|
Log-Analyse und Auswertung: not-a-virus:Downloader.Win32.Somato.hWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
06.10.2015, 14:35 | #1 |
| not-a-virus:Downloader.Win32.Somato.h Hallo, ich habe ähnliche Probleme wie bereits im Foren beschrieben. Bei mir wird von Kaspersky u.a. -> "not-a-virusownloader.Win32.Somato.h" angezeigt. Dazu habe ich mir bereits die Anti-Malware heruntergeladen und scannen lassen. Hierzu wurden folgender Logfiledaten erstellt. Hier die Daten: Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 06.10.2015 Suchlaufzeit: 15:02 Protokolldatei: mbamlog.txt Administrator: Ja Version: 2.1.8.1057 Malware-Datenbank: v2015.10.06.03 Rootkit-Datenbank: v2015.10.02.01 Lizenz: Testversion Malware-Schutz: Aktiviert Schutz vor bösartigen Websites: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Ramsauer Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 549941 Abgelaufene Zeit: 7 Min., 54 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 239 PUP.Optional.DefaultTab, HKLM\SOFTWARE\CLASSES\APPID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}, , [dfdc6ce7f398181e085b47adb44e32ce], PUP.Optional.DefaultTab, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}, , [dfdc6ce7f398181e085b47adb44e32ce], PUP.Optional.DefaultTab, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}, , [dfdc6ce7f398181e085b47adb44e32ce], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, , [d1ea341ff09b8caa6bb21ed18280ad53], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, , [d1ea341ff09b8caa6bb21ed18280ad53], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, , [d1ea341ff09b8caa6bb21ed18280ad53], PUP.Optional.Wajam, HKLM\SOFTWARE\CLASSES\APPID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}, , [635884cf94f702348cc6f10a3bc709f7], PUP.Optional.Wajam, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}, , [635884cf94f702348cc6f10a3bc709f7], PUP.Optional.Wajam, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}, , [635884cf94f702348cc6f10a3bc709f7], PUP.Optional.QuickShare, HKLM\SOFTWARE\CLASSES\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [ceedbe95c1cad264ea3b29d0a959b848], PUP.Optional.QuickShare, HKLM\SOFTWARE\CLASSES\IESmartBar.BHO, , [ceedbe95c1cad264ea3b29d0a959b848], PUP.Optional.QuickShare, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [ceedbe95c1cad264ea3b29d0a959b848], PUP.Optional.QuickShare, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [ceedbe95c1cad264ea3b29d0a959b848], PUP.Optional.QuickShare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IESmartBar.BHO, , [ceedbe95c1cad264ea3b29d0a959b848], PUP.Optional.QuickShare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\IESmartBar.BHO, , [ceedbe95c1cad264ea3b29d0a959b848], PUP.Optional.QuickShare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [ceedbe95c1cad264ea3b29d0a959b848], PUP.Optional.QuickShare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [ceedbe95c1cad264ea3b29d0a959b848], PUP.Optional.QuickShare, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [ceedbe95c1cad264ea3b29d0a959b848], PUP.Optional.QuickShare, HKU\S-1-5-21-955990246-3923062674-3685574950-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [ceedbe95c1cad264ea3b29d0a959b848], PUP.Optional.QuickShare, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [ceedbe95c1cad264ea3b29d0a959b848], PUP.Optional.QuickShare, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [ceedbe95c1cad264ea3b29d0a959b848], PUP.Optional.QuickShare, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [ceedbe95c1cad264ea3b29d0a959b848], PUP.Optional.QuickShare, HKU\S-1-5-21-955990246-3923062674-3685574950-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [ceedbe95c1cad264ea3b29d0a959b848], PUP.Optional.QuickShare, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [ceedbe95c1cad264ea3b29d0a959b848], PUP.Optional.QuickShare, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [ceedbe95c1cad264ea3b29d0a959b848], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}, , [4b70450e7b101d193ede04ba7f831de3], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\TYPELIB\{39CB8175-E224-4446-8746-00566302DF8D}, , [4b70450e7b101d193ede04ba7f831de3], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{39CB8175-E224-4446-8746-00566302DF8D}, , [4b70450e7b101d193ede04ba7f831de3], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{39CB8175-E224-4446-8746-00566302DF8D}, , [4b70450e7b101d193ede04ba7f831de3], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\esrv.deltaESrvc.1, , [4b70450e7b101d193ede04ba7f831de3], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\esrv.deltaESrvc, , [4b70450e7b101d193ede04ba7f831de3], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.deltaESrvc, , [4b70450e7b101d193ede04ba7f831de3], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\esrv.deltaESrvc, , [4b70450e7b101d193ede04ba7f831de3], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.deltaESrvc.1, , [4b70450e7b101d193ede04ba7f831de3], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\esrv.deltaESrvc.1, , [4b70450e7b101d193ede04ba7f831de3], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}, , [4b70450e7b101d193ede04ba7f831de3], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\escort.escortIEPane.1, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\escort.escortIEPane, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\escort.escortIEPane, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\escort.escortIEPane, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\Incredibar.IncredibarHlpr.1, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\Incredibar.IncredibarHlpr, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Incredibar.IncredibarHlpr, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Incredibar.IncredibarHlpr, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Incredibar.IncredibarHlpr.1, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Incredibar.IncredibarHlpr.1, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}, , [32890c473a51c4727ed1ffef5fa3ce32], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}, , [32890c473a51c4727ed1ffef5fa3ce32], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\delta.deltadskBnd.1, , [32890c473a51c4727ed1ffef5fa3ce32], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\delta.deltadskBnd, , [32890c473a51c4727ed1ffef5fa3ce32], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\delta.deltadskBnd, , [32890c473a51c4727ed1ffef5fa3ce32], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\delta.deltadskBnd, , [32890c473a51c4727ed1ffef5fa3ce32], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\delta.deltadskBnd.1, , [32890c473a51c4727ed1ffef5fa3ce32], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\delta.deltadskBnd.1, , [32890c473a51c4727ed1ffef5fa3ce32], PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{82E1477C-B154-48D3-9891-33D83C26BCD3}, , [32890c473a51c4727ed1ffef5fa3ce32], PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{82E1477C-B154-48D3-9891-33D83C26BCD3}, , [32890c473a51c4727ed1ffef5fa3ce32], PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{82E1477C-B154-48D3-9891-33D83C26BCD3}, , [32890c473a51c4727ed1ffef5fa3ce32], PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{82E1477C-B154-48D3-9891-33D83C26BCD3}, , [32890c473a51c4727ed1ffef5fa3ce32], PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{82E1477C-B154-48D3-9891-33D83C26BCD3}, , [32890c473a51c4727ed1ffef5fa3ce32], PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{82E1477C-B154-48D3-9891-33D83C26BCD3}, , [32890c473a51c4727ed1ffef5fa3ce32], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, , [5a61f85b7c0f280eaea020cec83a2bd5], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}, , [5a61f85b7c0f280eaea020cec83a2bd5], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\escort.escortIEPane.1, , [5a61f85b7c0f280eaea020cec83a2bd5], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\escort.escortIEPane.1, , [5a61f85b7c0f280eaea020cec83a2bd5], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}, , [5a61f85b7c0f280eaea020cec83a2bd5], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, , [5a61f85b7c0f280eaea020cec83a2bd5], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\delta.deltaHlpr.1, , [5a61f85b7c0f280eaea020cec83a2bd5], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\delta.deltaHlpr, , [5a61f85b7c0f280eaea020cec83a2bd5], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\delta.deltaHlpr, , [5a61f85b7c0f280eaea020cec83a2bd5], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\delta.deltaHlpr, , [5a61f85b7c0f280eaea020cec83a2bd5], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, , [5a61f85b7c0f280eaea020cec83a2bd5], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\delta.deltaHlpr.1, , [5a61f85b7c0f280eaea020cec83a2bd5], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\delta.deltaHlpr.1, , [5a61f85b7c0f280eaea020cec83a2bd5], PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, , [5a61f85b7c0f280eaea020cec83a2bd5], PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, , [5a61f85b7c0f280eaea020cec83a2bd5], PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, , [5a61f85b7c0f280eaea020cec83a2bd5], PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, , [5a61f85b7c0f280eaea020cec83a2bd5], PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, , [5a61f85b7c0f280eaea020cec83a2bd5], PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, , [5a61f85b7c0f280eaea020cec83a2bd5], PUP.Optional.WebCake, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899}, , [a6154b08018a3ef82935ba41f30f5ca4], PUP.Optional.WebCake, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{DF84E609-C3A4-49CB-A160-61767DAF8899}, , [a6154b08018a3ef82935ba41f30f5ca4], PUP.Optional.WebCake, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{DF84E609-C3A4-49CB-A160-61767DAF8899}, , [a6154b08018a3ef82935ba41f30f5ca4], PUP.Optional.WebCake, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899}, , [a6154b08018a3ef82935ba41f30f5ca4], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, , [3d7e0152dcaf75c1abe511dfe31f54ac], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, , [3d7e0152dcaf75c1abe511dfe31f54ac], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\Incredibar.dskBnd.1, , [3d7e0152dcaf75c1abe511dfe31f54ac], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\Incredibar.dskBnd, , [3d7e0152dcaf75c1abe511dfe31f54ac], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Incredibar.dskBnd, , [3d7e0152dcaf75c1abe511dfe31f54ac], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Incredibar.dskBnd, , [3d7e0152dcaf75c1abe511dfe31f54ac], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Incredibar.dskBnd.1, , [3d7e0152dcaf75c1abe511dfe31f54ac], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Incredibar.dskBnd.1, , [3d7e0152dcaf75c1abe511dfe31f54ac], PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, , [3d7e0152dcaf75c1abe511dfe31f54ac], PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, , [3d7e0152dcaf75c1abe511dfe31f54ac], PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, , [3d7e0152dcaf75c1abe511dfe31f54ac], PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, , [3d7e0152dcaf75c1abe511dfe31f54ac], PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, , [3d7e0152dcaf75c1abe511dfe31f54ac], PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, , [3d7e0152dcaf75c1abe511dfe31f54ac], PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, , [3d7e0152dcaf75c1abe511dfe31f54ac], PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, , [3d7e0152dcaf75c1abe511dfe31f54ac], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\TYPELIB\{4599D05A-D545-4069-BB42-5895B4EAE05B}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\INTERFACE\{1231839B-064E-4788-B865-465A1B5266FD}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\INTERFACE\{2DAC2231-CC35-482B-97C5-CED1D4185080}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\INTERFACE\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\INTERFACE\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\INTERFACE\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\INTERFACE\{57C91446-8D81-4156-A70E-624551442DE9}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\INTERFACE\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\INTERFACE\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\INTERFACE\{97DD820D-2E20-40AD-B01E-6730B2FCE630}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\INTERFACE\{B177446D-54A4-4869-BABC-8566110B4BE0}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\INTERFACE\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\INTERFACE\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\INTERFACE\{F05B12E1-ADE8-4485-B45B-898748B53C37}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{1231839B-064E-4788-B865-465A1B5266FD}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{2DAC2231-CC35-482B-97C5-CED1D4185080}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{57C91446-8D81-4156-A70E-624551442DE9}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{97DD820D-2E20-40AD-B01E-6730B2FCE630}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B177446D-54A4-4869-BABC-8566110B4BE0}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{F05B12E1-ADE8-4485-B45B-898748B53C37}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{1231839B-064E-4788-B865-465A1B5266FD}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{2DAC2231-CC35-482B-97C5-CED1D4185080}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{57C91446-8D81-4156-A70E-624551442DE9}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{97DD820D-2E20-40AD-B01E-6730B2FCE630}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{B177446D-54A4-4869-BABC-8566110B4BE0}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{F05B12E1-ADE8-4485-B45B-898748B53C37}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{4599D05A-D545-4069-BB42-5895B4EAE05B}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{4599D05A-D545-4069-BB42-5895B4EAE05B}, , [d3e854ff2c5f91a5b864c22d11f1aa56], PUP.Optional.Babylon, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [befd75de7a11b6800bedc72b39c92ad6], PUP.Optional.Babylon, HKU\S-1-5-21-955990246-3923062674-3685574950-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}, , [befd75de7a11b6800bedc72b39c92ad6], PUP.Optional.Babylon, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}, , [befd75de7a11b6800bedc72b39c92ad6], PUP.Optional.Babylon, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}, , [befd75de7a11b6800bedc72b39c92ad6], PUP.Optional.HomePageProtector, HKU\S-1-5-21-955990246-3923062674-3685574950-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{336D0C35-8A85-403A-B9D2-65C292C39087}, , [4d6e1142dab1ec4af0754aab40c2639d], PUP.Optional.HomePageProtector, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{336D0C35-8A85-403A-B9D2-65C292C39087}, , [4d6e1142dab1ec4af0754aab40c2639d], PUP.Optional.HomePageProtector, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{336D0C35-8A85-403A-B9D2-65C292C39087}, , [4d6e1142dab1ec4af0754aab40c2639d], PUP.Optional.HomePageProtector, HKU\S-1-5-21-955990246-3923062674-3685574950-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{336D0C35-8A85-403A-B9D2-65C292C39087}, , [4d6e1142dab1ec4af0754aab40c2639d], PUP.Optional.HomePageProtector, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{336D0C35-8A85-403A-B9D2-65C292C39087}, , [4d6e1142dab1ec4af0754aab40c2639d], PUP.Optional.HomePageProtector, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{336D0C35-8A85-403A-B9D2-65C292C39087}, , [4d6e1142dab1ec4af0754aab40c2639d], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}, , [dedd183b9deec86e937fe906e220b54b], PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}, , [7348b0a3c8c35cda83fec3322ed47a86], PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, , [05b6e96ab0dbcd698bfb04f1758de818], PUP.Optional.Incredibar, HKLM\SOFTWARE\IB Updater, , [fac16ae93e4d290dd48af5bd887c1fe1], PUP.Optional.SweetIM, HKLM\SOFTWARE\SweetIM, , [ffbca2b1bad1cd69b573c907f90bbb45], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\esrv.IncredibarESrvc, , [cbf041127615c373d5838b279371e719], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\esrv.IncredibarESrvc.1, , [5269fa5973188da996c2684a39cbec14], PUP.Optional.Incredibar, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\dlnembnfbcpjnepmfjmngjenhhajpdfd, , [4d6e0d46dfac73c30954ae04ca3a33cd], PUP.Optional.BrowserDefender, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\BrowserDefendert, , [2a918cc7bad15ed8eb966239fd07956b], PUP.Optional.Babylon, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\EPUpdater, , [78435ef58dfe41f520c78e09ca3afc04], PUP.Optional.Lyrics, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\FindLyrics Update, , [ead133200c7f0e285b5a5c5a52b27d83], PUP.Optional.InstallBrain, HKLM\SOFTWARE\WNLT, , [cceff063c2c974c251a2a50d1aeaab55], PUP.Optional.Babylon, HKLM\SOFTWARE\WOW6432NODE\BabylonToolbar, , [704b341fd3b8a6907f6341561aea817f], PUP.Optional.DataMngr, HKLM\SOFTWARE\WOW6432NODE\DataMngr, , [6e4d500356352a0cc282a33c8480c13f], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\IB Updater, , [6b502330a8e3d462ff5fc2f054b0738d], PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\Iminent, , [06b52c278cff69cdc4556d455da711ef], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\Incredibar.com, , [407b2033c1ca90a6c897f9b914f07f81], PUP.Optional.SweetIM, HKLM\SOFTWARE\WOW6432NODE\SweetIM, , [e5d683d02d5e20167dabd9f729db2ed2], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.IncredibarESrvc, , [c3f80a49f99240f62e2a6e440400ea16], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.IncredibarESrvc.1, , [2e8d4112325965d198c0ddd58c78a35d], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\DELTA\DELTA\Instl, , [8437e370cebdac8a011e4a259470dc24], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dlnembnfbcpjnepmfjmngjenhhajpdfd, , [5269084b2764d066223b99194bb96a96], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\eooncjejnppfjjklapaamhcdmjbilmde, , [4f6c4e056a214aec418e3619778c59a7], PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21111111-1111-1111-1111-110011441179}, , [8c2f084bd3b8bf771abc436118ec738d], PUP.Optional.SweetIM, HKU\S-1-5-18\SOFTWARE\SweetIM, , [18a30c47701b3303a97a646c030139c7], PUP.Optional.InstallBrain, HKU\S-1-5-18\SOFTWARE\WNLT, , [ceed7cd7e9a20f27f2ffe9c9d03447b9], PUP.Optional.DataMngr, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\DataMngr, , [7a411e35325987af75c7366f09fbb848], PUP.Optional.DataMngr, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\DataMngr_Toolbar, , [1f9cc39044471f174bf2b5f0937133cd], PUP.Optional.Iminent, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\Iminent, , [b4071f34018a7cba9179526036ce58a8], PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\Incredibar.com, , [813a2b28830850e67ae0ebc717edd52b], PUP.Optional.InstallCore, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\InstallCore, , [2299292af695be7822d5e7cb19ebe917], PUP.Optional.OfferMosquito, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\OfferMosquito, , [1c9f76ddaae1b87ed144af1043c1ae52], PUP.Optional.SweetIM, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\SweetIM, , [7e3d3d16f89315211211e5eb7b89b848], PUP.Optional.CrossRider, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [c6f593c0cac1191d9cea5f4427dd1ae6], PUP.Optional.PriceGong, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, , [615a83d06f1cee48f7536b5848bc0af6], PUP.Optional.Babylon, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\BABSOLUTION\Updater, , [dfdc1e357a11b680bb24564125df58a8], PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\DELTA\DELTA, , [9625f0639af141f537a15316689cd729], PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}, , [11aa5bf83556ed495803654d768eba46], PUP.Optional.InstallBrain, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\WNLT, , [b704be9526656fc7658c0ba7758fb848], PUP.Optional.Wajam, HKU\S-1-5-21-955990246-3923062674-3685574950-1001\SOFTWARE\Wajam, , [3586ee656f1cd85e47d2d0065ca86e92], PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}, , [c2f9163de4a7072fca91c9e907fd8080], PUP.Optional.SweetIM, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\SweetIM, , [3685be950586dc5a0f14517f9b692fd1], PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}, , [2c8f262d6b20c0762e2d03afc4404bb5], PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}, , [4e6d76dded9e6cca1a41dbd7ea1add23], PUP.Optional.InstallBrain, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\WNLT, , [2398df74f09b4aec628f4d6519ebf709], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EF7FEC6D-451B-4452-9D26-7E10C6B5DB6E}, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\delta.deltaappCore.1, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\delta.deltaappCore, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\delta.deltaappCore, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\delta.deltaappCore, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\delta.deltaappCore.1, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\delta.deltaappCore.1, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\IncredibarApp.appCore.1, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\IncredibarApp.appCore, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IncredibarApp.appCore, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\IncredibarApp.appCore, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IncredibarApp.appCore.1, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\IncredibarApp.appCore.1, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{EF7FEC6D-451B-4452-9D26-7E10C6B5DB6E}, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C1545464-C77C-4130-A572-1C619E2895FE}, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\I, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\I, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\I, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{C1545464-C77C-4130-A572-1C619E2895FE}, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\TYPELIB\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\incredibar, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}, , [ead150033b505dd928c8bb57b251619f], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\d, , [ead150033b505dd928c8bb57b251619f], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLASSES\d, , [ead150033b505dd928c8bb57b251619f], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\d, , [ead150033b505dd928c8bb57b251619f], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}, , [ead150033b505dd928c8bb57b251619f], Registrierungswerte: 50 PUP.Optional.HTTOGROUP, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|TU, "C:\Users\Ramsauer\AppData\Roaming\SDIV 2.0\Prot\tu\tu.exe", , [c1fa64efc0cb1f17bde5e1dd53b217e9] PUP.Optional.HTTOGROUP, HKU\S-1-5-21-955990246-3923062674-3685574950-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|TU, "C:\Users\Ramsauer\AppData\Roaming\SDIV 2.0\Prot\tu\tu.exe", , [c1fa64efc0cb1f17bde5e1dd53b217e9] PUP.Optional.HTTOGROUP, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|TU, "C:\Users\Ramsauer\AppData\Roaming\SDIV 2.0\Prot\tu\tu.exe", , [c1fa64efc0cb1f17bde5e1dd53b217e9] PUP.Optional.HTTOGROUP, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|TU, "C:\Users\Ramsauer\AppData\Roaming\SDIV 2.0\Prot\tu\tu.exe", , [c1fa64efc0cb1f17bde5e1dd53b217e9] PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{82E1477C-B154-48D3-9891-33D83C26BCD3}, Delta Toolbar, , [32890c473a51c4727ed1ffef5fa3ce32] PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{F9639E4A-801B-4843-AEE3-03D9DA199E77}, Incredibar Toolbar, , [3d7e0152dcaf75c1abe511dfe31f54ac] PUP.Optional.HomePageProtector, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{336D0C35-8A85-403A-B9D2-65C292C39087}, C:\Program Files\IB Updater\Firefox, , [4d6e1142dab1ec4af0754aab40c2639d] PUP.Optional.HomePageProtector, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{336D0C35-8A85-403A-B9D2-65C292C39087}, C:\Program Files\IB Updater\Firefox, , [4d6e1142dab1ec4af0754aab40c2639d] PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, , [3289054e47445dd93f5123cda45eae52], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{82E1477C-B154-48D3-9891-33D83C26BCD3}, , [f8c3d77ceba051e5a8a722cc46bc60a0], PUP.Optional.HomePageProtector, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS\{336D0C35-8A85-403a-B9D2-65C292C39087}, , [dfdc3320b8d32412e38249ac2fd39d63], PUP.Optional.HomePageProtector, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS\{336D0C35-8A85-403a-B9D2-65C292C39087}, , [dedd1e35a9e2d95d96cf896c7d857d83], PUP.Optional.DataMngr, HKU\S-1-5-21-955990246-3923062674-3685574950-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|DataMgr, "C:\Users\Ramsauer\AppData\Roaming\DataMgr\DataMgr.exe", , [a2196fe4b8d3d165390add02986cd12f] PUP.Optional.DataMngr, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|DataMgr, "C:\Users\Ramsauer\AppData\Roaming\DataMgr\DataMgr.exe", , [a2196fe4b8d3d165390add02986cd12f] PUP.Optional.DataMngr, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|DataMgr, "C:\Users\Ramsauer\AppData\Roaming\DataMgr\DataMgr.exe", , [a2196fe4b8d3d165390add02986cd12f] PUP.Optional.SmartBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, , [b60566edef9c36009dfdb997b35040c0] PUP.Optional.IBUpdater, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}, C:\Program Files\IB Updater\Firefox, , [d6e5b0a3216a50e6dd57a50c7f85837d] PUP.Optional.InstallBrain, HKLM\SOFTWARE\WNLT|PDV, [BLACKLIST=1] [CAPTURECHEXT=1], , [cceff063c2c974c251a2a50d1aeaab55] PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21111111-1111-1111-1111-110011441179}|AppName, Giant Savings-bg.exe, , [8c2f084bd3b8bf771abc436118ec738d] PUP.Optional.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, , [2f8cd08395f6181e32683d13f3109868] PUP.Optional.IBUpdater, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}, C:\Program Files\IB Updater\Firefox, , [f6c51340a2e975c139fba50c4bb9c43c] PUP.Optional.InstallBrain, HKU\S-1-5-18\SOFTWARE\WNLT|URL, MYSTART, , [ceed7cd7e9a20f27f2ffe9c9d03447b9] PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\DELTA\DELTA|tlbrSrchUrl, , [9625f0639af141f537a15316689cd729], PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\DELTA\DELTA|lastB, hxxp://www.delta-search.com/?babsrc=HP_ss&mntrId=7A8FBC5FF43636F9&affID=119820&tsp=4930, , [0ead5201bdce989e126be789dd2734cc] PUP.BProtector, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, hxxp://www.delta-search.com/?babsrc=HP_ss&mntrId=7A8FBC5FF43636F9&affID=119820&tsp=4930, , [bcff42115d2e46f061b41a511ce85ca4] PUP.BProtector, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|bProtectorDefaultScope, {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [209b75def2990f2771a556159272ea16] PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}|URL, hxxp://www.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=7A8FBC5FF43636F9&affID=119820&tsp=4930, , [9724183b8803f73f3c78662255afbc44] PUP.Optional.Babylon, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}|FaviconURL, search.babylon.com/favicon.ico, , [93288cc73556f640964b11863ec6f907] PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}|URL, hxxp://mystart.incredibar.com/mb187?a=(6PQN8J0T6X)&search={searchTerms}&i=26, , [11aa5bf83556ed495803654d768eba46] PUP.Optional.InstallBrain, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\WNLT|URL, MYSTART, , [b704be9526656fc7658c0ba7758fb848] PUP.BProtector, HKU\S-1-5-21-955990246-3923062674-3685574950-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, hxxp://www.delta-search.com/?babsrc=HP_ss&mntrId=7A8FBC5FF43636F9&affID=119820&tsp=4930, , [625968eb098272c419fc05662ada4db3] PUP.BProtector, HKU\S-1-5-21-955990246-3923062674-3685574950-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|bProtectorDefaultScope, {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [b5061142a3e8f541e4322249b450ad53] PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-955990246-3923062674-3685574950-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}|URL, hxxp://www.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=7A8FBC5FF43636F9&affID=119820&tsp=4930, , [c8f3bd9624676acc02b2394f40c4956b] PUP.Optional.Babylon, HKU\S-1-5-21-955990246-3923062674-3685574950-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}|FaviconURL, search.babylon.com/favicon.ico, , [6952e56ebfcc48eef9e8376030d4857b] PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}|URL, hxxp://mystart.incredibar.com/mb187?a=(6PQN8J0T6X)&search={searchTerms}&i=26, , [c2f9163de4a7072fca91c9e907fd8080] PUP.BProtector, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, hxxp://www.delta-search.com/?babsrc=HP_ss&mntrId=7A8FBC5FF43636F9&affID=119820&tsp=4930, , [4a71f261fb90d4626baa096246be52ae] PUP.BProtector, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|bProtectorDefaultScope, {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [8734d57e5f2cc96d977faebd9b6952ae] PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}|URL, hxxp://www.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=7A8FBC5FF43636F9&affID=119820&tsp=4930, , [75461a39f39884b2862e5d2b7094c739] PUP.Optional.Babylon, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}|FaviconURL, search.babylon.com/favicon.ico, , [318a0f4445468da9ce13692eac5818e8] PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}|FaviconURL, hxxp://mystart.incredibar.com/favicon.ico, , [2c8f262d6b20c0762e2d03afc4404bb5] PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}|FaviconURLFallback, hxxp://mystart.incredibar.com/favicon.ico, , [c4f7e56e0586cd69213ae3cfc93ba060] PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}|TopResultURL, hxxp://mystart.incredibar.com/?a=&loc=skw&search={searchTerms}&i=26, , [8f2c64ef4f3cda5c8bd0a30f38cc34cc] PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}|TopResultURLFallback, hxxp://mystart.incredibar.com/?a=&loc=skw&search={searchTerms}&i=26, , [902b97bcf893ad89c992efc3d232f20e] PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}|URL, hxxp://mystart.incredibar.com/?a=&loc=skw&search={searchTerms}&i=26, , [d9e210438a010135d6856c4662a2a759] PUP.BProtector, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, hxxp://www.delta-search.com/?babsrc=HP_ss&mntrId=7A8FBC5FF43636F9&affID=119820&tsp=4930, , [2c8f351e54375bdb8e87214a917345bb] PUP.BProtector, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|bProtectorDefaultScope, {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [6e4d0a49a9e20e28d73f7af1ab59c739] PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}|URL, hxxp://www.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=7A8FBC5FF43636F9&affID=119820&tsp=4930, , [209bada690fb9d99d3e1e3a5996b34cc] PUP.Optional.Babylon, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}|FaviconURL, search.babylon.com/favicon.ico, , [c5f685ce800b7cba11d0fd9a56ae50b0] PUP.Optional.Incredibar, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}|URL, hxxp://mystart.incredibar.com/mb187?a=(6PQN8J0T6X)&search={searchTerms}&i=26, , [4e6d76dded9e6cca1a41dbd7ea1add23] PUP.Optional.InstallBrain, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\WNLT|URL, , [2398df74f09b4aec628f4d6519ebf709], Registrierungsdaten: 4 PUP.Optional.StartPage, HKU\S-1-5-21-955990246-3923062674-3685574950-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, hxxp://www.delta-search.com/?babsrc=HP_ss&mntrId=7A8FBC5FF43636F9&affID=119820&tsp=4930, Gut: (www.google.com), Schlecht: (hxxp://www.delta-search.com/?babsrc=HP_ss&mntrId=7A8FBC5FF43636F9&affID=119820&tsp=4930),,[417a183b553661d5ea3d2f581ee75da3] PUP.Optional.StartPage, HKU\S-1-5-21-955990246-3923062674-3685574950-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, hxxp://www.delta-search.com/?babsrc=HP_ss&mntrId=7A8FBC5FF43636F9&affID=119820&tsp=4930, Gut: (www.google.com), Schlecht: (hxxp://www.delta-search.com/?babsrc=HP_ss&mntrId=7A8FBC5FF43636F9&affID=119820&tsp=4930),,[308b0152d8b338fec166bacd1de8b848] PUP.Optional.StartPage, HKU\S-1-5-21-955990246-3923062674-3685574950-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, hxxp://www.delta-search.com/?babsrc=HP_ss&mntrId=7A8FBC5FF43636F9&affID=119820&tsp=4930, Gut: (www.google.com), Schlecht: (hxxp://www.delta-search.com/?babsrc=HP_ss&mntrId=7A8FBC5FF43636F9&affID=119820&tsp=4930),,[3685b3a05a315bdbf532196ebd488f71] PUP.Optional.StartPage, HKU\S-1-5-21-955990246-3923062674-3685574950-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, hxxp://www.delta-search.com/?babsrc=HP_ss&mntrId=7A8FBC5FF43636F9&affID=119820&tsp=4930, Gut: (www.google.com), Schlecht: (hxxp://www.delta-search.com/?babsrc=HP_ss&mntrId=7A8FBC5FF43636F9&affID=119820&tsp=4930),,[506b460dc4c70a2c54d36027689df709] Ordner: 17 PUP.Optional.Delta.ShrtCln, C:\Users\Ramsauer\AppData\Roaming\BabSolution\Shared, , [2a91f3605a311e1824cdb5ca57ad1ee2], PUP.Optional.DataMngr, C:\Users\Ramsauer\AppData\Roaming\DataMgr, , [a2196fe4b8d3d165390add02986cd12f], PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\bh, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Delta.ShrtCln, C:\Program Files (x86)\Delta\delta, , [ead150033b505dd928c8bb57b251619f], PUP.Optional.Delta.ShrtCln, C:\Program Files (x86)\Delta\delta\1.8.21.5, , [ead150033b505dd928c8bb57b251619f], PUP.Optional.Delta.ShrtCln, C:\Program Files (x86)\Delta\delta\1.8.21.5\bh, , [ead150033b505dd928c8bb57b251619f], PUP.Optional.337Technologies, C:\Program Files (x86)\Common Files\337\libcef, , [9a21450edbb02214fc96be56c83bea16], PUP.Optional.337Technologies, C:\Program Files (x86)\Common Files\337\libcef\1.963.439, , [9a21450edbb02214fc96be56c83bea16], PUP.Optional.Desk365, C:\Users\Ramsauer\AppData\Local\Temp\Desk365\eInstall, , [d4e76fe41a71db5b89c4f03344bf7789], PUP.Optional.Desk365, C:\Users\Ramsauer\AppData\Local\Temp\Desk365\eInstall\language, , [d4e76fe41a71db5b89c4f03344bf7789], PUP.Optional.Desk365, C:\Users\Ramsauer\AppData\Local\Temp\Desk365\eInstall\language\en_us, , [d4e76fe41a71db5b89c4f03344bf7789], PUP.Optional.Desk365, C:\Users\Ramsauer\AppData\Local\Temp\Desk365\eInstall\language\es_es, , [d4e76fe41a71db5b89c4f03344bf7789], PUP.Optional.Desk365, C:\Users\Ramsauer\AppData\Local\Temp\Desk365\eInstall\language\pt_br, , [d4e76fe41a71db5b89c4f03344bf7789], PUP.Optional.Desk365, C:\Users\Ramsauer\AppData\Local\Temp\Desk365\eInstall\language\tr_tr, , [d4e76fe41a71db5b89c4f03344bf7789], Dateien: 43 PUP.Optional.HTTOGROUP, C:\Users\Ramsauer\AppData\Roaming\SDIV 2.0\Prot\tu\tu.exe, , [c1fa64efc0cb1f17bde5e1dd53b217e9], PUP.Optional.Delta.ShrtCln, C:\Program Files (x86)\Delta\delta\1.8.21.5\deltasrv.exe, , [4b70450e7b101d193ede04ba7f831de3], PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll, , [219a8ac9820979bdccc310e0a35fd62a], PUP.Optional.Delta.ShrtCln, C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaTlbr.dll, , [32890c473a51c4727ed1ffef5fa3ce32], PUP.Optional.Delta.ShrtCln, C:\Program Files (x86)\Delta\delta\1.8.21.5\bh\delta.dll, , [5a61f85b7c0f280eaea020cec83a2bd5], PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll, , [3d7e0152dcaf75c1abe511dfe31f54ac], PUP.Optional.OpenCandy, C:\$Recycle.Bin\S-1-5-21-955990246-3923062674-3685574950-1000\$RWGJCAM.exe, , [bb00d77cb9d296a04f96b0fe6a9b3cc4], PUP.Optional.CrossRider, C:\$Recycle.Bin\S-1-5-21-955990246-3923062674-3685574950-1000\$RXUNE3H.exe, , [f4c74d06d9b21e183800af4547b906fa], PUP.Optional.SofTonic, C:\$Recycle.Bin\S-1-5-21-955990246-3923062674-3685574950-1000\$R71KP3M.exe, , [74473f14a1eafe381a14ecd06998629e], PUP.Optional.Amonetize, C:\Users\Ramsauer\AppData\Local\Temp\UpdUninstall.exe, , [e5d6c1928704c27487fa579f3cc45aa6], PUP.Optional.Somoto, C:\Users\Ramsauer\AppData\Local\Temp\bitool.dll, , [c4f7e76cb0db3afc693c9cdb699906fa], PUP.Optional.215Apps, C:\Users\Ramsauer\AppData\Local\Temp\is1373634743\GiantSavings.exe, , [4279cd863d4e2115186265574fb2817f], PUP.Optional.Babylon, C:\Users\Ramsauer\AppData\Local\Temp\is1373634743\MyBabylonTB.exe, , [a61563f01f6c2b0b893f2e2711efa25e], PUP.Optional.AdLyrics, C:\Users\Ramsauer\AppData\Local\Temp\is1412836710\FindLyrics.exe, , [d6e523303457d462cae94fa8bc447090], PUP.Optional.Wajam, C:\Users\Ramsauer\AppData\Local\Temp\is1412836710\wajam_download.exe, , [d2e9bc977912ec4af859dc7d41bf4db3], PUP.Optional.Babylon, C:\Users\Ramsauer\AppData\Local\Temp\6C970F0B-BAB0-7891-A503-B55D2F349DE8\CrxInstaller.dll, , [54676ee5a6e554e23f740ab2f908916f], PUP.Optional.Delta.ShrtCln, C:\Users\Ramsauer\AppData\Local\Temp\6C970F0B-BAB0-7891-A503-B55D2F349DE8\MyBabylonTB.exe, , [b50683d0b9d2af876a2b34e39d64d22e], PUP.Optional.Babylon, C:\Users\Ramsauer\AppData\Local\Temp\6C970F0B-BAB0-7891-A503-B55D2F349DE8\Setup.exe, , [b407b99afe8da49237931e378878f808], PUP.Optional.Babylon, C:\Users\Ramsauer\AppData\Local\Temp\CAB78970-BAB0-7891-956C-0EDE780BB65C\CrxInstaller.dll, , [24975cf776155cda1c974f6d09f805fb], PUP.Optional.Delta, C:\Users\Ramsauer\AppData\Local\Temp\CAB78970-BAB0-7891-956C-0EDE780BB65C\MyBabylonTB.exe, , [546711427c0fee48d3d2d4119f610000], PUP.Optional.Babylon, C:\Users\Ramsauer\AppData\Local\Temp\CAB78970-BAB0-7891-956C-0EDE780BB65C\Setup.exe, , [5a61fc57c9c230069530ada8bc446d93], PUP.Optional.Delta.ShrtCln, C:\Users\Ramsauer\AppData\Roaming\BabSolution\Shared\Delta.ico, , [2a91f3605a311e1824cdb5ca57ad1ee2], PUP.Optional.Delta.ShrtCln, C:\Users\Ramsauer\AppData\Roaming\BabSolution\Shared\SetupParams.ini, , [2a91f3605a311e1824cdb5ca57ad1ee2], PUP.Optional.BProtector, C:\Users\Ramsauer\AppData\Roaming\Mozilla\Firefox\Profiles\s9hhcrx7.default\bProtector_prefs.js, , [1ba091c26d1ed26444f192088e768f71], PUP.Optional.BrowserDefender, C:\Windows\System32\Tasks\BrowserDefendert, , [4a71381bd1baf73f7fffa5f61aeab749], PUP.Optional.Lyrics, C:\Windows\System32\Tasks\FindLyrics Update, , [e5d6025102898fa79a10b501f70d51af], PUP.Optional.Lyrics, C:\Windows\Tasks\FindLyrics Update.job, , [dae1a0b30685d0664d5e3d798a7a2ed2], PUP.Optional.DataMngr, C:\Users\Ramsauer\AppData\Roaming\DataMgr\datamgr.exe, , [a2196fe4b8d3d165390add02986cd12f], PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarApp.dll, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaApp.dll, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarEng.dll, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarsrv.exe, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\uninstall.exe, , [6556d47faedd85b14e6fb25922e1ab55], PUP.Optional.Delta.ShrtCln, C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaEng.dll, , [ead150033b505dd928c8bb57b251619f], PUP.Optional.Delta.ShrtCln, C:\Program Files (x86)\Delta\delta\1.8.21.5\uninstall.exe, , [ead150033b505dd928c8bb57b251619f], PUP.Optional.337Technologies, C:\Program Files (x86)\Common Files\337\libcef\1.963.439\icudt.dll, , [9a21450edbb02214fc96be56c83bea16], PUP.Optional.337Technologies, C:\Program Files (x86)\Common Files\337\libcef\1.963.439\libcef.dll, , [9a21450edbb02214fc96be56c83bea16], PUP.Optional.Desk365, C:\Users\Ramsauer\AppData\Local\Temp\Desk365\eInstall\segoeui.ttf, , [d4e76fe41a71db5b89c4f03344bf7789], PUP.Optional.Desk365, C:\Users\Ramsauer\AppData\Local\Temp\Desk365\eInstall\segoeuib.ttf, , [d4e76fe41a71db5b89c4f03344bf7789], PUP.Optional.Desk365, C:\Users\Ramsauer\AppData\Local\Temp\Desk365\eInstall\language\en_us\install_lang.ini, , [d4e76fe41a71db5b89c4f03344bf7789], PUP.Optional.Desk365, C:\Users\Ramsauer\AppData\Local\Temp\Desk365\eInstall\language\es_es\install_lang.ini, , [d4e76fe41a71db5b89c4f03344bf7789], PUP.Optional.Desk365, C:\Users\Ramsauer\AppData\Local\Temp\Desk365\eInstall\language\pt_br\install_lang.ini, , [d4e76fe41a71db5b89c4f03344bf7789], PUP.Optional.Desk365, C:\Users\Ramsauer\AppData\Local\Temp\Desk365\eInstall\language\tr_tr\install_lang.ini, , [d4e76fe41a71db5b89c4f03344bf7789], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) |
06.10.2015, 15:28 | #2 |
/// Winkelfunktion /// TB-Süch-Tiger™ | not-a-virus:Downloader.Win32.Somato.h Hi,
__________________Logs bitte in CODE-Tags posten. Reiche das Log von Kaspersky nach, damit wir wissen auf was du dich da beziehst. Und Logs von FRST bitte: Scan mit Farbar's Recovery Scan Tool (FRST) Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Lesestoff: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |