![]() |
|
Plagegeister aller Art und deren Bekämpfung: Gen:Variant.Adware.Mplug.44 - Fontex InstallerWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
![]() | ![]() Gen:Variant.Adware.Mplug.44 - Fontex Installer Hallo zusammen, ich habe auf der Suche nach einer Schriftart dummerweise ziemlich blindlings eine .exe Datei heruntergeladen und geöffnet. Sie stammt von der Webseite fontex.org (Hill House Font Free Download). Beim Öffnen der Datei Hill House Font Installer.exe hat sich ein Installerprogramm geöffnet und eine Datei heruntergeladen. Das hat ziemlich lange gedauert, was mich schon gewundert hat. Ich hatte die Checkbox "mystartsearch.com als Suchmaschine installieren" abgeklickt, aber kurz darauf stürzte mein Firefox ständig ab und bei Neustart wurde die mystartsearch Seite angezeigt und alle anderen Tabs waren geschlossen. Web oft Trust hat auch sofort gemeckert bei der Seite. Ich habe eine Systemwiederherstellung probiert, die jedoch nicht funktioniert hat (Fehlermeldung: konnte nicht korrekt ausgeführt werden, möglicherweise ist Laufwerk C beschädigt) Windows Defender hat nichts gemeldet. Der ESET Online Scanner läuft gerade durch und hat schon 10 Bedrohungen mit dem Namen Win32/Adware.MultiPlug.JY bzw. ähnlichen Buchstabenkombis nach dem letzten Punkt und manchmal mit dem Namen WIN64 erkannt. Die Überprüfung der Download Datei bei Virustotal ergab folgendes Ergebnis (hätte ich mal vorher machen sollen) https://www.virustotal.com/de/file/6f8929d4ea01202dbd72667cb4ba79fe8fe5e7f25412f08b049df987bfa91c0b/analysis/ Gibt es Hilfe? Gerade ist eine Fehlermeldung aufgepoppt: RUN DLL - Fehler in c:\progra~2\light~1\light~1.dll. Folgender Eintrag fehlt: _init Hier das Log vom Malwarebytes Scan Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 18.05.2015 Suchlauf-Zeit: 22:02:47 Logdatei: Administrator: Ja Version: 2.01.6.1022 Malware Datenbank: v2015.05.18.05 Rootkit Datenbank: v2015.05.16.01 Lizenz: Testversion Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 421117 Verstrichene Zeit: 13 Min, 18 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente gefunden) Module: 3 PUP.Optional.MultiPlug.A, C:\Program Files (x86)\LighterModulator\LighterModulator.dll, , [69b485108bff1a1ccf65550145bdd030], PUP.Optional.MultiPlug.A, C:\Program Files (x86)\bestadblocker\lq8Hy7JljOEn3h.dll, , [89941283f496ca6c3596d883d23031cf], PUP.Optional.MultiPlug.A, C:\Program Files (x86)\PriceMinus\TQnsciVwJGb7IG.dll, , [30eddcb9bad0e650c00ba5b6a55d758b], Registrierungsschlüssel: 50 PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{8A4AAB25-CE9E-4FA6-94CF-4992165EBC28}, , [89941283f496ca6c3596d883d23031cf], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{8A4AAB25-CE9E-4FA6-94CF-4992165EBC28}, , [89941283f496ca6c3596d883d23031cf], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{8A4AAB25-CE9E-4FA6-94CF-4992165EBC28}, , [89941283f496ca6c3596d883d23031cf], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\P8A4AAB25_CE9E_4FA6_94CF_4992165EBC28_.P8A4AAB25_CE9E_4FA6_94CF_4992165EBC28_, , [89941283f496ca6c3596d883d23031cf], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\P8A4AAB25_CE9E_4FA6_94CF_4992165EBC28_.P8A4AAB25_CE9E_4FA6_94CF_4992165EBC28_.9, , [89941283f496ca6c3596d883d23031cf], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P8A4AAB25_CE9E_4FA6_94CF_4992165EBC28_.P8A4AAB25_CE9E_4FA6_94CF_4992165EBC28_, , [89941283f496ca6c3596d883d23031cf], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P8A4AAB25_CE9E_4FA6_94CF_4992165EBC28_.P8A4AAB25_CE9E_4FA6_94CF_4992165EBC28_.9, , [89941283f496ca6c3596d883d23031cf], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P8A4AAB25_CE9E_4FA6_94CF_4992165EBC28_.P8A4AAB25_CE9E_4FA6_94CF_4992165EBC28_, , [89941283f496ca6c3596d883d23031cf], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P8A4AAB25_CE9E_4FA6_94CF_4992165EBC28_.P8A4AAB25_CE9E_4FA6_94CF_4992165EBC28_.9, , [89941283f496ca6c3596d883d23031cf], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\CLSID\{8A4AAB25-CE9E-4FA6-94CF-4992165EBC28}, , [89941283f496ca6c3596d883d23031cf], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{8A4AAB25-CE9E-4FA6-94CF-4992165EBC28}, , [89941283f496ca6c3596d883d23031cf], PUP.Optional.MultiPlug.A, HKU\S-1-5-21-1449720104-586178312-3201890169-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{8A4AAB25-CE9E-4FA6-94CF-4992165EBC28}, , [89941283f496ca6c3596d883d23031cf], PUP.Optional.MultiPlug.A, HKU\S-1-5-21-1449720104-586178312-3201890169-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{8A4AAB25-CE9E-4FA6-94CF-4992165EBC28}, , [89941283f496ca6c3596d883d23031cf], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{8A4AAB25-CE9E-4FA6-94CF-4992165EBC28}, , [89941283f496ca6c3596d883d23031cf], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{8A4AAB25-CE9E-4FA6-94CF-4992165EBC28}, , [89941283f496ca6c3596d883d23031cf], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{B822F801-65BE-4823-A12C-F788EDACA15D}, , [30eddcb9bad0e650c00ba5b6a55d758b], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{B822F801-65BE-4823-A12C-F788EDACA15D}, , [30eddcb9bad0e650c00ba5b6a55d758b], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{B822F801-65BE-4823-A12C-F788EDACA15D}, , [30eddcb9bad0e650c00ba5b6a55d758b], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\PB822F801_65BE_4823_A12C_F788EDACA15D_.PB822F801_65BE_4823_A12C_F788EDACA15D_, , [30eddcb9bad0e650c00ba5b6a55d758b], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\PB822F801_65BE_4823_A12C_F788EDACA15D_.PB822F801_65BE_4823_A12C_F788EDACA15D_.9, , [30eddcb9bad0e650c00ba5b6a55d758b], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PB822F801_65BE_4823_A12C_F788EDACA15D_.PB822F801_65BE_4823_A12C_F788EDACA15D_, , [30eddcb9bad0e650c00ba5b6a55d758b], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PB822F801_65BE_4823_A12C_F788EDACA15D_.PB822F801_65BE_4823_A12C_F788EDACA15D_.9, , [30eddcb9bad0e650c00ba5b6a55d758b], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\PB822F801_65BE_4823_A12C_F788EDACA15D_.PB822F801_65BE_4823_A12C_F788EDACA15D_, , [30eddcb9bad0e650c00ba5b6a55d758b], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\PB822F801_65BE_4823_A12C_F788EDACA15D_.PB822F801_65BE_4823_A12C_F788EDACA15D_.9, , [30eddcb9bad0e650c00ba5b6a55d758b], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\CLSID\{B822F801-65BE-4823-A12C-F788EDACA15D}, , [30eddcb9bad0e650c00ba5b6a55d758b], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{B822F801-65BE-4823-A12C-F788EDACA15D}, , [30eddcb9bad0e650c00ba5b6a55d758b], PUP.Optional.MultiPlug.A, HKU\S-1-5-21-1449720104-586178312-3201890169-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{B822F801-65BE-4823-A12C-F788EDACA15D}, , [30eddcb9bad0e650c00ba5b6a55d758b], PUP.Optional.MultiPlug.A, HKU\S-1-5-21-1449720104-586178312-3201890169-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{B822F801-65BE-4823-A12C-F788EDACA15D}, , [30eddcb9bad0e650c00ba5b6a55d758b], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{B822F801-65BE-4823-A12C-F788EDACA15D}, , [30eddcb9bad0e650c00ba5b6a55d758b], PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{B822F801-65BE-4823-A12C-F788EDACA15D}, , [30eddcb9bad0e650c00ba5b6a55d758b], PUP.Optional.Bundler, HKU\S-1-5-21-1449720104-586178312-3201890169-1001_Classes\TYPELIB\{157B1AA6-3E5C-404A-9118-C1D91F537040}, , [0d109bfaa6e41323940c9fbd66a0db25], PUP.Optional.Bundler, HKU\S-1-5-21-1449720104-586178312-3201890169-1001_Classes\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}, , [0d109bfaa6e41323940c9fbd66a0db25], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{917A80E3-C425-4F5F-B8D3-4804A0CCA924}, , [8a93f99cb2d80531d8fd39320401d030], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{14041915-01CF-49F0-B66B-D2F34A1C2F56}, , [8a93f99cb2d80531d8fd39320401d030], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{60E253B6-E1B0-42EB-970F-3F579B23012F}, , [8a93f99cb2d80531d8fd39320401d030], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B225E80D-9AC2-4504-AEB7-4ECC9F92DA5D}, , [8a93f99cb2d80531d8fd39320401d030], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C801662E-FBB6-4156-A594-00E3B21E073B}, , [8a93f99cb2d80531d8fd39320401d030], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{14041915-01CF-49F0-B66B-D2F34A1C2F56}, , [8a93f99cb2d80531d8fd39320401d030], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{60E253B6-E1B0-42EB-970F-3F579B23012F}, , [8a93f99cb2d80531d8fd39320401d030], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B225E80D-9AC2-4504-AEB7-4ECC9F92DA5D}, , [8a93f99cb2d80531d8fd39320401d030], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C801662E-FBB6-4156-A594-00E3B21E073B}, , [8a93f99cb2d80531d8fd39320401d030], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{14041915-01CF-49F0-B66B-D2F34A1C2F56}, , [8a93f99cb2d80531d8fd39320401d030], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{60E253B6-E1B0-42EB-970F-3F579B23012F}, , [8a93f99cb2d80531d8fd39320401d030], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{B225E80D-9AC2-4504-AEB7-4ECC9F92DA5D}, , [8a93f99cb2d80531d8fd39320401d030], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{C801662E-FBB6-4156-A594-00E3B21E073B}, , [8a93f99cb2d80531d8fd39320401d030], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{917A80E3-C425-4F5F-B8D3-4804A0CCA924}, , [8a93f99cb2d80531d8fd39320401d030], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{917A80E3-C425-4F5F-B8D3-4804A0CCA924}, , [8a93f99cb2d80531d8fd39320401d030], PUP.Optional.FFPluginHp.A, HKLM\SOFTWARE\WOW6432NODE\FFPluginHp, , [79a4a1f494f62e08151a10c7ba49847c], PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\mystartsearchSoftware, , [5bc28c09b0da6acc60b88b6414efce32], PUP.Optional.FastSearch.A, HKU\S-1-5-21-1449720104-586178312-3201890169-1001\SOFTWARE\MOZILLA\EXTENDS, , [c25b197ce5a5a690a10ed204a65dac54], Registrierungswerte: 9 PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DisplayName, mystartsearch, , [0d10623373171a1c9d505e0dea1bd62a] PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, hxxp://www.mystartsearch.com/web/?type=ds&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C&q={searchTerms}, , [4bd2761fee9c8da94e9f6ffcc93c738d] PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DisplayName, mystartsearch, , [cc51abeae6a41b1bc429046714f1fe02] PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, hxxp://www.mystartsearch.com/web/?type=ds&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C&q={searchTerms}, , [d647e4b12d5d40f6f3fa3e2d947104fc] PUP.Optional.FastStart.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|searchffv2@gmail.com, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com, , [ef2e55404644979f5002234d44c16c94] PUP.Optional.SweetSearch.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|sweetsearch@gmail.com, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\sweetsearch@gmail.com, , [021b662f2c5e61d563c020b811f2f10f] PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-1449720104-586178312-3201890169-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DisplayName, mystartsearch, , [58c5dabb1f6b64d2816b0764c04509f7] PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-1449720104-586178312-3201890169-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, hxxp://www.mystartsearch.com/web/?type=ds&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C&q={searchTerms}, , [e4394e475d2d51e59557a2c95baacd33] PUP.Optional.FastSearch.A, HKU\S-1-5-21-1449720104-586178312-3201890169-1001\SOFTWARE\MOZILLA\EXTENDS|appid, searchffv2@gmail.com, , [c25b197ce5a5a690a10ed204a65dac54] Registrierungsdaten: 18 PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\FIREFOX.EXE\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" hxxp://www.mystartsearch.com/?type=sc&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C, Gut: (firefox.exe), Schlecht: ("C:\Program Files (x86)\Mozilla Firefox\firefox.exe" hxxp://www.mystartsearch.com/?type=sc&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C),,[0518890cd1b9191d829758bddd29d12f] PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\GOOGLE CHROME\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.mystartsearch.com/?type=sc&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C, Gut: (Chrome.exe), Schlecht: ("C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.mystartsearch.com/?type=sc&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C),,[d944365f77137db9f923868f23e303fd] PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.mystartsearch.com/?type=sc&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.mystartsearch.com/?type=sc&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C),,[8e8f187d820800361a0040d57195916f] PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.mystartsearch.com/web/?type=ds&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/web/?type=ds&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C&q={searchTerms}),,[eb32880dccbea294d7bfba5a65a160a0] PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.mystartsearch.com/web/?type=ds&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/web/?type=ds&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C&q={searchTerms}),,[42dbb2e30d7d41f5841240d40df925db] PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.mystartsearch.com/?type=hp&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/?type=hp&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C),,[35e8791cec9ebd796a2cb85c7d897090] PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.mystartsearch.com/?type=hp&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/?type=hp&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C),,[08158e0724668ea8385e2ee6a06615eb] PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[42db425332580630c6c4d74924e23dc3] PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\FIREFOX.EXE\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" hxxp://www.mystartsearch.com/?type=sc&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C, Gut: (firefox.exe), Schlecht: ("C:\Program Files (x86)\Mozilla Firefox\firefox.exe" hxxp://www.mystartsearch.com/?type=sc&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C),,[1a03f2a3f397d5619188fd187a8ce917] PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\GOOGLE CHROME\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.mystartsearch.com/?type=sc&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C, Gut: (Chrome.exe), Schlecht: ("C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.mystartsearch.com/?type=sc&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C),,[bb62eaab2b5f082e6cb027eec83e1de3] PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.mystartsearch.com/?type=sc&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.mystartsearch.com/?type=sc&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C),,[09144b4a0288cd692ded02134db95ca4] PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.mystartsearch.com/web/?type=ds&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/web/?type=ds&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C&q={searchTerms}),,[db42badb6c1e2214771fab6954b2f30d] PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.mystartsearch.com/?type=hp&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/?type=hp&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C),,[001defa6f49683b3d2c457bdf70f619f] PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.mystartsearch.com/?type=hp&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/?type=hp&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C),,[928bb2e34a40ce686d29af6561a5867a] PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.mystartsearch.com/web/?type=ds&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/web/?type=ds&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C&q={searchTerms}),,[4bd23b5a88021f175d39da3a897d55ab] PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[c75643528109171f4248a57bfc0a06fa] PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-1449720104-586178312-3201890169-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.mystartsearch.com/?type=hp&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/?type=hp&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C),,[9984eda8731783b31c7bb75d2adc758b] PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-1449720104-586178312-3201890169-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.mystartsearch.com/?type=hp&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/?type=hp&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C),,[61bc6e27b6d4ee483c5b63b128dec739] Ordner: 44 PUP.Optional.MultiPlug.A, C:\Users\Johanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnnfemgpilpdaojpnkjdgfgbnnjojfik\173, , [62bbfe976327d85e0b29abbf36cf45bb], PUP.Optional.MultiPlug.A, C:\Users\Johanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnnfemgpilpdaojpnkjdgfgbnnjojfik, , [62bbfe976327d85e0b29abbf36cf45bb], PUP.Optional.MultiPlug.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\EV@Dt.org\content, , [27f6078e513967cf70d249212bda0af6], PUP.Optional.MultiPlug.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\EV@Dt.org, , [27f6078e513967cf70d249212bda0af6], PUP.Optional.MultiPlug, C:\ProgramData\apechmgdlnnpegklnpknmmoojpkfobdo, , [7ca1593cc7c388ae21655c0fc243837d], PUP.Optional.BestAdBlocker.A, C:\Program Files (x86)\bestadblocker, , [8a93f99cb2d80531d8fd39320401d030], PUP.Optional.PriceMinus.A, C:\Program Files (x86)\PriceMinus, , [76a74c491a70b97d4418d39bf4118d73], PUP.Optional.SweetSearch.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\sweetsearch@gmail.com, , [b36a80153e4c60d64b7c22b2e221e719], PUP.Optional.SweetSearch.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\sweetsearch@gmail.com\chrome, , [b36a80153e4c60d64b7c22b2e221e719], PUP.Optional.SweetSearch.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\sweetsearch@gmail.com\chrome\content, , [b36a80153e4c60d64b7c22b2e221e719], PUP.Optional.SweetSearch.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\sweetsearch@gmail.com\chrome\skin, , [b36a80153e4c60d64b7c22b2e221e719], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\include, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\include\tools, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\js\lib, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\js\module, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\js\pack, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\en, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\en-US, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\es, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\es-419, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\fr, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\fr-BE, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\fr-CA, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\fr-CH, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\fr-LU, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\it, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\it-CH, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\pl, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\pt-BR, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\ru, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\ru-MO, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\tr, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\vi, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\zh-CN, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\zh-TW, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\skin, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\defaults, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\defaults\preferences, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\modules, , [39e4484d97f371c5353626b0c43f5da3], Dateien: 97 PUP.Optional.MultiPlug.A, C:\Program Files (x86)\LighterModulator\LighterModulator.dll, , [69b485108bff1a1ccf65550145bdd030], PUP.Optional.MultiPlug.A, C:\Program Files (x86)\bestadblocker\lq8Hy7JljOEn3h.dll, , [89941283f496ca6c3596d883d23031cf], PUP.Optional.MultiPlug.A, C:\Program Files (x86)\PriceMinus\TQnsciVwJGb7IG.dll, , [30eddcb9bad0e650c00ba5b6a55d758b], PUP.Optional.Bundler, C:\Users\Johanna\AppData\Local\Temp\24F0\temp\Hill House Font Installer.exe, , [0d109bfaa6e41323940c9fbd66a0db25], PUP.Optional.MyStartSearch.A, C:\Users\Johanna\AppData\Local\Temp\24F0\temp\wpc_mystartsearch.exe, , [34e93d58f09a44f293f17edddd297b85], PUP.Optional.Bundler, C:\Users\Johanna\Downloads\Hill House Font Installer.exe, , [0518781dd1b9d462b9e72b31f70fcb35], PUP.Optional.MyStartSearch.A, C:\Users\Johanna\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.mystartsearch.com_0.localstorage, , [f02d03925733a492bdc222c563a030d0], PUP.Optional.MyStartSearch.A, C:\Users\Johanna\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.mystartsearch.com_0.localstorage-journal, , [d74696ff2c5e7fb7a5daeff8dd26cb35], PUP.Optional.MyStartSearch.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\searchplugins\mystartsearch.xml, , [6eafe4b17a10c07631e6806f09fa649c], PUP.Optional.MultiPlug.A, C:\Users\Johanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnnfemgpilpdaojpnkjdgfgbnnjojfik\173\lsdb.js, , [62bbfe976327d85e0b29abbf36cf45bb], PUP.Optional.MultiPlug.A, C:\Users\Johanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnnfemgpilpdaojpnkjdgfgbnnjojfik\173\background.html, , [62bbfe976327d85e0b29abbf36cf45bb], PUP.Optional.MultiPlug.A, C:\Users\Johanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnnfemgpilpdaojpnkjdgfgbnnjojfik\173\content.js, , [62bbfe976327d85e0b29abbf36cf45bb], PUP.Optional.MultiPlug.A, C:\Users\Johanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnnfemgpilpdaojpnkjdgfgbnnjojfik\173\HmrZw5BO.js, , [62bbfe976327d85e0b29abbf36cf45bb], PUP.Optional.MultiPlug.A, C:\Users\Johanna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnnfemgpilpdaojpnkjdgfgbnnjojfik\173\manifest.json, , [62bbfe976327d85e0b29abbf36cf45bb], PUP.Optional.MultiPlug.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\EV@Dt.org\content\bg.js, , [27f6078e513967cf70d249212bda0af6], PUP.Optional.MultiPlug.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\EV@Dt.org\bootstrap.js, , [27f6078e513967cf70d249212bda0af6], PUP.Optional.MultiPlug.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\EV@Dt.org\chrome.manifest, , [27f6078e513967cf70d249212bda0af6], PUP.Optional.MultiPlug.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\EV@Dt.org\install.rdf, , [27f6078e513967cf70d249212bda0af6], PUP.Optional.MultiPlug, C:\ProgramData\apechmgdlnnpegklnpknmmoojpkfobdo\lsdb.js, , [7ca1593cc7c388ae21655c0fc243837d], PUP.Optional.MultiPlug, C:\ProgramData\apechmgdlnnpegklnpknmmoojpkfobdo\background.html, , [7ca1593cc7c388ae21655c0fc243837d], PUP.Optional.MultiPlug, C:\ProgramData\apechmgdlnnpegklnpknmmoojpkfobdo\content.js, , [7ca1593cc7c388ae21655c0fc243837d], PUP.Optional.MultiPlug, C:\ProgramData\apechmgdlnnpegklnpknmmoojpkfobdo\manifest.json, , [7ca1593cc7c388ae21655c0fc243837d], PUP.Optional.MultiPlug, C:\ProgramData\apechmgdlnnpegklnpknmmoojpkfobdo\wfn.js, , [7ca1593cc7c388ae21655c0fc243837d], PUP.Optional.BestAdBlocker.A, C:\Program Files (x86)\bestadblocker\lq8Hy7JljOEn3h.tlb, , [8a93f99cb2d80531d8fd39320401d030], PUP.Optional.BestAdBlocker.A, C:\Program Files (x86)\bestadblocker\lq8Hy7JljOEn3h.dat, , [8a93f99cb2d80531d8fd39320401d030], PUP.Optional.PriceMinus.A, C:\Program Files (x86)\PriceMinus\TQnsciVwJGb7IG.tlb, , [76a74c491a70b97d4418d39bf4118d73], PUP.Optional.PriceMinus.A, C:\Program Files (x86)\PriceMinus\TQnsciVwJGb7IG.dat, , [76a74c491a70b97d4418d39bf4118d73], PUP.Optional.Multiplug.A, C:\Windows\System32\Tasks\Bidaily Synchronize Task[pr], , [d6476035f39791a5fa83acc41ee74db3], PUP.Optional.Multiplug.A, C:\Windows\Tasks\Bidaily Synchronize Task[pr].job, , [bc612471d1b9e55177071060a362d927], PUP.Optional.SweetSearch.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\sweetsearch@gmail.com\chrome.manifest, , [b36a80153e4c60d64b7c22b2e221e719], PUP.Optional.SweetSearch.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\sweetsearch@gmail.com\install.rdf, , [b36a80153e4c60d64b7c22b2e221e719], PUP.Optional.SweetSearch.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\sweetsearch@gmail.com\chrome\content\toolbar.js, , [b36a80153e4c60d64b7c22b2e221e719], PUP.Optional.SweetSearch.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\sweetsearch@gmail.com\chrome\content\toolbar.xul, , [b36a80153e4c60d64b7c22b2e221e719], PUP.Optional.SweetSearch.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\sweetsearch@gmail.com\chrome\skin\icon.png, , [b36a80153e4c60d64b7c22b2e221e719], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome.manifest, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\install.rdf, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\index.html, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\quick_start.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\quick_start.xul, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\include\speed_dial.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\include\tools\about_blank_ho ok.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\include\tools\misc.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\include\tools\popup_image_he lper.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\include\tools\urlrequestor.j s, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\js\js.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\js\lib\doT.min.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\js\lib\jquery-2.1.0.min.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\js\lib\jquery.autocomplete.j s, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\js\module\hotSearch.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\js\module\mostgrid.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\js\module\search.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\js\module\stat.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\js\pack\common.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\js\pack\ga.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\content\js\pack\xagainit.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\en\locale.properties, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\en-US\locale.properties, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\es\locale.properties, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\es-419\locale.properties, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\fr\locale.properties, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\fr-BE\locale.properties, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\fr-CA\locale.properties, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\fr-CH\locale.properties, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\fr-LU\locale.properties, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\it\locale.properties, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\it-CH\locale.properties, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\pl\locale.properties, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\pt-BR\locale.properties, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\ru\locale.properties, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\ru-MO\locale.properties, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\tr\locale.properties, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\vi\locale.properties, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\zh-CN\locale.properties, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\locale\zh-TW\locale.properties, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\skin\default_logo.png, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\skin\googlelogo.png, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\skin\google_trends.png, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\skin\icon.png, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\skin\loading.gif, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\skin\logo.png, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\skin\newtab.ico, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\skin\simple.css, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\chrome\skin\style.css, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\defaults\preferences\fvd.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\defaults\preferences\preferences.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\modules\addonmanager.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\modules\aes.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\modules\config.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\modules\dialogs.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\modules\last_tab.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\modules\misc.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\modules\properties.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\modules\remoterequest.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\modules\restoreprefs.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.FastStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\extensions\searchffv2@gmail.com\modules\settings.js, , [39e4484d97f371c5353626b0c43f5da3], PUP.Optional.MyStartSearch.A, C:\Users\Johanna\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences, Gut: (), Schlecht: ( "homepage": "hxxp://www.mystartsearch.com/?type=hp&ts=1431976328&z=ee954fdbb587869d87c8bedg9z4cbgbt5meq5c8obq&from=wpc&uid=3219913727_198313_8C0B350C",), ,[8c91a6ef3c4e54e2f696332b8c7a6799] PUP.Optional.QuickStart.A, C:\Users\Johanna\AppData\Roaming\Mozilla\Firefox\Profiles\974av5al.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.newtab.url", "chrome://quick_start/content/index.html") ![]() Physische Sektoren: 0 (Keine schädliche Elemente gefunden) (end) |