| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Vierenscanns checkenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
28.01.2015, 20:58
| #1 |
 |  Vierenscanns checken Hi ihr Profis, mir wurde hier schon einmal geholfen also bin ich wie in meinem alten Thema vorgegangen http://www.trojaner-board.de/152959-...chchecken.html ich hab das selbe proplem jetzt auch beim PC meiner Eltern. Ich bin wie im Link vorgegangen hab Malwarebyte laufen lassen > dann adwcleaner > dann Junkware Removal Tool laufen lassen > dann Eset Online Scanner > hab dann den SecurityCheck gemacht und am Schluss noch ein FRST.txt und Addition.txt erstellt. DelFix habe ich noch nicht laufen lassen. Ich Poste hier jetzt nacheinander alle Logfiles wir grad beschrieben in dieser Reihenfolge. Wäre net wenn da mal jemand drübert schauen kann und mir sagen wie ich weiter vorgehen soll, danke schon mal im voraus. Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 26.01.2015 Suchlauf-Zeit: 20:19:12 Logdatei: Administrator: Ja Version: 2.00.4.1028 Malware Datenbank: v2015.01.26.07 Rootkit Datenbank: v2015.01.14.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 8.1 CPU: x86 Dateisystem: NTFS Benutzer: Administrator Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 424274 Verstrichene Zeit: 31 Min, 47 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente erkannt) Module: 0 (Keine schädliche Elemente erkannt) Registrierungsschlüssel: 127 Adware.BetterSurf, HKLM\SOFTWARE\CLASSES\CLSID\{10dde552-053a-4c32-aa43-ec767f06427c}, In Quarantäne, [7c83f308f1989b9b39d284e735ccaa56], Adware.BetterSurf, HKLM\SOFTWARE\CLASSES\TYPELIB\{ab04948a-3c7f-448f-bf48-7e25936df99b}, In Quarantäne, [7c83f308f1989b9b39d284e735ccaa56], Adware.BetterSurf, HKLM\SOFTWARE\CLASSES\INTERFACE\{D890AED4-7FF7-4E92-A6F3-5B7745E57990}, In Quarantäne, [7c83f308f1989b9b39d284e735ccaa56], Adware.BetterSurf, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{10DDE552-053A-4C32-AA43-EC767F06427C}, In Quarantäne, [7c83f308f1989b9b39d284e735ccaa56], Adware.BetterSurf, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{10DDE552-053A-4C32-AA43-EC767F06427C}, In Quarantäne, [7c83f308f1989b9b39d284e735ccaa56], Adware.BetterSurf, HKU\S-1-5-21-1220945662-492894223-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{10DDE552-053A-4C32-AA43-EC767F06427C}, In Quarantäne, [7c83f308f1989b9b39d284e735ccaa56], Adware.BetterSurf, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{10DDE552-053A-4C32-AA43-EC767F06427C}, In Quarantäne, [7c83f308f1989b9b39d284e735ccaa56], Adware.BetterSurf, HKU\S-1-5-21-1220945662-492894223-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{10DDE552-053A-4C32-AA43-EC767F06427C}, In Quarantäne, [7c83f308f1989b9b39d284e735ccaa56], Adware.BetterSurf, HKLM\SOFTWARE\CLASSES\CLSID\{10DDE552-053A-4C32-AA43-EC767F06427C}\INPROCSERVER32, In Quarantäne, [7c83f308f1989b9b39d284e735ccaa56], PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\CLASSES\CLSID\{8c44a1c7-b3f6-41e5-a682-e735164f6dd1}, In Quarantäne, [c53aa5561a6f270f1abdac2664a119e7], PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{bb876a91-d092-4dff-a954-9560c072858e}, In Quarantäne, [c53aa5561a6f270f1abdac2664a119e7], PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{9DE800F1-1221-4103-9107-6167A4B06C0D}, In Quarantäne, [c53aa5561a6f270f1abdac2664a119e7], PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{8C44A1C7-B3F6-41E5-A682-E735164F6DD1}, In Quarantäne, [c53aa5561a6f270f1abdac2664a119e7], PUP.Optional.MediaPlayer.A, HKU\S-1-5-21-1220945662-492894223-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{8C44A1C7-B3F6-41E5-A682-E735164F6DD1}, In Quarantäne, [c53aa5561a6f270f1abdac2664a119e7], PUP.Optional.MediaPlayer.A, HKU\S-1-5-21-1220945662-492894223-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{8C44A1C7-B3F6-41E5-A682-E735164F6DD1}, In Quarantäne, [c53aa5561a6f270f1abdac2664a119e7], PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\CLASSES\CLSID\{8C44A1C7-B3F6-41E5-A682-E735164F6DD1}\INPROCSERVER32, In Quarantäne, [c53aa5561a6f270f1abdac2664a119e7], Adware.BetterSurf, HKLM\SOFTWARE\CLASSES\CLSID\{45277F9D-8C9C-4726-A558-D69AC740910E}, In Quarantäne, [a95612e9e6a38babb62871f2936e3fc1], Adware.BetterSurf, HKLM\SOFTWARE\CLASSES\TYPELIB\{22BD6ABB-A7BA-4399-A6FF-BA579DA27D48}, In Quarantäne, [a95612e9e6a38babb62871f2936e3fc1], Adware.BetterSurf, HKLM\SOFTWARE\CLASSES\INTERFACE\{F13CEB7F-05F6-444A-9EBF-20F20D554446}, In Quarantäne, [a95612e9e6a38babb62871f2936e3fc1], Adware.BetterSurf, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{45277F9D-8C9C-4726-A558-D69AC740910E}, In Quarantäne, [a95612e9e6a38babb62871f2936e3fc1], Adware.BetterSurf, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{45277F9D-8C9C-4726-A558-D69AC740910E}, In Quarantäne, [a95612e9e6a38babb62871f2936e3fc1], Adware.BetterSurf, HKU\S-1-5-21-1220945662-492894223-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{45277F9D-8C9C-4726-A558-D69AC740910E}, In Quarantäne, [a95612e9e6a38babb62871f2936e3fc1], Adware.BetterSurf, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{45277F9D-8C9C-4726-A558-D69AC740910E}, In Quarantäne, [a95612e9e6a38babb62871f2936e3fc1], Adware.BetterSurf, HKU\S-1-5-21-1220945662-492894223-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{45277F9D-8C9C-4726-A558-D69AC740910E}, In Quarantäne, [a95612e9e6a38babb62871f2936e3fc1], Adware.BetterSurf, HKLM\SOFTWARE\CLASSES\CLSID\{45277F9D-8C9C-4726-A558-D69AC740910E}\INPROCSERVER32, In Quarantäne, [a95612e9e6a38babb62871f2936e3fc1], PUP.Optional.Delta, HKLM\SOFTWARE\CLASSES\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}, In Quarantäne, [20df817a5138c274452ffa33ad54e020], PUP.Optional.Delta, HKLM\SOFTWARE\CLASSES\escort.escortIEPane.1, In Quarantäne, [20df817a5138c274452ffa33ad54e020], PUP.Optional.Delta, HKLM\SOFTWARE\CLASSES\escort.escortIEPane, In Quarantäne, [20df817a5138c274452ffa33ad54e020], PUP.Optional.Delta, HKLM\SOFTWARE\CLASSES\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, In Quarantäne, [20df817a5138c274452ffa33ad54e020], PUP.Optional.Delta, HKLM\SOFTWARE\CLASSES\delta.deltaHlpr.1, In Quarantäne, [20df817a5138c274452ffa33ad54e020], PUP.Optional.Delta, HKLM\SOFTWARE\CLASSES\delta.deltaHlpr, In Quarantäne, [20df817a5138c274452ffa33ad54e020], PUP.Optional.Delta, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, In Quarantäne, [20df817a5138c274452ffa33ad54e020], PUP.Optional.Delta, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, In Quarantäne, [20df817a5138c274452ffa33ad54e020], PUP.Optional.Delta, HKU\S-1-5-21-1220945662-492894223-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, In Quarantäne, [20df817a5138c274452ffa33ad54e020], PUP.Optional.Delta, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, In Quarantäne, [20df817a5138c274452ffa33ad54e020], PUP.Optional.Delta, HKU\S-1-5-21-1220945662-492894223-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, In Quarantäne, [20df817a5138c274452ffa33ad54e020], PUP.Optional.Delta, HKLM\SOFTWARE\CLASSES\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}\INPROCSERVER32, In Quarantäne, [20df817a5138c274452ffa33ad54e020], Adware.BetterSurf, HKLM\SOFTWARE\CLASSES\CLSID\{bca0317a-96b3-4688-bb5e-12d73540d98f}, In Quarantäne, [05fa9d5e5a2f0a2c9129a5cad0319b65], Adware.BetterSurf, HKLM\SOFTWARE\CLASSES\TYPELIB\{6462e38f-1abc-4c30-87de-b012877cd6fb}, In Quarantäne, [05fa9d5e5a2f0a2c9129a5cad0319b65], Adware.BetterSurf, HKLM\SOFTWARE\CLASSES\INTERFACE\{1CA587C1-86A8-4404-8646-09C67B967EC9}, In Quarantäne, [05fa9d5e5a2f0a2c9129a5cad0319b65], Adware.BetterSurf, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{BCA0317A-96B3-4688-BB5E-12D73540D98F}, In Quarantäne, [05fa9d5e5a2f0a2c9129a5cad0319b65], Adware.BetterSurf, HKU\S-1-5-21-1220945662-492894223-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{BCA0317A-96B3-4688-BB5E-12D73540D98F}, In Quarantäne, [05fa9d5e5a2f0a2c9129a5cad0319b65], Adware.BetterSurf, HKU\S-1-5-21-1220945662-492894223-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{BCA0317A-96B3-4688-BB5E-12D73540D98F}, In Quarantäne, [05fa9d5e5a2f0a2c9129a5cad0319b65], Adware.BetterSurf, HKLM\SOFTWARE\CLASSES\CLSID\{BCA0317A-96B3-4688-BB5E-12D73540D98F}\INPROCSERVER32, In Quarantäne, [05fa9d5e5a2f0a2c9129a5cad0319b65], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, In Quarantäne, [a25d7b80cebb6ccadd65d95430d37d83], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}, In Quarantäne, [fa05f5065d2c2c0a1b7292687d85c63a], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{39CB8175-E224-4446-8746-00566302DF8D}, In Quarantäne, [fa05f5065d2c2c0a1b7292687d85c63a], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\esrv.deltaESrvc.1, In Quarantäne, [fa05f5065d2c2c0a1b7292687d85c63a], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\esrv.deltaESrvc, In Quarantäne, [fa05f5065d2c2c0a1b7292687d85c63a], PUP.Optional.SoftwareUpdater, HKLM\SOFTWARE\CLASSES\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}, In Quarantäne, [6897aa5145440432f207bc43cd353cc4], PUP.Optional.SoftwareUpdater, HKLM\SOFTWARE\CLASSES\TYPELIB\{A0EE0278-2986-4E5A-884E-A3BF0357E476}, In Quarantäne, [6897aa5145440432f207bc43cd353cc4], PUP.Optional.SoftwareUpdater, HKLM\SOFTWARE\CLASSES\INTERFACE\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}, In Quarantäne, [6897aa5145440432f207bc43cd353cc4], PUP.Optional.SoftwareUpdater, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}, In Quarantäne, [6897aa5145440432f207bc43cd353cc4], PUP.Optional.SoftwareUpdater, HKLM\SOFTWARE\CLASSES\Updater.AmiUpd.1, In Quarantäne, [6897aa5145440432f207bc43cd353cc4], PUP.Optional.SoftwareUpdater, HKLM\SOFTWARE\CLASSES\Updater.AmiUpd, In Quarantäne, [6897aa5145440432f207bc43cd353cc4], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}, In Quarantäne, [d42bc13a6a1f3ef846fca38959aa916f], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\delta.deltadskBnd.1, In Quarantäne, [d42bc13a6a1f3ef846fca38959aa916f], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\delta.deltadskBnd, In Quarantäne, [d42bc13a6a1f3ef846fca38959aa916f], PUP.Optional.Delta.A, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{82E1477C-B154-48D3-9891-33D83C26BCD3}, In Quarantäne, [d42bc13a6a1f3ef846fca38959aa916f], PUP.Optional.Delta.A, HKU\S-1-5-21-1220945662-492894223-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{82E1477C-B154-48D3-9891-33D83C26BCD3}, In Quarantäne, [d42bc13a6a1f3ef846fca38959aa916f], PUP.Optional.Delta.A, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{82E1477C-B154-48D3-9891-33D83C26BCD3}, In Quarantäne, [d42bc13a6a1f3ef846fca38959aa916f], PUP.Optional.Delta.A, HKU\S-1-5-21-1220945662-492894223-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{82E1477C-B154-48D3-9891-33D83C26BCD3}, In Quarantäne, [d42bc13a6a1f3ef846fca38959aa916f], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{4599D05A-D545-4069-BB42-5895B4EAE05B}, In Quarantäne, [ba45b6452861360080c13df01ce742be], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{1231839B-064E-4788-B865-465A1B5266FD}, In Quarantäne, [ba45b6452861360080c13df01ce742be], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{2DAC2231-CC35-482B-97C5-CED1D4185080}, In Quarantäne, [ba45b6452861360080c13df01ce742be], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}, In Quarantäne, [ba45b6452861360080c13df01ce742be], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}, In Quarantäne, [ba45b6452861360080c13df01ce742be], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}, In Quarantäne, [ba45b6452861360080c13df01ce742be], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{57C91446-8D81-4156-A70E-624551442DE9}, In Quarantäne, [ba45b6452861360080c13df01ce742be], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}, In Quarantäne, [ba45b6452861360080c13df01ce742be], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}, In Quarantäne, [ba45b6452861360080c13df01ce742be], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{97DD820D-2E20-40AD-B01E-6730B2FCE630}, In Quarantäne, [ba45b6452861360080c13df01ce742be], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B177446D-54A4-4869-BABC-8566110B4BE0}, In Quarantäne, [ba45b6452861360080c13df01ce742be], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}, In Quarantäne, [ba45b6452861360080c13df01ce742be], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}, In Quarantäne, [ba45b6452861360080c13df01ce742be], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{F05B12E1-ADE8-4485-B45B-898748B53C37}, In Quarantäne, [ba45b6452861360080c13df01ce742be], PUP.Optional.Babylon.A, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, In Quarantäne, [1be408f3f1985cda22b425cee1212fd1], PUP.Optional.VideoDownloader.A, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{77BEC163-D389-42C1-91A4-C758846296A5}, In Quarantäne, [7a859368593077bfccae81abfa0926da], PUP.Optional.Delta.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}, In Quarantäne, [f30c68933c4d2a0ca98d48e5b64d22de], PUP.Optional.Delta.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Delta Chrome Toolbar, In Quarantäne, [639ce51614751422e7323bba14f034cc], PUP.Optional.DataMangr.A, HKLM\SOFTWARE\DataMngr, In Quarantäne, [87788f6c3a4f003606d97430689b817f], PUP.Optional.MediaPlayerAlpha.A, HKLM\SOFTWARE\MediaPlayerV1alpha4960, In Quarantäne, [5fa09269dfaa072f3f5000be40c345bb], PUP.Optional.Delta.A, HKLM\SOFTWARE\DELTA\DELTA\Instl, In Quarantäne, [05faeb1071188da99ac734a8e81cfb05], PUP.Optional.BetterSurf.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\ajadlheagenmmedmhaoafgkdenfilcme, In Quarantäne, [fe017e7d65241a1c9fd5d4d12ad99f61], PUP.Optional.Delta.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\eooncjejnppfjjklapaamhcdmjbilmde, In Quarantäne, [c53ad229eb9eaf87bd8bd8b7db2807f9], PUP.Optional.Webexp, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Webexp Enhanced, In Quarantäne, [4bb4dd1e0f7a2a0c9ea5635ecd360000], PUM.Chrome.EXTPOL, HKLM\SOFTWARE\POLICIES\GOOGLE\CHROME\EXTENSIONINSTALLFORCELIST, In Quarantäne, [28d732c9cbbe270fcbe1946e45c0718f], PUP.Optional.BabylonToolBar.A, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BabylonToolbar, In Quarantäne, [f6097289ea9f86b06b8539a150b4ee12], PUP.Optional.DataMngr.A, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr, In Quarantäne, [8f70c4373a4f46f00b238354c2420000], PUP.Optional.DataMngr.A, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, In Quarantäne, [c03ffa0116732610a5889b3ccb39c53b], PUP.Optional.Babylon.A, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BABSOLUTION\Updater, In Quarantäne, [a95614e70a7f7db9af82b32506fe24dc], PUP.Optional.Delta.A, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DELTA\DELTA, In Quarantäne, [e41bc9321f6aba7ce3ed805552b28d73], PUP.Optional.BProtector.A, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\bProtectSettings, In Quarantäne, [f40b9f5c74157db9cea6ca10c63e17e9], PUP.Optional.Delta.A, HKU\S-1-5-21-1220945662-492894223-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DELTA\DELTA\IESTRG, In Quarantäne, [d926f7044247ef479c80dfff3dc7dc24], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}, In Quarantäne, [48b725d6f099ba7c27faab9605fe21df], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\delta.deltaappCore.1, In Quarantäne, [48b725d6f099ba7c27faab9605fe21df], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\delta.deltaappCore, In Quarantäne, [48b725d6f099ba7c27faab9605fe21df], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}, In Quarantäne, [48b725d6f099ba7c27faab9605fe21df], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\d, In Quarantäne, [48b725d6f099ba7c27faab9605fe21df], PUP.Optional.Delta.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\delta, In Quarantäne, [48b725d6f099ba7c27faab9605fe21df], PUP.Optional.BetterSurf, HKLM\SOFTWARE\CLASSES\CLSID\{45277F9D-8C9C-4726-A558-D69AC740910E}, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, HKLM\SOFTWARE\CLASSES\TYPELIB\{22BD6ABB-A7BA-4399-A6FF-BA579DA27D48}, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, HKLM\SOFTWARE\CLASSES\INTERFACE\{F13CEB7F-05F6-444A-9EBF-20F20D554446}, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{45277F9D-8C9C-4726-A558-D69AC740910E}, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{45277F9D-8C9C-4726-A558-D69AC740910E}, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, HKU\S-1-5-21-1220945662-492894223-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{45277F9D-8C9C-4726-A558-D69AC740910E}, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{45277F9D-8C9C-4726-A558-D69AC740910E}, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, HKU\S-1-5-21-1220945662-492894223-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{45277F9D-8C9C-4726-A558-D69AC740910E}, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, HKLM\SOFTWARE\CLASSES\CLSID\{45277F9D-8C9C-4726-A558-D69AC740910E}\INPROCSERVER32, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.Webexp, HKLM\SOFTWARE\CLASSES\CLSID\{10dde552-053a-4c32-aa43-ec767f06427c}, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, HKLM\SOFTWARE\CLASSES\TYPELIB\{ab04948a-3c7f-448f-bf48-7e25936df99b}, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, HKLM\SOFTWARE\CLASSES\INTERFACE\{D890AED4-7FF7-4E92-A6F3-5B7745E57990}, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{10DDE552-053A-4C32-AA43-EC767F06427C}, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{10DDE552-053A-4C32-AA43-EC767F06427C}, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, HKU\S-1-5-21-1220945662-492894223-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{10DDE552-053A-4C32-AA43-EC767F06427C}, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{10DDE552-053A-4C32-AA43-EC767F06427C}, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, HKU\S-1-5-21-1220945662-492894223-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{10DDE552-053A-4C32-AA43-EC767F06427C}, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, HKLM\SOFTWARE\CLASSES\CLSID\{10DDE552-053A-4C32-AA43-EC767F06427C}\INPROCSERVER32, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.MediaPlayerAlpha.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MediaPlayerV1alpha4960, In Quarantäne, [cb34b348e2a756e0e9bc7bc83ec5b44c], PUP.Optional.VideoPlayer.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Video Player, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, HKLM\SOFTWARE\CLASSES\CLSID\{bca0317a-96b3-4688-bb5e-12d73540d98f}, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{6462e38f-1abc-4c30-87de-b012877cd6fb}, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{1CA587C1-86A8-4404-8646-09C67B967EC9}, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{BCA0317A-96B3-4688-BB5E-12D73540D98F}, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, HKU\S-1-5-21-1220945662-492894223-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{BCA0317A-96B3-4688-BB5E-12D73540D98F}, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, HKU\S-1-5-21-1220945662-492894223-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{BCA0317A-96B3-4688-BB5E-12D73540D98F}, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, HKLM\SOFTWARE\CLASSES\CLSID\{BCA0317A-96B3-4688-BB5E-12D73540D98F}\INPROCSERVER32, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], Registrierungswerte: 13 PUP.Optional.Delta.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{82E1477C-B154-48D3-9891-33D83C26BCD3}, Delta Toolbar, In Quarantäne, [d42bc13a6a1f3ef846fca38959aa916f] PUP.Optional.VideoDownloader.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{77BEC163-D389-42C1-91A4-C758846296A5}, C:\Program Files\Video downloader\Firefox, In Quarantäne, [7a859368593077bfccae81abfa0926da] PUP.Optional.Delta.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{82E1477C-B154-48D3-9891-33D83C26BCD3}, In Quarantäne, [9b6474875d2c81b5182a210b3dc66997], PUP.Optional.VideoDownloader.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS\{77BEC163-D389-42c1-91A4-C758846296A5}, In Quarantäne, [c8378e6d6524979f0a703af21ee5cc34], PUP.Optional.BetterSurf.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|ext@bettersurfplusv1.com, C:\Program Files\BetterSurf\BetterSurfPlusV1\ff, In Quarantäne, [619ec338f792f0460373adf8c63da858] PUP.Optional.WebExpEnhanced.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|ext@WebexpEnhancedV1alpha7456.net, C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha7456\ff, In Quarantäne, [ec13bc3f058473c3ab8b2599c340936d] PUP.Optional.VideoPlayer.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|ext@VideoPlayerV3beta364.net, C:\Program Files\VideoPlayerV3\VideoPlayerV3beta364\ff, In Quarantäne, [d926fb0000899f97a049645005feba46] PUP.Optional.MediaPlayerAlpha.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|ext@MediaPlayerV1alpha4960.net, C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha4960\ff, In Quarantäne, [3dc2eb10cdbc72c4266af9c55ba89769] PUM.Chrome.EXTPOL, HKLM\SOFTWARE\POLICIES\GOOGLE\CHROME\EXTENSIONINSTALLFORCELIST|1, cikncbmchfpcjadkdenbnlgljoncpnke;hxxp://mediaply.net/mediaplayer/update/updateMediaPlayerV1alpha4960.xml, In Quarantäne, [28d732c9cbbe270fcbe1946e45c0718f] PUP.Optional.Delta.A, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DELTA\DELTA|tlbrSrchUrl, In Quarantäne, [e41bc9321f6aba7ce3ed805552b28d73], PUP.BProtector, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, hxxp://www.delta-search.com/?affID=120519&babsrc=HP_ss&mntrId=ECAA1216E37593D0, In Quarantäne, [53acce2d7415e15550df13c40cf89a66] PUP.BProtector, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|bProtectorDefaultScope, {0633EE93-D776-472f-A0FF-E1416B8B2E3A}, In Quarantäne, [bd42fdfe4b3ee94d69c7e2f521e3aa56] PUP.Optional.Delta.A, HKU\S-1-5-21-1220945662-492894223-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DELTA\DELTA\IESTRG|tlbrsrchurl, In Quarantäne, [d926f7044247ef479c80dfff3dc7dc24], Registrierungsdaten: 1 PUP.Optional.StartPage, HKU\S-1-5-21-1220945662-492894223-839522115-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.delta-search.com/?affID=120519&babsrc=HP_ss&mntrId=ECAA1216E37593D0, Gut: (www.google.com), Schlecht: (hxxp://www.delta-search.com/?affID=120519&babsrc=HP_ss&mntrId=ECAA1216E37593D0),Ersetzt,[41be30cbef9a6dc9dbedabfa0ff632ce] Ordner: 41 PUP.Optional.SoftwareUpdater.A, C:\Users\Marie-Luise\AppData\Local\SwvUpdater, In Quarantäne, [d32cde1d8dfc6dc952b14c4e2ed56997], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.Delta.A, C:\Users\Marie-Luise\AppData\Roaming\BabSolution\Shared, In Quarantäne, [639ce51614751422e7323bba14f034cc], PUP.Optional.Delta.A, C:\Program Files\Delta\delta\1.8.10.0, In Quarantäne, [48b725d6f099ba7c27faab9605fe21df], PUP.Optional.Delta.A, C:\Program Files\Delta\delta\1.8.10.0\bh, In Quarantäne, [48b725d6f099ba7c27faab9605fe21df], PUP.Optional.BetterSurf, C:\Program Files\BetterSurf, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, C:\Program Files\BetterSurf\BetterSurfPlusV1, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, C:\Program Files\BetterSurf\BetterSurfPlusV1\ch, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, C:\Program Files\BetterSurf\BetterSurfPlusV1\ff, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, C:\Program Files\BetterSurf\BetterSurfPlusV1\ff\chrome, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, C:\Program Files\BetterSurf\BetterSurfPlusV1\ff\chrome\content, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, C:\Program Files\BetterSurf\BetterSurfPlusV1\ff\chrome\content\icons, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, C:\Program Files\BetterSurf\BetterSurfPlusV1\ff\chrome\content\icons\default, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, C:\Program Files\BetterSurf\BetterSurfPlusV1\ie, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.Webexp, C:\Program Files\WebexpEnhancedV1, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha7456, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha7456\ch, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha7456\ff, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha7456\ff\chrome, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha7456\ff\chrome\content, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha7456\ff\chrome\content\icons, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha7456\ff\chrome\content\icons\default, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha7456\ie, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.MediaPlayerAlpha.A, C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha4960, In Quarantäne, [cb34b348e2a756e0e9bc7bc83ec5b44c], PUP.Optional.MediaPlayerAlpha.A, C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha4960\ch, In Quarantäne, [cb34b348e2a756e0e9bc7bc83ec5b44c], PUP.Optional.MediaPlayerAlpha.A, C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha4960\ff, In Quarantäne, [cb34b348e2a756e0e9bc7bc83ec5b44c], PUP.Optional.MediaPlayerAlpha.A, C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha4960\ff\chrome, In Quarantäne, [cb34b348e2a756e0e9bc7bc83ec5b44c], PUP.Optional.MediaPlayerAlpha.A, C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha4960\ff\chrome\content, In Quarantäne, [cb34b348e2a756e0e9bc7bc83ec5b44c], PUP.Optional.MediaPlayerAlpha.A, C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha4960\ff\chrome\content\icons, In Quarantäne, [cb34b348e2a756e0e9bc7bc83ec5b44c], PUP.Optional.MediaPlayerAlpha.A, C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha4960\ff\chrome\content\icons\default, In Quarantäne, [cb34b348e2a756e0e9bc7bc83ec5b44c], PUP.Optional.MediaPlayerAlpha.A, C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha4960\ie, In Quarantäne, [cb34b348e2a756e0e9bc7bc83ec5b44c], PUP.Optional.VideoPlayer.A, C:\Program Files\VideoPlayerV3\VideoPlayerV3beta364, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, C:\Program Files\VideoPlayerV3\VideoPlayerV3beta364\ch, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, C:\Program Files\VideoPlayerV3\VideoPlayerV3beta364\ff, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, C:\Program Files\VideoPlayerV3\VideoPlayerV3beta364\ff\chrome, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, C:\Program Files\VideoPlayerV3\VideoPlayerV3beta364\ff\chrome\content, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, C:\Program Files\VideoPlayerV3\VideoPlayerV3beta364\ff\chrome\content\icons, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, C:\Program Files\VideoPlayerV3\VideoPlayerV3beta364\ff\chrome\content\icons\default, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, C:\Program Files\VideoPlayerV3\VideoPlayerV3beta364\ie, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.BabSolution.A, C:\Users\Marie-Luise\AppData\Roaming\BabSolution\CR, In Quarantäne, [28d7c6353f4af0466f5480d85fa4e31d], Dateien: 101 Adware.BetterSurf, C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha7456\ie\WebexpEnhancedV1alpha7456.dll, In Quarantäne, [7c83f308f1989b9b39d284e735ccaa56], PUP.Optional.MediaPlayer.A, C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha4960\ie\MediaPlayerV1alpha4960.dll, In Quarantäne, [c53aa5561a6f270f1abdac2664a119e7], Adware.BetterSurf, C:\Program Files\BetterSurf\BetterSurfPlusV1\ie\BetterSrf.dll, In Quarantäne, [a95612e9e6a38babb62871f2936e3fc1], PUP.Optional.Delta, C:\Program Files\Delta\delta\1.8.10.0\bh\delta.dll, In Quarantäne, [20df817a5138c274452ffa33ad54e020], Adware.BetterSurf, C:\Program Files\VideoPlayerV3\VideoPlayerV3beta364\ie\VideoPlayerV3beta364.dll, In Quarantäne, [05fa9d5e5a2f0a2c9129a5cad0319b65], PUP.Optional.Delta.A, C:\Program Files\Delta\delta\1.8.10.0\deltasrv.exe, In Quarantäne, [fa05f5065d2c2c0a1b7292687d85c63a], PUP.Optional.SoftwareUpdater, C:\Users\Marie-Luise\AppData\Local\SwvUpdater\Updater.exe, In Quarantäne, [6897aa5145440432f207bc43cd353cc4], PUP.Optional.Delta.A, C:\Program Files\Delta\delta\1.8.10.0\deltaTlbr.dll, In Quarantäne, [d42bc13a6a1f3ef846fca38959aa916f], PUP.Optional.SoftwareUpdater.A, C:\Users\Marie-Luise\AppData\Local\SwvUpdater\Updater.xml, In Quarantäne, [d32cde1d8dfc6dc952b14c4e2ed56997], PUP.Optional.SoftwareUpdater.A, C:\Users\Marie-Luise\AppData\Local\SwvUpdater\status.cfg, In Quarantäne, [d32cde1d8dfc6dc952b14c4e2ed56997], PUP.SoftwareUpdater.A, C:\Windows\System32\Tasks\AmiUpdXp, In Quarantäne, [659a7b802267e254cf25aef05ba88f71], PUP.Software.Updater, C:\Windows\Tasks\AmiUpdXp.job, In Quarantäne, [847bf30885044de906aa6e5a20e3c937], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\playlist.vpl, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\config.ini, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_193.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_199.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_200.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_201.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_204.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_219.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_221.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_224.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_268.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_28.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_34.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_37.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_49.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_57.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_86.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_99.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_103.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_11.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_120.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_121.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_122.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_123.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_124.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_125.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_126.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_127.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_136.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_137.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_140.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_141.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_149.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_150.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_160.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_165.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_181.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.VPLMedia.A, C:\Users\Marie-Luise\AppData\Roaming\player\images\channel_ld_191.png, In Quarantäne, [25da49b2f990b086a58a80551ce86c94], PUP.Optional.Delta.A, C:\Users\Marie-Luise\AppData\Roaming\BabSolution\Shared\Delta.ico, In Quarantäne, [639ce51614751422e7323bba14f034cc], PUP.Optional.Delta.A, C:\Users\Marie-Luise\AppData\Roaming\BabSolution\Shared\BabMaint.exe, In Quarantäne, [639ce51614751422e7323bba14f034cc], PUP.Optional.Delta.A, C:\Users\Marie-Luise\AppData\Roaming\BabSolution\Shared\BUSolution.dll, In Quarantäne, [639ce51614751422e7323bba14f034cc], PUP.Optional.Delta.A, C:\Users\Marie-Luise\AppData\Roaming\BabSolution\Shared\BUSUninstall.exe, In Quarantäne, [639ce51614751422e7323bba14f034cc], PUP.Optional.Delta.A, C:\Users\Marie-Luise\AppData\Roaming\BabSolution\Shared\chu.js, In Quarantäne, [639ce51614751422e7323bba14f034cc], PUP.Optional.Delta.A, C:\Users\Marie-Luise\AppData\Roaming\BabSolution\Shared\GUninstaller.exe, In Quarantäne, [639ce51614751422e7323bba14f034cc], PUP.Optional.Delta.A, C:\Users\Marie-Luise\AppData\Roaming\BabSolution\Shared\SetupParams.ini, In Quarantäne, [639ce51614751422e7323bba14f034cc], PUP.Optional.Delta.A, C:\Users\Marie-Luise\AppData\Roaming\BabSolution\Shared\sqlite3.dll, In Quarantäne, [639ce51614751422e7323bba14f034cc], PUP.Optional.Delta.A, C:\Program Files\Delta\delta\1.8.10.0\deltaApp.dll, In Quarantäne, [48b725d6f099ba7c27faab9605fe21df], PUP.Optional.Delta.A, C:\Program Files\Delta\delta\1.8.10.0\deltaEng.dll, In Quarantäne, [48b725d6f099ba7c27faab9605fe21df], PUP.Optional.Delta.A, C:\Program Files\Delta\delta\1.8.10.0\escortShld.dll, In Quarantäne, [48b725d6f099ba7c27faab9605fe21df], PUP.Optional.Delta.A, C:\Program Files\Delta\delta\1.8.10.0\GUninstaller.exe, In Quarantäne, [48b725d6f099ba7c27faab9605fe21df], PUP.Optional.Delta.A, C:\Program Files\Delta\delta\1.8.10.0\uninstall.exe, In Quarantäne, [48b725d6f099ba7c27faab9605fe21df], PUP.Optional.BetterSurf, C:\Program Files\BetterSurf\BetterSurfPlusV1\ch\BetterSurfPlusV1.crx, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, C:\Program Files\BetterSurf\BetterSurfPlusV1\ff\chrome.manifest, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, C:\Program Files\BetterSurf\BetterSurfPlusV1\ff\install.rdf, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, C:\Program Files\BetterSurf\BetterSurfPlusV1\ff\chrome\content\better-surf.js, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, C:\Program Files\BetterSurf\BetterSurfPlusV1\ff\chrome\content\firefox2.js, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, C:\Program Files\BetterSurf\BetterSurfPlusV1\ff\chrome\content\overlay.xul, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, C:\Program Files\BetterSurf\BetterSurfPlusV1\ff\chrome\content\icons\Thumbs.db, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, C:\Program Files\BetterSurf\BetterSurfPlusV1\ff\chrome\content\icons\default\star1_32.png, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.BetterSurf, C:\Program Files\BetterSurf\BetterSurfPlusV1\ie\BetterSrf.dll, In Quarantäne, [db24f00b216812249cfeed552bd849b7], PUP.Optional.Webexp, C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha7456\ch\WebexpEnhancedV1alpha7456.crx, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha7456\ff\chrome.manifest, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha7456\ff\install.rdf, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha7456\ff\chrome\content\ffWebexpEnhancedV1alpha7456.js, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha7456\ff\chrome\content\ffWebexpEnhancedV1alpha7456ffaction.js, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha7456\ff\chrome\content\overlay.xul, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha7456\ff\chrome\content\icons\Thumbs.db, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha7456\ff\chrome\content\icons\default\WebexpEnhancedV1alpha7456_32.png, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.Webexp, C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha7456\ie\WebexpEnhancedV1alpha7456.dll, In Quarantäne, [42bd5aa1dcad3bfb79aa4bf8838011ef], PUP.Optional.MediaPlayerAlpha.A, C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha4960\uninstall.exe, In Quarantäne, [cb34b348e2a756e0e9bc7bc83ec5b44c], PUP.Optional.MediaPlayerAlpha.A, C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha4960\ch\MediaPlayerV1alpha4960.crx, In Quarantäne, [cb34b348e2a756e0e9bc7bc83ec5b44c], PUP.Optional.MediaPlayerAlpha.A, C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha4960\ff\chrome.manifest, In Quarantäne, [cb34b348e2a756e0e9bc7bc83ec5b44c], PUP.Optional.MediaPlayerAlpha.A, C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha4960\ff\install.rdf, In Quarantäne, [cb34b348e2a756e0e9bc7bc83ec5b44c], PUP.Optional.MediaPlayerAlpha.A, C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha4960\ff\chrome\content\ffMediaPlayerV1alpha4960.js, In Quarantäne, [cb34b348e2a756e0e9bc7bc83ec5b44c], PUP.Optional.MediaPlayerAlpha.A, C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha4960\ff\chrome\content\ffMediaPlayerV1alpha4960ffaction.js, In Quarantäne, [cb34b348e2a756e0e9bc7bc83ec5b44c], PUP.Optional.MediaPlayerAlpha.A, C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha4960\ff\chrome\content\overlay.xul, In Quarantäne, [cb34b348e2a756e0e9bc7bc83ec5b44c], PUP.Optional.MediaPlayerAlpha.A, C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha4960\ff\chrome\content\icons\Thumbs.db, In Quarantäne, [cb34b348e2a756e0e9bc7bc83ec5b44c], PUP.Optional.MediaPlayerAlpha.A, C:\Program Files\MediaPlayerV1\MediaPlayerV1alpha4960\ff\chrome\content\icons\default\MediaPlayerV1alpha4960_32.png, In Quarantäne, [cb34b348e2a756e0e9bc7bc83ec5b44c], PUP.Optional.VideoPlayer.A, C:\Program Files\VideoPlayerV3\VideoPlayerV3beta364\uninstall.exe, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, C:\Program Files\VideoPlayerV3\VideoPlayerV3beta364\ch\VideoPlayerV3beta364.crx, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, C:\Program Files\VideoPlayerV3\VideoPlayerV3beta364\ff\chrome.manifest, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, C:\Program Files\VideoPlayerV3\VideoPlayerV3beta364\ff\install.rdf, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, C:\Program Files\VideoPlayerV3\VideoPlayerV3beta364\ff\chrome\content\ffVideoPlayerV3beta364.js, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, C:\Program Files\VideoPlayerV3\VideoPlayerV3beta364\ff\chrome\content\ffVideoPlayerV3beta364ffaction.js, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, C:\Program Files\VideoPlayerV3\VideoPlayerV3beta364\ff\chrome\content\overlay.xul, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, C:\Program Files\VideoPlayerV3\VideoPlayerV3beta364\ff\chrome\content\icons\Thumbs.db, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, C:\Program Files\VideoPlayerV3\VideoPlayerV3beta364\ff\chrome\content\icons\default\VideoPlayerV3beta364_32.png, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.VideoPlayer.A, C:\Program Files\VideoPlayerV3\VideoPlayerV3beta364\ie\VideoPlayerV3beta364.dll, In Quarantäne, [d72836c531584bebebf0ba8d0df660a0], PUP.Optional.BabSolution.A, C:\Users\Marie-Luise\AppData\Roaming\BabSolution\CR\Delta.crx, In Quarantäne, [28d7c6353f4af0466f5480d85fa4e31d], Physische Sektoren: 0 (Keine schädliche Elemente erkannt) (end) AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v4.109 - Bericht erstellt am 26/01/2015 um 23:01:20
# Aktualisiert 24/01/2015 von Xplode
# Database : 2015-01-25.1 [Live]
# Betriebssystem : Windows 8.1 Pro (32 bits)
# Benutzername : Administrator - THOMAS
# Gestartet von : C:\Users\Administrator\Downloads\AdwCleaner_4.109.exe
# Option : Löschen
***** [ Dienste ] *****
Dienst Gelöscht : vToolbarUpdater18.1.9
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\AVG Secure Search
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\Program Files\AVG Secure Search
Ordner Gelöscht : C:\Program Files\AVG Security Toolbar
Ordner Gelöscht : C:\Program Files\Delta
Ordner Gelöscht : C:\Program Files\DomaIQ Uninstaller
Ordner Gelöscht : C:\Program Files\MediaPlayerV1
Ordner Gelöscht : C:\Program Files\tuguu sl
Ordner Gelöscht : C:\Program Files\Video downloader
Ordner Gelöscht : C:\Program Files\VideoPlayerV3
Ordner Gelöscht : C:\Program Files\Common Files\AVG Secure Search
Ordner Gelöscht : C:\Users\Administrator\AppData\Local\AVG Secure Search
Ordner Gelöscht : C:\Users\Administrator\AppData\LocalLow\AVG Secure Search
Ordner Gelöscht : C:\Users\Administrator\AppData\LocalLow\Delta
Ordner Gelöscht : C:\Users\Marie-Luise\AppData\Local\AVG Secure Search
Ordner Gelöscht : C:\Users\Marie-Luise\AppData\LocalLow\AVG Secure Search
Ordner Gelöscht : C:\Users\Marie-Luise\AppData\Roaming\BabSolution
Ordner Gelöscht : C:\Users\Marie-Luise\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Marie-Luise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Datei Gelöscht : C:\Program Files\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
***** [ Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Schlüssel Gelöscht : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\S
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Schlüssel Gelöscht : HKLM\SOFTWARE\e558f88bd6fee40
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Schlüssel Gelöscht : HKCU\Software\AVG Secure Search
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKLM\SOFTWARE\AVG Secure Search
Schlüssel Gelöscht : HKLM\SOFTWARE\AVG Security Toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Babylon
Schlüssel Gelöscht : HKLM\SOFTWARE\BetterSurf
Schlüssel Gelöscht : HKLM\SOFTWARE\Delta
Schlüssel Gelöscht : HKLM\SOFTWARE\MediaPlayerV1
Schlüssel Gelöscht : HKLM\SOFTWARE\Tarma Installer
Schlüssel Gelöscht : HKLM\SOFTWARE\BetterSurf Plus V1
Schlüssel Gelöscht : HKLM\SOFTWARE\Webexp Enhanced
Schlüssel Gelöscht : HKLM\SOFTWARE\WebexpEnhancedV1
Schlüssel Gelöscht : HKLM\SOFTWARE\Video Player
Schlüssel Gelöscht : HKLM\SOFTWARE\VideoPlayerV3
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BetterSurf Plus V1
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17416
-\\ Mozilla Firefox v35.0.1 (x86 de)
[qwmoaur2.default\prefs.js] - Zeile gelöscht : user_pref("extensions.xpiState", "{\"app-global\":{\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"d\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\extensions\\\\{972ce4c6-7e08-4474-a285-32081[...]
*************************
AdwCleaner[R0].txt - [8750 octets] - [26/01/2015 22:50:56]
AdwCleaner[S0].txt - [8680 octets] - [26/01/2015 23:01:20]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8740 octets] ##########
AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v4.109 - Bericht erstellt am 26/01/2015 um 23:01:20
# Aktualisiert 24/01/2015 von Xplode
# Database : 2015-01-25.1 [Live]
# Betriebssystem : Windows 8.1 Pro (32 bits)
# Benutzername : Administrator - THOMAS
# Gestartet von : C:\Users\Administrator\Downloads\AdwCleaner_4.109.exe
# Option : Löschen
***** [ Dienste ] *****
Dienst Gelöscht : vToolbarUpdater18.1.9
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\AVG Secure Search
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\Program Files\AVG Secure Search
Ordner Gelöscht : C:\Program Files\AVG Security Toolbar
Ordner Gelöscht : C:\Program Files\Delta
Ordner Gelöscht : C:\Program Files\DomaIQ Uninstaller
Ordner Gelöscht : C:\Program Files\MediaPlayerV1
Ordner Gelöscht : C:\Program Files\tuguu sl
Ordner Gelöscht : C:\Program Files\Video downloader
Ordner Gelöscht : C:\Program Files\VideoPlayerV3
Ordner Gelöscht : C:\Program Files\Common Files\AVG Secure Search
Ordner Gelöscht : C:\Users\Administrator\AppData\Local\AVG Secure Search
Ordner Gelöscht : C:\Users\Administrator\AppData\LocalLow\AVG Secure Search
Ordner Gelöscht : C:\Users\Administrator\AppData\LocalLow\Delta
Ordner Gelöscht : C:\Users\Marie-Luise\AppData\Local\AVG Secure Search
Ordner Gelöscht : C:\Users\Marie-Luise\AppData\LocalLow\AVG Secure Search
Ordner Gelöscht : C:\Users\Marie-Luise\AppData\Roaming\BabSolution
Ordner Gelöscht : C:\Users\Marie-Luise\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Marie-Luise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Datei Gelöscht : C:\Program Files\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
***** [ Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Schlüssel Gelöscht : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\S
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Schlüssel Gelöscht : HKLM\SOFTWARE\e558f88bd6fee40
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Schlüssel Gelöscht : HKCU\Software\AVG Secure Search
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKLM\SOFTWARE\AVG Secure Search
Schlüssel Gelöscht : HKLM\SOFTWARE\AVG Security Toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Babylon
Schlüssel Gelöscht : HKLM\SOFTWARE\BetterSurf
Schlüssel Gelöscht : HKLM\SOFTWARE\Delta
Schlüssel Gelöscht : HKLM\SOFTWARE\MediaPlayerV1
Schlüssel Gelöscht : HKLM\SOFTWARE\Tarma Installer
Schlüssel Gelöscht : HKLM\SOFTWARE\BetterSurf Plus V1
Schlüssel Gelöscht : HKLM\SOFTWARE\Webexp Enhanced
Schlüssel Gelöscht : HKLM\SOFTWARE\WebexpEnhancedV1
Schlüssel Gelöscht : HKLM\SOFTWARE\Video Player
Schlüssel Gelöscht : HKLM\SOFTWARE\VideoPlayerV3
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BetterSurf Plus V1
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17416
-\\ Mozilla Firefox v35.0.1 (x86 de)
[qwmoaur2.default\prefs.js] - Zeile gelöscht : user_pref("extensions.xpiState", "{\"app-global\":{\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"d\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\extensions\\\\{972ce4c6-7e08-4474-a285-32081[...]
*************************
AdwCleaner[R0].txt - [8750 octets] - [26/01/2015 22:50:56]
AdwCleaner[S0].txt - [8680 octets] - [26/01/2015 23:01:20]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8740 octets] ##########
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.4.1 (12.28.2014:1) OS: Windows 8.1 Pro x86 Ran by Administrator on 26.01.2015 at 23:08:38,66 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files Successfully deleted: [File] C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1220945662-492894223-839522115-1006 Successfully deleted: [File] C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1220945662-492894223-839522115-500 ~~~ Folders ~~~ FireFox Emptied folder: C:\Users\Administrator\AppData\Roaming\mozilla\firefox\profiles\qwmoaur2.default\minidumps [19 files] ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7623 # api_version=3.0.2 # EOSSerial=88f36c8e81b80844b6113859d4cca75e # engine=22173 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2015-01-27 06:39:19 # local_time=2015-01-27 07:39:19 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1031 # osver=6.2.9200 NT # compatibility_mode_1='AVG AntiVirus Free Edition 2015' # compatibility_mode=1055 16777213 100 100 6584 109517943 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776574 100 94 6640805 47265273 0 0 # scanned=136213 # found=4 # cleaned=0 # scan_time=4894 sh=E133006207885971BEB409751E2AF19E4920AB49 ft=1 fh=6b3aa43f8d86b3a1 vn="Variante von MSIL/DomaIQ.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\DomaIQ Uninstaller\DomaIQUninstall.exe.vir" sh=3AEF532A0211CE7869F0EB51E940D9E0C7CAE321 ft=1 fh=c7560653d3ee2314 vn="Variante von Win32/Adware.Yontoo.B Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll.vir" sh=333BEB35A70772F1757E99F0154D59964B921D3F ft=1 fh=534a19fe0349cbc1 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Administrator\AppData\Local\Temp\DMR\dmr_72.exe" sh=3FBCA3C5FACDE2E9A6E08F0C804374AFC1EEFBAF ft=1 fh=0780b07f15bd9dc0 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Administrator\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe" Results of screen317's Security Check version 0.99.95 x86 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` AVG AntiVirus Free Edition 2015 Windows Defender Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Java 64-bit 8 Update 31 Adobe Flash Player 11.9.900.170 Flash Player out of Date! Mozilla Firefox (35.0.1) ````````Process Check: objlist.exe by Laurent```````` AVG avgwdsvc.exe AVG avgrsx.exe AVG avgnsx.exe AVG avgemc.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C:: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 24-01-2015 01
Ran by Administrator (administrator) on THOMAS on 27-01-2015 22:30:13
Running from C:\Users\Administrator\Downloads
Loaded Profiles: Administrator (Available profiles: Marie-Luise & Administrator)
Platform: Microsoft Windows 8.1 Pro (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX86\officeclicktorun.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgwdsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgemcx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgcsrvx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgui.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2015\avgui.exe [3667472 2014-12-18] (AVG Technologies CZ, s.r.o.)
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-1220945662-492894223-839522115-500\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland ? jetzt mit dem Hotmail Nachfolger Outlook und dem Messenger Nachfolger Skype
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\qwmoaur2.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [aeejebmgakmebcflmpfllpbeonjkdgjp] - C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha7456\ch\WebexpEnhancedV1alpha7456.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [pdnepbcpkgiplljkllfdmgehdmojoimj] - C:\Program Files\VideoPlayerV3\VideoPlayerV3beta364\ch\VideoPlayerV3beta364.crx [Not Found]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [3432976 2014-12-18] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [298080 2014-12-18] (AVG Technologies CZ, s.r.o.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe [1679536 2014-11-11] (Microsoft Corporation)
S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2151744 2014-01-14] (IObit)
S3 ScDeviceEnum; C:\WINDOWS\System32\ScDeviceEnum.dll [105472 2013-08-22] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [288128 2014-09-22] (Microsoft Corporation)
S3 WEPHOSTSVC; C:\WINDOWS\system32\wephostsvc.dll [20992 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22192 2014-09-22] (Microsoft Corporation)
S3 workfolderssvc; C:\WINDOWS\system32\workfolderssvc.dll [1222144 2014-09-24] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 athr; C:\WINDOWS\system32\DRIVERS\athwn.sys [2795520 2013-06-18] (Qualcomm Atheros Communications, Inc.)
S0 Avgbootx; C:\WINDOWS\System32\DRIVERS\avgbootx.sys [17424 2013-09-04] (AVG Technologies CZ, s.r.o.)
R1 Avgdiskx; C:\WINDOWS\System32\DRIVERS\avgdiskx.sys [121624 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\WINDOWS\System32\DRIVERS\avgidsdriverx.sys [208152 2014-12-08] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\WINDOWS\System32\DRIVERS\avgidshx.sys [154904 2014-11-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\WINDOWS\system32\DRIVERS\avgidsshimw8x.sys [21272 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\WINDOWS\System32\DRIVERS\avgldx86.sys [192792 2014-08-28] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\WINDOWS\System32\DRIVERS\avglogx.sys [230680 2014-07-18] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\WINDOWS\System32\DRIVERS\avgmfx86.sys [98584 2014-10-05] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\WINDOWS\System32\DRIVERS\avgrkx86.sys [27416 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\WINDOWS\system32\drivers\avgtpx86.sys [42784 2014-08-14] (AVG Technologies)
R1 Avgwfpx; C:\WINDOWS\system32\DRIVERS\avgwfpx.sys [207128 2014-09-24] (AVG Technologies CZ, s.r.o.)
R1 BasicRender; C:\WINDOWS\System32\drivers\BasicRender.sys [25600 2014-09-24] (Microsoft Corporation)
S3 GPIO; C:\WINDOWS\System32\drivers\iaiogpio.sys [22016 2013-07-23] (Intel Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [84800 2014-09-22] (Microsoft Corporation)
R0 Wof; C:\WINDOWS\system32\Drivers\Wof.sys [138584 2014-09-24] (Microsoft Corporation)
S3 WUDFSensorLP; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [188416 2014-05-31] (Microsoft Corporation)
S3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [188416 2014-05-31] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-27 22:30 - 2015-01-27 22:31 - 00008227 _____ () C:\Users\Administrator\Downloads\FRST.txt
2015-01-27 22:28 - 2015-01-27 22:30 - 00000000 ____D () C:\FRST
2015-01-27 22:28 - 2015-01-27 22:28 - 01120768 _____ (Farbar) C:\Users\Administrator\Downloads\FRST.exe
2015-01-27 22:23 - 2015-01-27 22:23 - 00000845 _____ () C:\Users\Administrator\Desktop\checkup.txt
2015-01-27 22:21 - 2015-01-27 22:21 - 00852573 _____ () C:\Users\Administrator\Downloads\SecurityCheck.exe
2015-01-27 17:49 - 2015-01-27 17:49 - 02347384 _____ (ESET) C:\Users\Administrator\Downloads\esetsmartinstaller_deu.exe
2015-01-27 17:49 - 2015-01-27 17:49 - 00000000 ____D () C:\Program Files\ESET
2015-01-26 23:13 - 2015-01-26 23:13 - 00001033 _____ () C:\Users\Administrator\Desktop\JRT.txt
2015-01-26 23:08 - 2015-01-26 23:08 - 01707939 _____ (Thisisu) C:\Users\Administrator\Downloads\JRT.exe
2015-01-26 23:08 - 2015-01-26 23:08 - 00000000 ____D () C:\WINDOWS\ERUNT
2015-01-26 23:06 - 2015-01-26 23:06 - 00008820 _____ () C:\Users\Administrator\Desktop\AdwCleaner[S0].txt
2015-01-26 22:50 - 2015-01-26 23:01 - 00000000 ____D () C:\AdwCleaner
2015-01-26 22:49 - 2015-01-26 22:50 - 02194432 _____ () C:\Users\Administrator\Downloads\AdwCleaner_4.109.exe
2015-01-26 20:17 - 2015-01-26 20:17 - 00114904 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-01-26 20:16 - 2015-01-26 20:16 - 00001068 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-01-26 20:16 - 2015-01-26 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-01-26 20:16 - 2015-01-26 20:16 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-01-26 20:16 - 2015-01-26 20:16 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware
2015-01-26 20:16 - 2014-11-21 06:14 - 00075480 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-01-26 20:16 - 2014-11-21 06:14 - 00051928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-01-26 20:16 - 2014-11-21 06:14 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-01-26 20:13 - 2015-01-26 20:13 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-01-26 20:12 - 2015-01-26 20:12 - 01191200 _____ () C:\Users\Administrator\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe
2015-01-24 21:36 - 2015-01-24 21:36 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2015-01-21 19:47 - 2015-01-21 19:47 - 00001314 _____ () C:\Users\Public\Desktop\ZoomBrowser EX.lnk
2015-01-21 19:47 - 2015-01-21 19:47 - 00000000 ____D () C:\ProgramData\ZoomBrowser
2015-01-21 19:47 - 2015-01-21 19:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2015-01-21 19:46 - 2015-01-21 19:47 - 00000000 ____D () C:\Program Files\Canon
2015-01-21 19:44 - 2015-01-21 19:44 - 00000000 ____D () C:\Program Files\Common Files\Canon
2015-01-19 20:37 - 2015-01-19 20:37 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2015-01-19 19:44 - 2015-01-19 19:44 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieUserList
2015-01-19 19:44 - 2015-01-19 19:44 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieSiteList
2015-01-19 19:44 - 2015-01-19 19:44 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieBrowserModeList
2015-01-14 19:48 - 2014-12-19 06:46 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-01-14 19:48 - 2014-12-12 02:34 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-01-14 19:48 - 2014-12-12 01:46 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-01-14 19:48 - 2014-12-09 04:42 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-01-14 19:48 - 2014-12-08 20:46 - 00485544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-01-14 19:48 - 2014-12-08 20:46 - 00108944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-01-14 19:48 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-01-14 19:48 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-01-14 19:48 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-01-14 19:48 - 2014-12-06 03:36 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-01-14 19:48 - 2014-12-06 02:28 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-01-14 19:48 - 2014-12-06 02:23 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-01-14 19:48 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2015-01-14 19:48 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2015-01-14 19:48 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-01-14 19:48 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-01-14 19:48 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-01-14 19:48 - 2014-10-29 04:07 - 00213336 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-01-14 19:48 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2015-01-14 19:48 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2015-01-14 19:48 - 2014-10-29 01:49 - 00694272 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-01-12 22:53 - 2015-01-12 22:56 - 00011209 _____ () C:\Users\Administrator\Downloads\Schwandteilnehmer 2015.xlsx
2015-01-12 22:34 - 2015-01-12 22:34 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2015-01-12 22:12 - 2015-01-12 22:12 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-01-12 22:06 - 2015-01-12 22:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-01-12 22:03 - 2015-01-12 22:03 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-01-12 22:02 - 2015-01-12 22:03 - 01064632 _____ (Microsoft Corporation) C:\Users\Administrator\Downloads\Setup.X86.de-de_O365ProPlusRetail_9bc48fd6-7b04-4db9-9222-7ea8056429b4_TX_PR_.exe
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-27 22:30 - 2013-01-26 14:00 - 00000000 ____D () C:\ProgramData\MFAData
2015-01-27 22:24 - 2014-01-01 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-01-27 22:08 - 2013-12-14 12:28 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-01-27 22:00 - 2013-08-22 09:17 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-01-27 21:51 - 2014-11-08 00:43 - 01060268 _____ () C:\WINDOWS\WindowsUpdate.log
2015-01-27 19:42 - 2013-08-22 09:17 - 00000000 ____D () C:\WINDOWS\Microsoft.NET
2015-01-27 17:45 - 2013-06-04 17:30 - 00000374 _____ () C:\WINDOWS\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2015-01-26 23:03 - 2014-09-23 19:27 - 00078742 _____ () C:\WINDOWS\PFRO.log
2015-01-26 23:03 - 2014-03-08 17:34 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-01-26 23:03 - 2013-08-22 08:23 - 00330840 _____ () C:\WINDOWS\setupact.log
2015-01-26 23:03 - 2013-08-22 08:23 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-01-26 23:02 - 2013-08-22 07:13 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-01-26 20:58 - 2014-01-14 20:54 - 00000000 ____D () C:\ProgramData\ProductData
2015-01-24 08:44 - 2014-11-08 00:26 - 00000000 ____D () C:\Users\Marie-Luise
2015-01-23 20:40 - 2012-07-26 07:43 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-01-22 15:47 - 2013-08-22 07:13 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2015-01-21 20:39 - 2013-08-22 09:17 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-01-19 22:39 - 2014-11-08 00:26 - 00000000 ____D () C:\Users\Administrator
2015-01-19 22:32 - 2014-09-24 05:55 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-01-19 22:32 - 2014-09-24 05:55 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-01-19 19:47 - 2014-09-24 04:38 - 01686150 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-01-15 17:53 - 2013-12-18 19:20 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-01-15 17:49 - 2013-01-27 18:36 - 110348472 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-01-15 17:21 - 2013-08-22 08:22 - 00473904 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-01-14 19:50 - 2014-11-23 20:19 - 00000967 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
2015-01-12 22:34 - 2013-08-22 09:17 - 00000000 ____D () C:\Program Files\Microsoft.NET
2015-01-12 22:34 - 2013-08-22 09:17 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
==================== Files in the root of some directories =======
2014-01-14 20:30 - 2014-06-29 15:12 - 0003736 _____ () C:\Program Files\Mozilla Firefoxavg-secure-search.xml
Some content of TEMP:
====================
C:\Users\Administrator\AppData\Local\Temp\Quarantine.exe
C:\Users\Administrator\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-01-27 19:40
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 24-01-2015 01
Ran by Administrator at 2015-01-27 22:31:53
Running from C:\Users\Administrator\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Flash Player 11 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 11.9.900.170 - Adobe Systems Incorporated)
AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5645 - AVG Technologies)
AVG 2015 (Version: 15.0.4273 - AVG Technologies) Hidden
AVG 2015 (Version: 15.0.5645 - AVG Technologies) Hidden
Canon Camera Window DC_DV 6 for ZoomBrowser EX (HKLM\...\CameraWindowDVC6) (Version: 6.4.0.9 - )
Canon Camera Window MC 6 for ZoomBrowser EX (HKLM\...\CameraWindowMC) (Version: 6.3.0.8 - )
Canon G.726 WMP-Decoder (HKLM\...\Canon G.726 WMP-Decoder) (Version: 1.1.0.4 - )
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM\...\CANON iMAGE GATEWAY Task) (Version: 1.3.1.5 - )
Canon Internet Library for ZoomBrowser EX (HKLM\...\Canon Internet Library for ZoomBrowser EX) (Version: 1.5.1.4 - )
Canon MovieEdit Task for ZoomBrowser EX (HKLM\...\MovieEditTask) (Version: 2.4.0.14 - )
Canon RAW Image Task for ZoomBrowser EX (HKLM\...\RAW Image Task) (Version: 2.6.0.13 - )
Canon RemoteCapture Task for ZoomBrowser EX (HKLM\...\RemoteCaptureTask) (Version: 1.7.0.8 - )
Canon Utilities PhotoStitch (HKLM\...\PhotoStitch) (Version: 3.1.19.43 - )
Canon Utilities ZoomBrowser EX (HKLM\...\ZoomBrowser EX) (Version: 5.8.0.74 - )
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version: - )
FlashPlayer (HKLM\...\{BA8B8ADA-084F-4F79-A0CA-6E58A0808794}) (Version: 1.6.8 - Tuguu SL) <==== ATTENTION
IObit Uninstaller (HKLM\...\IObitUninstall) (Version: 3.1.7.2405 - IObit)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 15.0.4675.1003 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 35.0.1 (x86 de) (HKLM\...\Mozilla Firefox 35.0.1 (x86 de)) (Version: 35.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Office 15 Click-to-Run Extensibility Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player 2.0.5 (HKLM\...\VLC media player) (Version: 2.0.5 - VideoLAN)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
23-01-2015 20:39:34 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 07:13 - 2013-08-22 07:13 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {07B8CFCE-B8A5-440C-A825-9336DE5301CD} - \Optimize Start Menu Cache Files-S-1-5-21-1220945662-492894223-839522115-1006 No Task File <==== ATTENTION
Task: {1D7B0E23-C4BE-4B1A-A13B-7A8244CA6D2F} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\WINDOWS\system32\FlashPlayerUpdateService.exe
Task: {33B9834D-7D9A-46F8-9CA4-E848B37ACF42} - System32\Tasks\AdobeFlashPlayerUpdate => C:\WINDOWS\system32\FlashPlayerUpdateService.exe
Task: {46C7539F-C01B-4194-9B8E-CA24430AFD90} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-01-12] (Microsoft Corporation)
Task: {4B66DE45-706E-4289-BA86-78191AF54FAA} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\WINDOWS\TEMP\{6F83B212-564C-477C-981C-6C7BA65D6101}.exe
Task: {602F6BF2-E170-49C7-AECF-331F47F436A5} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX86\OfficeC2RClient.exe [2014-11-04] (Microsoft Corporation)
Task: {95862738-20FE-4282-BCAF-283A308B9C4F} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe [2014-01-14] (IObit)
Task: {981E18A6-3BD9-40CF-B46E-20585C0470BC} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-14] (Adobe Systems Incorporated)
Task: {C102FB17-D8DA-4AA7-9D1A-9D27C59D989F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-01-12] (Microsoft Corporation)
Task: {D0F356B4-6D40-4699-B879-C7403E63D71A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-01-12] (Microsoft Corporation)
Task: {D9CE7A9F-5D77-4624-B1EC-4AE3820C4A90} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-01-15] (Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\WINDOWS\TEMP\{6F83B212-564C-477C-981C-6C7BA65D6101}.exe
Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_Administrator.job => C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe
==================== Loaded Modules (whitelisted) =============
2015-01-12 22:03 - 2014-05-20 02:11 - 00080040 _____ () C:\Program Files\Microsoft Office 15\ClientX86\ApiClient.dll
2015-01-26 20:13 - 2015-01-26 20:13 - 03925104 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
========================= Accounts: ==========================
Administrator (S-1-5-21-1220945662-492894223-839522115-500 - Administrator - Enabled) => C:\Users\Administrator
Gast (S-1-5-21-1220945662-492894223-839522115-501 - Limited - Disabled)
Hilfeassistent (S-1-5-21-1220945662-492894223-839522115-1000 - Limited - Disabled)
Marie-Luise (S-1-5-21-1220945662-492894223-839522115-1006 - Administrator - Enabled) => C:\Users\Marie-Luise
SUPPORT_388945a0 (S-1-5-21-1220945662-492894223-839522115-1002 - Limited - Disabled)
==================== Faulty Device Manager Devices =============
Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (01/27/2015 06:12:38 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: THOMAS)
Description: Bei der Aktivierung der App „Microsoft.XboxLIVEGames_8wekyb3d8bbwe!Microsoft.XboxLIVEGames“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (01/27/2015 06:12:33 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: THOMAS)
Description: Bei der Aktivierung der App „Microsoft.XboxLIVEGames_8wekyb3d8bbwe!Microsoft.XboxLIVEGames“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (01/27/2015 05:51:32 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: THOMAS)
Description: Bei der Aktivierung der App „Microsoft.XboxLIVEGames_8wekyb3d8bbwe!Microsoft.XboxLIVEGames“ ist folgender Fehler aufgetreten: -2144927149. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
System errors:
=============
Error: (01/27/2015 08:54:02 PM) (Source: DCOM) (EventID: 10010) (User: THOMAS)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (01/27/2015 08:34:13 PM) (Source: DCOM) (EventID: 10010) (User: THOMAS)
Description: {9FA058BF-A4FA-4DD6-8043-A3AD58AD8C15}
Microsoft Office Sessions:
=========================
Error: (01/27/2015 06:12:38 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: THOMAS)
Description: Microsoft.XboxLIVEGames_8wekyb3d8bbwe!Microsoft.XboxLIVEGames-2144927149
Error: (01/27/2015 06:12:33 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: THOMAS)
Description: Microsoft.XboxLIVEGames_8wekyb3d8bbwe!Microsoft.XboxLIVEGames-2144927149
Error: (01/27/2015 05:51:32 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: THOMAS)
Description: Microsoft.XboxLIVEGames_8wekyb3d8bbwe!Microsoft.XboxLIVEGames-2144927149
==================== Memory info ===========================
Processor: Genuine Intel(R) CPU T2300 @ 1.66GHz
Percentage of memory in use: 50%
Total physical RAM: 1918.17 MB
Available physical RAM: 953.72 MB
Total Pagefile: 6014.17 MB
Available Pagefile: 4551.87 MB
Total Virtual: 2047.88 MB
Available Virtual: 1864.38 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:39.06 GB) (Free:14.68 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:65.61 GB) (Free:65.44 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 104.7 GB) (Disk ID: F534F534)
Partition 1: (Active) - (Size=39.1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=65.6 GB) - (Type=OF Extended)
==================== End Of Log ============================
hab adwcleaner ausversehen zweimal gepostet. |
|
29.01.2015, 06:42
| #2 |
| /// the machine /// TB-Ausbilder    | Vierenscanns checken hi,
__________________Lade Dir bitte von hier  Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
Task: {07B8CFCE-B8A5-440C-A825-9336DE5301CD} - \Optimize Start Menu Cache Files-S-1-5-21-1220945662-492894223-839522115-1006 No Task File <==== ATTENTION
Emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ |
|
29.01.2015, 21:53
| #3 |
| | Vierenscanns checken ---
__________________Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 28-01-2015 01 Ran by Administrator at 2015-01-29 21:45:09 Run:1 Running from C:\Users\Administrator\Downloads Loaded Profiles: Administrator (Available profiles: Marie-Luise & Administrator) Boot Mode: Normal ============================================== Content of fixlist: ***************** GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION Task: {07B8CFCE-B8A5-440C-A825-9336DE5301CD} - \Optimize Start Menu Cache Files-S-1-5-21-1220945662-492894223-839522115-1006 No Task File <==== ATTENTION Emptytemp: ***************** C:\WINDOWS\system32\GroupPolicy\Machine => Moved successfully. C:\WINDOWS\system32\GroupPolicy\GPT.ini => Moved successfully. "HKLM\SOFTWARE\Policies\Google" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{07B8CFCE-B8A5-440C-A825-9336DE5301CD}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{07B8CFCE-B8A5-440C-A825-9336DE5301CD}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Optimize Start Menu Cache Files-S-1-5-21-1220945662-492894223-839522115-1006" => Key deleted successfully. EmptyTemp: => Removed 470.3 MB temporary data. The system needed a reboot. ==== End of Fixlog 21:47:35 ==== |
|
30.01.2015, 09:42
| #4 |
| /// the machine /// TB-Ausbilder | Vierenscanns checken Noch probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
30.01.2015, 15:38
| #5 |
| | Vierenscanns checken Eigentlich nicht mehr momentan popt keine Werbung mehr beim surfen auf. Sieht man den noch unerwünschte Software in einem Log ich bin da kein Fachman. Soll ich DelFix jetzt noch durchjagen? |
|
31.01.2015, 11:19
| #6 |
| /// the machine /// TB-Ausbilder | Vierenscanns checken genau. Fertig  Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ --> Vierenscanns checken |
|
31.01.2015, 17:55
| #7 |
| | Vierenscanns checken Hey Schrauber hab mir grad deine ganzen Tipps installiert und befolgt jetzt hab ich bei dem SpywareBlaster die Anleitung von dir mal durchgemacht und hab beim Internet EXplorer und bei Restricted Sites insgesamt ca. 1100 befunde oder items wie es die Software nennt. Typ Active X und Cookies, teilweise auch rot markiert und items die Trojan/Exploit heisen. Muss ich mir da jetzt irgendwie sorgen machen ? bzw. muss ich das löschen ich versteh nähmlich die Software nicht ganz. Weis gerade auch nicht wie ich dir das posten kann. |
|
31.01.2015, 23:18
| #8 |
| /// the machine /// TB-Ausbilder | Vierenscanns checken Die kannste alle löschen, aber die sind harmlos.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
05.02.2015, 08:03
| #9 |
| | Vierenscanns checken Wie lösch ich die denn ich komm mit dem Spywareblaster nicht klar. Der sucht doch Vieren vor denen man sich schützen kann oder versteh ich da was falsch und überall wo ein Haken drinn ist kann mich Spywarebalster schützen oder schütz der mich automatisch davor? |
|
05.02.2015, 10:30
| #10 |
| /// the machine /// TB-Ausbilder | Vierenscanns checken Da muss mit Sicherheit irgendwo ein Button sein mit Löschen, Clean , Delete oder dergleichen. Ich selbst nutze den nicht.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
09.02.2015, 19:37
| #11 |
| | Vierenscanns checken Ok, vielen dank für deine Hilfe Schrauber bist echt Klasse :-) |
|
09.02.2015, 20:27
| #12 |
| /// the machine /// TB-Ausbilder | Vierenscanns checken Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Vierenscanns checken |
| .com, .dll, appdata, browser, canon, checken, explorer, extensioninstallforcelist, firefox, google, helper, icons, install.exe, internet, internet explorer, junkware, link, logfiles, microsoft, mozilla, msn deutschland, office 365, online, roaming, scan, schutz, software, system32, tarma, tool, vtoolbarupdater, webseiten, windows |
dann auf 
und dann auf 
. 
Linear-Darstellung
