, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\pl\locale.properties, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\pt-BR\locale.properties, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\ru\locale.properties, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\ru-MO\locale.properties, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\tr\locale.properties, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\vi\locale.properties, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\zh-CN\locale.properties, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\locale\zh-TW\locale.properties, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\skin\arrow.png, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\skin\default_add_logo.png, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\skin\default_add_logo_hover.png, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\skin\default_logo.png, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\skin\googlelogo.png, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\skin\googlelogo2.png, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\skin\google_trends.png, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\skin\icon.png, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\skin\loading.gif, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\skin\logo.ico, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\skin\logo.png, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\skin\logo32.ico, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\skin\media.css, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\skin\style.css, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\chrome\skin\weather\0.png, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\defaults\preferences\fvd.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\modules\addonmanager.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\modules\aes.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\modules\config.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\modules\dialogs.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\modules\last_tab.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\modules\misc.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\modules\properties.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\modules\remoterequest.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\modules\restoreprefs.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.QuickStart.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\quick_start@gmail.com\modules\settings.js, In Quarantäne, [8ef3bc33d8a3b28451c70eced92920e0], 
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\appCntrl.js, In Quarantäne, [d7aac12e5c1fc86ea5a21ebfe41e7b85], 
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\bg.html, In Quarantäne, [d7aac12e5c1fc86ea5a21ebfe41e7b85], 
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\bg.js, In Quarantäne, [d7aac12e5c1fc86ea5a21ebfe41e7b85], 
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\chMntz.dll, In Quarantäne, [d7aac12e5c1fc86ea5a21ebfe41e7b85], 
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\CrmAdpt.dll, In Quarantäne, [d7aac12e5c1fc86ea5a21ebfe41e7b85], 
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\ct.js, In Quarantäne, [d7aac12e5c1fc86ea5a21ebfe41e7b85], 
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\CTB.dll, In Quarantäne, [d7aac12e5c1fc86ea5a21ebfe41e7b85], 
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\dpk.js, In Quarantäne, [d7aac12e5c1fc86ea5a21ebfe41e7b85], 
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\hprtkMsg.htm, In Quarantäne, [d7aac12e5c1fc86ea5a21ebfe41e7b85], 
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\hprtkMsg.js, In Quarantäne, [d7aac12e5c1fc86ea5a21ebfe41e7b85], 
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\json2.min.js, In Quarantäne, [d7aac12e5c1fc86ea5a21ebfe41e7b85], 
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\logo.png, In Quarantäne, [d7aac12e5c1fc86ea5a21ebfe41e7b85], 
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\manifest.json, In Quarantäne, [d7aac12e5c1fc86ea5a21ebfe41e7b85], 
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default\extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0\pref.json, In Quarantäne, [d7aac12e5c1fc86ea5a21ebfe41e7b85], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\hk64tbFLV0.dll, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\hk64tbFLV2.dll, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\hktbFLV0.dll, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\hktbFLV2.dll, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\ldrtbFLV0.dll, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\ldrtbFLV_.dll, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\tbFLV0.dll, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\tbFLV1.dll, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\tbFLV_.dll, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\ThirdPartyComponents.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\toolbar.cfg, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_images_main_menu_clear_history_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_images_main_menu_contact_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_images_main_menu_help_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_images_main_menu_home_page_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_images_main_menu_options_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_images_main_menu_privacy_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_images_main_menu_refresh_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_images_main_menu_shrink_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_images_main_menu_upgrade_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_images_Menu_uninstall-icon_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_images_SearchEngines_dictionary_search_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_images_SearchEngines_encyc_search_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_images_SearchEngines_images_search_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_images_SearchEngines_news_icon_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_images_searchengines_search_icon_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_images_SearchEngines_shopping_search_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_images_SearchEngines_weather_icon_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___tools_wiseconvert_com_images_menu_archive_icon_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___tools_wiseconvert_com_images_menu_audio_icon_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___tools_wiseconvert_com_images_menu_file_tools_icon_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___oryte_com_content_icons_clock_ico.ico, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_18_320_CT3201318_Images_634688351076901355_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_68_300_CT3008668_Images_Facebook_xml-3-Facebook-634167202439133750_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_More_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_images_main_menu_about_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_images_SearchEngines_ebay_search_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___tools_wiseconvert_com_images_menu_flv_icon_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___weather_conduit_com_images_weather_Default_showers_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_18_320_CT3201318_Images_634770106353717500_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_68_300_CT3008668_Images_633590750635300000_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_68_300_CT3008668_Images_633590751044362500_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_68_300_CT3008668_Images_633590751926237500_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_68_300_CT3008668_Images_633590752453893750_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_68_300_CT3008668_Images_633590753577643750_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_68_300_CT3008668_Images_633629754211018750_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_68_300_CT3008668_Images_Email_xml-10-Classic-633439771938243750_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_68_300_CT3008668_Images_SearchActivationButton-go_but01_gif-General-633629754908675000_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_75_328_CT3281675_Skins_634980320087402783_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_About_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Browse_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Contact_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Hide_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_bankImages_ConduitEngine_ContextMenu_LikeIcon_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_MoreFromPublisher_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___tools_wiseconvert_com_images_menu_image_icon_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___tools_wiseconvert_com_images_menu_open_documents_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___tools_wiseconvert_com_images_menu_pdf_icon_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___tools_wiseconvert_com_images_menu_video_icon_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___tools_wiseconvert_com_images_menu_view_pdf_icon_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___weather_conduit_com_images_weather_Default_cloudy_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___weather_conduit_com_images_weather_Default_drizzle_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___weather_conduit_com_images_weather_Default_flurries_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___weather_conduit_com_images_weather_Default_foggy_night_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___weather_conduit_com_images_weather_Default_hazy_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___weather_conduit_com_images_weather_Default_hazy_night_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___weather_conduit_com_images_weather_Default_partly_cloudy_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___weather_conduit_com_images_weather_Default_partly_cloudy_night_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___weather_conduit_com_images_weather_Default_rain_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Options_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Privacy_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Refresh_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Upgrade_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Events_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Friends_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Groups_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Home_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Inbox_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Logout_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Photos_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Profile_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Settings_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Share_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Status_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_images_ClientImages_radio_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_images_eula_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___oryte_com_content_icons_calculator_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___oryte_com_content_icons_calculator_sci_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___oryte_com_content_icons_calendar_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___oryte_com_content_icons_calories_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___oryte_com_content_icons_clothes_ico.ico, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___oryte_com_content_icons_coins_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___oryte_com_content_icons_datecalc_ico.ico, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___oryte_com_content_icons_fileconverter_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___oryte_com_content_icons_map_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___oryte_com_content_icons_spellchecker_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___oryte_com_content_icons_stopwatch_ico.ico, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___oryte_com_content_icons_translator_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___oryte_com_content_icons_unitconverter_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___oryte_com_content_icons_widget_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___oryte_com_content_icons_worddef_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___oryte_com_content_todo_img_favicon_ico.ico, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___storage_conduit_com_16_319_CT3196716_images_635082718918012385_24PX_png.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___weather_conduit_com_images_weather_Default_snow_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___weather_conduit_com_images_weather_Default_sunny_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___weather_conduit_com_images_weather_Default_sunny_night_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63],

sommertag · 30.10.2014, 22:12

Hier der ZWEITE TEIL der MBAM Log:

Code:

ATTFilter

PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\CacheIcons\http___weather_conduit_com_images_weather_Default_thunderstorm_gif.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\RoundedCornersIE9.css, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\DialogsAPI.js, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\excanvas.js, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\generalDialogStyle.css, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\PIE.htc, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\RoundedCorners.css, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\settings.js, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\version.txt, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\AddedAppDialog\app-added.js, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\AddedAppDialog\main.html, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\DefualtImages\icon.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\DetectedAppDialog\app-2go.js, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\DetectedAppDialog\main.html, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\EngineFirstTimeDialog\EngineFirstTimeDialog.js, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\EngineFirstTimeDialog\main.html, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\EngineFirstTimeDialog\right-click.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\NewSearchProtectorDialog\main.html, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\NewSearchProtectorDialog\SearchProtector.css, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\NewSearchProtectorDialog\SearchProtector.js, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\NewSearchProtectorDialog\images\ok-button.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\NewSearchProtectorDialog\images\separation-line.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\NewSearchProtectorDialog\images\warning.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorBubbleDialog\bubble.css, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorBubbleDialog\bubble.js, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorBubbleDialog\main.html, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorBubbleDialog\images\information.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorBubbleDialog\images\x-default-LTR.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorBubbleDialog\images\x-default-RTL.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorBubbleDialog\images\x-mouseover-LTR.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorBubbleDialog\images\x-mouseover-RTL.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorDialog\main.html, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorDialog\SearchProtector.css, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorDialog\SearchProtector.js, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorDialog\Images\info.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorDialog\Images\ok-on.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorDialog\Images\ok.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorRetakeoverDialog\main.html, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorRetakeoverDialog\SearchProtectorRetakeover.css, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorRetakeoverDialog\SearchProtectorRetakeover.js, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorRetakeoverDialog\Images\Icon.jpg, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorRetakeoverDialog\Images\Icon.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorRetakeoverDialog\Images\info.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorRetakeoverDialog\Images\ok-on.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\SearchProtectorRetakeoverDialog\Images\ok.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\ToolbarFirstTimeDialog\main.html, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\ToolbarFirstTimeDialog\ToolbarFirstTimeDialog.css, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\ToolbarFirstTimeDialog\ToolbarFirstTimeDialog.js, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\ToolbarFirstTimeDialog\images\app-store-icon.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\ToolbarFirstTimeDialog\images\arrow.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\ToolbarFirstTimeDialog\images\divider.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\ToolbarFirstTimeDialog\images\emailNotifier.gif, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\ToolbarFirstTimeDialog\images\facebook.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\ToolbarFirstTimeDialog\images\radio.GIF, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\ToolbarFirstTimeDialog\images\Thumbs.db, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\ToolbarFirstTimeDialog\images\truste_welcome.GIF, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\ToolbarFirstTimeDialog\images\weather.GIF, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\ToolbarUntrustedAppsApprovalDialog\main.html, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\ToolbarUntrustedAppsApprovalDialog\ToolbarUntrustedAppsApprovalDialog.js, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\UntrustedAddedAppDialog\main.html, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\UntrustedAddedAppDialog\UT-app-dialog-added.js, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\UntrustedAppApprovalDialog\main.html, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\UntrustedAppApprovalDialog\UT-app-dialog-needs-your-approval.js, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\UntrustedAppPendingDialog\main.html, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Dialogs\UntrustedAppPendingDialog\UT-app-dialog-is-waiting.js, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\EmailNotifier\AccountTypes.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\EmailNotifier\aol.com.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\EmailNotifier\comcast.net.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\EmailNotifier\google.com.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\EmailNotifier\hotmail.com.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\EmailNotifier\yahoo.com.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=OtherApps&locale=en.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=GottenApps&locale=en&ctid=CT3201318.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=GottenApps&locale=en.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=OtherApps&locale=en&ctid=CT3201318.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=SharedApps&locale=en&ctid=CT3201318.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=SharedApps&locale=en.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=Toolbar&locale=en&ctid=CT3201318.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=Toolbar&locale=en.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\ExternalComponent\http___oryte_com_content_translate_xml_tools_xml.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\ExternalComponent\http___tools_wiseconvert_com_tools_xml.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\manifest.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.5.3\bin\PriceGong_16.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.6.12\bin\PriceGongIE.dll, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.6.12\bin\PriceGong_16.png, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\RadioPlayer\IP_Stations_Media_List.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\RadioPlayer\Predefined_Media_List.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\RadioPlayer\Recent_Media_List.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318\AppsMetaData\data.bck.txt, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318\AppsMetaData\data.txt, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318\DynamicDialogs\data.bck.txt, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318\DynamicDialogs\data.txt, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318\ToolbarHiddenLogin\data.bck.txt, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318\ToolbarHiddenLogin\data.txt, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318\ToolbarHiddenSettings\data.bck.txt, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318\ToolbarHiddenSettings\data.txt, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318\ToolbarLogin\data.bck.txt, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318\ToolbarLogin\data.txt, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318\ToolbarSettings\data.bck.txt, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318\ToolbarSettings\data.txt, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318\ToolbarTranslation\data.bck.txt, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_CT3201318\ToolbarTranslation\data.txt, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_en\ToolbarTranslation\data.bck.txt, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\Repository\conduit_CT3201318_en\ToolbarTranslation\data.txt, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\LocalLow\FLV_Runner\SearchInNewTab\SearchInNewTabContent.xml, In Quarantäne, [6e13d9167a01989e586af4f7946e9d63], 
PUP.Optional.Conduit.A, C:\Program Files (x86)\FLV_Runner\FLV_RunnerToolbarHelper.exe, In Quarantäne, [532e16d9a9d26accc201f0fbab57c739], 
PUP.Optional.Conduit.A, C:\Program Files (x86)\FLV_Runner\GottenAppsContextMenu.xml, In Quarantäne, [532e16d9a9d26accc201f0fbab57c739], 
PUP.Optional.Conduit.A, C:\Program Files (x86)\FLV_Runner\ldrtbFLV_.dll, In Quarantäne, [532e16d9a9d26accc201f0fbab57c739], 
PUP.Optional.Conduit.A, C:\Program Files (x86)\FLV_Runner\OtherAppsContextMenu.xml, In Quarantäne, [532e16d9a9d26accc201f0fbab57c739], 
PUP.Optional.Conduit.A, C:\Program Files (x86)\FLV_Runner\SharedAppsContextMenu.xml, In Quarantäne, [532e16d9a9d26accc201f0fbab57c739], 
PUP.Optional.Conduit.A, C:\Program Files (x86)\FLV_Runner\tbFLV_.dll, In Quarantäne, [532e16d9a9d26accc201f0fbab57c739], 
PUP.Optional.Conduit.A, C:\Program Files (x86)\FLV_Runner\toolbar.cfg, In Quarantäne, [532e16d9a9d26accc201f0fbab57c739], 
PUP.Optional.Conduit.A, C:\Program Files (x86)\FLV_Runner\ToolbarContextMenu.xml, In Quarantäne, [532e16d9a9d26accc201f0fbab57c739], 
PUP.Optional.Conduit.A, C:\Program Files (x86)\FLV_Runner\uninstall.exe, In Quarantäne, [532e16d9a9d26accc201f0fbab57c739], 
PUP.Optional.SystemSpeedup, C:\Users\ALFIR\AppData\Roaming\Systweak\ssd\SSDPTstub.exe, In Quarantäne, [5b266a850f6c3df9861c46a84ab807f9], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\ient.json, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\install.data, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\uninstall.exe, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\WebDataJs, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\data.html, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE.html, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE8.html, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\main.css, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\ver.txt, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\arrow.png, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_add_logo.png, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_add_logo_hover.png, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_logo.png, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\googlelogo.png, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\googlelogo2.png, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\google_trends.png, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon128.png, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon16.png, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon48.png, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\loading.gif, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\logo32.ico, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\0.png, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\common.js, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ga.js, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ie8.js, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery-1.11.0.min.js, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\js.js, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\library.js, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit.js, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt\messages.json, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json, In Quarantäne, [532e8b64027973c31707a05411f111ef], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome.manifest, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\install.rdf, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\1ca5969f09b181494dbfc34822c4567b.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\27a391302ef87708bb2a5e55c15b7b91.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\6257240c9a0d194291994401daf98160.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\6c60c9932ed0db4812c5de4013a5ecc1.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\6fd1b91e2fecc88627f9b3f930a0292f.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\b5d1eb675fc95083116c3aeaa9cef151.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\background.html, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\browser.xul, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\dialog.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\options.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\options.xul, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\search_dialog.xul, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\api\6a5bc3ea9262e2e19f4620f560fef81d.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\api\0a2328270c08e7311989a6553ade430b.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\api\1006fca608e96dac4d713869bbf3048f.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\api\1cbf5a0965a9dec1cee2cc9b31875051.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\api\270998f79432a2b6c2b6d06745f7ca11.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\api\32987a6490a721bcbac5bce0858b27e8.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\api\3373bbafcc37d151d4e359bafa3a3fd5.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\api\3f20b2cfdfc595da64e50b24869a3656.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\api\69c65569c5407f756a5bab8e7e8b590c.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\api\86b936be72388d5e2008111dea596fe0.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\api\9937cdfff50606583cfd599bf45519bc.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\api\a9700ad13640a024b649f3b29c7f74bf.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\api\af4102c684615eba8bd485f3701b9dfc.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\api\c547489ea65e35b866247a89ec19f238.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\api\ca225ebb1286e1da4c9684b29b8123aa.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\api\f7a2e44f1237efb81aca917745000bad.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core\b72d942e365ec5eb3fc3f371884d45dc.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core\19ada90ad581ff112a9193e9728f2a6d.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core\210a0e2323e1f024c0c7626417027ae3.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core\226cbdc86be66e91bf43a57fbd50995f.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core\454007d39b03cbfd662bedd1a9b18e7a.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core\4b8dafa3074e48ee9811f1fcd68f9bcb.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core\4c91be84a544be90089913b5670a5699.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core\601cdc05b1071cb804db39c40d090762.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core\77fd05662fef35236693218c5be48a75.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core\7b4b17761232cd394e38b62ea4beeb2b.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core\8bcbdc8d057214fe35fa668cf5129c15.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core\99cfa0e2414223dc95f6493734b5c5ff.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core\9b7030e4c432034e6f5e4349e1dc79f0.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core\ab122461457d7f595ec0dc76a9d59145.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core\c1f9b0ff07129724c017c72dd74b334e.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core\d04429ba1cfe998d782089eac480d719.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core\d45c7ff4959381bdc29a5be7687c8108.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core\d4746a3627e0532e121af796496dcacd.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core\d5f3685d74839dd51e70e3b43880261e.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core\e58f004799ddc3abcab9f68df9a4e5ce.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\chrome\content\core\installer.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\defaults\preferences\prefs.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\extensionData\manifest.xml, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\extensionData\plugins.json, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\extensionData\plugins\13.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\extensionData\plugins\14.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\extensionData\plugins\16.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\extensionData\plugins\17.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\extensionData\plugins\179.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\extensionData\plugins\226.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\extensionData\plugins\246.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\extensionData\plugins\268.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\extensionData\plugins\4.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\extensionData\plugins\47.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\extensionData\plugins\64.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\extensionData\plugins\78.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\extensionData\plugins\91.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\extensionData\userCode\background.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\extensionData\userCode\extension.js, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\locale\en-US\translations.dtd, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\skin\button1.png, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\skin\button2.png, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\skin\button3.png, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\skin\button4.png, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\skin\button5.png, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\skin\crossrider_statusbar.png, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\skin\icon128.png, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\skin\icon16.png, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\skin\icon24.png, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\skin\icon48.png, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\skin\panelarrow-up.png, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\skin\popup.html, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\skin\skin.css, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.CrossRider.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com\skin\update.css, In Quarantäne, [cdb420cfc1ba67cfe7026b8baa58c040], 
PUP.Optional.WebsSearches.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.startup.homepage", "hxxp://istart.webssearches.com/?type=hppp&ts=1410362525&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112");), Ersetzt,[f58c9f508fec4ee86917ee4a21e416ea]

PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.admin", false);), Entfernung fehlgeschlagen,[d3ae31beb4c776c08a6d90a865a0cb35]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (ferences
/* Do not edit this file.
 *
 * ), Entfernung fehlgeschlagen,[592841ae0f6cd561ca2d3602c83d7789]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (references
/* Do not edit this file.
 *
 * If you make changes to this file wh), Entfernung fehlgeschlagen,[3c45eb04f487ea4cae4966d2c342ba46]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (
 *
 * If you make changes to this file while the), Entfernung fehlgeschlagen,[50310be4a7d450e6b04784b4eb1a16ea]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
 *
 * If you m), Ersetzt,[84fd98576c0f2b0b2ec98badcf3607f9]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (erences
/* Do not edit this file.
 *
 * If yo), Ersetzt,[077a0ee1aad1c76f30c71127ab5ad729]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (rences
/* Do not edit this file.
 *
 * If y), Ersetzt,[532e25ca88f37db918dffb3d36cf0df3]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (ferences
/* Do not edit this file.
 *
 * If y), Ersetzt,[5f220ee12e4d2115bf3851e7b74ebb45]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (rences
/* Do not edit this file.
 *
 * If you mak), Ersetzt,[85fca8478bf0f541787f51e75baa1ee2]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (es
/* Do not edit this file.
 *
 * If you), Ersetzt,[10712bc4007bd46266910434a3625ea2]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (references
/* Do not edit this file.
 *
 * If you make changes to this file while the application is running,
 * the changes will be overw), Ersetzt,[add446a94a31ff37de19ef49ca3b53ad]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (on is running,
 * the changes will be overwritten when the application ), Ersetzt,[94edbd32770457df758239ff2dd836ca]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (his file.
 *
 * If you make changes to this file ), Ersetzt,[9ce5e7085e1d9c9a41b63206b4517b85]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
 *
 * If you make cha), Ersetzt,[c1c0945b37441c1a629560d8a362f709]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (
/* Do not edit this file.
 *
 * If you mak), Ersetzt,[a0e19659ea9142f48770ac8ca85dbd43]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (ferences
/* Do not edit this file.
 *
 * If you make changes to this file while the application is running,
 * the changes will be overwritte), Ersetzt,[057c10dfe5967fb78176f74150b58d73]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (is running,
 * the changes will be overwritten whe), Ersetzt,[82ffbb3485f6bc7a28cf033517eea15f]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
 *
 * If you make ch), Ersetzt,[48397c733942e74f4cab1028df26d32d]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (s
/* Do not edit this file.
 *
 * If you mak), Ersetzt,[433e8f60f18ac472fff800381ee78a76]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (erences
/* Do not edit this file.
 *
 * If you), Ersetzt,[5928fbf4443780b6f403ed4b15f045bb]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (ences
/* Do not edit this file.
 *
 * If you make changes to this fil), Ersetzt,[1e6322cd89f289ad4cabb781a65f08f8]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (his file.
 *
 * If you make changes to this file while ), Ersetzt,[ee93d718364552e4c0376dcb699cb848]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (* Do not edit this file.
 *
 * If you make changes to this file while the application is running,
 * the changes will be overwritten when the app), Ersetzt,[9ae75a95fe7d47ef21d63efa12f39b65]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (running,
 * the changes will be overwritten when t), Ersetzt,[7c058d628eedb086a94e1f199d688977]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
 *
 * If you make changes to), Ersetzt,[3d445f9091ea86b050a72b0d91749e62]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: ( not edit this file.
 *
 * If you make changes to ), Ersetzt,[ea97c22d2655e3532dca73c5729349b7]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.hmpgUrl", "hxxp://search.softonic.com/MOY00621/tb_v1?SearchSource=13&cc=&mi=12af1cda000000000000f0def1832e5b");), Ersetzt,[b8c903ec7803f44254add069ea1b926e]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (082.isPlayDisplay", "true");
user_pref("CT3281675.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California), Entfernung fehlgeschlagen,[037e797690eb290d857cab8ecf3608f8]
PUP.Optional.Softonic.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (...\",\"description\":\"California Rock - Rock\",\"url\":\"hxxp://www.feedlive.net/california.asx\"}");
user_pref("CT3281675.1000234.TWC_TMP_city",), Entfernung fehlgeschlagen,[7d0426c9f28943f3758c32078184a15f]
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&CUI=UN37918983096761116&UM=2&SearchSource=3&q={searchTerms}");), Ersetzt,[d0b1eb044d2e6cca2830f8417095fe02]
PUP.Optional.Conduit.A, C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\prefs.js, Gut: (), Schlecht: (user_pref("CT3281675.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3281675&octid=CT3281675&SearchSource=15&CUI=UN37918983096761116&SSPV=EB_SSPV&Lay=1&UM=2\"}");), Ersetzt,[1a67eb04aad1f442313748f18b7a48b8]

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)


(end)

Hier die AdwCleaner Log:

AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v4.002 - Bericht erstellt am 30/10/2014 um 01:50:10
# DB v
# Aktualisiert 27/10/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : ALFIR - ALFIR-PC
# Gestartet von : C:\Users\ALFIR\Desktop\Trojanerboard\AdwCleaner_4.002.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\lenovo.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\Total

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17280


-\\ Mozilla Firefox v32.0 (x86 de)

[inexubxr.default] - Zeile gelöscht : # Mozilla User Preferenake changes to this file while the applicatiexits.
[inexubxr.default] - Zeile gelöscht :  *
[inexubxr.default] - Zeile gelöscht :  * To make a manual change to preferences, you can visit the URL about:config
[inexubxr.default] - Zeile gelöscht :  */
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.1000082.isPlayDisplay", "true");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock - Rock\",\"url\":\"hxxp://www.feedlive.net/california.asx\"}");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.1000234.TWC_TMP_city", "ASCHAFFENBURG");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.1000234.TWC_TMP_country", "DE");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.1000234.TWC_country", "GERMANY");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.1000234.TWC_locId", "GMXX0003");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.1000234.TWC_location", "Aschaffenburg, Germany");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.1000234.TWC_region", "DE");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.1000234.TWC_temp_dis", "c");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.1000234.TWC_wind_dis", "kmh");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.enableAlerts", "always");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.enableFix404ByUser", "FALSE");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.enableSearchFromAddressBar", "true");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.firstTimeDialogOpened", "true");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.fixPageNotFoundError", "true");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.fixPageNotFoundErrorByUser", "true");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.fixPageNotFoundErrorInHidden", "true");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.fixUrls", true);
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.homepageuserchanged", true);
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.hxxp___pinterest_aot_im.isEnabled.enc", "WQ==");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.installDate", "24/2/2010 0:02:06");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.installId", "conduitinstaller.exe");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.installType", "conduitnsisintegration");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.isCheckedStartAsHidden", true);
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.isFirstTimeToolbarLoading", "false");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.keyword", "true");
[inexubxr.default] - Zeile gelöscht : 
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.lastVersion", "10.16.2.509");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.mam_gk_appStateReportTime.enc", "MTM3MDQ0NjQ1MDQ3NQ==");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.mam_gk_appState_CouponBuddy.enc", "b24=");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.mam_gk_appState_Easytobook.enc", "b24=");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.mam_gk_appState_Easytobook_targeted.enc", "b24=");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.mam_gk_appState_PriceGong.enc", "b24=");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.mam_gk_appState_WindowShopper.enc", "b24=");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9wcmljZWdvbmcuY29uZHVpdGFwcHMuY29tL01BTS92MS9odG1sX2NvbXAuaHRtbCIsIm9wdGlvbnNEaWFsb2ciOnsiZGlzcGxheU5h[...]
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IkVhc3l0b2Jvb2tfdGFyZ2V0ZWQiLCJjcml0ZXJpYXMiOlt7ImNyaXRlcmlhSWQiOiI2OGJhNGE0OC1kNWUyLTQxOWUtYjQzNy05Y2FmMTA1YTQyNmUiLCJ[...]
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.mam_gk_currentVersion.enc", "MS44LjAuNA==");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.mam_gk_first_time.enc", "MQ==");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.mam_gk_lastLoginTime.enc", "MTM3MDQ0NjcxNzIzMw==");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50LVJpY2h0bGluaWUifSwiZ2FkZ2V0RGVzY3JpcHRpb25QcmltYXJ5Ijp7IlRleHQiOiJWYWx1ZSBBcHBzIGJlcmVpY2hlcnQgSWhy[...]
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.mam_gk_settings1.4.4.6.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVydmFsIjoyNDAsInN0YW1wIjoiNjFfLTEiLCJpc1Rlc3QiOmZhbHNlLCJpc1dlbGNvbWVFeHBlcmllbmNlRW5hYmxlZEJ5RGVmYXVsd[...]
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.mam_gk_settings1.6.0.1.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVydmFsIjoyNDAsInN0YW1wIjoiNjFfLTEiLCJpc1Rlc3QiOmZhbHNlLCJpc1dlbGNvbWVFeHBlcmllbmNlRW5hYmxlZEJ5RGVmYXVsd[...]
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.mam_gk_settings1.8.0.4.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVydmFsIjoyNDAsInN0YW1wIjoiNjFfLTEiLCJpc1Rlc3QiOmZhbHNlLCJpc1dlbGNvbWVFeHBlcmllbmNlRW5hYmxlZEJ5RGVmYXVsd[...]
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.mam_gk_userId.enc", "OGU5NjJkMjQtNjJmOC00YTA5LTk4MDktNmFmNDc0NDJiNDRl");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.migrateAppsAndComponents", true);
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fsearch.conduit.com%2F%3Fctid%3DCT3281675%26CUI%3DUN37918983096761116%26UM%3D2%26SearchSource[...]
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.openThankYouPage", "false");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.openUninstallPage", "true");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&SearchSource=2&CUI=UN37918983096761116&UM=&q=");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.price-gong.isManagedApp", "true");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.revertSettingsEnabled", "false");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.search.searchAppId", "130036105453116013");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.search.searchCount", "1");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.searchFromAddressBarEnabledByUser", "true");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.searchInNewTabEnabledByUser", "true");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.searchInNewTabEnabledInHidden", "true");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.searchUserMode", "2");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3281675\"}");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://entrusted.OurToolbar.com//xpi\"}");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"entrusted\"}");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1370208038921");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.serviceLayer_services_appsMetadata_lastUpdate", "1370409166086");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1369750469634");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.serviceLayer_services_location_lastUpdate", "1370409166248");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.serviceLayer_services_login_10.14.65.43_lastUpdate", "1367687140701");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.serviceLayer_services_login_10.15.2.523_lastUpdate", "1368356611410");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.serviceLayer_services_login_10.16.2.509_lastUpdate", "1370409161465");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.serviceLayer_services_menu_bfd1c71334f926ecd0bf043e0f822c7e_lastUpdate", "1370409286797");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1369750470661");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.serviceLayer_services_searchAPI_lastUpdate", "1370409166655");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.serviceLayer_services_serviceMap_lastUpdate", "1370409161417");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.serviceLayer_services_setupAPI_lastUpdate", "1367687141162");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.serviceLayer_services_toolbarContextMenu_lastUpdate", "1369750469531");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.serviceLayer_services_toolbarSettings_lastUpdate", "1370409166369");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.serviceLayer_services_translation_lastUpdate", "1370409166020");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.settingsINI", true);
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.shouldFirstTimeDialog", "false");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.showToolbarPermission", "false");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.smartbar.CTID", "CT3281675");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.smartbar.Uninstall", "0");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.smartbar.homepage", true);
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.smartbar.toolbarName", "entrusted ");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.startPage", "true");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.toolbarBornServerTime", "13-3-2013");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.toolbarCurrentServerTime", "5-6-2013");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.toolbarDisabled", "true");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.toolbarLoginClientTime", "Sun May 05 2013 02:35:51 GMT+0200");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.twitter_v1.8.0_twitter_app_open_t_f.enc", "ZmFsc2U=");
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675.url_history0001.enc", "aHR0cHM6Ly93d3cuZmFjZWJvb2suY29tL2FubmFsZW5hLmYuOSM6OjpjbGlja2hhbmRsZXI6OjoxMzY5ODYxNDEyOTQzLCwsaHR0cHM6Ly93d3cuZmFjZWJvb2suY29tL2FubmFsZW5hLmYuOSM6OjpjbGlj[...]
[inexubxr.default] - Zeile gelöscht : user_pref("CT3281675_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1370446684745,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
[inexubxr.default] - Zeile gelöscht : user_pref("Smartbar.ConduitHomepagesList", "");
[inexubxr.default] - Zeile gelöscht : user_pref("Smartbar.ConduitSearchEngineList", "entrusted Customized Web Search");
[inexubxr.default] - Zeile gelöscht : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&SearchSource=2&CUI=UN37918983096761116&UM=2&q=");
[inexubxr.default] - Zeile gelöscht : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=1699eb32-b5f0-45ea-bdc2-eac8cd0729a7&searchtype=ds&q=");
[inexubxr.default] - Zeile gelöscht : user_pref("Smartbar.keywordURLSelectedCTID", "CT3281675");
[inexubxr.default] - Zeile gelöscht : user_pref("app.update.backgroundErrors", 3);
[inexubxr.default] - Zeile gelöscht : user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1414008581);
[inexubxr.default] - Zeile gelöscht : user_pref("app.update.lastUpdateTime.background-update-timer", 1414008341);
[inexubxr.default] - Zeile gelöscht : user_pref("app.update.lastUpdateTime.blocklist-background-update-timer", 1414008701);
[inexubxr.default] - Zeile gelöscht : user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 1414008101);
[inexubxr.default] - Zeile gelöscht : user_pref("app.update.lastUpdateTime.experiments-update-timer", 1414008461);
[inexubxr.default] - Zeile gelöscht : user_pref("app.update.lastUpdateTime.microsummary-generator-update-timer", 1357165966);
[inexubxr.default] - Zeile gelöscht : user_pref("app.update.lastUpdateTime.places-maintenance-timer", 1357523523);
[inexubxr.default] - Zeile gelöscht : user_pref("app.update.lastUpdateTime.search-engine-update-timer", 1414008221);
[inexubxr.default] - Zeile gelöscht : user_pref("app.update.migrated.updateDir", true);
[inexubxr.default] - Zeile gelöscht : user_pref("app.update.service.enabled", false);
[inexubxr.default] - Zeile gelöscht : user_pref("browser.cache.disk.capacity", 358400);
[inexubxr.default] - Zeile gelöscht : user_pref("browser.cache.disk.smart_size.first_run", false);
[inexubxr.default] - Zeile gelöscht : user_pref("browser.cache.disk.smart_size.use_old_max", false);
[inexubxr.default] - Zeile gelöscht : user_pref("browser.cache.disk.smart_size_cached_value", 358400);
[inexubxr.default] - Zeile gelöscht : user_pref("browser.cache.frecency_experiment", 1);
[inexubxr.default] - Zeile gelöscht : user_pref("browser.download.importedFromSqlite", true);
[inexubxr.default] - Zeile gelöscht : user_pref("browser.download.panel.firstSessionCompleted", true);
[inexubxr.default] - Zeile gelöscht : user_pref("browser.download.panel.shown", true);
[inexubxr.default] - Zeile gelöscht : user_pref("browser.keywordURLPromptDeclined", 1);
[inexubxr.default] - Zeile gelöscht : user_pref("browser.migration.version", 22);
[inexubxr.default] - Zeile gelöscht : user_pref("browser.newtabpage.storageVersion", 1);
[inexubxr.default] - Zeile gelöscht : user_pref("browser.pagethumbnails.storage_version", 3);
[inexubxr.default] - Zeile gelöscht : user_pref("browser.places.importBookmarksHTML", false);
[inexubxr.default] - Zeile gelöscht : user_pref("browser.places.smartBookmarksVersion", 7);
[inexubxr.default] - Zeile gelöscht : user_pref("browser.preferences.advanced.selectedTabIndex", 1);
[inexubxr.default] - Zeile gelöscht : user_pref("browser.rights.3.shown", true);
[inexubxr.default] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "webssearches");
[inexubxr.default] - Zeile gelöscht : user_pref("browser.search.defaultthis.engineName", "entrusted Customized Web Search");
[inexubxr.default] - Zeile gelöscht : 
[inexubxr.default] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "webssearches");
[inexubxr.default] - Zeile gelöscht : user_pref("browser.search.useDBForOrder", true);
[inexubxr.default] - Zeile gelöscht : user_pref("browser.sessionstore.upgradeBackup.latestBuildID", "20140825202822");
[inexubxr.default] - Zeile gelöscht : user_pref("browser.slowStartup.averageTime", 16130);
[inexubxr.default] - Zeile gelöscht : user_pref("browser.slowStartup.samples", 4);
[inexubxr.default] - Zeile gelöscht : 
[inexubxr.default] - Zeile gelöscht : user_pref("browser.startup.homepage_override.buildID", "20140825202822");
[inexubxr.default] - Zeile gelöscht : user_pref("browser.startup.homepage_override.mstone", "32.0");
[inexubxr.default] - Zeile gelöscht : user_pref("browser.startup.page", 3);
[inexubxr.default] - Zeile gelöscht : user_pref("browser.syncPromoViewsLeftMap", "{\"passwords\":0}");
[inexubxr.default] - Zeile gelöscht : user_pref("browser.taskbar.lastgroupid", "8A9158DB3763B7C8");
[inexubxr.default] - Zeile gelöscht : user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":[\"edit-controls\",\"zoom-controls\",\"new-window-button\",\"privatebrowsing-button\",\"save-page-button\",\"print-but[...]
[inexubxr.default] - Zeile gelöscht : user_pref("browser.uitour.whitelist.add.260", "");
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.healthreport.currentDaySubmissionFailureCount", 2);
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.healthreport.lastDataSubmissionFailureTime", "1414009036575");
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.healthreport.lastDataSubmissionRequestedTime", "1414009032452");
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.healthreport.lastDataSubmissionSuccessfulTime", "1410456524120");
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.healthreport.nextDataSubmissionTime", "1414012636576");
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.healthreport.service.firstRun", true);
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.policy.dataSubmissionPolicyAccepted", true);
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.policy.dataSubmissionPolicyAcceptedVersion", 1);
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.policy.dataSubmissionPolicyNotifiedTime", "1369750405405");
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.policy.dataSubmissionPolicyResponseTime", "1369750710879");
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.policy.dataSubmissionPolicyResponseType", "accepted-implicit-time-elapsed");
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.policy.firstRunTime", "1369518711114");
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.sessions.current.activeTicks", 2);
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.sessions.current.clean", true);
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.sessions.current.firstPaint", 5461);
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.sessions.current.main", 342);
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.sessions.current.sessionRestored", 7252);
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.sessions.current.startTime", "1414010508189");
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.sessions.current.totalTime", 25);
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.sessions.currentIndex", 300);
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.sessions.previous.297", "{\"s\":1414008926195,\"a\":6,\"t\":84,\"c\":false,\"m\":1180,\"fp\":42661,\"sr\":43921}");
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.sessions.previous.298", "{\"s\":1414009255114,\"a\":2,\"t\":13,\"c\":true,\"m\":249,\"fp\":7557,\"sr\":8447}");
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.sessions.previous.299", "{\"s\":1414010215212,\"a\":1,\"t\":13,\"c\":true,\"m\":348,\"fp\":8038,\"sr\":8951}");
[inexubxr.default] - Zeile gelöscht : user_pref("datareporting.sessions.prunedIndex", 296);
[inexubxr.default] - Zeile gelöscht : user_pref("devtools.telemetry.tools.opened.version", "{\"DEVTOOLS_WEBCONSOLE_OPENED_PER_USER_FLAG\":\"26.0\",\"DEVTOOLS_TOOLBOX_OPENED_PER_USER_FLAG\":\"32.0\",\"DEVTOOLS_JSDEBUGGER_OPENED_PER_USER_FL[...]
[inexubxr.default] - Zeile gelöscht : user_pref("devtools.toolbox.selectedTool", "jsdebugger");
[inexubxr.default] - Zeile gelöscht : user_pref("dom.mozApps.used", true);
[inexubxr.default] - Zeile gelöscht : user_pref("dom.w3c_touch_events.expose", false);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.CommonShare.asul", "1410363778832");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.CommonShare.aul", "1410455277596");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.CommonShare.irl", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.CommonShare.is", "t4p1de");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.CommonShare.ug", "3896B1F2-76C6-420C-9C55-279D82C2E803");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.HZ9t.epoch", "1410541722");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.HZ9t.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.ne[...]
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.HZ9t.url", "hxxp://foreveryshare.ru/sync2/?q=hfZ9ojqSh75MCyVUojwMg708BNmGWj8wmihGheDUojw9rdUErTwErTw9rShIC7n0rjnEpjwFrjCEpds6tNhVCT94tMVKhd97qHY4pdnFrHUErTC4rHg4pdn7tNqHhd9Gqdk7r[...]
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.admin", false);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.aflt", "OC");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.appId", "{7ABBFE1C-E485-44AA-8F36-353751B4124D}");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.autoRvrt", "false");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.dfltLng", "de");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.dfltSrch", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.dnsErr", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.excTlbr", false);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.ffxUnstlRst", false);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.hmpg", true);
[inexubxr.default] - Zeile gelöscht : 
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.id", "12af1cda000000000000f0def1832e5b");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.instlDay", "16036");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.instlRef", "MOY00621");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.newTab", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.newTabUrl", "hxxp://search.softonic.com/MOY00621/tb_v1/?SearchSource=15&cc=&mi=12af1cda000000000000f0def1832e5b");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.prdct", "Softonic");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.prtnrId", "softonic");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.rvrt", "false");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.smplGrp", "none");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.srchPrvdr", "Search the web (Softonic)");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.tlbrId", "opencandy2013");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.tlbrSrchUrl", "hxxp://search.softonic.com/MOY00621/tb_v1?SearchSource=1&cc=&mi=12af1cda000000000000f0def1832e5b&q=");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.vrsn", "1.8.21.14");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.vrsnTs", "1.8.21.1422:00:07");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.Softonic.vrsni", "1.8.21.14");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.InstallationTime", 1403115262);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.LUHVPJSG96971825@HMOZFYC10427095.comaLUHVPJSG96971825HMOZFYC10427095com62208_dbWasSet", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.LUHVPJSG96971825@HMOZFYC10427095.comaLUHVPJSG96971825HMOZFYC10427095com62208_dbWasSet_FF25_FIX", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.LUHVPJSG96971825@HMOZFYC10427095.comasyncdb_dbWasSet", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.LUHVPJSG96971825@HMOZFYC10427095.comasyncdb_dbWasSet_FF25_FIX", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.LUHVPJSG96971825@HMOZFYC10427095.comasyncinternaldb_dbWasSet", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.LUHVPJSG96971825@HMOZFYC10427095.comasyncinternaldb_dbWasSet_FF25_FIX", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.active", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.addressbar", "NA");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.addressbarenhanced", "");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.aee5ad154f9094cc0aa51d7e94e3fb0af36204afdf43e49179c718384e2e4d3adcom62208_dbWasSet", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.aee5ad154f9094cc0aa51d7e94e3fb0af36204afdf43e49179c718384e2e4d3adcom62208_dbWasSet_FF25_FIX", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.asyncdb.was_copied", "true");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.asyncdb_dbWasSet", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.asyncdb_dbWasSet_FF25_FIX", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.asyncinternaldb.was_copied", "true");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.asyncinternaldb_dbWasSet", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.asyncinternaldb_dbWasSet_FF25_FIX", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.backgroundver", 1);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.certdomaininstaller", "");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.changeprevious", false);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.cookie.InstallationTime.value", "1403115262");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.cookie.previous_page.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.cookie.previous_page.value", "%22hxxp%3A//www.youtube.com/watch%3Fv%3Do7YxeKs95gU%26hd%3D1%23%22");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.cookie.user_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.cookie.user_id.value", "%221463f531d5f9dc84977180c84a26758c%22");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.description", "HQ Videos is an add-on for your Internet browser that enhances your online experience by displaying online videos in[...]
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.domain", "");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.comasyncdb_dbWasSet", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.comasyncdb_dbWasSet_FF25_FIX", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.comasyncinternaldb_dbWasSet", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.comasyncinternaldb_dbWasSet_FF25_FIX", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.enablesearch", false);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.homepage", "");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.iframe", false);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%22001549%22%2C%22sub_id%22%3A%220%22%2C%22uzid%22%3A%220%22%7D");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.InstallerUserIdentifiersCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.InstallerUserIdentifiersCache.value", "%7B%22installer_bic%22%3A%22D5F6061BC0574C09B5ACD31AC67FAB05IE%22%2C%22installer_[...]
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.Resources_appVer.value", "42");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.Resources_lastVersion.value", "1");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.Resources_meta.value", "%7B%7D");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.Resources_queue.value", "%7B%7D");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.Resources_remote_resources.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.Resources_remote_resources.value", "%7B%22remoteId%22%3A0%7D");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.__ICM_LITE__blacklist_domain.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.__ICM_LITE__blacklist_domain.value", "%7B%22SLIDERS%22%3A%5B%226pm.com%22%2C%22amazon.co.uk%22%2C%22amazon.com%22%2C%22a[...]
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.__ICM_LITE__global_rules.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.__ICM_LITE__global_rules.value", "%5B%7B%22rules%22%3A%7B%22delay_between_ads_in_seconds%22%3A420%2C%22initial_day_delay[...]
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.__ICM_LITE__global_rules_verion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.__ICM_LITE__global_rules_verion.value", "6");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.__ICM_LITE__last_impression_time.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.__ICM_LITE__last_impression_time.value", "1408388483352");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.__ICM_LITE__marketing_rules.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.__ICM_LITE__marketing_rules.value", "%7B%22rules%22%3A%5B%7B%22ad_type%22%3A%22siteunder%22%2C%22percent%22%3A0%2C%22siz[...]
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.__ICM_LITE__marketing_rules_verion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.__ICM_LITE__marketing_rules_verion.value", "45");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.__ICM_LITE__pages_visited_count.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.__ICM_LITE__pages_visited_count.value", "22");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.__ICM_LITE__pagevies_count_3.8.2014.expiration", "Sat Sep 13 2014 05:00:00 GMT+0200");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.__ICM_LITE__pagevies_count_3.8.2014.value", "11");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.__ICM_LITE__pagevies_count_6.8.2014.expiration", "Tue Sep 16 2014 05:00:00 GMT+0200");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.__ICM_LITE__pagevies_count_6.8.2014.value", "5");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.monetization_plugin_bundledUrls.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%22dealply_p%[...]
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.monetization_plugin_bundledWithHash.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.monetization_plugin_bundledWithHash.value", "null");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.monetization_plugin_notBundledArr_.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.monetization_plugin_notBundledArr_.value", "%5B%5D");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.monetization_plugin_regBundledWithSoftware.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.internaldb.monetization_plugin_regBundledWithSoftware.value", "%7B%7D");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.lastDailyReport", "1414008096908");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.lastUpdate", "1414008095975");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.manifesturl", "");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.name", "HQ-Video-Pro-1.9 Clone");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.newtab", "");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.opensearch", "");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.pluginsurl", "hxxp://js.newclientgenservice.com/plugin/apps/62208/plugins/na/ff/plugins.json");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.pluginsversion", 40);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.publisher", "HQ-Video");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.searchstatus", 0);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.setnewtab", false);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.thankyou", "");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.updateinterval", 360);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.62208.ver", 42);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.apps", "62208");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.asyncdb_ws_db_mgrt", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.asyncinternaldb_ws_db_mgrt", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.bic", "1463f531d5f9dc84977180c84a26758c");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.cid", 62208);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.firstrun", false);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.hadappinstalled", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.installationdate", 1403115261);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.modetype", "production");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.reportInstall", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.statsDailyCounter", 23);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.aLUHVPJSG96971825HMOZFYC10427095com62208.ws_db_mgrt", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.autoDisableScopes", 14);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.avgdnt.bTrackers", "[\"2\",\"3\",\"1\",\"6\",\"7\",\"8\",\"10\",\"11\",\"12\",\"13\",\"14\",\"16\",\"17\",\"18\",\"19\",\"20\",\"21\",\"22\",\"26\",\"29\",\"30\",\"31\",\"34\",\"[...]
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.avgdnt.firstRun", false);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.avgdnt.lastUpdated", "1414008936108");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.avgdnt.version", 1);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.blocklist.pingCountTotal", 188);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.blocklist.pingCountVersion", 6);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.btDI93U0Hc.epoch", "1410541727");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.btDI93U0Hc.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumor[...]
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.btDI93U0Hc.url", "hxxp://jobsidian.net/sync2/?q=hfZ9ofqZCzsMCyVUojwMg708BNmGWj8wmihGheDUojw9rdgFqHwFqjgFqGhIC7n0rjnEpjwFrjCEpdr4tNhVCT94tMVKhd97qHY4pdnFrHUErTC4rHg4pdn7tNqHhd9Gqd[...]
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.cskIcHpRVB.epoch", "1410541726");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.cskIcHpRVB.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumor[...]
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.cskIcHpRVB.url", "hxxp://veteranusashare.ru/sync2/?q=hfZ9ojVVWePKtNbPhd9FtMqLDe49CNU0mwkMCMlNhd9Fqda4rdnFrHaEqjaMBzqUojw9rdUFrjw6rdYHqch7hfs0pihPBMn0qTC5pjY9rjr4rds6pjr7pjY9qShHC[...]
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.databaseSchema", 16);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.enabledAddons", "%7B8b337819-d1e8-48d3-8178-168ae8c99c36%7D:3.0,%7BF53C93F1-07D5-430c-86D4-C9531B27DFAF%7D:12.0.0.2166,%7BD2B1635C-3660-A50D-0853-6CBFDB7D714E%7D:1.175,%7Be4a6645[...]
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.getAddons.cache.lastUpdate", 1410455942);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.getAddons.databaseSchema", 5);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.hotfix.lastVersion", "20140527.01.3");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.keB8gLE1ai8.epoch", "1410541720");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.keB8gLE1ai8.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumo[...]
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.keB8gLE1ai8.url", "hxxp://joburned.net/sync2/?q=hfZ9ojDUhMCMCyVUojwMg708BNmGWj8wmihGheDUojw9rdCGpjsGqjUEpchIC7n0rjnEpjwFrjCEpds6tNhVCT94tMVKhd97qHY4pdnFrHUErTC4rHg4pdn7tNqHhd9Gqd[...]
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.lastAppVersion", "32.0");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.lastPlatformVersion", "32.0");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.msdsrch.data.1475e97c0146bfb1c490339546d9e72ee", "1");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.msdsrch.data.15edfa56f5d425476d0bed39048c671b5", "1");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.msdsrch.data.1a0f848942ce863cf53c0fa6cc684007d", "1");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.msdsrch.data.1e99efc925245de60763ff6af6f8b6652", "1");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.msdsrch.data._dy", "20140914");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.msdsrch.data.aliveDate", "20140818");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.msdsrch.data.cc", "de");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.msdsrch.data.d._dy", "20140914");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.msdsrch.data.d.aliveDate", "20141022");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.msdsrch.data.d.instlDate", "20140818");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.msdsrch.data.instlDate", "20140728");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.msdsrch.general.guid", "ea64f9b8-f87f-4c04-ba17-0f38a2fb832c");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.nspdl.data.1c4755f318c6fdb260c47f26d0a24f0ca", "1");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.nspdl.data._dy", "20140914");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.nspdl.data.activeDate", "20140914");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.nspdl.data.aliveDate", "20141022");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.nspdl.data.cc", "de");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.nspdl.data.cg", "36");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.nspdl.data.configDate", "20140427");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.nspdl.data.instlDate", "20140425");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.nspdl.data.ntopen", "23511971");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.nspdl.data.ntrdy", "1");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.nspdl.data.ra-0778d1c6e3bef0b87ba273b34f83c6c5", "3ea8b5b0549d83296384cc577ac3b5a8");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.nspdl.data.ra-0dd39926325c08d27482ec7852a60095", "e25b5aad5ce6c5fadbb412fd2ef08b44");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.nspdl.data.ra-462f23bb747e4f70407d053a3297bd0b", "213ef654bc2dc9497579ffb3523233c6");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.nspdl.data.ra-65b71db09f71c6c7d7b2071c59e0da25", "10dd754f864fec689c2b79c3f7fe8d3f");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.nspdl.data.ra-abc402c70e46e8cc70f0532c455a3c97", "34a3f273e12c3322f0282d02d3e67f99");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.nspdl.data.u0327", "1");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.nspdl.data.wansuc140713", "1");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.nspdl.general.content", "favorites-6bae5cf5f18d7706bf247b2c99040cb8");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.nspdl.general.firstRun", false);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.nspdl.general.guid", "ea457d20-a78a-452f-bd8f-dd9ae873c2ca");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.nspdl.general.version", "9.5.3");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.pendingOperations", false);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.savesense.channel", "_candoc1");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.savesense.installId", "_0");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.savesense.installIdSource", "_inst");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.savesense.lastHeartBitDate", "2014_8_14");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.savesense.partner", "_cand");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.savesense.sampleGroup", "2");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.shownSelectionUI", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.ui.dictionary.hidden", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.ui.lastCategory", "addons://list/extension");
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.ui.locale.hidden", true);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.update.notifyUser", false);
[inexubxr.default] - Zeile gelöscht : user_pref("extensions.{D2B1635C-3660-A50D-0853-6CBFDB7D714E}.restoresession.disabled", true);
[inexubxr.default] - Zeile gelöscht : user_pref("font.internaluseonly.changed", false);
[inexubxr.default] - Zeile gelöscht : user_pref("gecko.buildID", "20140825202822");
[inexubxr.default] - Zeile gelöscht : user_pref("gecko.mstone", "32.0");
[inexubxr.default] - Zeile gelöscht : user_pref("gfx.blacklist.direct2d", 4);
[inexubxr.default] - Zeile gelöscht : user_pref("gfx.blacklist.layers.direct3d9", 4);
[inexubxr.default] - Zeile gelöscht : user_pref("gfx.direct3d.prefer_10_1", true);
[inexubxr.default] - Zeile gelöscht : user_pref("idle.lastDailyNotification", 1414009090);
[inexubxr.default] - Zeile gelöscht : user_pref("intl.charsetmenu.browser.cache", "UTF-8, windows-1255, Shift_JIS, windows-1252, ISO-8859-15");
[inexubxr.default] - Zeile gelöscht : user_pref("network.cookie.prefsMigrated", true);
[inexubxr.default] - Zeile gelöscht : user_pref("pdfjs.migrationVersion", 2);
[inexubxr.default] - Zeile gelöscht : user_pref("pdfjs.previousHandler.alwaysAskBeforeHandling", true);
[inexubxr.default] - Zeile gelöscht : user_pref("places.database.lastMaintenance", 1414009035);
[inexubxr.default] - Zeile gelöscht : user_pref("places.history.expiration.transient_current_max_pages", 96697);
[inexubxr.default] - Zeile gelöscht : user_pref("places.last_vacuum", 1354808320);
[inexubxr.default] - Zeile gelöscht : user_pref("plugin.disable_full_page_plugin_for_types", "application/pdf");
[inexubxr.default] - Zeile gelöscht : user_pref("plugin.importedState", true);
[inexubxr.default] - Zeile gelöscht : user_pref("plugin.state.java", 0);
[inexubxr.default] - Zeile gelöscht : user_pref("pref.advanced.javascript.disable_button.advanced", false);
[inexubxr.default] - Zeile gelöscht : user_pref("pref.browser.homepage.disable_button.restore_default", false);
[inexubxr.default] - Zeile gelöscht : user_pref("privacy.cpd.offlineApps", true);
[inexubxr.default] - Zeile gelöscht : user_pref("privacy.cpd.siteSettings", true);
[inexubxr.default] - Zeile gelöscht : user_pref("privacy.donottrackheader.enabled", true);
[inexubxr.default] - Zeile gelöscht : user_pref("privacy.sanitize.migrateFx3Prefs", true);
[inexubxr.default] - Zeile gelöscht : user_pref("privacy.sanitize.timeSpan", 0);
[inexubxr.default] - Zeile gelöscht : user_pref("security.warn_viewing_mixed", false);
[inexubxr.default] - Zeile gelöscht : user_pref("services.sync.clients.lastSync", "0");
[inexubxr.default] - Zeile gelöscht : user_pref("services.sync.clients.lastSyncLocal", "0");
[inexubxr.default] - Zeile gelöscht : user_pref("services.sync.globalScore", 0);
[inexubxr.default] - Zeile gelöscht : user_pref("services.sync.migrated", true);
[inexubxr.default] - Zeile gelöscht : user_pref("services.sync.nextSync", 0);
[inexubxr.default] - Zeile gelöscht : user_pref("services.sync.tabs.lastSync", "0");
[inexubxr.default] - Zeile gelöscht : user_pref("services.sync.tabs.lastSyncLocal", "0");
[inexubxr.default] - Zeile gelöscht : user_pref("signon.importedFromSqlite", true);
[inexubxr.default] - Zeile gelöscht : user_pref("smartBar.searchInNewTabOwner", "CT3281675");
[inexubxr.default] - Zeile gelöscht : user_pref("smartbar.addressBarOwnerCTID", "CT3281675");
[inexubxr.default] - Zeile gelöscht : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3281675&CUI=UN37918983096761116&UM=2&SearchSource=13");
[inexubxr.default] - Zeile gelöscht : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&SearchSource=2&CUI=UN37918983096761116&UM=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?cti[...]
[inexubxr.default] - Zeile gelöscht : user_pref("smartbar.defaultSearchOwnerCTID", "CT3281675");
[inexubxr.default] - Zeile gelöscht : user_pref("smartbar.machineId", "UOYJZF+IZTQQSB7NUU9WRAHFYKU1RAZMCHP8BCB46XI+QU5GIL9Z8CSAIKHXLEELRIIM5FTPBOTPMRPJ5U6WXW");
[inexubxr.default] - Zeile gelöscht : user_pref("smartbar.originalHomepage", "about:home");
[inexubxr.default] - Zeile gelöscht : user_pref("smartbar.originalSearchAddressUrl", "hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=1699eb32-b5f0-45ea-bdc2-eac8cd0729a7&searchtype=ds&q=");
[inexubxr.default] - Zeile gelöscht : user_pref("smartbar.originalSearchEngine", "");
[inexubxr.default] - Zeile gelöscht : user_pref("storage.vacuum.last.index", 1);
[inexubxr.default] - Zeile gelöscht : user_pref("storage.vacuum.last.places.sqlite", 1413727470);
[inexubxr.default] - Zeile gelöscht : user_pref("toolkit.startup.last_success", 1414010508);
[inexubxr.default] - Zeile gelöscht : user_pref("toolkit.telemetry.previousBuildID", "20140825202822");
[inexubxr.default] - Zeile gelöscht : user_pref("toolkit.telemetry.prompted", 2);
[inexubxr.default] - Zeile gelöscht : user_pref("urlclassifier.keyupdatetime.hxxps://sb-ssl.google.com/safebrowsing/newkey", 1400705508);
[inexubxr.default] - Zeile gelöscht : user_pref("xpinstall.whitelist.add", "");
[inexubxr.default] - Zeile gelöscht : user_pref("xpinstall.whitelist.add.180", "");
[inexubxr.default] - Zeile gelöscht : user_pref("xpinstall.whitelist.add.36", "");

-\\ Google Chrome v


*************************

AdwCleaner[R0].txt - [56159 octets] - [30/10/2014 01:34:25]
AdwCleaner[R1].txt - [56220 octets] - [30/10/2014 01:49:29]
AdwCleaner[S0].txt - [56132 octets] - [30/10/2014 01:50:10]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [56193 octets] ##########

--- --- ---

sommertag · 30.10.2014, 22:15

Hier die JRT Log:

JRT Logfile:

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.3 (10.21.2014:1)
OS: Windows 7 Home Premium x64
Ran by ALFIR on 30.10.2014 at  1:54:32,72
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURL\\Default
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\searchURL\\Default



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Toolbar.CT2269050
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT2269050
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{8D9D191E-2CD8-4972-9163-8FF4084A6418}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{E8B34460-05B9-45C2-8092-32B0A0CFFB40}



~~~ Files

Successfully disinfected: [Shortcut] C:\Users\ALFIR\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Successfully disinfected: [Shortcut] C:\Users\ALFIR\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
Successfully disinfected: [Shortcut] C:\Users\ALFIR\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk
Successfully disinfected: [Shortcut] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Successfully disinfected: [Shortcut] C:\Users\ALFIR\AppData\Roaming\microsoft\windows\start menu\Programs\Internet Explorer.lnk
Successfully disinfected: [Shortcut] C:\Users\ALFIR\AppData\Roaming\microsoft\windows\start menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Successfully disinfected: [Shortcut] C:\Users\Public\Desktop\Mozilla Firefox.lnk



~~~ Folders

Successfully deleted: [Folder] C:\ProgramData\FlexIobleShhOpper
Successfully deleted: [Folder] "C:\ProgramData\partner"
Successfully deleted: [Folder] "C:\Users\ALFIR\AppData\Roaming\dvdvideosoftiehelpers"
Successfully deleted: [Folder] "C:\Users\ALFIR\AppData\Roaming\pc speed maximizer"
Successfully deleted: [Folder] "C:\Users\ALFIR\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Users\ALFIR\appdata\local\conduit"
Successfully deleted: [Folder] "C:\Users\ALFIR\appdata\local\cre"
Successfully deleted: [Folder] "C:\Users\ALFIR\appdata\local\globalupdate"
Successfully deleted: [Folder] "C:\Users\ALFIR\appdata\locallow\conduit"
Successfully deleted: [Folder] "C:\Users\ALFIR\appdata\locallow\softonic"
Successfully deleted: [Folder] "C:\Program Files (x86)\conduit"
Successfully deleted: [Folder] "C:\Program Files (x86)\globalupdate"
Failed to delete: [Folder] "C:\Program Files (x86)\pc speed maximizer"
Successfully deleted: [Folder] "C:\Program Files (x86)\predm"
Successfully deleted: [Folder] "C:\Users\ALFIR\AppData\Roaming\microsoft\windows\start menu\programs\mypc backup"
Successfully deleted: [Folder] "C:\Users\ALFIR\documents\optimizer pro"
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{00999054-8407-4243-BD65-D809727476B1}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{076019F1-59BE-4FD5-8796-B84D49D96427}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{0C6354D7-CD20-4578-B3C3-DD95E8608158}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{0C94D5A3-16DF-480C-8081-29BF98335E22}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{0D648165-8617-410B-B7DA-7DEE2B12F901}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{10BB3D83-65C1-4ECF-A228-B0912EBEAEEB}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{140E3809-0EB8-4D65-9EDB-9841AE9D694B}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{151FF275-AB6D-44BC-B026-56ED2C7B63FD}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{15A50053-136F-4C04-B802-AFB066FD7829}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{165DB027-218B-426A-8459-0CBD52FF4843}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{174E442D-0CA4-4FE3-AC84-DA8C23E04B5A}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{178165A8-3B17-4B55-8BFF-734D28068971}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{18F65ABB-701A-4518-A2E6-8EAD472D30CF}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{1AE393F9-6EFD-4203-8261-CF9BEB64C30C}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{20FF82BD-1DE5-47EC-B764-A1DC45B6263A}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{241EC01E-CEA3-4EB9-95D9-DECE90213543}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{297DA10D-7C97-4C95-BD7E-652A34A9F4B9}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{2C3680F6-DDAD-432C-A64A-E0C0C61AADCD}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{2E9675A6-59EE-4AF9-9698-FA889CAB59E6}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{324E13EC-D9C7-4EEA-87AB-F6675579D7B0}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{327C444E-BF65-4135-8ACE-ECFEDBC8AF79}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{345C2E2B-A759-4FCA-ACFC-1CC88328DEE6}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{37E078CF-2886-46E0-99A3-039F7784323D}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{3B73D8CB-088D-41C9-B981-A06E7EB20FAB}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{3CF9A5B4-1749-4737-81C5-4709C511C6D0}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{3D73D379-D2A1-4952-89C6-7B5A795A11F0}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{4CA088F1-3642-48C5-AFE8-CA1DA2A863C4}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{4EAB0F15-198D-4F08-928E-EC6831D7AB4C}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{4F45BD80-3FFF-47C1-BCBD-242634751FE1}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{5347395D-040C-4CF4-8C01-848949C80651}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{572D9BA2-18AE-4E60-963C-337E05B0406D}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{5755EE5D-DF2D-4E97-B331-BC33055DE741}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{5C7987C4-C240-44AA-ABA3-2D32BCF69CC4}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{62DD7C09-FCAA-4AD5-85ED-BCCBE9FF779B}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{662D04C7-BAE4-4C20-86D7-3216A8C95C5E}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{6D7287AF-CD3E-483F-AF04-33DB6B3DF98F}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{6E67A948-2230-4162-86C4-F7E1756A063F}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{6F1379EC-7054-4544-A249-275481B713B8}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{7273F67C-9B08-4092-8D4A-8052A6F8A7C0}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{781D2AA2-4978-42AA-9B00-21262FBC09DC}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{796D86E3-79C4-45FD-9071-3FBA05CECC1A}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{7A04B59B-3009-4BD0-A223-5766D31A11F8}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{7D0AC72C-A1DB-416A-A05B-B4B786E70DC5}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{8001656E-CC73-4C4D-97CE-24C76A9D4DC0}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{82F4A237-2E42-453E-8578-7984AEEA9391}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{84875FD1-DD69-481F-BC98-24FE93FC8B87}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{87323CD7-5A64-43E8-8B47-F7EC07B9A582}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{889AA89F-9F08-401C-9E99-AAB0E5C38D2A}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{8F520FC8-B2D7-4654-90B5-C5A8586C3F08}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{9398B4E4-FD7C-4E78-9461-51F3BD06862D}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{943C8758-700C-481A-B9F5-F6000F7A9CC7}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{97727AAD-7BF7-459C-910E-D655554601C9}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{99CD41F6-BA4F-4DCB-843A-38F093D2C179}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{9ABBFECA-5C80-471A-952F-E0C73FBB68D8}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{9C73017D-CF75-47F5-8E06-2B1BB8843A70}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{9D76CBC3-A1A1-4994-B6B9-335E6F125D0E}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{A13D9B63-A59D-4DAF-883E-8EAF8D466295}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{AAF2ED4F-5298-4D53-BA3C-B2485D02B33F}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{ACD30594-57E6-402C-A940-035F32EF8BC3}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{AE132CE3-64D4-4AAF-96E5-EEC07C25C3DC}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{AF5B0002-25FC-4C85-B70D-BD395CC3B176}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{B1482074-7337-4374-B124-115E01ECCB26}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{B3853AD5-F18B-479C-BACA-817AB84E714D}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{B8938A77-010A-4E54-859C-E1ADA44F8C4B}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{C79B6D95-A410-48EE-8AB1-8A936DACCBDE}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{CB53F29D-23A6-49FD-9D9E-0C3409B593FA}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{CBA4611F-ED23-4D0B-9864-0D0A66F13F57}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{CE42A65D-C124-41D2-A132-4E8466725CE5}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{D3967266-2308-40F8-92B1-ED2FA827418A}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{D3B2B8E6-A58C-4E1F-A23F-D4364E348614}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{D402C24B-BE22-45E7-9D7B-D8ABA7D0E73B}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{D759DD18-0492-4116-BC59-68B9B1A0D16C}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{D9175DFF-4E96-498A-9E36-4A81A108BC50}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{DA113B3C-034C-4962-87D9-E139FC631745}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{DF4BE1DB-CC2C-4ABA-B1CF-0B07C26336AE}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{E2907412-FF20-488F-A0B1-C64296DC3B1E}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{E31657E1-2407-4A9C-A8EB-D9FDAD699E96}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{E8897924-AEB6-45D9-A7D7-197337855BEC}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{EC7521B0-62D6-440E-9B64-DB44B1C55A88}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{F5F5014E-ABF3-49E3-AC51-7B73C812992C}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{F6EEC506-38E3-41C1-BF38-198DC9685FA6}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{F89A3C90-A900-4D58-B427-EC39B4ABEC7F}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{FAE477AC-BF39-4BC1-B991-2930FABC7283}
Successfully deleted: [Empty Folder] C:\Users\ALFIR\appdata\local\{FFC0D783-228A-44BE-8127-D7A112A3E9F5}



~~~ FireFox

Successfully deleted: [File] C:\Users\ALFIR\AppData\Roaming\mozilla\firefox\profiles\inexubxr.default\user.js
Successfully deleted: [Folder] C:\Users\ALFIR\AppData\Roaming\mozilla\firefox\profiles\inexubxr.default\smartbar
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\{acaa314b-eeba-48e4-ad47-84e31c44796c}
Emptied folder: C:\Users\ALFIR\AppData\Roaming\mozilla\firefox\profiles\inexubxr.default\minidumps [84 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 30.10.2014 at  2:01:32,24
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

--- --- ---

Und hier die frische FRST (mit der Softwareversion des erstens Scans):

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-10-2014 01 (ATTENTION: ====> FRST version is 12 days old and could be outdated)
Ran by ALFIR (administrator) on ALFIR-PC on 30-10-2014 02:02:41
Running from C:\Users\ALFIR\Desktop\Trojanerboard
Loaded Profile: ALFIR (Available profiles: ALFIR)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Lenovo.) C:\Windows\System32\TPHDEXLG64.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(Smart PC Solutions) C:\Program Files (x86)\PC Speed Maximizer\SPMSmartScan.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgcfgex.exe
(Microsoft Corporation) C:\Windows\System32\prevhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [AVG_TRAY] => C:\Program Files (x86)\AVG\AVG2012\avgtray.exe [2587008 2012-04-05] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-4139373105-4022997019-1243156706-1001\...\Run: [Google+ Auto Backup] => C:\Users\ALFIR\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3619096 2014-01-06] (Google Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
ShellIconOverlayIdentifiers: [VeriFace Enc] -> {771C7324-DA80-49D3-8017-753B0AF60951} => C:\windows\system32\IcnOvrly.dll ()
BootExecute: autocheck autochk * C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restart
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/
URLSearchHook: HKLM-x32 - (No Name) - {e44a1809-4d10-4ab8-b343-3326b64c7cdd} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENN
BHO: AVG Do Not Track -> {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} -> C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.)
BHO: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll (AVG Technologies CZ, s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: DVDVideoSoft WebPageAdjuster Class -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: AVG Do Not Track -> {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} -> C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.)
BHO-x32: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> C:\Program Files (x86)\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: DVDVideoSoft WebPageAdjuster Class -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - No Name - {e44a1809-4d10-4ab8-b343-3326b64c7cdd} -  No File
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKCU - No Name - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} -  No File
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @playstation.com/PsndlCheck,version=1.00 -> C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 -> C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\searchplugins\yahoo-msd.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: entrusted  - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\Extensions\{e44a1809-4d10-4ab8-b343-3326b64c7cdd} [2013-09-10]
FF Extension: Suche App - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\Extensions\{47744fca-0011-4ba5-ba33-24ae19355a42}.xpi [2014-07-27]
FF HKLM-x32\...\Firefox\Extensions: [{1E73965B-8B48-48be-9C8D-68B920ABC1C4}] - C:\Program Files (x86)\AVG\AVG2012\Firefox4
FF Extension: AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\Firefox4 [2012-06-27]
FF HKLM-x32\...\Firefox\Extensions: [{F53C93F1-07D5-430c-86D4-C9531B27DFAF}] - C:\Program Files (x86)\AVG\AVG2012\Firefox\DoNotTrack
FF Extension: AVG Do Not Track - C:\Program Files (x86)\AVG\AVG2012\Firefox\DoNotTrack [2012-06-27]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2013-11-27]
FF HKCU\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: No Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF Extension: No Name - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\{8b337819-d1e8-48d3-8178-168ae8c99c36} [Not Found]
FF Extension: No Name - C:\Program Files (x86)\Re-markit-soft\175.xpi [Not Found]
FF Extension: No Name - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\{e4a6645a-3f85-4e1f-aa41-8367978844db}.xpi [Not Found]
FF Extension: No Name - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\LUHVPJSG96971825@HMOZFYC10427095.com [Not Found]

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2014-09-10]
CHR HKCU\...\Chrome\Extension: [kdfbddbdpnahdahmamlolacimfdbeckk] - C:\Users\ALFIR\AppData\Local\CRE\kdfbddbdpnahdahmamlolacimfdbeckk.crx [2014-09-10]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2014-09-10]
CHR HKLM-x32\...\Chrome\Extension: [jmfkcklnlgedgbglfkkgedjfmejoahla] - C:\Program Files (x86)\AVG\AVG2012\Chrome\safesearch.crx [2012-04-05]
CHR HKLM-x32\...\Chrome\Extension: [kdfbddbdpnahdahmamlolacimfdbeckk] - C:\Users\ALFIR\AppData\Local\CRE\kdfbddbdpnahdahmamlolacimfdbeckk.crx [2012-04-05]
CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\Program Files (x86)\AVG\AVG2012\Chrome\donottrack.crx [2012-04-20]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [365568 2011-06-07] (Advanced Micro Devices, Inc.) [File not signed]
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe [5106744 2012-04-30] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [193288 2012-02-14] (AVG Technologies CZ, s.r.o.)
R2 McAfee SiteAdvisor Service; c:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [156904 2014-09-02] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2402080 2013-01-28] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R3 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [124496 2011-12-23] (AVG Technologies CZ, s.r.o. )
R3 AVGIDSFilter; C:\Windows\System32\DRIVERS\avgidsfiltera.sys [29776 2011-12-23] (AVG Technologies CZ, s.r.o. )
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [28480 2012-04-19] (AVG Technologies CZ, s.r.o. )
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [289872 2012-02-22] (AVG Technologies CZ, s.r.o.)
R1 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [47696 2011-12-23] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [36944 2012-01-31] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [383808 2012-03-19] (AVG Technologies CZ, s.r.o.)
R3 AVMCOWAN; C:\Windows\System32\DRIVERS\AVMCOWAN.sys [79872 2009-06-10] (AVM GmbH)
S3 CVPNDRVA; C:\windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] ()
S3 FUS2BASE; C:\Windows\System32\DRIVERS\fus2base.sys [696832 2009-06-10] (AVM Berlin)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-11-16] (TuneUp Software)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [228736 2010-12-13] (Vimicro Corporation)
R3 vmuvcflt; C:\Windows\System32\Drivers\vmuvcflt.sys [8320 2010-08-16] (Vimicro Corporation)
U3 BcmSqlStartupSvc; No ImagePath
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
U2 CLKMSVC10_3A60B698; No ImagePath
U2 CLKMSVC10_C3B3B687; No ImagePath
U2 DriverService; No ImagePath
U2 IAStorDataMgrSvc; No ImagePath
U2 iATAgentService; No ImagePath
U2 idealife Update Service; No ImagePath
U3 IGRS; No ImagePath
U2 IviRegMgr; No ImagePath
U2 nvUpdatusService; No ImagePath
U2 Oasis2Service; No ImagePath
U2 PCCarerService; No ImagePath
U2 ReadyComm.DirectRouter; No ImagePath
U2 RichVideo; No ImagePath
U2 RtLedService; No ImagePath
U2 SeaPort; No ImagePath
U2 SoftwareService; No ImagePath
U3 SQLWriter; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-30 02:01 - 2014-10-30 02:01 - 00012820 _____ () C:\Users\ALFIR\Desktop\JRT.txt
2014-10-30 01:54 - 2014-10-30 01:54 - 00000000 ____D () C:\windows\ERUNT
2014-10-30 01:34 - 2014-10-30 01:50 - 00000000 ___DC () C:\AdwCleaner
2014-10-30 00:41 - 2014-10-30 01:29 - 00129752 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-30 00:40 - 2014-10-30 00:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-10-30 00:40 - 2014-10-30 00:40 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-10-30 00:40 - 2014-10-30 00:40 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-10-30 00:40 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-10-30 00:40 - 2014-10-01 11:11 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2014-10-30 00:40 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-10-23 23:50 - 2014-10-23 23:50 - 00038115 ____C () C:\ComboFix.txt
2014-10-22 22:17 - 2014-10-23 23:50 - 00000000 ___DC () C:\Qoobox
2014-10-22 22:17 - 2011-06-26 07:45 - 00256000 _____ () C:\windows\PEV.exe
2014-10-22 22:17 - 2010-11-07 18:20 - 00208896 _____ () C:\windows\MBR.exe
2014-10-22 22:17 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2014-10-22 22:17 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2014-10-22 22:17 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2014-10-22 22:17 - 2000-08-31 01:00 - 00098816 _____ () C:\windows\sed.exe
2014-10-22 22:17 - 2000-08-31 01:00 - 00080412 _____ () C:\windows\grep.exe
2014-10-22 22:17 - 2000-08-31 01:00 - 00068096 _____ () C:\windows\zip.exe
2014-10-22 22:16 - 2014-10-23 23:23 - 00000000 ____D () C:\windows\erdnt
2014-10-22 22:09 - 2014-10-22 22:09 - 00000000 ____D () C:\Program Files (x86)\SalesMaaggnEt
2014-10-22 21:39 - 2014-10-22 21:39 - 00000000 ____D () C:\Program Files (x86)\PriNcieaCouPon
2014-10-22 21:34 - 2014-10-22 21:34 - 00000000 ____D () C:\Program Files (x86)\LuckyCoupon
2014-10-22 21:26 - 2014-10-22 21:26 - 00000000 ____D () C:\Program Files (x86)\FlexIobleShhOpper
2014-10-22 21:05 - 2014-10-22 21:05 - 00001268 _____ () C:\Users\ALFIR\Desktop\Revo Uninstaller.lnk
2014-10-22 21:05 - 2014-10-22 21:05 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-10-19 16:25 - 2014-10-30 02:02 - 00000000 ___DC () C:\FRST
2014-10-19 16:23 - 2014-10-30 02:02 - 00000000 ____D () C:\Users\ALFIR\Desktop\Trojanerboard

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-30 02:01 - 2012-11-27 04:36 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-10-30 02:01 - 2011-10-25 17:39 - 00001425 _____ () C:\Users\ALFIR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-10-30 02:01 - 2010-01-23 23:43 - 00001163 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-10-30 01:59 - 2011-08-23 22:42 - 12127890 _____ () C:\windows\system32\perfh007.dat
2014-10-30 01:59 - 2011-08-23 22:42 - 03844934 _____ () C:\windows\system32\perfc007.dat
2014-10-30 01:59 - 2009-07-14 06:13 - 00006308 _____ () C:\windows\system32\PerfStringBackup.INI
2014-10-30 01:59 - 2009-07-14 05:45 - 00021072 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-30 01:59 - 2009-07-14 05:45 - 00021072 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-30 01:57 - 2014-04-25 16:54 - 00000000 ____D () C:\Program Files (x86)\PC Speed Maximizer
2014-10-30 01:52 - 2014-04-25 16:59 - 00003248 _____ () C:\windows\System32\Tasks\PC Speed Maximizer Schedule
2014-10-30 01:52 - 2011-10-25 18:22 - 00001104 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-30 01:52 - 2011-08-25 10:51 - 01197644 _____ () C:\windows\system32\fastboot.set
2014-10-30 01:52 - 2011-08-25 10:49 - 03123802 ____C () C:\FaceProv.log
2014-10-30 01:52 - 2011-08-25 10:43 - 00411392 _____ () C:\windows\system32\TPHDLOG0.LOG
2014-10-30 01:51 - 2013-04-30 13:49 - 00405156 _____ () C:\windows\PFRO.log
2014-10-30 01:51 - 2013-04-22 22:43 - 00065530 _____ () C:\windows\setupact.log
2014-10-30 01:51 - 2009-07-14 06:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-10-30 01:50 - 2011-08-25 10:05 - 01855714 _____ () C:\windows\WindowsUpdate.log
2014-10-30 01:40 - 2013-06-05 17:23 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-10-30 01:38 - 2011-10-25 18:22 - 00001108 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-30 01:26 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system
2014-10-30 00:40 - 2011-08-25 10:43 - 03416448 _____ () C:\windows\system32\TPAPSLOG.LOG
2014-10-23 23:45 - 2009-07-14 03:34 - 00000215 ____C () C:\windows\system.ini
2014-10-23 21:43 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\rescache
2014-10-22 22:39 - 2009-07-14 03:34 - 77594624 _____ () C:\windows\system32\config\software.bak
2014-10-22 22:39 - 2009-07-14 03:34 - 18350080 _____ () C:\windows\system32\config\system.bak
2014-10-22 22:39 - 2009-07-14 03:34 - 00524288 _____ () C:\windows\system32\config\default.bak
2014-10-22 22:39 - 2009-07-14 03:34 - 00262144 _____ () C:\windows\system32\config\security.bak
2014-10-22 22:39 - 2009-07-14 03:34 - 00262144 _____ () C:\windows\system32\config\sam.bak
2014-10-22 22:09 - 2014-06-15 21:00 - 00000000 ____D () C:\ProgramData\2e626c00b7597611
2014-10-22 21:43 - 2014-05-19 16:44 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-10-22 21:08 - 2014-05-19 16:46 - 00000000 ____D () C:\Users\ALFIR\AppData\Roaming\Activeris

Some content of TEMP:
====================
C:\Users\ALFIR\AppData\Local\Temp\Quarantine.exe
C:\Users\ALFIR\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-23 21:36

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

schrauber · 31.10.2014, 14:01

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

sommertag · 10.11.2014, 23:20

Hallo Schrauber,

hier der ESET Log:

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=23b7d5d622b0e64687f2c5ca3a0c6105
# engine=20912
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-11-04 01:21:43
# local_time=2014-11-04 02:21:43 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='AVG Anti-Virus Free Edition 2012'
# compatibility_mode=1036 16777213 100 96 4695381 100871575 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 41098845 166693953 0 0
# scanned=199543
# found=44
# cleaned=0
# scan_time=11996
sh=34FF8E2D281CBFECE71100A04C0FF4436818382E ft=1 fh=7b66b1ed06cb1b80 vn="Variante von Win64/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\entrusted\hk64tbentr.dll"
sh=AE7B8F3BB6E040CE20B02DE558471FAA4C58386E ft=1 fh=6a41a8d0046fd7b4 vn="Variante von Win32/Toolbar.Conduit.X evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\entrusted\hktbentr.dll"
sh=87BE5F13318AC3BA3F403A73E332E1784304C21D ft=1 fh=3e5cd6b65c184efc vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\entrusted\ldrtbentr.dll"
sh=1E6279D9317A709616211812CCA5AB8B26EB4AB2 ft=1 fh=dd2582521ac42eea vn="Variante von Win32/Toolbar.Conduit.X evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\entrusted\tbentr.dll"
sh=AAEA2D2C15813161F9E114E6E1708CE545D5C8CA ft=1 fh=0022d452663e533e vn="Variante von Win32/DealPly.M evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\SaveSense\SaveSenseUpdateVer.exe.vir"
sh=FABF99D84DAE1B16B0BDBA7003ACA991AE40DB47 ft=1 fh=2aca0aed277d57d6 vn="Win32/SaveSense.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe.vir"
sh=10903598F769E2AC5F1E2372E90F6722A3A860B7 ft=1 fh=89560075533c3d40 vn="Win32/SaveSense.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll.vir"
sh=88482528CE4F67A1004B50BA93282CEACCEDE534 ft=1 fh=e40b702402e604d5 vn="Win32/SaveSense.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\psmachine.dll.vir"
sh=FABF99D84DAE1B16B0BDBA7003ACA991AE40DB47 ft=1 fh=2aca0aed277d57d6 vn="Win32/SaveSense.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\SaveSenseLive.exe.vir"
sh=70D49B9ABA391E6976DAB5C4BEA63733459B3F1C ft=1 fh=0b76a05977e7722a vn="Win32/SaveSense.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveBroker.exe.vir"
sh=FABF99D84DAE1B16B0BDBA7003ACA991AE40DB47 ft=1 fh=2aca0aed277d57d6 vn="Win32/SaveSense.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveHandler.exe.vir"
sh=F09B9B9B1D16D1539D23CC6ACDE0DC7BC983DF59 ft=1 fh=2dbadf99ca2df2d7 vn="Win32/SaveSense.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\SaveSenseLiveOnDemand.exe.vir"
sh=0285C2F305CD4242FF8B8034D601706F7B6A25D4 ft=1 fh=7ca7c24b458f6358 vn="Win32/Reveton.H Trojaner" ac=I fn="C:\Qoobox\Quarantine\C\Users\ALFIR\AppData\Local\Temp\er_00_0_l.exe.vir"
sh=689893E8F0E9DE309BF22CCD9790DA5154C38174 ft=1 fh=3ff2307185d18e62 vn="Variante von Win32/SProtector.I evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\ALFIR\AppData\Local\Temp\__tmp_321a17b9.vir"
sh=12839960E7BAB059D891B91E81FEE344D2DE067E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ALFIR\AppData\Local\Mozilla\Firefox\Profiles\inexubxr.default\cache2\entries\98A41BD74B34F0F22D0793F4152A15BBABAE723E"
sh=639EC700B0AE3E4022B0E2194154C35804C1495D ft=1 fh=cea679b0d15a81f3 vn="Win64/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ALFIR\AppData\LocalLow\entrusted\hk64tbent0.dll"
sh=C54510535A66A84C349479CD223A5871A90CD995 ft=1 fh=65db72da1a4871f2 vn="Variante von Win64/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ALFIR\AppData\LocalLow\entrusted\hk64tbent2.dll"
sh=34FF8E2D281CBFECE71100A04C0FF4436818382E ft=1 fh=7b66b1ed06cb1b80 vn="Variante von Win64/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ALFIR\AppData\LocalLow\entrusted\hk64tbentr.dll"
sh=5725EA7691F61D6ED634FDD71239E726A64725C2 ft=1 fh=646f768a5b2a6339 vn="Variante von Win32/Toolbar.Conduit.X evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ALFIR\AppData\LocalLow\entrusted\hktbent2.dll"
sh=AE7B8F3BB6E040CE20B02DE558471FAA4C58386E ft=1 fh=6a41a8d0046fd7b4 vn="Variante von Win32/Toolbar.Conduit.X evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ALFIR\AppData\LocalLow\entrusted\hktbentr.dll"
sh=FF9EA2BC0FC60998E396A2BD73A875C3CBFBBEFF ft=1 fh=6403b45b50155137 vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ALFIR\AppData\LocalLow\entrusted\ldrtbent2.dll"
sh=87BE5F13318AC3BA3F403A73E332E1784304C21D ft=1 fh=3e5cd6b65c184efc vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ALFIR\AppData\LocalLow\entrusted\ldrtbentr.dll"
sh=9D9C90F7CB1D2DE8785E0C7E707A9324E3A0E435 ft=1 fh=14810f2f251a2321 vn="Variante von Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ALFIR\AppData\LocalLow\entrusted\tbent1.dll"
sh=B93F25F90F74B84691C62917CD724B55BFBB4274 ft=1 fh=6de06faf2241bbf3 vn="Variante von Win32/Toolbar.Conduit.X evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ALFIR\AppData\LocalLow\entrusted\tbent2.dll"
sh=1E6279D9317A709616211812CCA5AB8B26EB4AB2 ft=1 fh=dd2582521ac42eea vn="Variante von Win32/Toolbar.Conduit.X evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ALFIR\AppData\LocalLow\entrusted\tbentr.dll"
sh=B5C93DA0C608B26C9487ABC49CCB643C9A15ED33 ft=1 fh=75f1c65aa8a331ed vn="Variante von Win32/PriceGong.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ALFIR\AppData\LocalLow\entrusted\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.6.12\bin\PriceGongIE.dll"
sh=7EC3C00F645DC4F5F36FF7319BBBA3788E3377FD ft=1 fh=a8f636aaaa866dfc vn="Win32/Reveton.H Trojaner" ac=I fn="C:\Users\ALFIR\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\66d2e0c1-12b34a15"
sh=2C774532A3F4A8F0673B1B458F03FA6D01CF5C5C ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\ALFIR\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\2f4dce4e-6d54b960"
sh=A2D69387221FDF649D1DD052932BFDAC3D6385AF ft=0 fh=0000000000000000 vn="Java/Exploit.CVE-2012-1723.AZ Trojaner" ac=I fn="C:\Users\ALFIR\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\dd9bd82-26ae4128"
sh=E5BA08FFAA677B6A60F45743BA2C33EAB35C10EF ft=0 fh=0000000000000000 vn="Variante von Java/Exploit.CVE-2012-1723.DR Trojaner" ac=I fn="C:\Users\ALFIR\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21\1ac668d5-1065ef1e"
sh=DBDFC8BDA11F63CED33660490FB0BA3A13455729 ft=0 fh=0000000000000000 vn="Java/Exploit.CVE-2012-1723.BR Trojaner" ac=I fn="C:\Users\ALFIR\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\7dd90727-50f79150"
sh=7347094BB7355D843C3B590B6944158EF33010C2 ft=1 fh=d6498a4cb5105e4e vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\extensions\{e44a1809-4d10-4ab8-b343-3326b64c7cdd}\Plugins\npConduitFirefoxPlugin.dll"
sh=33D5A5EED31629F3541DD8196065DCF6AB674F81 ft=0 fh=0000000000000000 vn="Variante von Win32/Systweak.L evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\93a8e4c.msi"
sh=72D6AFC9ECEA630DF806A7E622C28DB54CB729F7 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="D:\ALFIR-PC\Backup Set 2013-04-28 194742\Backup Files 2013-04-28 194742\Backup files 2.zip"
sh=F878C5A3F58BD8234310B2D7771028E05DC2B279 ft=0 fh=0000000000000000 vn="Win32/Toolbar.Linkury evtl. unerwünschte Anwendung" ac=I fn="D:\ALFIR-PC\Backup Set 2013-04-28 194742\Backup Files 2013-04-28 194742\Backup files 3.zip"
sh=51D54DF537AE8A2FC3E6E8A03421EE4204CB52E7 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="D:\ALFIR-PC\Backup Set 2013-04-28 194742\Backup Files 2013-04-28 194742\Backup files 4.zip"
sh=C6B8B26BFF39A856481B43CDFFD680A5DE84D271 ft=0 fh=0000000000000000 vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="D:\ALFIR-PC\Backup Set 2013-04-28 194742\Backup Files 2013-08-19 004206\Backup files 1.zip"
sh=5AC3F7CAC9446B408430EDBD664EAFDC23C6F8DE ft=0 fh=0000000000000000 vn="Win64/Toolbar.Conduit.A evtl. unerwünschte Anwendung" ac=I fn="D:\ALFIR-PC\Backup Set 2013-04-28 194742\Backup Files 2013-08-19 004206\Backup files 2.zip"
sh=97DC20B5C02007E4A283CEB67BA1C9D5991A113D ft=0 fh=0000000000000000 vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="D:\ALFIR-PC\Backup Set 2013-04-28 194742\Backup Files 2013-08-26 003750\Backup files 1.zip"
sh=4FC4EC9BB45D0DA0F317E568782BC9BB71995F70 ft=0 fh=0000000000000000 vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="D:\ALFIR-PC\Backup Set 2013-04-28 194742\Backup Files 2013-09-16 040844\Backup files 1.zip"
sh=AA8627DE096F9B14294044B0A5DECC498CAD237B ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Conduit.X evtl. unerwünschte Anwendung" ac=I fn="D:\ALFIR-PC\Backup Set 2013-04-28 194742\Backup Files 2013-10-06 212537\Backup files 1.zip"
sh=86FC074DE70D36537EEAD728BC2BA6F5608E5449 ft=0 fh=0000000000000000 vn="HTML/ScrInject.B.Gen Virus" ac=I fn="D:\ALFIR-PC\Backup Set 2013-04-28 194742\Backup Files 2013-10-15 022350\Backup files 1.zip"
sh=BD84BD77327D7D04EF206607103301B254BD792A ft=0 fh=0000000000000000 vn="Win32/Toolbar.Montiera.I evtl. unerwünschte Anwendung" ac=I fn="D:\ALFIR-PC\Backup Set 2013-04-28 194742\Backup Files 2013-12-01 231300\Backup files 7.zip"
sh=1EBAE1CD60EE925879FD01616D0517D3971B3313 ft=0 fh=0000000000000000 vn="Win32/SpeedUpMyPC evtl. unerwünschte Anwendung" ac=I fn="D:\ALFIR-PC\Backup Set 2013-04-28 194742\Backup Files 2013-12-01 231300\Backup files 8.zip"

Hier das Ergebnis des Security Check:

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.89  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
AVG Anti-Virus Free Edition 2012   
 Antivirus out of date!  
`````````Anti-malware/Other Utilities Check:````````` 
 McAfee SiteAdvisor    
 TuneUp Utilities 2013   
 TuneUp Utilities 2007   
 TuneUp Utilities Language Pack (de-DE) 
 Java(TM) 6 Update 30  
 Java version out of Date! 
 Adobe Flash Player 15.0.0.152  
 Adobe Reader 10.1.7 Adobe Reader out of Date!  
 Mozilla Firefox 32.0 Firefox out of Date!  
````````Process Check: objlist.exe by Laurent````````  
 AVG avgwdsvc.exe 
 AVG avgtray.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````

Und hier noch ein frisches FRST:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-11-2014
Ran by ALFIR (administrator) on ALFIR-PC on 05-11-2014 00:12:23
Running from C:\Users\ALFIR\Desktop\Trojanerboard
Loaded Profile: ALFIR (Available profiles: ALFIR)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Lenovo.) C:\Windows\System32\TPHDEXLG64.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgemca.exe
(AMD) C:\Windows\System32\atieclxx.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(Microsoft Corporation) C:\Windows\System32\prevhost.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoUpdateCheck.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [AVG_TRAY] => C:\Program Files (x86)\AVG\AVG2012\avgtray.exe [2587008 2012-04-05] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKU\S-1-5-21-4139373105-4022997019-1243156706-1001\...\Run: [Google+ Auto Backup] => C:\Users\ALFIR\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3619096 2014-01-06] (Google Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
ShellIconOverlayIdentifiers: [VeriFace Enc] -> {771C7324-DA80-49D3-8017-753B0AF60951} => C:\windows\system32\IcnOvrly.dll ()
BootExecute: autocheck autochk * C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restart
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1400514259&from=tugs&uid=WDCXWD7500BPVT-24HXZT1_WD-WX71E31XK112XK112&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/
URLSearchHook: HKLM-x32 - (No Name) - {e44a1809-4d10-4ab8-b343-3326b64c7cdd} - No File
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-4139373105-4022997019-1243156706-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENN
BHO: AVG Do Not Track -> {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} -> C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.)
BHO: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll (AVG Technologies CZ, s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: DVDVideoSoft WebPageAdjuster Class -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: AVG Do Not Track -> {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} -> C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.)
BHO-x32: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> C:\Program Files (x86)\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: DVDVideoSoft WebPageAdjuster Class -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - No Name - {e44a1809-4d10-4ab8-b343-3326b64c7cdd} -  No File
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKCU - No Name - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} -  No File
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.4.1

FireFox:
========
FF ProfilePath: C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default
FF DefaultSearchEngine: Yahoo MSD
FF SelectedSearchEngine: Yahoo MSD
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @playstation.com/PsndlCheck,version=1.00 -> C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 -> C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\searchplugins\yahoo-msd.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: entrusted  - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\Extensions\{e44a1809-4d10-4ab8-b343-3326b64c7cdd} [2013-09-10]
FF Extension: Suche App - C:\Users\ALFIR\AppData\Roaming\Mozilla\Firefox\Profiles\inexubxr.default\Extensions\{47744fca-0011-4ba5-ba33-24ae19355a42}.xpi [2014-07-27]
FF HKLM-x32\...\Firefox\Extensions: [{1E73965B-8B48-48be-9C8D-68B920ABC1C4}] - C:\Program Files (x86)\AVG\AVG2012\Firefox4
FF Extension: AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\Firefox4 [2012-06-27]
FF HKLM-x32\...\Firefox\Extensions: [{F53C93F1-07D5-430c-86D4-C9531B27DFAF}] - C:\Program Files (x86)\AVG\AVG2012\Firefox\DoNotTrack
FF Extension: AVG Do Not Track - C:\Program Files (x86)\AVG\AVG2012\Firefox\DoNotTrack [2012-06-27]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2013-11-27]
FF HKCU\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: No Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\ALFIR\AppData\Local\Google\Chrome\User Data\default
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2014-11-02]
CHR HKCU\...\Chrome\Extension: [kdfbddbdpnahdahmamlolacimfdbeckk] - C:\Users\ALFIR\AppData\Local\CRE\kdfbddbdpnahdahmamlolacimfdbeckk.crx [2014-11-02]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2014-11-02]
CHR HKLM-x32\...\Chrome\Extension: [jmfkcklnlgedgbglfkkgedjfmejoahla] - C:\Program Files (x86)\AVG\AVG2012\Chrome\safesearch.crx [2012-04-05]
CHR HKLM-x32\...\Chrome\Extension: [kdfbddbdpnahdahmamlolacimfdbeckk] - C:\Users\ALFIR\AppData\Local\CRE\kdfbddbdpnahdahmamlolacimfdbeckk.crx [2012-04-05]
CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\Program Files (x86)\AVG\AVG2012\Chrome\donottrack.crx [2012-04-20]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [365568 2011-06-07] (Advanced Micro Devices, Inc.) [File not signed]
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe [5106744 2012-04-30] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [193288 2012-02-14] (AVG Technologies CZ, s.r.o.)
R2 McAfee SiteAdvisor Service; c:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [156904 2014-09-02] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2402080 2013-01-28] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R3 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [124496 2011-12-23] (AVG Technologies CZ, s.r.o. )
R3 AVGIDSFilter; C:\Windows\System32\DRIVERS\avgidsfiltera.sys [29776 2011-12-23] (AVG Technologies CZ, s.r.o. )
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [28480 2012-04-19] (AVG Technologies CZ, s.r.o. )
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [289872 2012-02-22] (AVG Technologies CZ, s.r.o.)
R1 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [47696 2011-12-23] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [36944 2012-01-31] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [383808 2012-03-19] (AVG Technologies CZ, s.r.o.)
R3 AVMCOWAN; C:\Windows\System32\DRIVERS\AVMCOWAN.sys [79872 2009-06-10] (AVM GmbH)
S3 CVPNDRVA; C:\windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] ()
S3 FUS2BASE; C:\Windows\System32\DRIVERS\fus2base.sys [696832 2009-06-10] (AVM Berlin)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-11-16] (TuneUp Software)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [228736 2010-12-13] (Vimicro Corporation)
R3 vmuvcflt; C:\Windows\System32\Drivers\vmuvcflt.sys [8320 2010-08-16] (Vimicro Corporation)
U3 BcmSqlStartupSvc; No ImagePath
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
U2 CLKMSVC10_3A60B698; No ImagePath
U2 CLKMSVC10_C3B3B687; No ImagePath
U2 DriverService; No ImagePath
U2 IAStorDataMgrSvc; No ImagePath
U2 iATAgentService; No ImagePath
U2 idealife Update Service; No ImagePath
U3 IGRS; No ImagePath
U2 IviRegMgr; No ImagePath
U2 nvUpdatusService; No ImagePath
U2 Oasis2Service; No ImagePath
U2 PCCarerService; No ImagePath
U2 ReadyComm.DirectRouter; No ImagePath
U2 RichVideo; No ImagePath
U2 RtLedService; No ImagePath
U2 SeaPort; No ImagePath
U2 SoftwareService; No ImagePath
U3 SQLWriter; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-03 22:56 - 2014-11-03 22:56 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-11-02 15:34 - 2014-11-02 15:34 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-11-02 15:34 - 2014-11-02 15:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-11-02 15:33 - 2014-11-02 15:34 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-11-02 15:33 - 2014-11-02 15:34 - 00000000 ____D () C:\Program Files\iTunes
2014-11-02 15:33 - 2014-11-02 15:34 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-11-02 15:33 - 2014-11-02 15:33 - 00000000 ____D () C:\Program Files\iPod
2014-11-02 15:14 - 2014-11-02 15:15 - 00244392 _____ () C:\Users\ALFIR\Downloads\Firefox Setup Stub 33.0.2.exe
2014-11-02 12:05 - 2014-09-29 01:58 - 03198976 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-11-02 12:04 - 2014-10-07 03:54 - 00378552 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-11-02 12:04 - 2014-10-07 03:04 - 00331448 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-11-02 12:04 - 2014-09-25 23:50 - 13619200 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-11-02 12:04 - 2014-09-25 23:46 - 00365056 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-11-02 12:04 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-11-02 12:04 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-11-02 12:04 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-11-02 12:04 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-11-02 12:04 - 2014-09-25 23:31 - 02108416 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-11-02 12:04 - 2014-09-19 03:25 - 23631360 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-11-02 12:04 - 2014-09-19 02:56 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-11-02 12:04 - 2014-09-19 02:55 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-11-02 12:04 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-11-02 12:04 - 2014-09-19 02:41 - 02796032 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-11-02 12:04 - 2014-09-19 02:40 - 00547328 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-11-02 12:04 - 2014-09-19 02:40 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-11-02 12:04 - 2014-09-19 02:39 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-11-02 12:04 - 2014-09-19 02:38 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2014-11-02 12:04 - 2014-09-19 02:36 - 05829632 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-11-02 12:04 - 2014-09-19 02:31 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-11-02 12:04 - 2014-09-19 02:30 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-11-02 12:04 - 2014-09-19 02:27 - 00595968 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-11-02 12:04 - 2014-09-19 02:26 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-11-02 12:04 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-11-02 12:04 - 2014-09-19 02:25 - 00758272 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-11-02 12:04 - 2014-09-19 02:25 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-11-02 12:04 - 2014-09-19 02:18 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-11-02 12:04 - 2014-09-19 02:14 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-11-02 12:04 - 2014-09-19 02:14 - 00446464 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-11-02 12:04 - 2014-09-19 02:06 - 00072704 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-11-02 12:04 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-11-02 12:04 - 2014-09-19 02:01 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-11-02 12:04 - 2014-09-19 02:01 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-11-02 12:04 - 2014-09-19 02:01 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-11-02 12:04 - 2014-09-19 02:00 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-11-02 12:04 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2014-11-02 12:04 - 2014-09-19 01:58 - 00289280 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-11-02 12:04 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-11-02 12:04 - 2014-09-19 01:54 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-11-02 12:04 - 2014-09-19 01:53 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-11-02 12:04 - 2014-09-19 01:51 - 00440320 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-11-02 12:04 - 2014-09-19 01:50 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-11-02 12:04 - 2014-09-19 01:49 - 00597504 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-11-02 12:04 - 2014-09-19 01:42 - 00731136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-11-02 12:04 - 2014-09-19 01:42 - 00710656 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-11-02 12:04 - 2014-09-19 01:40 - 01249280 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2014-11-02 12:04 - 2014-09-19 01:36 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-02 12:04 - 2014-09-19 01:33 - 02309632 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-11-02 12:04 - 2014-09-19 01:32 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-11-02 12:04 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-11-02 12:04 - 2014-09-19 01:18 - 01068032 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2014-11-02 12:04 - 2014-09-19 01:14 - 01447936 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-11-02 12:04 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-11-02 12:04 - 2014-09-19 00:59 - 00775168 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-11-02 12:04 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-11-02 12:04 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-11-02 12:04 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDYAK.DLL
2014-11-02 12:04 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTAT.DLL
2014-11-02 12:04 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDRU1.DLL
2014-11-02 12:04 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDBASH.DLL
2014-11-02 12:04 - 2014-07-09 03:03 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDRU.DLL
2014-11-02 12:04 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDYAK.DLL
2014-11-02 12:04 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTAT.DLL
2014-11-02 12:04 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU1.DLL
2014-11-02 12:04 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU.DLL
2014-11-02 12:04 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDBASH.DLL
2014-11-02 12:04 - 2014-07-08 23:38 - 00419992 _____ () C:\windows\system32\locale.nls
2014-11-02 12:04 - 2014-07-08 23:30 - 00419992 _____ () C:\windows\SysWOW64\locale.nls
2014-11-02 12:04 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\windows\system32\dfshim.dll
2014-11-02 12:04 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\windows\SysWOW64\dfshim.dll
2014-11-02 12:04 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\windows\SysWOW64\mscorier.dll
2014-11-02 12:04 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\windows\system32\mscorier.dll
2014-11-02 12:04 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\windows\SysWOW64\mscories.dll
2014-11-02 12:04 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\windows\system32\mscories.dll
2014-11-02 12:00 - 2014-09-25 03:08 - 00371712 _____ (Microsoft Corporation) C:\windows\system32\qdvd.dll
2014-11-02 12:00 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\windows\SysWOW64\qdvd.dll
2014-11-02 12:00 - 2014-09-18 03:00 - 03241472 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2014-11-02 12:00 - 2014-09-18 02:32 - 02363904 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
2014-11-02 12:00 - 2014-09-09 23:11 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2014-11-02 12:00 - 2014-09-09 22:47 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2014-11-02 11:59 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\rastls.dll
2014-11-02 11:59 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\windows\SysWOW64\rastls.dll
2014-11-02 11:59 - 2014-07-17 03:07 - 03722240 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2014-11-02 11:59 - 2014-07-17 03:07 - 01118720 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe
2014-11-02 11:59 - 2014-07-17 03:07 - 00681984 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll
2014-11-02 11:59 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe
2014-11-02 11:59 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\winsta.dll
2014-11-02 11:59 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\windows\system32\rdpcorekmts.dll
2014-11-02 11:59 - 2014-07-17 03:07 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2014-11-02 11:59 - 2014-07-17 03:07 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2014-11-02 11:59 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\windows\SysWOW64\winsta.dll
2014-11-02 11:59 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2014-11-02 11:59 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstsc.exe
2014-11-02 11:59 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\windows\SysWOW64\aaclient.dll
2014-11-02 11:59 - 2014-07-17 02:39 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2014-11-02 11:59 - 2014-07-17 02:39 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2014-11-02 11:59 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpwd.sys
2014-11-02 11:59 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys
2014-11-02 11:58 - 2014-09-13 02:58 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\packager.dll
2014-11-02 11:58 - 2014-09-13 02:40 - 00067072 _____ (Microsoft Corporation) C:\windows\SysWOW64\packager.dll
2014-10-30 02:01 - 2014-10-30 02:01 - 00012820 _____ () C:\Users\ALFIR\Desktop\JRT.txt
2014-10-30 01:54 - 2014-10-30 01:54 - 00000000 ____D () C:\windows\ERUNT
2014-10-30 01:34 - 2014-10-30 01:50 - 00000000 ___DC () C:\AdwCleaner
2014-10-30 00:41 - 2014-10-30 01:29 - 00129752 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-30 00:40 - 2014-10-30 00:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-10-30 00:40 - 2014-10-30 00:40 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-10-30 00:40 - 2014-10-30 00:40 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-10-30 00:40 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-10-30 00:40 - 2014-10-01 11:11 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2014-10-30 00:40 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-10-23 23:50 - 2014-10-23 23:50 - 00038115 ____C () C:\ComboFix.txt
2014-10-22 22:17 - 2014-10-23 23:50 - 00000000 ___DC () C:\Qoobox
2014-10-22 22:17 - 2011-06-26 07:45 - 00256000 _____ () C:\windows\PEV.exe
2014-10-22 22:17 - 2010-11-07 18:20 - 00208896 _____ () C:\windows\MBR.exe
2014-10-22 22:17 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2014-10-22 22:17 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2014-10-22 22:17 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2014-10-22 22:17 - 2000-08-31 01:00 - 00098816 _____ () C:\windows\sed.exe
2014-10-22 22:17 - 2000-08-31 01:00 - 00080412 _____ () C:\windows\grep.exe
2014-10-22 22:17 - 2000-08-31 01:00 - 00068096 _____ () C:\windows\zip.exe
2014-10-22 22:16 - 2014-10-23 23:23 - 00000000 ____D () C:\windows\erdnt
2014-10-22 22:09 - 2014-10-22 22:09 - 00000000 ____D () C:\Program Files (x86)\SalesMaaggnEt
2014-10-22 21:39 - 2014-10-22 21:39 - 00000000 ____D () C:\Program Files (x86)\PriNcieaCouPon
2014-10-22 21:34 - 2014-10-22 21:34 - 00000000 ____D () C:\Program Files (x86)\LuckyCoupon
2014-10-22 21:26 - 2014-10-22 21:26 - 00000000 ____D () C:\Program Files (x86)\FlexIobleShhOpper
2014-10-22 21:05 - 2014-10-22 21:05 - 00001268 _____ () C:\Users\ALFIR\Desktop\Revo Uninstaller.lnk
2014-10-22 21:05 - 2014-10-22 21:05 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-10-19 16:25 - 2014-11-05 00:12 - 00000000 ___DC () C:\FRST
2014-10-19 16:23 - 2014-11-05 00:12 - 00000000 ____D () C:\Users\ALFIR\Desktop\Trojanerboard

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-04 23:56 - 2011-10-25 18:22 - 00001104 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-04 23:56 - 2011-08-25 10:51 - 06217350 _____ () C:\windows\system32\fastboot.set
2014-11-04 23:56 - 2011-08-25 10:49 - 03137128 ____C () C:\FaceProv.log
2014-11-04 23:56 - 2011-08-25 10:05 - 01182928 _____ () C:\windows\WindowsUpdate.log
2014-11-04 23:40 - 2013-06-05 17:23 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-11-04 23:38 - 2011-10-25 18:22 - 00001108 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-04 23:18 - 2011-08-25 10:43 - 00415616 _____ () C:\windows\system32\TPHDLOG0.LOG
2014-11-04 04:44 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\rescache
2014-11-04 03:24 - 2009-07-14 05:45 - 00021072 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-04 03:24 - 2009-07-14 05:45 - 00021072 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-04 03:23 - 2011-08-23 22:42 - 12262638 _____ () C:\windows\system32\perfh007.dat
2014-11-04 03:23 - 2011-08-23 22:42 - 03889178 _____ () C:\windows\system32\perfc007.dat
2014-11-04 03:23 - 2009-07-14 06:13 - 00006308 _____ () C:\windows\system32\PerfStringBackup.INI
2014-11-04 03:18 - 2013-04-22 22:43 - 00067568 _____ () C:\windows\setupact.log
2014-11-04 03:18 - 2009-07-14 06:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-11-04 03:18 - 2009-07-14 05:45 - 00337800 _____ () C:\windows\system32\FNTCACHE.DAT
2014-11-04 00:21 - 2011-08-25 10:43 - 03419392 _____ () C:\windows\system32\TPAPSLOG.LOG
2014-11-03 23:31 - 2011-10-25 20:38 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-03 23:17 - 2013-08-15 02:02 - 00000000 ____D () C:\windows\system32\MRT
2014-11-03 22:57 - 2011-10-25 21:27 - 103265616 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-11-02 15:37 - 2013-04-30 13:49 - 00410356 _____ () C:\windows\PFRO.log
2014-11-02 15:33 - 2013-04-30 10:31 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-11-02 15:33 - 2013-04-30 10:29 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-11-02 15:29 - 2013-04-30 10:28 - 00000000 ____D () C:\ProgramData\Apple
2014-11-02 11:39 - 2013-06-05 17:23 - 00003822 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-11-02 11:39 - 2012-06-07 16:44 - 00701104 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-11-02 11:39 - 2012-01-22 22:59 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-02 11:38 - 2011-10-27 18:14 - 00000416 _____ () C:\windows\Tasks\1-Klick-Wartung.job
2014-10-30 02:01 - 2012-11-27 04:36 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-10-30 02:01 - 2011-10-25 17:39 - 00001425 _____ () C:\Users\ALFIR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-10-30 02:01 - 2010-01-23 23:43 - 00001163 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-10-30 01:57 - 2014-04-25 16:54 - 00000000 ____D () C:\Program Files (x86)\PC Speed Maximizer
2014-10-30 01:52 - 2014-04-25 16:59 - 00003248 _____ () C:\windows\System32\Tasks\PC Speed Maximizer Schedule
2014-10-30 01:26 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system
2014-10-23 23:45 - 2009-07-14 03:34 - 00000215 ____C () C:\windows\system.ini
2014-10-22 22:39 - 2009-07-14 03:34 - 77594624 _____ () C:\windows\system32\config\software.bak
2014-10-22 22:39 - 2009-07-14 03:34 - 18350080 _____ () C:\windows\system32\config\system.bak
2014-10-22 22:39 - 2009-07-14 03:34 - 00524288 _____ () C:\windows\system32\config\default.bak
2014-10-22 22:39 - 2009-07-14 03:34 - 00262144 _____ () C:\windows\system32\config\security.bak
2014-10-22 22:39 - 2009-07-14 03:34 - 00262144 _____ () C:\windows\system32\config\sam.bak
2014-10-22 22:09 - 2014-06-15 21:00 - 00000000 ____D () C:\ProgramData\2e626c00b7597611
2014-10-22 21:43 - 2014-05-19 16:44 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-10-22 21:08 - 2014-05-19 16:46 - 00000000 ____D () C:\Users\ALFIR\AppData\Roaming\Activeris

Some content of TEMP:
====================
C:\Users\ALFIR\AppData\Local\Temp\Quarantine.exe
C:\Users\ALFIR\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-04 03:00

==================== End Of Log ============================

--- --- ---

Gruß

schrauber · 11.11.2014, 16:58

Java, Adobe und Firefox updaten.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Revo Uninstaller - Download - Filepony
damit Firefox deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.mozilla.org/de/kb/fi...einfach-loesen

Revo Uninstaller - Download - Filepony
damit Chrome deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.google.com/chrome/answer/3296214?hl=de

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

C:\Users\ALFIR\AppData\LocalLow\entrusted
C:\Program Files (x86)\entrusted
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
Emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

sommertag · 05.01.2015, 23:06

hry schrauber,

hier die Fixlog nach den updates

Zitat:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 04-01-2015
Ran by ALFIR at 2015-01-05 22:15:28 Run:1
Running from C:\Users\ALFIR\Desktop\Trojanerboard
Loaded Profile: ALFIR (Available profiles: ALFIR)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Users\ALFIR\AppData\LocalLow\entrusted
C:\Program Files (x86)\entrusted
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
Emptytemp:
*****************

C:\Users\ALFIR\AppData\LocalLow\entrusted => Moved successfully.
C:\Program Files (x86)\entrusted => Moved successfully.
C:\windows\system32\GroupPolicy\Machine => Moved successfully.
C:\windows\system32\GroupPolicy\GPT.ini => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
EmptyTemp: => Removed 419.1 MB temporary data.

The system needed a reboot.

==== End of Fixlog 22:16:21 ====

und hier die fixlog nach Neuinstallation und zurücksetzen:

Zitat:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 04-01-2015
Ran by ALFIR at 2015-01-05 23:00:37 Run:2
Running from C:\Users\ALFIR\Desktop\Trojanerboard
Loaded Profile: ALFIR (Available profiles: ALFIR)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Users\ALFIR\AppData\LocalLow\entrusted
C:\Program Files (x86)\entrusted
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
Emptytemp:
*****************

"C:\Users\ALFIR\AppData\LocalLow\entrusted" => File/Directory not found.
"C:\Program Files (x86)\entrusted" => File/Directory not found.
"C:\windows\system32\GroupPolicy\Machine" => File/Directory not found.
HKLM\SOFTWARE\Policies\Google => Key not found.
EmptyTemp: => Removed 134.2 MB temporary data.

The system needed a reboot.

==== End of Fixlog 23:00:48 ====

lieber gruß

Rechner lahm gelegt durch Pop-Ups, Werbefenster, Browserfenster

Plagegeister aller Art und deren Bekämpfung: Rechner lahm gelegt durch Pop-Ups, Werbefenster, Browserfenster