Virus? Vermehrte Meldungen, SQL, clipz, https seiten

Petunie

Hallo,

seit einigen Woche habe ich vermehrt Virenmeldungen über mein Aviraprogramm (fast täglich). Dabei passiert häufig, dass sich ein SQL-Serverclienthilfsprogramm in einer Endlosschleife zigmal von selbst öffnet und in den Vordergrund ploppt - ziemlich zeitgleich kommt die erste virenmeldung über Avira, ich schließe die Fenster und lasse den Virenscan durchlaufen, selbiges passiert bestimmt 6,7 mal hintereinander, die Anzahl der entdeckten Viren steigt von 2,3 auf bis zu 11, wenn ich einen kompletten system prüf durchlauf mache, habe ich danach ein paar Tage ruhe, aber das spiel wiederholt sich alle paar Tage...deshalb befürchte ich, dass ein Virus vll. nicht vollständig entfernt wurde....

Zudem hat mir mein Internetbrowser Firefox in den letzten Tagen nicht ermöglicht htpps-Websiten zu erreichen...

und seit dem ersten Auftreten dieser Virenmeldungen mit dem selbstöffnenden sql fenster in einem öffentlichen W-Lan-Netz in einem Cafe habe ich ein Programm Namens clipz von dem Herausgeber clipz.com auf meinem Rechner, das sich nicht deinstallieren lässt - dabei kommt die Meldung, das Programm sei nicht auffindbar, evtl schon deinstalliert...

ich weiß nicht ob diese Dinge zusammenhängen, ich kenne mich nicht gut aus damit, es ist mir nur insgesamt sehr merkwürdig vorgekommen. Ich würde mich freuen, wenn mir jemand mit Rat weiterhelfen kann.

Beste Grüße, Petunie

Log Malwarebytes' Anti Malware:
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 20.10.2014
Scan Time: 22:15:40
Logfile: log.txt
Administrator: Yes

Version: 2.00.3.1025
Malware Database: v2014.10.20.07
Rootkit Database: v2014.10.17.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: Jakob

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 340220
Time Elapsed: 8 min, 4 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 3
Trojan.Krypt, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\image, , [3cbb8e88f08c66d07698cd05c938be42],
Trojan.FakeAMI, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\message_history, , [8c6bea2c3943ef4705a716b408f93cc4],
PUP.Optional.BuenoSearch.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\acfoobbgoakpihljnfedbcfaipcdlfhk, , [e21584929ddf75c1e56c442f0ff5eb15],

Registry Values: 0
(No malicious items detected)

Registry Data: 1
Hijack.StartPage, HKU\S-1-5-21-1039312522-3144380910-2287453735-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.buenosearch.com/?babsrc=HP_ss&mntrId=C8DE1A94237E7BFB&affID=127685&tsp=5206, Good: (www.google.com), Bad: (hxxp://www.buenosearch.com/?babsrc=HP_ss&mntrId=C8DE1A94237E7BFB&affID=127685&tsp=5206),,[04f38a8c2a526accb39e170fc63fc63a]

Folders: 2
PUP.Optional.BuenoSearch.A, C:\Users\Jakob\AppData\Local\Google\Chrome\User Data\Default\Extensions\acfoobbgoakpihljnfedbcfaipcdlfhk, , [797e69ad9fdd1e18a3b0c232ba4813ed],
PUP.Optional.BuenoSearch.A, C:\Users\Jakob\AppData\Local\Google\Chrome\User Data\Default\Extensions\acfoobbgoakpihljnfedbcfaipcdlfhk\1.6.2_0, , [797e69ad9fdd1e18a3b0c232ba4813ed],

Files: 30
Trojan.Krypt, C:\Windows\ADFS\cs\antispyware_program\spot_corruption_handling.exe, , [3cbb8e88f08c66d07698cd05c938be42],
Trojan.FakeAMI, C:\Windows\assembly\GAC_64\Microsoft.Interop.Security.AzRoles\2.0.0.0__31bf3856ad364e35\desktop_background\color.exe, , [8c6bea2c3943ef4705a716b408f93cc4],
PUP.Optional.BuenoSearch.A, C:\Users\Jakob\AppData\Local\Google\Chrome\User Data\Default\Extensions\acfoobbgoakpihljnfedbcfaipcdlfhk\1.6.2_0\128.png, , [797e69ad9fdd1e18a3b0c232ba4813ed],
PUP.Optional.BuenoSearch.A, C:\Users\Jakob\AppData\Local\Google\Chrome\User Data\Default\Extensions\acfoobbgoakpihljnfedbcfaipcdlfhk\1.6.2_0\48.png, , [797e69ad9fdd1e18a3b0c232ba4813ed],
PUP.Optional.BuenoSearch.A, C:\Users\Jakob\AppData\Local\Google\Chrome\User Data\Default\Extensions\acfoobbgoakpihljnfedbcfaipcdlfhk\1.6.2_0\background.js, , [797e69ad9fdd1e18a3b0c232ba4813ed],
PUP.Optional.BuenoSearch.A, C:\Users\Jakob\AppData\Local\Google\Chrome\User Data\Default\Extensions\acfoobbgoakpihljnfedbcfaipcdlfhk\1.6.2_0\manifest.json, , [797e69ad9fdd1e18a3b0c232ba4813ed],
PUP.Optional.BuenoSearch.A, C:\Users\Jakob\AppData\Local\Google\Chrome\User Data\Default\Extensions\acfoobbgoakpihljnfedbcfaipcdlfhk\1.6.2_0\redirect.html, , [797e69ad9fdd1e18a3b0c232ba4813ed],
PUP.Optional.BuenoSearch.A, C:\Users\Jakob\AppData\Local\Google\Chrome\User Data\Default\Extensions\acfoobbgoakpihljnfedbcfaipcdlfhk\1.6.2_0\redirect.js, , [797e69ad9fdd1e18a3b0c232ba4813ed],
PUP.Optional.BuenoSearch.A, C:\Users\Jakob\AppData\Local\Google\Chrome\User Data\Default\Extensions\acfoobbgoakpihljnfedbcfaipcdlfhk\1.6.2_0\Thumbs.db, , [797e69ad9fdd1e18a3b0c232ba4813ed],
PUP.Optional.BuenoSearch, C:\Users\Jakob\AppData\Roaming\Mozilla\Firefox\Profiles\gvgd1qhx.default\prefs.js, Good: (), Bad: (user_pref("extensions.buenosearch.admin", false), ,[ba3d20f692ea191dda4e005cad584fb1]
PUP.Optional.BuenoSearch, C:\Users\Jakob\AppData\Roaming\Mozilla\Firefox\Profiles\gvgd1qhx.default\prefs.js, Good: (), Bad: (ferences

/* Do not edit this file.
*
* If yo), ,[6d8a1cfa7dff0432e147cb9149bc53ad]
PUP.Optional.BuenoSearch, C:\Users\Jakob\AppData\Roaming\Mozilla\Firefox\Profiles\gvgd1qhx.default\prefs.js, Good: (), Bad: (rences

/* Do not edit this file.
*
* If you make changes to this file while t), ,[3dba43d3215be1559f8995c7ab5aea16]
PUP.Optional.BuenoSearch, C:\Users\Jakob\AppData\Roaming\Mozilla\Firefox\Profiles\gvgd1qhx.default\prefs.js, Good: (), Bad: (e.
*
* If you make changes to this file while the ), ,[d720e531e795dc5ab573b5a78283a25e]
PUP.Optional.BuenoSearch, C:\Users\Jakob\AppData\Roaming\Mozilla\Firefox\Profiles\gvgd1qhx.default\prefs.js, Good: (), Bad: (ces

/* Do not edit this file.
*
* If you ma), ,[f106f91dee8e80b638f0d488f70e51af]
PUP.Optional.BuenoSearch, C:\Users\Jakob\AppData\Roaming\Mozilla\Firefox\Profiles\gvgd1qhx.default\prefs.js, Good: (), Bad: (erences

/* Do not edit this file.
*
* If you), ,[8c6b67af007c61d53aee29334eb7e21e]
PUP.Optional.BuenoSearch, C:\Users\Jakob\AppData\Roaming\Mozilla\Firefox\Profiles\gvgd1qhx.default\prefs.js, Good: (), Bad: (rences

/* Do not edit this file.
*
* If you mak), ,[e116b165126ae155d94f2735f2130cf4]
PUP.Optional.BuenoSearch, C:\Users\Jakob\AppData\Roaming\Mozilla\Firefox\Profiles\gvgd1qhx.default\prefs.js, Good: (), Bad: (ces

/* Do not edit this file.
*
* If you make changes to this file w), ,[c13612042e4e2511be6a9ebef51011ef]
PUP.Optional.BuenoSearch, C:\Users\Jakob\AppData\Roaming\Mozilla\Firefox\Profiles\gvgd1qhx.default\prefs.js, Good: (), Bad: ( this file.
*
* If you make changes to this file w), ,[ed0aa5711d5fe45284a48dcfab5a1ee2]
PUP.Optional.BuenoSearch, C:\Users\Jakob\AppData\Roaming\Mozilla\Firefox\Profiles\gvgd1qhx.default\prefs.js, Good: (), Bad: (ces

/* Do not edit this file.
*
* If you make), ,[09eef81e99e3c67077b176e6ba4b16ea]
PUP.Optional.BuenoSearch, C:\Users\Jakob\AppData\Roaming\Mozilla\Firefox\Profiles\gvgd1qhx.default\prefs.js, Good: (), Bad: (ences

/* Do not edit this file.
*
* If you ), ,[d1260f07b4c8f64062c64b11cc39926e]
PUP.Optional.BuenoSearch, C:\Users\Jakob\AppData\Roaming\Mozilla\Firefox\Profiles\gvgd1qhx.default\prefs.js, Good: (), Bad: (erences

/* Do not edit this file.
*
* If you make ), ,[9166160034489c9a65c383d96f96c040]
PUP.Optional.BuenoSearch, C:\Users\Jakob\AppData\Roaming\Mozilla\Firefox\Profiles\gvgd1qhx.default\prefs.js, Good: (), Bad: (

/* Do not edit this file.
*
* If you make changes t), ,[15e25fb7afcd63d3fb2dfe5e49bcea16]
PUP.Optional.BuenoSearch, C:\Users\Jakob\AppData\Roaming\Mozilla\Firefox\Profiles\gvgd1qhx.default\prefs.js, Good: (), Bad: (
/* Do not edit this file.
*
* If you make ch), ,[9e5928eedaa278befb2d500cf80de61a]
PUP.Optional.BuenoSearch, C:\Users\Jakob\AppData\Roaming\Mozilla\Firefox\Profiles\gvgd1qhx.default\prefs.js, Good: (), Bad: (erences

/* Do not edit this file.
*
* If you ), ,[9e59d73fe19b10267cac84d8f80d30d0]
PUP.Optional.BuenoSearch, C:\Users\Jakob\AppData\Roaming\Mozilla\Firefox\Profiles\gvgd1qhx.default\prefs.js, Good: (), Bad: (ences

/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten whe), ,[1ddaf620dd9f47ef08200d4fd72ece32]
PUP.Optional.BuenoSearch, C:\Users\Jakob\AppData\Roaming\Mozilla\Firefox\Profiles\gvgd1qhx.default\prefs.js, Good: (), Bad: ( is running,
* the changes will be overwritten wh), ,[e215b264502c63d384a4e8749b6a10f0]
PUP.Optional.BuenoSearch, C:\Users\Jakob\AppData\Roaming\Mozilla\Firefox\Profiles\gvgd1qhx.default\prefs.js, Good: (), Bad: (rences

/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when th), ,[3abd9185c3b9c76f959374e8c243a35d]
PUP.Optional.BuenoSearch, C:\Users\Jakob\AppData\Roaming\Mozilla\Firefox\Profiles\gvgd1qhx.default\prefs.js, Good: (), Bad: (unning,
* the changes will be overwritten when the ), ,[d81f51c53c4005319e8a015b5ea7ea16]
PUP.Optional.BuenoSearch, C:\Users\Jakob\AppData\Roaming\Mozilla\Firefox\Profiles\gvgd1qhx.default\prefs.js, Good: (), Bad: (nces

/* Do not edit this file.
*
* If you make changes ), ,[91666caa7b011b1b95937edee71e16ea]
PUP.Optional.BuenoSearch, C:\Users\Jakob\AppData\Roaming\Mozilla\Firefox\Profiles\gvgd1qhx.default\prefs.js, Good: (), Bad: (* Do not edit this file.
*
* If you make changes t), ,[5a9db75f5f1d063050d871ebdc293ac6]

Physical Sectors: 0
(No malicious items detected)


(end)


Log von Avira:
ÿþE#x#p#o#r#t#i#e#r#t#e# #E#r#e#i#g#n#i#s#s#e#:#e#r#n# # # # # #D#i#e# #D#a#t#e#i# #w#u#r#d#e# #i#n#s# #Q#u#a#r#a#n#t#ä#n#e#v#e#r#z#e#i#c#h#n#i#s# #u#n#t#e#r# #d#e#m# #N#a#m#e#n# #'#5#1#b#e#b#2#2#2#.#q#u#a#'# #
#o#d#e#r# #u#n#e#r#w#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #e#x#i#s#t#i#e#r#t# #n#i#c#h#t#!#a#n#]# #
#A#k#t#i#o#n#:# #Z#u#g#r#i#f#f# #v#e#r#w#e#i#g#e#r#n#P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #[#t#r#o#j#a#n#]# #r#d#e# #e#i#n# #V#i#r#u#s# #o#d#e#r# #u#n#e#r#w#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #[#t#r#o#j#a#n#]# #e#i#n# #V#i#r#u#s# #o#d#e#r# #u#n#e#r#w#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #[#t#r#o#j#a#n#]# #
#A#k#t#i#o#n#:# #Ü#b#e#r#g#e#b#e#n# #a#n# #S#c#a#n#n#e#r#8#1#1#9#'# #[#t#r#o#j#a#n#]# #
#A#v#i#r#a#\#L#o#g#f#i#l#e#s#\#w#e#b#_#s#l#i#c#e#\#a#n#t#i#s#p#y#w#a#r#e#.#e#x#e#'#e#r#w#e#i#g#e#r#n#0#1#4# #0#9#:#1#5# #[#E#c#h#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#k#t#i#o#n#:# #Ü#b#e#r#g#e#b#e#n# #a#n# #S#c#a#n#n#e#r#
# # # # # #w#u#r#d#e# #e#i#n# #V#i#r#u#s# #o#d#e#r# #u#n#e#r#w#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #[#t#r#o#j#a#n#]# #n#n#e#r#w#a#r#e# #g#e#f#u#n#d#e#n#
#A#k#t#i#o#n#:# #Ü#b#e#r#g#e#b#e#n# #a#n# #S#c#a#n#n#e#r#e#i# #'#C#:#\#P#r#o#g#r#a#m#D#a#t#a#\#A#v#i#r#a#\#M#y# #A#v#i#r#a#\#L#o#g#f#i#l#e#s#\#w#e#b#_#s#l#i#c#e#\#w#i#n#d#o#w#s#_#c#a#l#l#.#e#x#e#'#\#L#o#g#f#i#l#e#s#\#w#e#b#_#s#l#i#c#e#\#a#c#h#i#e#v#e#m#e#n#t#.#e #x#e#'#_#s#i#g#n#a#l#.#e#x#e#'#
#D#a#t#e#i# #'#C#:#\#P#r#o#g#r#a#m#D#a#t#a#\#M#i#c#r#o#s#o#f#t#\#W#i#n#d#o#w#s#\#A#I#T#\#g#a#m#e#s#\#b#u#s#y#_#s#i#g#n#a#l#.#e#x#e#'# #0#7#:#5#7# #[#E#c#h#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#
#0#7#:#5#6# #[#E#c#h#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#e#r# #D#a#t#e#i# #'#C#:#\#P#r#o#g#r#a#m#D#a#t#a#\#A#v#i#r#a#\#M#y# #A#v#i#r#a#\#L#o#g#f#i#l#e#s#\#w#e#b#_#s#l#i#c#e#\#r#u#b#l#e#s#.#e#x#e#'#s#\#A#I#T#\#g#a#m#e#s#\#c#o#m#p#l#i#a#n#t#_#c#a#r#d#.#e#x#e#'#'#
#e#i#n# #V#i#r#u#s# #o#d#e#r# #u#n#e#r#w#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #[#t#r#o#j#a#n#]# #:#\#P#r#o#g#r#a#m#D#a#t#a#\#M#i#c#r#o#s#o#f#t#\#W#i#n#d#o#w#s#\#A#I#T#\#g#a#m#e#s#\#r#o#t#a#t#i#o#n#_#l#o#c#k#.#e#x#e#'#[#E#c#h#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#
# # # #I#n# #d#e#r# #D#a#t#e#i# #'#C#:#\#P#r#o#g#r#a#m#D#a#t#a#\#A#v#i#r#a#\#M#y# #f# #v#e#r#w#e#i#g#e#r#n#0#7# #[#E#c#h#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#
# # # # # # #w#u#r#d#e# #e#i#n# #V#i#r#u#s# #o#d#e#r# #u#n#e#r#w#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #[#t#r#o#j#a#n#]# #0#5# #[#E#c#h#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n# #D#a#t#e#i# #'#C#:#\#P#r#o#g#r#a#m#D#a#t#a#\#A#v#i#r#a#\#M#y# #A#v#i#r#a#\#L#o#g#f#i#l#e#s#\#w#e#b#_#s#l#i#c#e#\#c#a#m#e#r#a#_#r#o#l#l#.#e#x#e#'#a#\#L#o#g#f#i#l#e#s#\#w#e#b#_#s#l#i#c#e#\#t#i#m#e#_#b#r#o#k#e#r#.#e #x#e#'#
#A#k#t#i#o#n#:# #Z#u#g#r#i#f#f# #v#e#r#w#e#i#g#e#r#n#a#t#a#\#A#v#i#r#a#\#M#y# #g#e#f#u#n#d#e#n#
#A#k#t#i#o#n#:# #Z#u#g#r#i#f#f# #v#e#r#w#e#i#g#e#r#n# #I#n# #d#e#r# #D#a#t#e#i# #'#C#:#\#P#r#o#g#r#a#m#D#a#t#a#\#A#v#i#r#a#\#M#y# #A#v#i#r#a#\#L#o#g#f#i#l#e#s#\#w#e#b#_#s#l#i#c#e#\#c#h#e#c#k#_#i#n#.#e#x#e#'#\#P#r#o#g#r#a#m#D#a#t#a#\#M#i#c#r#o#s#o#f#t#\#W#i#n#d#o#w#s#\#A#I#T#\#g#a #m#e#s#\#a#d#d#_#c#a#l#l#.#e#x#e#'#D#a#t#a#\#M#i#c#r#o#s#o#f#t#\#W#i#n#d#o#w#s#\#A#I#T#\#g#a#m#e#s#\#c#d#m#a#_#n#e#t#w#o#r#k#.#e#x#e#'#
#g#e#f#u#n#d#e#n#f#i#l#e#s#\#w#e#b#_#s#l#i#c#e#\#b#l#a#n#k#e#t#_#o#r#d#e#r#.#e#x#e#'#P#r#o#g#r#a#m#D#a#t#a#\#A#v#i#r#a#\#M#y# #
# #I#n# #d#e#r# #D#a#t#e#i# #'#C#:#\#P#r#o#g#r#a#m#D#a#t#a#\#A#v#i#r#a#\#M#y# # #d#e#r# #D#a#t#e#i# #'#C#:#\#P#r#o#g#r#a#m#D#a#t#a#\#A#v#i#r#a#\#M#y# #n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n# #0#5#:#3#8# #[#E#c#h#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#
#[#E#c#h#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n# #[#E#c#h#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#3# #[#E#c#h#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#
#g#e#f#u#n#d#e#n#
#1#7#.#1#0#.#2#0#1#4# #0#5#:#3#1# #[#E#c#h#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#e# #g#e#f#u#n#d#e#n#d#e#r# #D#a#t#e#i# #'#C#:#\#P#r#o#g#r#a#m#D#a#t#a#\#A#v#i#r#a#\#M#y# #A#v#i#r#a#\#L#o#g#f#i#l#e#s#\#w#e#b#_#s#l#i#c#e#\#m#e#d#i#a#.#e#x#e#'#
#e#i#n# #V#i#r#u#s# #o#d#e#r# #u#n#e#r#w#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #[#t#r#o#j#a#n#]# #o#f#t#\#W#i#n#d#o#w#s#\#A#I#T#\#g#a#m#e#s#\#s#l#i#d#e#r#.#e#x#e#'#s#\#u#n#p#i#n#.#e#x#e#'#
#A#k#t#i#o#n#:# #Ü#b#e#r#g#e#b#e#n# #a#n# #S#c#a#n#n#e#r#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #[#t#r#o#j#a#n#]# #9#'# #[#t#r#o#j#a#n#]# #
# # # # # #w#u#r#d#e# #e#i#n# #V#i#r#u#s# #o#d#e#r# #u#n#e#r#w#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #[#t#r#o#j#a#n#]# #u#s#g#e#f#ü#h#r#t#e# #A#k#t#i#o#n#:# #Ü#b#e#r#g#e#b#e#n# #a#n# #S#c#a#n#n#e#r#Z#u#g#r#i#f#f# #v#e#r#w#e#i#g#e#r#n# #A#u#s#g#e#f#ü#h#r#t#e# #A#k#t#i#o#n#:# #Z#u#g#r#i#f#f# #v#e#r#w#e#i#g#e#r#n#
#u#n#e#r#w#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #[#t#r#o#j#a#n#]# #y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #[#t#r#o#j#a#n#]# #
#P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #[#t#r#o#j#a#n#]# # # #g#e#f#u#n#d#e#n#.# #a#n# #S#c#a#n#n#e#r#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#
#g#e#f#u#n#d#e#n#i# #'#C#:#\#P#r#o#g#r#a#m#D#a#t#a#\#M#i#c#r#o#s#o#f#t#\#W#i#n#d#o#w#s#\#A#I#T#\#g#a#m#e#s#\#s#u#p#p#o#r#t#.#e#x#e#'#n#
#d#e#r# #D#a#t#e#i# #'#C#:#\#P#r#o#g#r#a#m#D#a#t#a#\#M#i#c#r#o#s#o#f#t#\#W#i#n#d#o#w#s#\#A#I#T#\#g#a#m#e#s#\#p#r#i#c#e#_#a#d#j#u#s#t#m#e#n#t#.#e#x#e#'#r#e# #g#e#f#u#n#d#e#n#u#n#d#e#n#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#
# # # # # #w#u#r#d#e# #e#i#n# #V#i#r#u#s# #o#d#e#r# #u#n#e#r#w#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #[#t#r#o#j#a#n#]# # # # # #I#n# #d#e#r# #D#a#t#e#i# #'#C#:#\#P#r#o#g#r#a#m#D#a#t#a#\#M#i#c#r#o#s#o#f#t#\#W#i#n#d#o#w#s#\#A#I#T#\#g#a#m#e#s#\#a#d#d#r#e#s#s#_#b#o#o#k#.#e#x#e#'#f#u#n#d#e#n#
#P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #[#t#r#o#j#a#n#]# #P#r#o#g#r#a#m#D#a#t#a#\#A#v#i#r#a#\#M#y# #\#A#v#i#r#a#\#M#y# #A#v#i#r#a#\#L#o#g#f#i#l#e#s#\#w#e#b#_#s#l#i#c#e#\#b#l#u#e#t#o#o#t#h#.#e#x#e#'#.#e#x#e#'#
#0#4#:#3#4# #[#E#c#h#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#e#r#w#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #[#t#r#o#j#a#n#]# #g#f#i#l#e#s#\#w#e#b#_#s#l#i#c#e#\#s#i#g#n#_#i#n#_#i#n#f#o#.#e#x#e#'#
#M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n# # # # #w#u#r#d#e# #e#i#n# #V#i#r#u#s# #o#d#e#r# #u#n#e#r#w#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #[#t#r#o#j#a#n#]# #R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #[#t#r#o#j#a#n#]# #
#P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #[#t#r#o#j#a#n#]# # # # # # # #A#u#s#g#e#f#ü#h#r#t#e# #A#k#t#i#o#n#:# #Z#u#g#r#i#f#f# #v#e#r#w#e#i#g#e#r#n#
#e#r#
#a#n# #S#c#a#n#n#e#r#h#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#n#d#e#n#
# # # # # #w#u#r#d#e# #e#i#n# #V#i#r#u#s# #o#d#e#r# #u#n#e#r#w#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #[#t#r#o#j#a#n#]# #a#\#M#y# #A#v#i#r#a#\#L#o#g#f#i#l#e#s#\#w#e#b#_#s#l#i#c#e#\#e#n#c#o#d#i#n#g#.#e#x#e#'#v#i#r#a#\#M#y# #v#i#r#a#\#L#o#g#f#i#l#e#s#\#w#e#b#_#s#l#i#c#e#\#n#e#t#_#a#m#o#u#n#t#.#e#x#e#'#
#P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #[#t#r#o#j#a#n#]# # # # # #I#n# #d#e#r# #D#a#t#e#i# #'#C#:#\#P#r#o#g#r#a#m#D#a#t#a#\#A#v#i#r#a#\#M#y# #A#v#i#r#a#\#L#o#g#f#i#l#e#s#\#w#e#b#_#s#l#i#c#e#\#p#a#t#i#e#n#t#.#e#x#e#'#D#a#t#a#\#M#i#c#r#o#s#o#f#t#\#W#i#n#d#o#w#s#\#A#I#T#\#g#a#m#e#s#\#a#l#i#p#a #y#.#e#x#e#'#
#[#t#r#o#j#a#n#]# #n#d#o#w#s#\#A#I#T#\#g#a#m#e#s#\#s#h#a#r#e#_#c#h#a#r#m#.#e#x#e#'#I#T#\#g#a#m#e#s#\#p#r#o#d#u#c#t#i#o#n#_#o#r#d#e#r#_#l#i#n#e#.#e#x#e#'#\#L#o#g#f#i#l#e #s#\#w#e#b#_#s#l#i#c#e#\#r#s#s#_#f#e#e#d#.#e#x#e#'#
#Z#u#g#r#i#f#f# #v#e#r#w#e#i#g#e#r#n#_#s#l#i#c#e#\#s#h#a#r#e#d#_#p#h#o#t#o#s#.#e#x#e#'#.#e#x#e#'#
#M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#1#1#9#'# #[#t#r#o#j#a#n#]# #t#\#W#i#n#d#o#w#s#\#A#I#T#\#g#a#m#e#s#\#x#b#o#x#_#v#i#d#e#o#.#e#x#e#'#r# #D#a#t#e#i# #'#C#:#\#P#r#o#g#r#a#m#D#a#t#a#\#M#i#c#r#o#s#o#f#t#\#W#i#n#d#o#w#s#\#A#I#T#\#g#a#m#e#s#\#2#_#i#n#_#1#.#e#x#e#'#
#0#3#:#4#4# #[#E#c#h#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#C#:#\#P#r#o#g#r#a#m#D#a#t#a#\#M#i#c#r#o#s#o#f#t#\#W#i#n#d#o#w#s#\#A#I#T#\#g#a#m#e#s#\#b#i#t#m#a#p#.#e#x#e#'#
#A#k#t#i#o#n#(#e#n#)#:#k#t#i#o#n# #m#i#t# #H#i#l#f#e# #d#e#r# #A#R#K# #L#i#b#r#a#r#y# #d#u#r#c#h#z#u#f#ü#h#r#e#n#.# #s#\#l#i#p#i#d#_#p#r#o#f#i#l#e#.#e#x#e#'#
# # # # # #w#u#r#d#e# #e#i#n# #V#i#r#u#s# #o#d#e#r# #u#n#e#r#w#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#1#0#0#6#0#8#'# #[#t#r#o#j#a#n#]# # #'#C#:#\#P#r#o#g#r#a#m#D#a#t#a#\#M#i#c#r#o#s#o#f#t#\#W#i#n#d#o#w#s#\#A#I#T#\#g#a#m#e#s#\#a#p#p#e#a#r#_#o#f#f#l#i#n#e#.#e#x#e#'#e# #g#e#f#u#n#d#e#n#
#u#n#t#e#r# #d#e#m# #N#a#m#e#n# #'#4#8#6#8#9#3#b#3#.#q#u#a#'# #e#i#g#e#r#n#
#M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#e#f#ü#h#r#t#e# #A#k#t#i#o#n#(#e#n#)#:# # # # # #g#e#f#u#n#d#e#n#.#F#T#W#A#R#E#\#M#i#c#r#o#s#o#f#t#\#W#i#
#g#e#f#u#n#d#e#n#a#t#e#i# #'#C#:#\#P#r#o#g#r#a#m#D#a#t#a#\#M#i#c#r#o#s#o#f#t#\#W#i#n#d#o#w#s#\#A#I#T#\#g#a#m#e#s#\#w#i#n#d#o#w#s#_#p#e#o#p#l#e#.#e#x#e#'#[#E#c#h#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#
# # # # # #w#u#r#d#e# #e#i#n# #V#i#r#u#s# #o#d#e#r# #u#n#e#r#w#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#1#0#0#6#0#8#'# #[#t#r#o#j#a#n#]# #n#:# #Ü#b#e#r#g#e#b#e#n# #a#n# #S#c#a#n#n#e#r#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#e#r#w#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#1#0#0#6#0#8#'# #
#i#t#_#n#u#m#b#e#r#.#e#x#e#'#i#c#e#\#a#i#r#p#l#a#n#e#_#m#o#d#e#.#e#x#e#'#
#w#u#r#d#e# #e#r#f#o#l#g#r#e#i#c#h# #r#e#p#a#r#i#e#r#t#.#n#t#e#r# #d#e#m# #N#a#m#e#n# #'#1#b#a#6#7#9#3#2#.#q#u#a#'# #e#r#w#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#9#8#7#9#0#'# #[#t#r#o#j#a#n#]# #
# # # # # # #e#n#t#h#i#e#l#t# #e#i#n#e#n# #V#i#r#u#s# #o#d#e#r# #u#n#e#r#w#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#9#8#3#1#6#'# #
#F#T#W#A#R#E#\#M#i#c#r#o#s#o#f#t#\#W#i# # # #A#v#i#r#a#\#L#o#g#f#i#l#e#s#\#w#e#b#_#s#l#i#c#e#\#i#n#t#e#r#f#a#c#e#\#p#o#s#t#a#l#_#c#o#d#e#.#e#x#e#'#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#
# # # # # #e#n#t#h#i#e#l#t# #e#i#n#e#n# #V#i#r#u#s# #o#d#e#r# #u#n#e#r#w#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#9#7#5#3#0#'# # # # # # # #[#t#r#o#j#a#n#]#.#a#r#d#.#e#x#e#'#j#a#n#]#.#
#1#4#:#4#5# #[#S#y#s#t#e#m#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#1#3# #[#E#c#h#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#9#6#0#2#2#'# #
#\#W#i#n#d#o#w#s#\#C#u#r#r#e#n#t#V#e#r#s#i#o#n#\#R#u#n#\#a#u#t#o#m#a#t#i#c#_#m#a#i#n#
#o#d#e#r# #u#n#e#r#w#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#9#5#6#8#5#'# #[#t#r#o#j#a#n#]# #n#d#e#n#.#y#p#t#.#X#p#a#c#k#.#9#3#8#6#0#'# #[#t#r#o#j#a#n#]# #4#\#M#i#c#r#o#s#o#f#t#.#I#n#t#e#r#o#p#.#S#e#c#u#r#i#t#y#.#A#z#R#o#l#e#s#\#2#.#0#.#0#.#0#_#_#3#1#b#f#3#8#5#6#
#v#e#r#w#e#i#g#e#r#n#e#i# #'#C#:#\#P#r#o#g#r#a#m#D#a#t#a#\#A#v#i#r#a#\#A#n#t#i#V#i#r# #D#e#s#k#t#o#p#\#I#P#M#\#h#a#r#d#w#a#r#e#\#l#a#y#e#r#.#e#x#e#'#r#t#\#u#n#l#i#m#i#t#e#d#_#m#u#s#i#c#.#e#x#e#'#
# # # #[#t#r#o#j#a#n#]#.#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#6#8#7#2#'# #a#n#t#ä#n#e#v#e#r#z#e#i#c#h#n#i#s# #u#n#t#e#r# #d#e#m# #N#a#m#e#n# #'#5#1#4#7#5#f#3#c#.#q#u#a#'# #r#o#s#o#f#t# #
#M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#a#l#_#b#a#n#k#_#m#f#o#_#c#o#d#e#.#e#x#e#'#
#F#i#l#e#s#\#C#o#m#m#o#n# #F#i#l#e#s#\#m#i#c#r#o#s#o#f#t# #r#w#e#i#g#e#r#n#t#i#o#n#:# #Z#u#g#r#i#f#f# #v#e#r#w#e#i#g#e#r#n#s#h#a#r#e#d#\#i#n#k#\#s#k#-#S#K#\#s#m#a#r#t#\#p#r#o#c#e#s#s#o#r#.#e#x#e#'#
#P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#9#4#5#'# #[#t#r#o#j#a#n#]# #9# #[#E#c#h#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#9#4#5#'# #[#t#r#o#j#a#n#]# #
#Z#u#g#r#i#f#f# #v#e#r#w#e#i#g#e#r#n# #s#h#a#r#e#d#\#i#n#k#\#s#k#-#S#K#\#s#m#a#r#t#\#c#a#p#t#i#v#e#_#p#o#r#t#a#l#.#e#x#e#'#r#t#e# #A#k#t#i#o#n#:# #Z#u#g#r#i#f#f# #v#e#r#w#e#i#g#e#r#n#D#a#t#a#\#A#v#i#r#a#\#A#n#t#i#V#i#r# #
# # # # # #A#u#s#g#e#f#ü#h#r#t#e# #A#k#t#i#o#n#:# #Z#u#g#r#i#f#f# #v#e#r#w#e#i#g#e#r#n#a#r#e# #g#e#f#u#n#d#e#n# #[#E#c#h#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#
# # # # # #A#u#s#g#e#f#ü#h#r#t#e# #A#k#t#i#o#n#:# #Ü#b#e#r#g#e#b#e#n# #a#n# #S#c#a#n#n#e#r#x#.#e#x#e#'#
#1#4#:#1#4# #[#E#c#h#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n# # # # # #I#n# #d#e#r# #D#a#t#e#i# #'#C#:#\#P#r#o#g#r#a#m# #F#i#l#e#s#\#C#o#m#m#o#n# #F#i#l#e#s#\#m#i#c#r#o#s#o#f#t# # #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#9#4#5#'# #[#t#r#o#j#a#n#]# #:#0#7# #[#E#c#h#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#
# # # # # #A#u#s#g#e#f#ü#h#r#t#e# #A#k#t#i#o#n#:# #Z#u#g#r#i#f#f# #v#e#r#w#e#i#g#e#r#n#p#a#c#k#.#8#8#9#4#5#'# #[#t#r#o#j#a#n#]# #r#w#ü#n#s#c#h#t#e#s# #P#r#o#g#r#a#m#m# #'#T#R#/#C#r#y#p#t#.#X#p#a#c#k#.#8#8#9#4#5#'# #[#t#r#o#j#a#n#]# #
# # # # # #I#n# #d#e#r# #D#a#t#e#i# #'#C#:#\#P#r#o#g#r#a#m# #F#i#l#e#s#\#C#o#m#m#o#n# #F#i#l#e#s#\#S#y#s#t#e#m#\#d#e#-#D#E#\#p#a#g#e#r#\#p#l#a#y#b#a#c#k#.#e#x#e#'#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n# # # # #D#u#r#c#h#g#e#f#ü#h#r#t#e# #A#k#t#i#o#n#(#e#n#)#:#.#2#0#1#4# #1#3#:#5#0# #[#E#c#h#t#z#e#i#t#-#S#c#a#n#n#e#r#]# #M#a#l#w#a#r#e# #g#e#f#u#n#d#e#n#
#D#a#t#e#i# #w#u#r#d#e# #i#n#s# #Q#u#a#r#a#n#t#ä#n#e#v#e#r#z#e#i#c#h#n#i#s# #u#n#t#e#r# #d#e#m# #N#a#m#e#n# #'#5#1#0#4#5#6#6#b#.#q#u#a#'# #

Log Emisoft Anti Maleware:
ÿþE#m#s#i#s#o#f#t# #A#n#t#i#-#M#a#l#w#a#r#e# #-# #V#e#r#s#i#o#n# #9#.#0#

Eset Online Scan Log:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=cf216214b702c946a1a137e7c65d6222
# engine=20691
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-10-20 10:28:32
# local_time=2014-10-21 12:28:32 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 100 0 20526448 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 13350065 19712684 0 0
# compatibility_mode_1='Emsisoft Anti-Malware'
# compatibility_mode=16642 16777213 100 100 1759 215086400 0 0
# scanned=175437
# found=10
# cleaned=6
# scan_time=1549
sh=D946B8CD6D28CA38D3ACCE897F07856474DED6B4 ft=1 fh=47c4bcac63278daa vn="Variante von Win32/Kryptik.CNWZ Trojaner" ac=I fn="C:\Users\All Users\Avira\My Avira\Logfiles\web_slice\audio.exe"
sh=34B81FE44378E548A2AFC0F13437B7F1865C2269 ft=1 fh=97fa79c3256b6b8f vn="Variante von Win32/Kryptik.CNWZ Trojaner" ac=I fn="C:\Users\All Users\Avira\My Avira\Logfiles\web_slice\right_arrow.exe"
sh=D946B8CD6D28CA38D3ACCE897F07856474DED6B4 ft=1 fh=47c4bcac63278daa vn="Variante von Win32/Kryptik.CNWZ Trojaner" ac=I fn="C:\Users\All Users\Microsoft\Windows\AIT\games\impression.exe"
sh=34B81FE44378E548A2AFC0F13437B7F1865C2269 ft=1 fh=97fa79c3256b6b8f vn="Variante von Win32/Kryptik.CNWZ Trojaner" ac=I fn="C:\Users\All Users\Microsoft\Windows\AIT\games\ipsec.exe"
sh=FEFE2A148E52A40A6A50C4FF7874F9C6F938910C ft=1 fh=a6e6b06e2f656293 vn="Win32/Toolbar.Babylon.I evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Jakob\AppData\Roaming\BabSolution\Shared\BabMaint.exe.vir"
sh=D946B8CD6D28CA38D3ACCE897F07856474DED6B4 ft=1 fh=47c4bcac63278daa vn="Variante von Win32/Kryptik.CNWZ Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\ProgramData\Avira\My Avira\Logfiles\web_slice\audio.exe"
sh=34B81FE44378E548A2AFC0F13437B7F1865C2269 ft=1 fh=97fa79c3256b6b8f vn="Variante von Win32/Kryptik.CNWZ Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\ProgramData\Avira\My Avira\Logfiles\web_slice\right_arrow.exe"
sh=D946B8CD6D28CA38D3ACCE897F07856474DED6B4 ft=1 fh=47c4bcac63278daa vn="Variante von Win32/Kryptik.CNWZ Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\ProgramData\Microsoft\Windows\AIT\games\impression.exe"
sh=34B81FE44378E548A2AFC0F13437B7F1865C2269 ft=1 fh=97fa79c3256b6b8f vn="Variante von Win32/Kryptik.CNWZ Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\ProgramData\Microsoft\Windows\AIT\games\ipsec.exe"
sh=4004FE3708C984E040FD9CB9F9861403AA4F52F9 ft=1 fh=ffcfed5b12d11974 vn="Variante von Win32/WinloadSDA.H evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Jakob\Documents\UNI\Krams\Blog\Adobe-Audition-lnstall.exe"