|
Plagegeister aller Art und deren Bekämpfung: Datum- und Uhrzeitanzeige falsch/Skype Account gehackt/Fehler SyncToy/Bluescreens/BildschirmflimmernWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
13.10.2015, 17:34 | #1 |
| Datum- und Uhrzeitanzeige falsch/Skype Account gehackt/Fehler SyncToy/Bluescreens/Bildschirmflimmern Hallo, erst einmal herzlichen Dank! Seit ein paar Monaten "spuckt" mein Win7 etwas. Ich weiß nicht, ob die Fehler miteinander zusammenhängen, aber ich schildere sie einmal: a) Die Uhrzeiten/das Datum sind beim Zurückholen aus dem Ruhezustand unstimmig: dachte zuerst, die Batterie muss ausgetauscht werden, anfangs lief die Uhrzeit zu langsam und nicht während des Ruhezustandes "mit", dann war plötzlich das Datum beim Starten immer auf 2008 gesetzt, aber heute erstmalig das Datum auf ein zukünftiges gesetzt (2031). Uhrzeit stimmt sowieso nie. Klingt für mich eher nach einem Virus. b) Über meinen Skypeaccount wurde vergangen Freitag Spam verschickt (zu all meinen Kontakten) c) Vor ca. 2 Monaten wurden meine Synchronisationspaare von SyncToy plötzlich umgestellt (falsche Laufwerke -> falsche Synchronisation) d) Vor ein paar Monaten hatte ich Bluescreens, von ein paar habe ich die Codes noch, aber in letzter Zeit ist eig. alles gut gelaufen (irgendwas in Richtung internal power error, wenn ich mich recht erinnere); z.B.: Code:
ATTFilter Problemsignatur: Problemereignisname: BlueScreen Betriebsystemversion: 6.1.7601.2.1.0.256.48 Gebietsschema-ID: 3079 sichern, aufsetzen workbook Zusatzinformationen zum Problem: BCCode: a0 BCP1: 00000009 BCP2: C0000001 BCP3: 00000001 BCP4: 00000000 OS Version: 6_1_7601 Service Pack: 1_0 Product: 256_1 Dateien, die bei der Beschreibung des Problems hilfreich sind: C:\Windows\Minidump\020314-36504-01.dmp C:\Users\*****\AppData\Local\Temp\WER-104395-0.sysdata.xml Lesen Sie unsere Datenschutzbestimmungen online: hxxp://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0407 Wenn die Onlinedatenschutzbestimmungen nicht verfügbar sind, lesen Sie unsere Datenschutzbestimmungen offline: C:\Windows\system32\de-DE\erofflps.txt hxxp://www.google.at/imgres?imgurl=http://www.trojaner-board.de/attachm...FYqFLAodxf4JpQ), Maussymbol allerdings klar erkennbar, beim Öffnen mit Strg Entf Alt keine Probleme mit Bildschirm (nur leichte "Pixelfehler"), nach Neustart wieder in Ordnung Logfiles: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1) Log created at 13:42 on 13/10/2015 (*****) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. Checking for services/drivers... SPTD -> Disabled -=E.O.F=- erunt.exe wurde leider von GDATA in Quarantäne geschoben (Fehlermeldung: Aufgrund bösartigen Verhaltens in Quarantäne verschoben. Objekt: ntuser.dat) Code:
ATTFilter AVA 25.3847 GD 25.5745 *** Prozess *** Prozess: 7728 Dateiname: erunt.exe Pfad: c:\windows\erunt.exe Herausgeber: Unbekannter Herausgeber Erstelldatum: 02/22/13 15:05:21 Änderungsdatum: 02/22/13 02:04:50 Gestartet von: cmd.exe Herausgeber: Microsoft Windows *** Aktionen *** Ein Packer wurde auf die Programmdatei angewandt. Möglicherweise um schädliche Inhalte zu verbergen. Das Programm hat in Dateien oder Ordnern geschrieben, die genutzt werden können, um das System zu gefährden. Das Programm hat Werte in der System-Registrierung verändert die genutzt werden können um das System zu gefährden. *** Quarantäne *** Folgende Dateien wurden in Quarantäne verschoben: C:\Windows\ERUNT.exe c:\frst\hives\users\00000001\ntuser.dat Folgende Registry Einträge wurden gelöscht: \REGISTRY\MACHINE\SECURITY YGLRtuLAcnJycmJi0HJycnJiYuBy8nLyYmJwKnRyQicnJga3cnJycmJicCwnJycnJgZocnJycmJigCsnJycnJgaZcnKQKxZtKwnJcnJwp3JycHhycnJyYmJwmXJycnJiYnC6crFeY7ZycrFeY7ZyYmJwjnJyAAA Version der Regeln: 5.0.71 OS: Windows 6.1 Service Pack 1.0 Build: 7601 - Workstation 32bit OS Version der dll: 53604 ERUNT.exe C:\FRST\HIVES silent sysreg curuser /noconfirmdelete /noprogresswindow MD5: 2E0323A94915FAAB10A25F3BABF82584 C:\Windows\system32\cmd.exe /c ERUNT.exe C:\FRST\HIVES silent sysreg curuser /noconfirmdelete /noprogresswindow MD5: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version:12-10-2015 durchgeführt von ***** (Administrator) auf LAPTOP (13-10-2015 13:56:25) Gestartet von C:\Users\*****\Desktop Geladene Profile: ***** (Verfügbare Profile: ***** & Gast) Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (G Data Software AG) C:\Program Files\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) C:\Program Files\G DATA\TotalProtection\AVK\AVKWCtl.exe (IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_8e7d5b9d3a91d8c5\stacsv.exe (Validity Sensors, Inc.) C:\Windows\System32\vfsFPService.exe (Cisco Systems, Inc.) C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpHostW.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) C:\Program Files\G DATA\TotalProtection\AVK\AVKService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (G Data Software AG) C:\Program Files\G DATA\TotalProtection\AVKBackup\AVKBackupService.exe (Secunia) C:\Program Files\Secunia\PSI\psia.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe (G Data Software AG) C:\Program Files\G DATA\TotalProtection\AVKTray\AVKTray.exe (G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\GDKBFltExe32.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpAgent.exe (IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe (Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe (SEIKO EPSON CORPORATION) C:\Program Files\EPSON Software\Event Manager\EEventManager.exe (G DATA Software AG) C:\Program Files\G DATA\TotalProtection\Firewall\GDFirewallTray.exe (Citrix Systems, Inc.) C:\Users\*****\AppData\Local\Citrix\ICA Client\concentr.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (BillP Studios) C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe (Secure Banking) C:\Program Files\Secure Banking\SecureBanking.exe (SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\w32x86\3\E_TATIHTU.EXE (Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Citrix Systems, Inc.) C:\Users\*****\AppData\Local\Citrix\ICA Client\wfcrun32.exe (Secunia) C:\Program Files\Secunia\PSI\psi_tray.exe () C:\Program Files\Secure Banking\sbservice.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Secunia) C:\Program Files\Secunia\PSI\sua.exe (G Data Software AG) C:\Program Files\G DATA\TotalProtection\Firewall\GDFwSvc.exe (Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe (Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe (G DATA Software AG) C:\Program Files\G DATA\TotalProtection\GUI\GDSC.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe (G Data Software AG) C:\Program Files\G DATA\TotalProtection\AVK\AVK.exe (Microsoft Corporation) C:\Windows\System32\prevhost.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation) C:\Windows\System32\taskmgr.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [] => [X] HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1316136 2008-06-20] (Synaptics, Inc.) HKLM\...\Run: [DpAgent] => C:\Program Files\DigitalPersona\Bin\dpagent.exe [842816 2009-04-17] (DigitalPersona, Inc.) HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [458844 2009-07-21] (IDT, Inc.) HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard) HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [60688 2015-09-15] (Apple Inc.) HKLM\...\Run: [EEventManager] => C:\Program Files\Epson Software\Event Manager\EEventManager.exe [979328 2010-10-12] (SEIKO EPSON CORPORATION) HKLM\...\Run: [GDFirewallTray] => C:\Program Files\G DATA\TotalProtection\Firewall\GDFirewallTray.exe [1864312 2015-06-16] (G DATA Software AG) HKLM\...\Run: [ConnectionCenter] => C:\Users\*****\AppData\Local\Citrix\ICA Client\concentr.exe [103768 2009-09-13] (Citrix Systems, Inc.) HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2015-08-06] (Apple Inc.) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157456 2015-09-15] (Apple Inc.) HKLM\...\Winlogon: [Userinit] C:\Windows\System32\Userinit.exe,C:\Program Files\G DATA\TotalProtection\AVKTray\AVKTray.exe,c:\program files\g data\totalprotection\avkkid\avkcks.exe HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\Run: [WinPatrol] => C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe [1128000 2014-06-03] (BillP Studios) HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\Run: [SecureBanking] => C:\Program Files\Secure Banking\SecureBanking.exe [507904 2013-06-30] (Secure Banking) HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_TATIHTU.EXE [220800 2014-12-20] (SEIKO EPSON CORPORATION) HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\MountPoints2: {21f6d865-1543-11e0-bda8-00238b327113} - F:\.\Autorun.exe AUTORUN=1 HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\MountPoints2: {5fbe7ff5-8b09-11e0-a66f-001167b9d20a} - G:\AutoRun.exe HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\MountPoints2: {5fbe8005-8b09-11e0-a66f-001167b9d20a} - G:\AutoRun.exe HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\MountPoints2: {9b0eb52d-a5b7-11e1-a46e-001167b9d20a} - G:\install-tl.bat Lsa: [Notification Packages] scecli DPPWDFLT Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2012-07-09] ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2014-06-28] ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files\Secunia\PSI\psi_tray.exe (Secunia) Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk [2015-05-25] ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) BootExecute: autocheck autochk * bddel.exe CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 Tcpip\..\Interfaces\{34A61A64-7F90-4FE5-82C8-6FF9580B7146}: [DhcpNameServer] 8.8.8.8 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-117767610-4170920979-3955755671-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-117767610-4170920979-3955755671-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp URLSearchHook: HKU\S-1-5-21-117767610-4170920979-3955755671-1000 - (Kein Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} - Keine Datei SearchScopes: HKLM -> DefaultScope Wert fehlt SearchScopes: HKU\S-1-5-21-117767610-4170920979-3955755671-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=SKY2DF&PC=SKY2&q={searchTerms}&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-117767610-4170920979-3955755671-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=SKY2DF&PC=SKY2&q={searchTerms}&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-117767610-4170920979-3955755671-1000 -> {C3F162DB-0DE1-45D9-B94C-89F5253561B0} URL = hxxp://www.google.de/search?q={searchTerms} BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-23] (Hewlett-Packard Co.) BHO: RealPlayer Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2012-05-18] (RealPlayer) BHO: DigitalPersona Personal Extension -> {395610AE-C624-4f58-B89E-23733EA00F9A} -> C:\Program Files\DigitalPersona\Bin\DpOtsPluginIe8.dll [2009-04-17] (DigitalPersona, Inc.) BHO: SwissAcademic.Citavi.Picker.IEPicker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation) BHO: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems Incorporated) BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10] (Skype Technologies S.A.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO: NJStarBHO Class -> {E74F179F-F6CC-4BE0-9638-DEA49583953F} -> C:\Program Files\NJStar Communicator\NJStarBHO32.dll [2011-05-26] (NJStar Software Corp.) BHO: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems Incorporated) BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-23] (Hewlett-Packard Co.) Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems Incorporated) Toolbar: HKU\.DEFAULT -> Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems Incorporated) Toolbar: HKU\S-1-5-21-117767610-4170920979-3955755671-1000 -> Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems Incorporated) DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab DPF: {CAFEEFAC-0017-0000-0060-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10] (Skype Technologies S.A.) FireFox: ======== FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default FF SearchEngineOrder.3: Bing FF SelectedSearchEngine: Bing FF Homepage: hxxp://www.helpuu.com/ FF Session Restore: -> ist aktiviert. FF Keyword.URL: hxxp://www.bing.com/search?FORM=SKY2DF&PC=SKY2&q= FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-10-13] () FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] () FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google) FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei] FF Plugin: @real.com/nppl3260;version=15.0.4.53 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll [2012-05-18] (RealNetworks, Inc.) FF Plugin: @real.com/nprjplug;version=15.0.4.53 -> c:\program files\real\realplayer\Netscape6\nprjplug.dll [2012-05-18] (RealNetworks, Inc.) FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-05-18] (RealNetworks, Inc.) FF Plugin: @real.com/nprphtml5videoshim;version=15.0.4.53 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-05-18] (RealNetworks, Inc.) FF Plugin: @real.com/nprpplugin;version=15.0.4.53 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll [2012-05-18] (RealPlayer) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-21] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-21] (Google Inc.) FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin: @wacom.com/wacom-plugin,version=1.1.0.10 -> C:\Program Files\TabletPlugins\npwacom.dll [2011-04-20] (Wacom, Inc.) FF Plugin: @wacom.com/wtPlugin,version=2.0.0.1 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2011-05-31] (Wacom) FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll [2013-05-08] (Adobe Systems Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-117767610-4170920979-3955755671-1000: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2011-05-31] (Wacom) FF user.js: detected! => C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\user.js [2015-04-07] FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\CCMSDK.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\cgpcfg.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\CgpCore.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\confmgr.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\ctxlogging.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\ctxmui.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\icafile.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\icalogon.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npicaN.dll [2009-09-13] () FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2015-06-29] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2012-05-18] (RealNetworks, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2015-09-01] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2015-09-01] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2015-09-01] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2015-09-01] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2015-09-01] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprjplug.dll [2012-05-18] (RealNetworks, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpplugin.dll [2012-05-18] (RealPlayer) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\sslsdk_b.dll [2009-08-14] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\TcpPServ.dll [2009-09-13] (Citrix Systems, Inc.) FF SearchPlugin: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\searchplugins\bing-.xml [2015-03-12] FF Extension: FireShot - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} [2015-06-18] FF Extension: SafeFinder Smartbar - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{167a2a7f-a817-09f9-4854-a1f882132afd} [2014-07-24] FF Extension: EPUBReader - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F} [2015-05-28] FF Extension: DownThemAll! AntiContainer - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\anticontainer@downthemall.net.xpi [2011-05-12] FF Extension: NetTock - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\firefox@nettock.com.xpi [2014-07-21] FF Extension: 1-Click YouTube Video Downloader - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2013-10-28] FF Extension: NoScript - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-06-28] FF Extension: Video DownloadHelper - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2015-03-14] FF Extension: Adblock Plus - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-05-15] FF Extension: DownThemAll! - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2011-05-12] FF Extension: Greasemonkey - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2012-08-27] FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-09-23] FF Extension: Kein Name - C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2015-09-23] FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-12-11] FF HKLM\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files\DigitalPersona\Bin\FirefoxExt FF Extension: DigitalPersona Extension - C:\Program Files\DigitalPersona\Bin\FirefoxExt [2010-12-11] FF HKLM\...\Firefox\Extensions: [{A6629839-6636-4998-95D6-2B0F52141861}] - C:\Program Files\Social Grammar Checker\Firefox FF Extension: SGC - C:\Program Files\Social Grammar Checker\Firefox [2011-12-21] FF HKLM\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2012-05-15] FF HKLM\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-05-18] FF HKLM\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdwteff => nicht gefunden FF HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files\DigitalPersona\Bin\firefoxext FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-09-14] Chrome: ======= CHR Profile: C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (SGC) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdmjeclekijlogbipdlifcmgoanoemm [2012-05-18] CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2011-11-02] CHR Extension: (NJStar Chromate - NJStar Communicator Plugin for Chrome) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlklhlmekdhcfmndodpbjmgpepoeiiaf [2012-05-18] CHR Extension: (Skype Click to Call) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-05-18] CHR Extension: (Norton Identity Protection) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2012-05-18] CHR HKLM\...\Chrome\Extension: [dhdmjeclekijlogbipdlifcmgoanoemm] - C:\Program Files\Social Grammar Checker\source.crx [2011-12-21] CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2012-05-18] CHR HKLM\...\Chrome\Extension: [jlklhlmekdhcfmndodpbjmgpepoeiiaf] - C:\Program Files\NJStar Communicator\PLUGIN\NJChromate-3.0.2.crx [2011-05-26] CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-10-10] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AVKProxy; C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe [2558072 2015-06-19] (G Data Software AG) R2 AVKService; C:\Program Files\G DATA\TotalProtection\AVK\AVKService.exe [966776 2015-06-16] (G Data Software AG) R2 AVKWCtl; C:\Program Files\G DATA\TotalProtection\AVK\AVKWCtl.exe [2907776 2015-06-16] (G Data Software AG) S2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64624 2014-04-29] (CyberGhost S.R.L) R2 DpHost; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [322624 2009-04-17] (DigitalPersona, Inc.) [Datei ist nicht signiert] S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2010-12-11] (Macrovision Europe Ltd.) [Datei ist nicht signiert] R2 GDBackupSvc; C:\Program Files\G DATA\TotalProtection\AVKBackup\AVKBackupService.exe [3894392 2015-06-19] (G Data Software AG) R3 GDFwSvc; C:\Program Files\G DATA\TotalProtection\Firewall\GDFwSvc.exe [2550896 2015-06-19] (G Data Software AG) R3 GDScan; C:\Program Files\Common Files\G Data\GDScan\GDScan.exe [789624 2015-06-16] (G Data Software AG) S3 GDTunerSvc; C:\Program Files\G DATA\TotalProtection\AVKTuner\AVKTunerService.exe [2235512 2015-06-16] (G Data Software AG) S3 HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [121344 2010-06-30] (Hewlett-Packard Company) [Datei ist nicht signiert] R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-23] (Hewlett-Packard Co.) [Datei ist nicht signiert] R3 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-23] (Hewlett-Packard Co.) [Datei ist nicht signiert] R3 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [694784 2009-09-23] (Hewlett-Packard Co.) [Datei ist nicht signiert] S3 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert] R3 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert] R2 Secunia PSI Agent; C:\Program Files\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia) R2 Secunia Update Agent; C:\Program Files\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia) R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_8e7d5b9d3a91d8c5\STacSV.exe [221266 2009-07-21] (IDT, Inc.) S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert] S3 TSNxGService; C:\Program Files\G DATA\TotalProtection\TSNxG\TSNxGService.exe [255608 2014-07-01] (G DATA Software) R2 vpnagent; C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe [558480 2013-10-10] (Cisco Systems, Inc.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation) S3 SGC Updater; C:\Program Files\Social Grammar Checker\ExtensionUpdaterService.exe [X] ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 acsock; C:\Windows\System32\DRIVERS\acsock.sys [92528 2013-10-10] (Cisco Systems, Inc.) R3 BlueletAudio; C:\Windows\System32\DRIVERS\blueletaudio.sys [34704 2007-05-11] (IVT Corporation.) R3 BlueletSCOAudio; C:\Windows\System32\DRIVERS\BlueletSCOAudio.sys [27792 2007-03-05] (IVT Corporation.) R3 BT; C:\Windows\System32\DRIVERS\btnetdrv.sys [16272 2007-05-23] (IVT Corporation.) S3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [36496 2007-05-23] (IVT Corporation.) R0 BTHidEnum; C:\Windows\System32\Drivers\vbtenum.sys [20880 2007-03-05] (IVT Corporation.) R0 BTHidMgr; C:\Windows\System32\Drivers\BTHidMgr.sys [35600 2007-03-05] (IVT Corporation.) S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [38400 2009-03-02] (Samsung Electronics Co., Ltd.) [Datei ist nicht signiert] R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-17] (Elaborate Bytes AG) R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [112640 2015-09-21] (G Data Software AG) R3 GDKBB; C:\Windows\system32\drivers\GDKBB32.sys [24192 2015-05-15] (G Data Software AG) R1 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt32.sys [20352 2015-05-15] (G Data Software AG) R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [161280 2015-09-21] (G Data Software AG) R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [73216 2015-09-21] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd32.sys [54272 2015-09-21] (G Data Software AG) R1 GRD; C:\Windows\system32\drivers\GRD.sys [29528 2015-05-23] (G Data Software) R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [87040 2015-09-21] (G Data Software AG) R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_x86.sys [16024 2013-12-06] (Secunia) S4 sptd; C:\Windows\System32\Drivers\sptd.sys [639224 2012-05-24] (Duplex Secure Ltd.) R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2009-03-02] (Samsung Electronics) [Datei ist nicht signiert] R3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project) R0 TS4NT; C:\Windows\System32\Drivers\TS4nt.sys [103928 2015-09-21] (G Data Software) R3 VComm; C:\Windows\System32\DRIVERS\VComm.sys [34448 2007-03-05] (IVT Corporation.) R3 VcommMgr; C:\Windows\System32\Drivers\VcommMgr.sys [44304 2007-03-05] (IVT Corporation.) S3 vpcbus; C:\Windows\System32\DRIVERS\vpchbus.sys [165376 2009-09-23] (Microsoft Corporation) [Datei ist nicht signiert] S3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [78336 2009-09-23] (Microsoft Corporation) [Datei ist nicht signiert] S3 vpnva; C:\Windows\System32\DRIVERS\vpnva-6.sys [43376 2013-10-10] (Cisco Systems, Inc.) S3 clwvd; system32\DRIVERS\clwvd.sys [X] S3 cpuz134; \??\C:\Users\*****\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X] S3 massfilter; system32\drivers\massfilter.sys [X] U5 TMUSB; C:\Windows\System32\DRIVERS\TMUSBXP.SYS [49408 2012-12-05] (Seiko Epson Corporation) S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X] S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X] S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-10-13 13:56 - 2015-10-13 13:57 - 00031193 _____ C:\Users\*****\Desktop\FRST.txt 2015-10-13 13:51 - 2015-10-13 13:52 - 00000000 ____D C:\Users\*****\Desktop\TrojanBoard 2015-10-13 13:46 - 2015-10-13 13:56 - 00000000 ____D C:\FRST 2015-10-13 13:44 - 2015-10-13 13:44 - 01699840 _____ (Farbar) C:\Users\*****\Desktop\FRST.exe 2015-10-13 13:42 - 2015-10-13 13:43 - 00000020 _____ C:\Users\*****\defogger_reenable 2015-09-27 23:17 - 2015-09-27 23:17 - 00002159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015.lnk 2015-09-27 23:17 - 2015-09-27 23:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015 2015-09-27 23:15 - 2015-09-27 23:15 - 00000000 ____D C:\Users\*****\AppData\Roaming\AVG 2015-09-27 23:14 - 2015-09-27 23:14 - 00000000 ____D C:\Program Files\AVG 2015-09-27 23:08 - 2015-09-27 23:08 - 00000000 ____D C:\Users\*****\AppData\Local\Avg 2015-09-27 23:06 - 2015-09-27 23:06 - 00000000 ____D C:\ProgramData\AVG 2015-09-27 21:13 - 2015-09-27 21:13 - 00001795 _____ C:\Users\Public\Desktop\Recuva.lnk 2015-09-27 20:03 - 2015-09-27 20:50 - 00000000 ____D C:\Users\*****\Desktop\Konflikt Zeugs aus Papierkorb 2015-09-25 23:02 - 2015-09-25 23:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2015-09-25 22:53 - 2015-09-25 22:53 - 00000000 ____D C:\Program Files\Bonjour 2015-09-25 22:52 - 2015-09-25 22:52 - 00000000 ____D C:\Program Files\Apple Software Update 2015-09-23 18:28 - 2015-10-02 16:39 - 00000000 ____D C:\Program Files\Mozilla Firefox 2015-09-21 20:47 - 2015-09-21 20:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA TOTAL PROTECTION ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-10-13 13:51 - 2011-09-10 01:23 - 00155480 _____ C:\ProgramData\nvModes.001 2015-10-13 13:50 - 2009-07-14 06:34 - 00013472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-10-13 13:50 - 2009-07-14 06:34 - 00013472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-10-13 13:42 - 2010-12-11 12:32 - 00000000 ____D C:\Users\***** 2015-10-13 13:24 - 2012-08-13 12:17 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-10-13 13:23 - 2010-12-11 12:28 - 01824102 _____ C:\Windows\WindowsUpdate.log 2015-10-13 13:21 - 2012-04-09 01:26 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2015-10-13 13:21 - 2012-04-09 01:26 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-10-13 13:21 - 2011-08-08 23:34 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2015-10-13 13:17 - 2012-08-13 12:17 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-10-13 13:17 - 2012-05-03 20:32 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2015-10-13 13:17 - 2010-12-11 15:17 - 03253630 _____ C:\Windows\PFRO.log 2015-10-13 13:17 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-10-13 13:17 - 2009-07-14 06:39 - 00135661 _____ C:\Windows\setupact.log 2015-10-13 13:14 - 2011-12-21 12:29 - 00000000 ____D C:\Program Files\Social Grammar Checker 2015-10-13 13:10 - 2011-02-01 21:55 - 00000000 ____D C:\Users\*****\AppData\Local\CrashDumps 2015-10-12 19:09 - 2014-02-08 17:04 - 00262144 _____ C:\Windows\system32\config\elam 2015-10-11 02:33 - 2010-12-11 12:36 - 01629284 _____ C:\Windows\system32\PerfStringBackup.INI 2015-10-08 17:58 - 2015-07-03 12:33 - 00000421 _____ C:\Users\*****\Desktop\Plan Arbeitssuche.txt 2015-10-08 12:50 - 2012-05-28 17:36 - 00000000 ____D C:\Users\*****\AppData\Roaming\vlc 2015-10-08 12:49 - 2013-09-23 14:40 - 00000000 ____D C:\Users\*****\dwhelper 2015-09-27 23:36 - 2013-06-28 22:21 - 00000000 ____D C:\Program Files\Recuva 2015-09-25 23:02 - 2014-06-28 23:00 - 00030703 _____ C:\Windows\SecuniaPackage.log 2015-09-25 23:01 - 2011-10-07 18:18 - 00000000 ____D C:\Program Files\iTunes 2015-09-25 23:01 - 2011-10-07 18:18 - 00000000 ____D C:\Program Files\iPod 2015-09-25 23:01 - 2010-12-11 15:53 - 00000000 ____D C:\Program Files\Common Files\Apple 2015-09-25 22:52 - 2010-12-11 15:54 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2015-09-23 14:19 - 2012-05-15 13:47 - 00000000 ____D C:\Users\*****\Documents\Citavi 3 2015-09-23 14:17 - 2013-05-21 13:10 - 00000000 ____D C:\Users\*****\AppData\Roaming\TeamDrive3 2015-09-23 13:54 - 2010-12-11 22:45 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR 2015-09-21 20:47 - 2015-05-15 19:32 - 00103928 _____ (G Data Software) C:\Windows\system32\Drivers\TS4nt.sys 2015-09-21 20:47 - 2015-05-15 19:32 - 00073216 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys 2015-09-21 20:46 - 2015-05-15 19:31 - 00161280 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys 2015-09-21 20:46 - 2015-05-15 19:31 - 00112640 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys 2015-09-21 20:46 - 2015-05-15 19:31 - 00087040 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys 2015-09-21 20:46 - 2015-05-15 19:31 - 00054272 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd32.sys 2015-09-21 20:45 - 2010-12-11 14:37 - 00051154 _____ C:\Windows\DPINST.LOG 2015-09-13 22:31 - 2015-06-07 20:49 - 00000000 __SHD C:\#GDATA.Recovery.Data# ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2011-07-08 00:24 - 2014-01-27 15:16 - 0000132 _____ () C:\Users\*****\AppData\Roaming\Adobe GIF Format CS5 Prefs 2011-02-01 23:30 - 2014-01-27 15:21 - 0000132 _____ () C:\Users\*****\AppData\Roaming\Adobe PNG Format CS5 Prefs 2015-05-15 19:31 - 2015-05-15 19:31 - 0000000 _____ () C:\Users\*****\AppData\Roaming\gdfw.log 2015-05-15 19:30 - 2015-05-15 19:31 - 0000779 _____ () C:\Users\*****\AppData\Roaming\gdscan.log 2012-08-27 23:42 - 2012-08-28 03:14 - 0000116 _____ () C:\Users\*****\AppData\Roaming\history.PDF.pwcdat 2012-04-16 01:03 - 2012-04-16 01:03 - 0000066 _____ () C:\Users\*****\AppData\Local\MODup-Log.txt 2011-01-04 23:53 - 2011-01-06 17:29 - 0001474 _____ () C:\Users\*****\AppData\Local\RecConfig.xml 2012-06-18 14:17 - 2012-06-18 14:17 - 0007605 _____ () C:\Users\*****\AppData\Local\Resmon.ResmonCfg 2011-04-20 09:13 - 2011-04-20 09:13 - 2522934 _____ () C:\Users\*****\AppData\Local\[j0003]-[p09].bmp 2015-03-05 23:25 - 2015-03-05 23:25 - 0263691 _____ () C:\ProgramData\1425590022.bdinstall.bin 2010-12-12 19:39 - 2010-12-12 19:39 - 0000048 ____H () C:\ProgramData\ezsidmv.dat 2010-12-11 14:07 - 2012-12-07 02:17 - 0005057 _____ () C:\ProgramData\hpzinstall.log 2011-09-10 01:23 - 2015-10-13 13:51 - 0155480 _____ () C:\ProgramData\nvModes.001 2011-09-09 23:03 - 2012-06-15 20:14 - 0155480 _____ () C:\ProgramData\nvModes.dat ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-10-08 14:45 ==================== Ende vom FRST.txt ============================ Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:12-10-2015 durchgeführt von ***** (2015-10-13 13:58:33) Gestartet von C:\Users\*****\Desktop Microsoft Windows 7 Professional Service Pack 1 (X86) (2010-12-11 10:32:28) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-117767610-4170920979-3955755671-500 - Administrator - Disabled) Gast (S-1-5-21-117767610-4170920979-3955755671-501 - Limited - Disabled) => C:\Users\Gast HomeGroupUser$ (S-1-5-21-117767610-4170920979-3955755671-1005 - Limited - Enabled) ***** (S-1-5-21-117767610-4170920979-3955755671-1000 - Administrator - Enabled) => C:\Users\***** ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: G DATA TOTAL PROTECTION (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0} AS: G DATA TOTAL PROTECTION (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: G*DATA Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) 32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden 7-Zip 9.20 (HKLM\...\7-Zip) (Version: - ) 8500A909_eDocs (Version: 1.00.0000 - Hewlett-Packard) Hidden 8500A909_Help (Version: 1.00.0000 - Hewlett-Packard) Hidden 8500A909a (Version: 50.0.165.000 - Hewlett-Packard) Hidden ActiveCheck component for HP Active Support Library (Version: 3.0.0.3 - Hewlett-Packard) Hidden Adobe Acrobat 9 Pro - English, Français, Deutsch (HKLM\...\{AC76BA86-1033-F400-7760-000000000004}{AC76BA86-1033-F400-7760-000000000004}) (Version: 9.5.5 - Adobe Systems) Adobe Acrobat 9.5.5 - CPSID_83708 (HKLM\...\{AC76BA86-1033-F400-7760-000000000004}_955) (Version: - Adobe Systems Incorporated) Adobe AIR (HKLM\...\Adobe AIR) (Version: 19.0.0.190 - Adobe Systems Incorporated) Adobe Community Help (HKLM\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated) Adobe Digital Editions 2.0 (HKLM\...\Adobe Digital Editions 2.0) (Version: 2.0.1 - Adobe Systems Incorporated) Adobe Flash Player 18 ActiveX (HKLM\...\{A4488E5C-1022-432A-8066-72E1C4023310}) (Version: 18.0.0.232 - Adobe Systems Incorporated) Adobe Flash Player 19 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated) Adobe Media Player (HKLM\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated) Adobe Reader XI (11.0.12) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated) AIO_CDA_ProductContext (Version: 130.0.365.000 - Hewlett-Packard) Hidden AIO_CDA_Software (Version: 130.0.365.000 - Hewlett-Packard) Hidden AIO_Scan (Version: 130.0.365.000 - Hewlett-Packard) Hidden Amazon Kindle (HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\Amazon Kindle) (Version: - Amazon) Amazon Send to Kindle (HKLM\...\SendToKindle) (Version: 1.0.1.237 - Amazon) AMP WinOFF 5.0.1 (HKLM\...\AMP WinOFF) (Version: 5.0.1 - Alberto Martinez Perez) Apple Application Support (32-Bit) (HKLM\...\{3540ADD5-822B-47FB-B1C2-CD7B2C8E9FEC}) (Version: 4.0.2 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{A75CA58D-DB9C-4D14-9428-E0C7B0F623DC}) (Version: 9.0.0.26 - Apple Inc.) Apple Software Update (HKLM\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.) AppSafe (HKLM\...\AppSafe) (Version: 1 - AppSafe) <==== ACHTUNG AVG PC TuneUp 2015 (de-DE) (Version: 15.0.1001.638 - AVG Technologies) Hidden Bamboo (HKLM\...\Pen Tablet Driver) (Version: 5.2.5-5 - Wacom Technology Corp.) Bamboo Dock (HKLM\...\Bamboo Dock) (Version: 4.0 - Wacom Co., Ltd.) Bamboo Dock (Version: 4.1.0 - Wacom Europe GmbH) Hidden Bamboo Tablets Tutorial (Version: 3.0.20 - Wacom) Hidden Benutzerhandbuch EPSON BX535WD Series (HKLM\...\EPSON BX535WD Series Useg) (Version: - ) Bluesoleil2.6.0.9 Release 070606 (HKLM\...\{846AC73B-9394-48B9-B941-8F7F472F0047}) (Version: 2.6.0.9 Release 070606 - IVT Corporation) BoneLab (HKLM\...\{D16CBD59-07B3-4F98-A404-01B6D87A90F2}) (Version: 1.4.0.5 - Next Dimension Imaging) Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.) BPD_DSWizards (Version: 1.00.0000 - Hewlett-Packard) Hidden bpd_scan (Version: 3.00.0000 - Hewlett-Packard) Hidden BPDSoftware (Version: 50.0.165.000 - Hewlett-Packard) Hidden BPDSoftware_Ini (Version: 1.00.0000 - Hewlett-Packard) Hidden Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.18.12 - Broadcom Corporation) BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden C3100 (Version: 130.0.365.000 - Hewlett-Packard) Hidden c3100_Help (Version: 82.0.256.000 - Hewlett-Packard) Hidden calibre (HKLM\...\{F194B9D2-5BB0-4A36-912A-861DE0652181}) (Version: 1.23.0 - Kovid Goyal) Cisco AnyConnect Secure Mobility Client (HKLM\...\Cisco AnyConnect Secure Mobility Client) (Version: 3.1.04072 - Cisco Systems, Inc.) Cisco AnyConnect Secure Mobility Client (Version: 3.1.04072 - Cisco Systems, Inc.) Hidden Citavi (HKLM\...\{E12C6653-1FF0-4686-ADB8-589C13AE761F}) (Version: 3.4.0.2 - Swiss Academic Software) Citrix Online Plug-in - Web (HKLM\...\CitrixOnlinePluginPackWeb) (Version: 11.2.0.31560 - Citrix Systems, Inc.) Citrix Presentation Server Client - Nur Web (HKLM\...\{E9459BCF-0982-498B-ABA7-26C34323493F}) (Version: 10.200.2650 - Citrix Systems, Inc.) Consideo Modeler - Consideo GmbH (HKLM\...\ConsideoModeler) (Version: - ) Copy (Version: 130.0.428.000 - Hewlett-Packard) Hidden CyberGhost 5 (HKLM\...\CyberGhost 5_is1) (Version: - CyberGhost S.R.L.) Destinations (Version: 140.0.77.000 - Hewlett-Packard) Hidden DeviceDiscovery (Version: 130.0.465.000 - Hewlett-Packard) Hidden DigitalPersona Personal 4.01 (HKLM\...\{8D4B1164-3935-44B2-9152-D0CB0AFBCCF4}) (Version: 4.01.3749 - DigitalPersona, Inc.) DocMgr (Version: 130.0.000.000 - Ihr Firmenname) Hidden DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden Download Navigator (HKLM\...\{2E214231-5FAD-410A-AF5D-99AAB8558434}) (Version: 2.1.0 - SEIKO EPSON CORPORATION) EPSON BX535WD Series Printer Uninstall (HKLM\...\EPSON BX535WD Series) (Version: - SEIKO EPSON Corporation) Epson Event Manager (HKLM\...\{FA9D303D-0FB2-49C7-9397-8E6B11EA892D}) (Version: 2.50.0001 - SEIKO EPSON CORPORATION) EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation) EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4j - SEIKO EPSON CORPORATION) Fax (Version: 130.0.418.000 - Hewlett-Packard) Hidden Free Video Flip and Rotate version 2.1.1.719 (HKLM\...\Free Video Flip and Rotate_is1) (Version: 2.1.1.719 - DVDVideoSoft Ltd.) Free YouTube to MP3 Converter version 3.9.35.324 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: - DVDVideoSoft Limited.) G DATA TOTAL PROTECTION (HKLM\...\{2A1FF304-D778-49F1-B340-E4BF4CDA2EB0}) (Version: 25.1.0.8 - G DATA Software AG) Google Earth Plug-in (HKLM\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (Version: 1.3.28.15 - Google Inc.) Hidden GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden HP Advisor (HKLM\...\{B53E61D7-7C80-40DF-82D2-CF5390D6D20A}) (Version: 3.2.9652.3188 - Hewlett-Packard) HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP) HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP) HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP) HP Photosmart All-In-One Driver Software 13.0 Rel. A (HKLM\...\{17016DA1-F040-4032-BD36-34DD317BC9D5}) (Version: 13.0 - HP) HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP) HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP) HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HPAsset component for HP Active Support Library (Version: 3.0.0.3 - Hewlett-Packard) Hidden HPPhotoGadget (Version: 130.0.282.000 - Hewlett-Packard) Hidden HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden iDevice Manager (HKLM\...\FE5AE7DC-7B01-4263-A94C-B4526C276550_is1) (Version: 4.7.1.0 - Marx Software) IDT Audio (HKLM\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6225.0 - IDT) iStonsoft iPad iPod iPhone Data Recovery (HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\iStonsoft iPad iPod iPhone Data Recovery) (Version: 2.1.31 - iStonsoft) iTunes (HKLM\...\{9E9CFD9F-64D6-498F-8584-E5CD08BA60BE}) (Version: 12.3.0.44 - Apple Inc.) Java 8 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation) JMicron JMB38X Flash Media Controller (HKLM\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.00.18.07 - JMicron Technology Corp.) Joe (HKLM\...\{0AD3DEBC-5321-457E-8B43-8F546940169B}) (Version: 4.00.0050 - Wirth IT Design) LandOnline Client Components (HKLM\...\LandOnline Client Components) (Version: 1.0 - Land Information NZ) Livebrush Mini (HKLM\...\com.livebrush.2205ABAA7E8202CDC1251B1FA1E879364B7BAB52.1) (Version: 1.5 - MoreMeYou) Livebrush Mini (Version: 1.5 - MoreMeYou) Hidden Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) MarketResearch (Version: 130.0.374.000 - Hewlett-Packard) Hidden MediaMonkey 4.1 (HKLM\...\MediaMonkey_is1) (Version: 4.1 - Ventis Media Inc.) Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft IntelliPoint 7.1 (HKLM\...\{7057ABC2-EFF3-4E43-9806-8BCB6EEA9FE6}) (Version: 7.10.344.0 - Microsoft) Microsoft IntelliType Pro 8.2 (HKLM\...\Microsoft IntelliType Pro 8.2) (Version: 8.20.469.0 - Microsoft Corporation) Microsoft Office Professional 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Sync Framework 2.0 Core Components (x86) ENU (HKLM\...\{FF63121D-91C6-42CC-B341-F1AA729728E7}) (Version: 2.0.1578.0 - Microsoft Corporation) Microsoft Sync Framework 2.0 Provider Services (x86) ENU (HKLM\...\{D3A80508-CD83-4CA3-8671-914A1BC78B61}) (Version: 2.0.1578.0 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mobile Partner (HKLM\...\Mobile Partner) (Version: 11.030.01.26.75 - Huawei Technologies Co.,Ltd) MoodTuner (HKLM\...\com.gugga.radiomini) (Version: 1.1 - GUGA EOOD) MoodTuner (Version: 1.1 - GUGA EOOD) Hidden Mozilla Firefox 41.0.1 (x86 de) (HKLM\...\Mozilla Firefox 41.0.1 (x86 de)) (Version: 41.0.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 41.0.1.5750 - Mozilla) MPM (HKLM\...\{CD8C5C7F-7C58-4F85-8977-A6C08C087912}) (Version: 1.00.0000 - Hewlett-Packard) MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Network (Version: 130.0.579.000 - Hewlett-Packard) Hidden Netzwerkhandbuch EPSON BX535WD Series (HKLM\...\EPSON BX535WD Series Netg) (Version: - ) NirSoft BlueScreenView (HKLM\...\NirSoft BlueScreenView) (Version: - ) NJStar Communicator (HKLM\...\NJStar Communicator) (Version: 3.00 - NJStar Software Corp.) Nokia Connectivity Cable Driver (HKLM\...\{4AA68A73-DB9C-439D-9481-981C82BD008B}) (Version: 7.1.69.0 - Nokia) Nokia PC Suite (HKLM\...\Nokia PC Suite) (Version: 7.1.180.64 - Nokia) Nokia PC Suite (Version: 7.1.180.64 - Nokia) Hidden NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: - ) OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP) Officejet Pro 8500 A909 Series (HKLM\...\{D850BEF5-67AF-4071-9538-FA9AC725D62C}) (Version: 13.0 - HP) OpenOffice.org 3.3 (HKLM\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org) Oracle VM VirtualBox 4.1.12 (HKLM\...\{BD2DF5E1-0B64-40EB-93CC-77F984ADB408}) (Version: 4.1.12 - Oracle Corporation) PC Connectivity Solution (HKLM\...\{A2AA4204-C05A-4013-888A-AD153139297F}) (Version: 11.5.29.0 - Nokia) PDF Settings CS5 (Version: 10.0 - Adobe Systems Incorporated) Hidden ProductContext (Version: 50.0.165.000 - Hewlett-Packard) Hidden QuickTime 7 (HKLM\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.) RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden RealPlayer (HKLM\...\RealPlayer 15.0) (Version: 15.0.4 - RealNetworks) Realtek USB 2.0 Card Reader (HKLM\...\{DC24971E-1946-445D-8A82-CE685433FA7D}) (Version: 3.0.1.3 - Realtek Semiconductor Corp.) RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden Recuva (HKLM\...\Recuva) (Version: 1.52 - Piriform) Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) Safari (HKLM\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.) Samsung ML-1510_700 Series (HKLM\...\Samsung ML-1510_700 Series) (Version: - ) Samsung_MonSetup (HKLM\...\{8EA79DBF-D637-448A-89D6-410A087A4493}) (Version: 1.00.0000 - Samsung) Scan (Version: 140.0.80.000 - Hewlett-Packard) Hidden Secunia PSI (3.0.0.9016) (HKLM\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia) Secure Banking Version 1.5.2 (HKLM\...\{0BEE0AF9-79F3-4C4F-B374-90C0A16BF294}_is1) (Version: 1.5.2 - Hopfgartner Niklas) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) SGC 2.0.1.250 (HKLM\...\{A6629839-6636-4998-95D6-2B0F52141861}_is1) (Version: - Bitcoktail) <==== ACHTUNG Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.6.8442 - Skype Technologies S.A.) Skype™ 7.2 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.2.103 - Skype Technologies S.A.) SmartWebPrinting (Version: 130.0.457.000 - Hewlett-Packard) Hidden SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden Status (Version: 130.0.469.000 - Hewlett-Packard) Hidden SyncToy 2.1 (x86) (HKLM\...\{A066194B-DC8F-449A-8E0F-B57BDD3A2072}) (Version: 2.1.0 - Microsoft) TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - ) TeamDrive 3 (HKLM\...\TeamDrive 3) (Version: 3.1.0.316 - TeamDrive Systems GmbH) TeX Live 2011 (HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\TeXLive2011) (Version: 2011 - ) Texmaker (HKLM\...\Texmaker) (Version: - ) Toolbox (Version: 130.0.648.000 - Hewlett-Packard) Hidden TrayApp (Version: 130.0.422.000 - Hewlett-Packard) Hidden Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version: - ) UniPrint Client 4.0 (HKLM\...\{50A7D603-B3DD-48C1-A518-486B2EDFFA3F}) (Version: 4.0.6 - UniPrint, a division of GFI Business Solutions Inc.) UnloadSupport (Version: 11.0.0 - Hewlett-Packard) Hidden v2010.build.42 (HKLM\...\{B93DCF58-AA57-41EC-8D69-B05C66C6312D}_is1) (Version: v2010.build.42 - eRightSoft) Validity Sensors software (HKLM\...\{F65B8208-5221-43D9-AA12-DDEA64EC4AF6}) (Version: 2.8.116 - Validity Sensors, Inc.) VirtualCloneDrive (HKLM\...\VirtualCloneDrive) (Version: - Elaborate Bytes) VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN) WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden WebTablet FB Plugin (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.0.0.1 - Wacom Technology Corp.) WebTablet IE Plugin (HKLM\...\Wacom WebTabletPlugin for IE) (Version: 1.1.0.12 - Wacom Technology Corp.) WebTablet Netscape Plugin (HKLM\...\Wacom WebTabletPlugin for Netscape) (Version: 1.1.0.10 - Wacom Technology Corp.) Windows-Treiberpaket - Nokia Modem (02/25/2011 4.7) (HKLM\...\E0AC723A3DE3A04256288CADBBB011B112AED454) (Version: 02/25/2011 4.7 - Nokia) Windows-Treiberpaket - Nokia Modem (02/25/2011 7.01.0.9) (HKLM\...\72A50F48CC5601190B9C4E74D81161693133E7F7) (Version: 02/25/2011 7.01.0.9 - Nokia) Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0) (HKLM\...\504244733D18C8F63FF584AEB290E3904E791693) (Version: 08/22/2008 7.0.0.0 - Nokia) WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 31.0.2014.0 - BillP Studios) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\ProgramData\Skype Extras\ezPMUtils.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{092dfa86-5807-5a94-bf3b-5a53ba9e5308}\InprocServer32 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{1EFF7739-9BDA-4295-BC07-383554CAAC84}\InprocServer32 -> C:\Users\*****\AppData\Local\Citrix\ICA Client\CCMProxy.dll (Citrix Systems, Inc.) CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{238F6F83-B8B4-11CF-8771-00A024541EE3}\InprocServer32 -> C:\Users\*****\AppData\Local\Citrix\ICA Client\Wfica.ocx (Citrix Systems, Inc.) CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{238F6F85-B8B4-11CF-8771-00A024541EE3}\InprocServer32 -> C:\Users\*****\AppData\Local\Citrix\ICA Client\Wfica.ocx (Citrix Systems, Inc.) CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\ProgramData\Skype Extras\ezPMUtils.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{D085A4AB-CAB1-4729-9DF8-FCEEDDBD19E4}\localserver32 -> C:\Users\*****\AppData\Local\Citrix\ICA Client\wfcrun32.exe (Citrix Systems, Inc.) CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{D0D38C6E-BF64-4C42-840D-3E0019D9F7A6}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => Keine Datei ==================== Wiederherstellungspunkte ========================= 21-07-2015 14:40:01 Geplanter Prüfpunkt 26-09-2015 10:16:36 Geplanter Prüfpunkt 27-09-2015 23:09:05 AVG PC TuneUp 2015 wird installiert ==================== Hosts Inhalt: ========================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2012-04-26 11:39 - 2014-11-05 21:36 - 00444869 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 1000gratisproben.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 1001namen.com 127.0.0.1 www.1001namen.com 127.0.0.1 www.100888290cs.com 127.0.0.1 100888290cs.com 127.0.0.1 100sexlinks.com 127.0.0.1 www.100sexlinks.com 127.0.0.1 www.10sek.com 127.0.0.1 10sek.com 127.0.0.1 1-2005-search.com 127.0.0.1 www.1-2005-search.com 127.0.0.1 www.123fporn.info 127.0.0.1 123fporn.info 127.0.0.1 www.123haustiereundmehr.com 127.0.0.1 123haustiereundmehr.com 127.0.0.1 www.123moviedownload.com Da befinden sich 15300 zusätzliche Einträge. ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {01A58B17-9994-4F84-9B8A-788B88D86081} - System32\Tasks\{C2FA0599-B043-4F27-9276-365D7402AD4B} => pcalua.exe -a "C:\Program Files\RelevantKnowledge\rlvknlg.exe" -c -bootremove -uninst:RelevantKnowledge Task: {04DA8095-7A2E-4947-93B6-AA3DC01EA294} - System32\Tasks\{4F687082-90D4-4BF6-B8B1-6A47C975F70A} => pcalua.exe -a C:\Users\*****\Desktop\HP\sp45499.exe -d C:\Users\*****\Desktop\HP Task: {0A27E96C-F7CA-4B6F-A081-4E0D6C934EB1} - System32\Tasks\{A9AF9DF9-8AB4-4780-B05C-845F3A4F7F80} => pcalua.exe -a C:\Users\*****\Desktop\HP\sp41701.exe -d C:\Users\*****\Desktop\HP Task: {226A226F-D32F-434A-9550-9B71C95A49EB} - System32\Tasks\{57A1538B-9FC1-4013-8D09-3401422AB79D} => pcalua.exe -a C:\Users\*****\Desktop\AntiTwin_Setup.exe -d C:\Users\*****\Desktop Task: {23F96337-0509-4DEB-B16A-4A882262C1CA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.) Task: {2931D861-9B82-4689-9257-D47728EFDAA4} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-117767610-4170920979-3955755671-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-04-30] (RealNetworks, Inc.) Task: {2BBECF94-610A-47AF-ADC8-A4B95626871A} - System32\Tasks\{63B728FC-7546-4B7D-99D9-65A0874A65DC} => pcalua.exe -a "C:\Users\*****\Desktop\Neuer Ordner\Epson Zeug\epson374735eu.exe" -d "C:\Users\*****\Desktop\Neuer Ordner\Epson Zeug" Task: {2C6B0F51-9EB4-44CA-A332-1371EF777A34} - System32\Tasks\ReclaimerUpdateXML_***** => C:\Users\*****\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.90\agent\rnupgagent.exe [2014-04-08] (RealNetworks, Inc.) Task: {2E880432-BE78-4708-B404-BDED3EF170F8} - System32\Tasks\{C230C231-6276-4147-BB27-0E09D78DDDC5} => pcalua.exe -a C:\Users\*****\Desktop\everest\Dictionary.exe -d C:\Users\*****\Desktop\everest Task: {3386ED1D-AF3D-438C-9E4C-4159259DE9A6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.) Task: {3560B0FF-E40C-490E-A409-C49FFBF7ECE5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-13] (Adobe Systems Incorporated) Task: {3B9DAFC3-0E82-4BC0-B323-A589D770D1D0} - System32\Tasks\Microsoft_Hardware_Launch_IType_exe => c:\Program Files\Microsoft IntelliType Pro\IType.exe [2011-08-10] (Microsoft Corporation) Task: {6EB6D0E5-3238-40AC-82DC-A1166B2ABB25} - System32\Tasks\{D430D610-1028-4E95-B527-F019589A4F36} => pcalua.exe -a C:\Users\*****\Desktop\winstger.exe -d C:\Users\*****\Desktop Task: {719AB619-BCBE-41D0-892F-0C478F8C136F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.) Task: {8B6D6D5C-D37F-4EEF-B072-5A334685E228} - System32\Tasks\{A7737EA2-A290-4226-97EE-BFCEFB607B2C} => C:\Program Files\Skype\\Phone\Skype.exe [2015-02-26] (Skype Technologies S.A.) Task: {B9952096-A45D-4B31-938A-F15AD6450873} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-117767610-4170920979-3955755671-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-04-30] (RealNetworks, Inc.) Task: {D0BDD82D-18D1-4C22-AA38-068E004B7BE8} - System32\Tasks\{2EFB6DAE-93C8-49A4-8484-23E78456EBD6} => pcalua.exe -a C:\Users\*****\Desktop\epson373094eu.exe -d C:\Users\*****\Desktop Task: {D18E9D75-7CA2-45C1-ACD8-B7F597892B83} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files\Norton Identity Safe\Engine\2014.7.0.47\SymErr.exe Task: {D5943F47-F722-48D5-B29A-54508B0B371D} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files\Norton Identity Safe\Engine\2014.7.0.47\SymErr.exe Task: {D9D185E5-4D90-4182-8E28-3D62F94E1F59} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2009-11-05] (Microsoft Corporation) Task: {F2C8252A-15AF-4ADE-A782-0A73C9303EA5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated) Task: {F6FE2553-24A4-4823-95F4-3F5DC179BBBF} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation) Task: {FF2844FF-EA07-4FF2-8E24-CD8330D2248E} - System32\Tasks\AdobeAAMUpdater-1.0-LAPTOP-***** => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2013-10-10 23:48 - 2013-10-10 23:48 - 00063376 _____ () C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll 2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2015-09-15 14:25 - 2015-09-15 14:25 - 01040144 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2014-06-30 23:25 - 2012-09-07 17:30 - 00002560 _____ () C:\Program Files\Secure Banking\sbservice.exe 2014-06-30 23:25 - 2013-06-30 17:01 - 00017920 _____ () C:\Program Files\Secure Banking\SecureBanking.dll 2014-06-30 23:25 - 2013-05-26 13:13 - 00008704 _____ () C:\Program Files\Secure Banking\funcs.dll 2015-06-16 11:17 - 2015-06-16 11:17 - 00318584 ____N () C:\Program Files\Common Files\G Data\AVKProxy\PktIcpt2.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) AlternateDataStreams: C:\ProgramData\Temp:5C321E34 AlternateDataStreams: C:\ProgramData\Temp:B1FBBD09 ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) ==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com Da befinden sich 20375 mehr eingeschränkte Seiten. ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-117767610-4170920979-3955755671-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\*****\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 8.8.8.8 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist deaktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) MSCONFIG\Services: ServiceLayer => 3 MSCONFIG\Services: SkypeUpdate => 2 MSCONFIG\Services: TabletServicePen => 2 MSCONFIG\Services: TouchServicePen => 2 MSCONFIG\startupfolder: C:^Users^*****^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk.Startup MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" MSCONFIG\startupreg: Adobe Acrobat Speed Launcher => "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" MSCONFIG\startupreg: Avira Systray => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe MSCONFIG\startupreg: BambooCore => C:\Program Files\Bamboo Dock\BambooCore.exe MSCONFIG\startupreg: Bitdefender Wallet Agent => "C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe" MSCONFIG\startupreg: Cisco AnyConnect Secure Mobility Agent for Windows => "C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" -minimized MSCONFIG\startupreg: ConnectionCenter => "C:\Users\*****\AppData\Local\Citrix\ICA Client\concentr.exe" /startup MSCONFIG\startupreg: ICQ => "C:\Program Files\ICQ7.4\ICQ.exe" silent loginmode=4 MSCONFIG\startupreg: InstallerLauncher => "C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\Installer.exe" MSCONFIG\startupreg: IntelliPoint => "C:\Program Files\Microsoft IntelliPoint\ipoint.exe" MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe" MSCONFIG\startupreg: itype => "c:\Program Files\Microsoft IntelliType Pro\itype.exe" MSCONFIG\startupreg: msnmsgr => "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background MSCONFIG\startupreg: NvCplDaemon => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup MSCONFIG\startupreg: NvMediaCenter => RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit MSCONFIG\startupreg: PC Suite Tray => "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe" MSCONFIG\startupreg: SwitchBoard => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe MSCONFIG\startupreg: TkBellExe => "C:\Program Files\Real\RealPlayer\update\realsched.exe" -osboot MSCONFIG\startupreg: UniPrint => C:\Users\*****\AppData\Local\UniPrint\Client\SetDfltSettings.exe MSCONFIG\startupreg: VeohPlugin => "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" MSCONFIG\startupreg: VirtualCloneDrive => "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s MSCONFIG\startupreg: YouCam Mirage => "C:\Program Files\CyberLink\YouCam\YCMMirage.exe" MSCONFIG\startupreg: YouCam Tray => "C:\Program Files\CyberLink\YouCam\YouCamTray.exe" /s ==================== FirewallRules (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [{7687B8D4-4F27-44C2-96FD-787DCA5DDF33}] => (Allow) C:\Users\*****\AppData\Local\Temp\7zS09C3\OJP8500vA909_Full_13\setup\hpznui01.exe FirewallRules: [{CC60033E-5658-4592-99A9-A8871D0854B9}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe FirewallRules: [{1596E2A8-3D68-42E0-B4E6-2005B4EC0C8B}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe FirewallRules: [{8C638BEB-C9C0-4E3E-ADFE-39C998C94DD6}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe FirewallRules: [{81B4F23D-BE53-425B-A8BB-C9F21935B58C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe FirewallRules: [{C65604ED-F42D-4B52-BD60-9B5ECEC0498E}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposid01.exe FirewallRules: [{49328C47-4AE7-40F5-8B3A-AA2427447EAF}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe FirewallRules: [{B62E9FD6-15F9-48B9-889C-B294CBD14D1D}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe FirewallRules: [{54849768-D56E-4E37-B03F-1ECFD95621CE}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe FirewallRules: [{6C7CAB87-9CFD-4B59-B12C-793C38AE9496}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe FirewallRules: [{57DCF4F2-ED6C-4604-9A2E-5AE12A19FAB3}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe FirewallRules: [{FADD049E-E41F-4051-8740-8FC9023D17EF}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe FirewallRules: [{79EEE5F9-74DC-4FCA-8005-0BA87F629469}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqfxt08.exe FirewallRules: [{190DEB89-3A7E-49B4-A20E-8B42226CC5C3}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe FirewallRules: [{FA37E5A2-FA59-4524-85CA-4E9E439C596A}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe FirewallRules: [{5C099229-2D4D-4CF5-9953-C14E3304D93E}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe FirewallRules: [{351C7116-E67D-4629-81CA-3EB6084FA3F7}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe FirewallRules: [{DF503E8A-4F99-4164-A4A3-B5416A9ADE28}] => (Allow) C:\Program Files\HP\hp software update\hpwucli.exe FirewallRules: [{1F94FB41-A54A-4288-847A-2BEA089B23B2}] => (Allow) C:\Program Files\HP\digital imaging\smart web printing\smartwebprintexe.exe FirewallRules: [{B319CB0D-7FA7-4F5C-A0E7-65DDC73AB5B1}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe FirewallRules: [{C9369778-02AC-4837-9F73-E034D6D0DC3F}] => (Allow) C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe FirewallRules: [{5BE379A8-6A35-4001-A479-5ADCE26E5F71}] => (Allow) C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe FirewallRules: [{C26B8641-0593-47B7-891A-AD31B11BE891}] => (Allow) C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe FirewallRules: [{ED5A1EA2-F807-4BFA-BC12-3DD7D1F1E1B2}] => (Allow) C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe FirewallRules: [{8D22A957-48E8-445C-8644-38386A05FE5F}] => (Allow) C:\Program Files\Veoh Networks\VeohWebPlayer\VeohWebPlayer.exe FirewallRules: [{E5030BC1-9431-45D6-B265-8D39C67E8649}] => (Allow) C:\Program Files\Veoh Networks\VeohWebPlayer\VeohWebPlayer.exe FirewallRules: [{0E6F45D7-F158-45BB-AB7E-856AA203BC93}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{0A3C30DB-2E3D-4BDD-9BD1-9C3F8D7D1925}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{369F905D-1BC7-4A29-AF0F-82B16AB5E82B}] => (Allow) C:\Program Files\Giraffic\Giraffic.exe FirewallRules: [{11CFCF96-12B5-4A18-93A9-0E8409109E47}] => (Allow) C:\Program Files\Giraffic\Giraffic.exe FirewallRules: [{3BA39896-AC71-4EFD-B735-A8044F079829}] => (Allow) C:\Program Files\Giraffic\GirafficWatchdog.exe FirewallRules: [{FA2FEF22-2CE1-4613-BBEE-AF679B50BAF4}] => (Allow) C:\Program Files\Giraffic\GirafficWatchdog.exe FirewallRules: [{F79C1E88-09DE-4F23-BF34-14D4B0B68278}] => (Allow) LPort=8396 FirewallRules: [{58686ACE-CD8F-4F9F-AEFF-689B255848A1}] => (Allow) LPort=8396 FirewallRules: [{3A546FA2-DF41-4274-BF5C-B90433D4D0FE}] => (Allow) C:\Riot Games\League of Legends\air\LolClient.exe FirewallRules: [{04379F1D-9D19-48CD-B7CC-E7D3EEF65EAF}] => (Allow) C:\Riot Games\League of Legends\air\LolClient.exe FirewallRules: [{5480D9D1-9930-4C95-B23F-0B169A098414}] => (Allow) C:\Riot Games\League of Legends\game\League of Legends.exe FirewallRules: [{7A81DBDA-4330-4407-9B94-0E458B7D1659}] => (Allow) C:\Riot Games\League of Legends\game\League of Legends.exe FirewallRules: [{F11FA071-42AF-4C23-99DC-8588AC9755FD}] => (Allow) C:\Program Files\RelevantKnowledge\rlvknlg.exe FirewallRules: [{496FA74B-48CC-415A-B433-B7A248D9A535}] => (Allow) C:\Program Files\RelevantKnowledge\rlvknlg.exe FirewallRules: [{9F55D782-2D3F-47C6-90C2-FAA6B6B07A9E}] => (Allow) C:\Program Files\RelevantKnowledge\rlvknlg.exe FirewallRules: [{3CF7BE4A-5098-42A8-AB62-F88E7BFE6068}] => (Allow) C:\Program Files\RelevantKnowledge\rlvknlg.exe FirewallRules: [{36EF71C8-B6EB-4B58-A969-78CD4DC2005A}] => (Allow) C:\Program Files\YourFileDownloader\Downloader.exe FirewallRules: [{E2995586-6223-4A80-9B5D-24D843F63BC3}] => (Allow) C:\Program Files\YourFileDownloader\Downloader.exe FirewallRules: [{6135EBDE-7B4B-4F46-874F-38F2C9EEF31E}] => (Allow) C:\Program Files\YourFileDownloader\YourFile.exe FirewallRules: [{4415AC8A-5DC1-4937-9544-3EAB19E41DDB}] => (Allow) C:\Program Files\YourFileDownloader\YourFile.exe FirewallRules: [{B8C277F7-9F59-4DC2-8A80-A1B0495AFC43}] => (Allow) C:\Windows\System32\muzapp.exe FirewallRules: [{EEC0539C-61EE-4ABA-9AD0-7482EBC04AB9}] => (Allow) C:\Windows\System32\muzapp.exe FirewallRules: [{BB64BFF4-86E2-471D-B4AD-2175478F96B5}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe FirewallRules: [{4E7588C3-568B-4550-BF86-62EF2CDD188C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe FirewallRules: [{9BFC29B0-9DBD-41AB-AE40-C93989407C23}] => (Allow) C:\Program Files\common files\hp\digital imaging\bin\hpqphotocrm.exe FirewallRules: [{E932B3E1-B233-4FD7-9724-15740882E966}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe FirewallRules: [{0D956608-4213-4D4B-BCC8-4B539A636BE1}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe FirewallRules: [{C521F51F-7066-4593-8760-97F2DF1EAE9D}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe FirewallRules: [{9F3A9515-0A05-47BA-A57C-F23BC39AC7A2}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe FirewallRules: [{3259A311-A980-477F-8674-8336B7FBC70D}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe FirewallRules: [TCP Query User{0B806B0A-3143-4093-A343-77A7C2FCD911}C:\program files\winamp\winamp.exe] => (Allow) C:\program files\winamp\winamp.exe FirewallRules: [UDP Query User{629FC361-D54B-43CB-B01D-7FBC824D46F3}C:\program files\winamp\winamp.exe] => (Allow) C:\program files\winamp\winamp.exe FirewallRules: [{F26876D0-2ABA-4D93-A76A-F97B36D0A253}] => (Block) C:\program files\winamp\winamp.exe FirewallRules: [{71524894-1A65-4230-B0D4-A9715472CFBB}] => (Block) C:\program files\winamp\winamp.exe FirewallRules: [{23789C66-2240-44B5-91E8-662517B5994A}] => (Allow) C:\Users\*****\AppData\Local\Temp\EPSON BX535WD Series_Home\Network\EpsonNetSetup\EpsonNetSetup3_4_1_FC_1_0_WW_Direct\ENEasyApp.exe FirewallRules: [{1C985F8A-442A-4923-8EF1-5E1B1089883B}] => (Allow) C:\Users\*****\AppData\Local\Temp\EPSON BX535WD Series_Home\Network\EpsonNetSetup\EpsonNetSetup3_4_1_FC_1_0_WW_Direct\ENEasyApp.exe FirewallRules: [{EB37AD80-D09F-4E4B-900A-555BE8F95E68}] => (Allow) C:\Program Files\EPSON Software\ECPrinterSetup\ENPApp.exe FirewallRules: [{17426D12-1A6C-447D-9B6E-14CB0722AF90}] => (Allow) C:\Program Files\EPSON Software\ECPrinterSetup\ENPApp.exe FirewallRules: [TCP Query User{958054E0-8A72-4765-A120-3517252DC5E8}C:\program files\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files\epson software\event manager\eeventmanager.exe FirewallRules: [UDP Query User{430E02E5-CB9E-4BA1-8E9A-3B5689717E3A}C:\program files\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files\epson software\event manager\eeventmanager.exe FirewallRules: [{C00BBCBB-3D50-410D-9EB5-9A8CC61B2492}] => (Block) C:\program files\epson software\event manager\eeventmanager.exe FirewallRules: [{482D02B2-3C46-47A8-B586-C858ECC64D74}] => (Block) C:\program files\epson software\event manager\eeventmanager.exe FirewallRules: [{B171771D-3EF1-44E8-A918-AE3B8D5A7102}] => (Allow) C:\Users\*****\AppData\Local\Temp\7zS5E47.tmp\SymNRT.exe FirewallRules: [{49E6FD85-7683-4CF4-B93C-9DA47CA1E931}] => (Allow) C:\Users\*****\AppData\Local\Temp\7zS5E47.tmp\SymNRT.exe FirewallRules: [{8AADDC33-5A18-4D08-A180-C14D37AC0E1B}] => (Allow) C:\Users\*****\AppData\Local\Temp\7zSE5BE.tmp\SymNRT.exe FirewallRules: [{4B1EA3D8-6CBA-41B8-B4B6-E0FBE4D972F4}] => (Allow) C:\Users\*****\AppData\Local\Temp\7zSE5BE.tmp\SymNRT.exe FirewallRules: [{AAB4E023-0812-43C0-87B9-8187DB5FD5A4}] => (Allow) C:\Users\*****\AppData\Local\Temp\7zSFAD4.tmp\SymNRT.exe FirewallRules: [{342ECC98-A477-4F14-A33E-3771DEEC0064}] => (Allow) C:\Users\*****\AppData\Local\Temp\7zSFAD4.tmp\SymNRT.exe FirewallRules: [{F2E6F5A0-54CA-4166-BAC9-08996322B5CB}] => (Allow) C:\Users\*****\AppData\Local\Temp\7zS29FF.tmp\SymNRT.exe FirewallRules: [{ABA212B4-211C-43AE-96BD-3F1D77F44E15}] => (Allow) C:\Users\*****\AppData\Local\Temp\7zS29FF.tmp\SymNRT.exe FirewallRules: [{3284F239-1606-4B4F-A8AD-93D69A10F0A2}] => (Allow) C:\Users\*****\AppData\Local\Temp\7zS82F4.tmp\SymNRT.exe FirewallRules: [{CDA290AA-C9B1-40ED-AA41-818F27080EF1}] => (Allow) C:\Users\*****\AppData\Local\Temp\7zS82F4.tmp\SymNRT.exe FirewallRules: [{DFF80C46-1CEB-40E5-9F63-927372B305CF}] => (Allow) C:\Users\*****\AppData\Local\Temp\7zS6EB9.tmp\SymNRT.exe FirewallRules: [{DA79901C-D93E-4C7D-96C6-579E4E7D7722}] => (Allow) C:\Users\*****\AppData\Local\Temp\7zS6EB9.tmp\SymNRT.exe FirewallRules: [{C962B677-10AE-4318-934B-77D705034287}] => (Allow) C:\Users\*****\AppData\Local\Temp\7zSD7E7.tmp\SymNRT.exe FirewallRules: [{0F7A30FA-2F19-47BF-81A7-73798660B4DE}] => (Allow) C:\Users\*****\AppData\Local\Temp\7zSD7E7.tmp\SymNRT.exe FirewallRules: [{684F05B3-A72E-490C-99FD-D5788E6DC0D8}] => (Allow) C:\Users\*****\AppData\Local\Temp\7zS3E77.tmp\SymNRT.exe FirewallRules: [{F301632A-276C-4A61-ABAE-8FCF722FFA4F}] => (Allow) C:\Users\*****\AppData\Local\Temp\7zS3E77.tmp\SymNRT.exe FirewallRules: [{DB5D54DC-D26D-4993-9BE7-90001CF2561A}] => (Allow) C:\Users\*****\AppData\Local\Temp\7zS3015.tmp\SymNRT.exe FirewallRules: [{C7747FFD-9E80-4A21-BA55-9E0D075C3045}] => (Allow) C:\Users\*****\AppData\Local\Temp\7zS3015.tmp\SymNRT.exe FirewallRules: [{A21F286A-1390-4E8C-898E-DE309FF6AF7C}] => (Allow) C:\Users\Dropbox2\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{ED03C92C-FEA5-4D0D-BB20-8090D36351B3}] => (Allow) C:\Users\Dropbox2\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{1895254A-C0AB-4935-9CF8-F98202A3C767}] => (Allow) C:\Users\Dropbox2\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{3E94D44C-A916-4F4C-B052-2338A49B97D6}] => (Allow) C:\Users\Dropbox2\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{EAAFCBFC-AADD-4146-98D7-74894617901A}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe FirewallRules: [{9B6D70F4-8EEC-4CD6-AE5C-64DFBF462A89}] => (Allow) C:\Program Files\Software4u\iDevice Manager\Software4u.IDeviceManager.exe FirewallRules: [{36425757-E862-43DC-9C1D-3417C77260E0}] => (Allow) C:\Program Files\Software4u\iDevice Manager\Software4u.IDeviceManager.exe FirewallRules: [{F3AC9F29-8B8E-437C-99D6-17107153CAEC}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{733130EC-F717-4DF3-B6F3-3D88FFCB9A6E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{0BB8833F-AD47-4C71-9305-AEC290DEA2B8}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{E4B721F3-EB3C-4986-97E6-E3115ADBD6BF}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe FirewallRules: [{A43C9499-F441-4F8E-B5AA-49C57F649E1D}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{0AB29B74-728D-4C30-80B7-6852A1038143}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{06EC9EEB-34A2-436B-9AB6-D5D1EB59023B}] => (Allow) C:\Program Files\iTunes\iTunes.exe ==================== Fehlerhafte Geräte im Gerätemanager ============= Name: Officejet Pro 8500 A909a Description: Officejet Pro 8500 A909a Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f} Manufacturer: HP Service: StillCam Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Officejet Pro 8500 A909a Description: Officejet Pro 8500 A909a Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318} Manufacturer: HP Service: Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: vpnva Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (10/13/2015 01:10:14 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: WinMail.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc658 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0x2330 Startzeit der fehlerhaften Anwendung: 0xWinMail.exe0 Pfad der fehlerhaften Anwendung: WinMail.exe1 Pfad des fehlerhaften Moduls: WinMail.exe2 Berichtskennung: WinMail.exe3 Error: (10/13/2031 01:06:58 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNS_Execute: mDNSPlatformRawTime went backwards by 1827142818 ticks; setting correction factor to 148059179 Error: (10/12/2015 09:10:15 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 8331 Error: (10/12/2015 09:10:15 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 8331 Error: (10/12/2015 09:10:15 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (10/12/2015 09:10:14 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 7317 Error: (10/12/2015 09:10:14 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 7317 Error: (10/12/2015 09:10:14 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (10/12/2015 09:10:13 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 6318 Error: (10/12/2015 09:10:13 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 6318 Systemfehler: ============= Error: (10/13/2015 02:03:31 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: 490@01010004 Error: (10/13/2015 02:03:18 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: 490@01010004 Error: (10/13/2015 02:03:06 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: 490@01010004 Error: (10/13/2015 02:02:51 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: 490@01010004 Error: (10/13/2015 02:02:48 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {7D1933CB-86F6-4A98-8628-01BE94C9A575} Error: (10/13/2015 02:02:01 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: 490@01010004 Error: (10/13/2015 02:02:00 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: D@01010004 Error: (10/13/2015 01:21:35 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: 490@01010004 Error: (10/13/2015 01:21:19 PM) (Source: Disk) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden. Error: (10/13/2015 01:21:19 PM) (Source: Disk) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden. CodeIntegrity: =================================== Date: 2015-09-27 23:18:25.844 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\AVG\AVG PC TuneUp\avgdumpx.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-05 13:03:24.090 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-05 13:03:24.086 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-05 13:03:24.082 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-05 13:03:24.070 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-05 13:03:24.066 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-05 13:03:24.062 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-05 13:03:24.029 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-05 13:03:24.026 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-05 13:03:24.022 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Processor: Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz Prozentuale Nutzung des RAM: 72% Installierter physikalischer RAM: 3039.21 MB Verfügbarer physikalischer RAM: 824.47 MB Summe virtueller Speicher: 6076.7 MB Verfügbarer virtueller Speicher: 3046.69 MB ==================== Laufwerke ================================ Drive c: () (Fixed) (Total:289.02 GB) (Free:161.33 GB) NTFS Drive d: (HP_RECOVERY) (Fixed) (Total:8.96 GB) (Free:1.61 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)] Drive f: (READYBOOST) (Removable) (Total:7.3 GB) (Free:3.31 GB) FAT32 Drive h: (USB DISK) (Removable) (Total:58.91 GB) (Free:58.68 GB) FAT32 ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 97A197A1) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=289 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=9 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 7.3 GB) (Disk ID: E6BA8DA8) Partition 1: (Active) - (Size=7.3 GB) - (Type=0B) ======================================================== Disk: 2 (MBR Code: Windows XP) (Size: 58.9 GB) (Disk ID: 9541352D) Partition 1: (Not Active) - (Size=58.9 GB) - (Type=0C) ==================== Ende vom Addition.txt ============================ Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net Rootkit scan 2015-10-13 19:32:31 Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 WDC_WD3200BEVT-60ZCT1 rev.13.01A13 298,09GB Running: Gmer-19357.exe; Driver: C:\Users\*****\AppData\Local\Temp\uxldapow.sys ---- Kernel code sections - GMER 2.1 ---- .text ntkrnlpa.exe!ZwRollbackEnlistment + 142D 83485A15 1 Byte [06] .text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 834BF212 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3} .text C:\Windows\system32\DRIVERS\nvlddmkm.sys section is writeable [0x92025340, 0x3E0487, 0xE8000020] ---- Devices - GMER 2.1 ---- AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys ---- Registry - GMER 2.1 ---- Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\001167b9d20a Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\001167b9d20a (not active ControlSet) ---- EOF - GMER 2.1 ---- |
13.10.2015, 17:56 | #2 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Datum- und Uhrzeitanzeige falsch/Skype Account gehackt/Fehler SyncToy/Bluescreens/Bildschirmflimmern Hallo und
__________________Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden? Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520 Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten! Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht! Lesestoff: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
14.10.2015, 09:54 | #3 |
| Datum- und Uhrzeitanzeige falsch/Skype Account gehackt/Fehler SyncToy/Bluescreens/Bildschirmflimmern Sicher, gerne; hier ist alles, was ich für den Zeitraum, in dem die Probleme aufgetreten sind, gefunden habe:
__________________G-Data Logs 13.10.2015 (erstes Logfile siehe auch oben) Code:
ATTFilter AVA 25.3847 GD 25.5745 *** Prozess *** Prozess: 7728 Dateiname: erunt.exe Pfad: c:\windows\erunt.exe Herausgeber: Unbekannter Herausgeber Erstelldatum: 02/22/13 15:05:21 Änderungsdatum: 02/22/13 02:04:50 Gestartet von: cmd.exe Herausgeber: Microsoft Windows *** Aktionen *** Ein Packer wurde auf die Programmdatei angewandt. Möglicherweise um schädliche Inhalte zu verbergen. Das Programm hat in Dateien oder Ordnern geschrieben, die genutzt werden können, um das System zu gefährden. Das Programm hat Werte in der System-Registrierung verändert die genutzt werden können um das System zu gefährden. *** Quarantäne *** Folgende Dateien wurden in Quarantäne verschoben: C:\Windows\ERUNT.exe c:\frst\hives\users\00000001\ntuser.dat Folgende Registry Einträge wurden gelöscht: \REGISTRY\MACHINE\SECURITY YGLRtuLAcnJycmJi0HJycnJiYuBy8nLyYmJwKnRyQicnJga3cnJycmJicCwnJycnJgZocnJycmJigCsnJycnJgaZcnKQKxZtKwnJcnJwp3JycHhycnJyYmJwmXJycnJiYnC6crFeY7ZycrFeY7ZyYmJwjnJyAAA Version der Regeln: 5.0.71 OS: Windows 6.1 Service Pack 1.0 Build: 7601 - Workstation 32bit OS Version der dll: 53604 ERUNT.exe C:\FRST\HIVES silent sysreg curuser /noconfirmdelete /noprogresswindow MD5: 2E0323A94915FAAB10A25F3BABF82584 C:\Windows\system32\cmd.exe /c ERUNT.exe C:\FRST\HIVES silent sysreg curuser /noconfirmdelete /noprogresswindow MD5: Code:
ATTFilter Virenprüfung mit G DATA TOTAL PROTECTION Version 25.1.0.8 (28.07.2015) Virensignaturen vom 12.10.2015 Startzeit: 13.10.2015 13:22:19 Engine(s): Engine A (AVA 25.3847), Engine B (GD 25.5745) Heuristik: Ein Archive: Ein Systembereiche: Ein RootKits prüfen: Ein Prüfung der Systembereiche... Prüfung aller im Speicher befindlichen Prozesse und Verweise im Autostart... Prüfung auf RootKits... Prüfung aller lokalen Festplatten... Code:
ATTFilter Virenprüfung mit G DATA TOTAL PROTECTION Version 25.1.0.8 (28.07.2015) Virensignaturen vom 12.10.2015 Startzeit: 13.10.2015 13:18:58 Engine(s): Engine A (AVA 25.3847), Engine B (GD 25.5745) Heuristik: Ein Archive: Ein Systembereiche: Ein RootKits prüfen: Ein Analyse vorzeitig abgebrochen: 13.10.2015 13:21:21 0 Dateien überprüft 0 infizierte Dateien gefunden 0 verdächtige Dateien gefunden Code:
ATTFilter Virenprüfung mit G DATA TOTAL PROTECTION Version 25.1.0.8 (28.07.2015) Virensignaturen vom 12.10.2015 Startzeit: 13.10.2015 13:10:58 Engine(s): Engine A (AVA 25.3847), Engine B (GD 25.5745) Heuristik: Ein Archive: Ein Systembereiche: Ein RootKits prüfen: Ein Prüfung der Systembereiche... Prüfung aller im Speicher befindlichen Prozesse und Verweise im Autostart... Analyse vorzeitig abgebrochen: 13.10.2015 13:14:44 6776 Dateien überprüft 1 infizierte Dateien gefunden 0 verdächtige Dateien gefunden Objekt: ExtensionUpdaterService.exe Pfad: C:\Program Files\Social Grammar Checker Status: Datei in Quarantäne verschoben Virus: Win32.Application.BitCocktail.A (Engine B) Code:
ATTFilter Datum Beschreibung Objekt Ort 18.06.2015 Win32.Adware.OpenCandy.C (Engine B) PDFCreator-1_3_2.exe C:\Users\*****\Dropbox\uni-lit-extern 23.05.2015 Trojan.GenericKD.2359615 6BD9340B-00001204.eml C:\Users\*****\AppData\Local\Microsoft\Windows Mail\Local Folders\Deleted Items 15.05.2015 Win32.Adware.OpenCandy.C (Engine B) OCSetupHlp.dll C:\Program Files\Veoh Networks\VeohWebPlayer P.S.: Ich meine natürlich es spukt, es spuckt nicht! Geändert von Plzhelp (14.10.2015 um 10:08 Uhr) |
14.10.2015, 12:34 | #4 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Datum- und Uhrzeitanzeige falsch/Skype Account gehackt/Fehler SyncToy/Bluescreens/Bildschirmflimmern Lade Dir bitte von hier Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
__________________ Logfiles bitte immer in CODE-Tags posten |
14.10.2015, 15:55 | #5 |
| Datum- und Uhrzeitanzeige falsch/Skype Account gehackt/Fehler SyncToy/Bluescreens/Bildschirmflimmern Beim Deinstallieren von "SGC 2.0.1.250" hat mein Virenscanner den Vorgang gestoppt (tut mir leid, ich kann es leider nicht zuordnen): Unbekannte Bedrohung "_iu14d2n.tmp" ist ein vermeintlich bösartiges Programm Herausgeber: unbekannt Gestartet von: unins000.exe Wie soll ich reagieren? Aktionen stehen zur Verfügung: Programm anhalten und in Quarantäne verschieben Erlauben Immer erlauben Danke! Ich frage lieber einmal zu viel! EDIT: Ok, hat sich erledigt - Explorer hat sich aufgehängt, Windows ist hängen geblieben. Nach dem Neustart ist SGC 2.0.1.250 auf Revo nicht mehr sichtbar. Eines vergaß ich noch zu erwähnen- nach Neustart/ Zurückholen aus Ruhezustand sind bei mir sehr oft versteckte Dateien wieder eingeblendet - die eigentlich nicht am Desktop liegen sollten (aus irgendwelchen Unterordnern). So wie gerade eben. |
14.10.2015, 17:13 | #6 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Datum- und Uhrzeitanzeige falsch/Skype Account gehackt/Fehler SyncToy/Bluescreens/Bildschirmflimmern Adware/Junkware/Toolbars entfernen 1. Schritt: Malwarebytes Downloade Dir bitte Malwarebytes Anti-Malware
(alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!) 2. Schritt: adwCleaner Downloade Dir bitte AdwCleaner auf deinen Desktop.
3. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
4. Schritt: Frisches Log mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ --> Datum- und Uhrzeitanzeige falsch/Skype Account gehackt/Fehler SyncToy/Bluescreens/Bildschirmflimmern |
14.10.2015, 21:25 | #7 |
| Datum- und Uhrzeitanzeige falsch/Skype Account gehackt/Fehler SyncToy/Bluescreens/Bildschirmflimmern Malwarebytes Anti-Malware PART I Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 14.10.2015 Suchlaufzeit: 16:58 Protokolldatei: mbam.txt Administrator: Ja Version: 2.1.8.1057 Malware-Datenbank: v2015.10.14.04 Rootkit-Datenbank: v2015.10.06.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x86 Dateisystem: NTFS Benutzer: ***** Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 353665 Abgelaufene Zeit: 34 Min., 43 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 6 PUP.Optional.Perion, HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A6629839-6636-4998-95D6-2B0F52141861}, In Quarantäne, [22ba53038605270f35aad35a857dbb45], PUP.Optional.Perion, HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A6629839-6636-4998-95D6-2B0F52141861}, In Quarantäne, [22ba53038605270f35aad35a857dbb45], PUP.Optional.Perion, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\dhdmjeclekijlogbipdlifcmgoanoemm, In Quarantäne, [29b3c393890278be0fdbb9daae554fb1], PUP.Optional.SocialGrammarChecker, HKLM\SOFTWARE\SGC, In Quarantäne, [77654313ec9fed49f751811eaa59ab55], PUP.Optional.SocialGrammarChecker, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SGC Updater, In Quarantäne, [528a3d190b8043f31a2f801ff80bdf21], PUP.Optional.SocialGrammarChecker, HKU\S-1-5-21-117767610-4170920979-3955755671-1000\SOFTWARE\SGC, In Quarantäne, [7f5daea80e7dd462d6711c8313f0ac54], Registrierungswerte: 4 PUP.Optional.Perion, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{A6629839-6636-4998-95D6-2B0F52141861}, C:\Program Files\Social Grammar Checker\Firefox, In Quarantäne, [22ba53038605270f35aad35a857dbb45] PUP.Optional.Perion, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS\{A6629839-6636-4998-95D6-2B0F52141861}, In Quarantäne, [bb21fb5bf09b2a0c944bf835946e24dc], PUP.Optional.SocialGrammarChecker, HKLM\SOFTWARE\SGC|ToolbarID, 0118493041954a7a9eaf2303580a9b30, In Quarantäne, [77654313ec9fed49f751811eaa59ab55] PUP.Optional.SocialGrammarChecker, HKU\S-1-5-21-117767610-4170920979-3955755671-1000\SOFTWARE\SGC|toolbarID, 0118493041954a7a9eaf2303580a9b30, In Quarantäne, [7f5daea80e7dd462d6711c8313f0ac54] Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 27 PUP.Optional.Linkury, C:\Users\*****\AppData\Local\LPT, In Quarantäne, [17c59eb89fec270feb7e295f9d66936d], PUP.Optional.Linkury, C:\Users\*****\AppData\Local\LPT\Configs, In Quarantäne, [17c59eb89fec270feb7e295f9d66936d], PUP.Optional.Linkury, C:\Users\*****\AppData\Local\LPT\Resources, In Quarantäne, [17c59eb89fec270feb7e295f9d66936d], PUP.Optional.PCSpeedUp, C:\Program Files\PC Speed Up, In Quarantäne, [ecf0461090fb89ad0baabcd7659e2dd3], PUP.Optional.PCSpeedUp, C:\Users\*****\AppData\Local\Microsoft\Silverlight\OutOfBrowser\Speedchecker.PCSpeedUp, In Quarantäne, [b22a85d1f19ad75f9515db8a7a880ef2], PUP.Optional.PCSpeedUp, C:\Users\*****\Documents\PCSpeedUp, In Quarantäne, [0cd0b99dc2c98da93c6fce97f012cc34], PUP.Optional.PCSpeedUp, C:\Users\*****\Documents\PCSpeedUp\RestorePoints, In Quarantäne, [0cd0b99dc2c98da93c6fce97f012cc34], PUP.Optional.PCSpeedUp, C:\Users\*****\Documents\PCSpeedUp\ScanResults, In Quarantäne, [0cd0b99dc2c98da93c6fce97f012cc34], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\CSS, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\Configs, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\Configs, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\DistributionFiles, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\DistributionFiles\Configs, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\DistributionFiles\Profiles, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], Dateien: 777 PUP.Optional.PCCleaners, C:\Windows\uninst.exe, In Quarantäne, [01db80d6d3b8a294873190adfc05f010], PUP.Optional.Linkury, C:\Users\*****\AppData\Local\LPT\PublisherSettings.xml, In Quarantäne, [17c59eb89fec270feb7e295f9d66936d], PUP.Optional.Linkury, C:\Users\*****\AppData\Local\LPT\NewConfig.txt, In Quarantäne, [17c59eb89fec270feb7e295f9d66936d], PUP.Optional.Linkury, C:\Users\*****\AppData\Local\LPT\UserSettings.xml, In Quarantäne, [17c59eb89fec270feb7e295f9d66936d], PUP.Optional.Linkury, C:\Users\*****\AppData\Local\LPT\XMLOperations.xml, In Quarantäne, [17c59eb89fec270feb7e295f9d66936d], PUP.Optional.Linkury, C:\Users\*****\AppData\Local\LPT\Configs\BrowserSettings.xml, In Quarantäne, [17c59eb89fec270feb7e295f9d66936d], PUP.Optional.Linkury, C:\Users\*****\AppData\Local\LPT\Configs\LPTMapping.xml, In Quarantäne, [17c59eb89fec270feb7e295f9d66936d], PUP.Optional.Linkury, C:\Users\*****\AppData\Local\LPT\Configs\Timers.xml, In Quarantäne, [17c59eb89fec270feb7e295f9d66936d], PUP.Optional.Linkury, C:\Users\*****\AppData\Local\LPT\Resources\LPT.xml, In Quarantäne, [17c59eb89fec270feb7e295f9d66936d], PUP.Optional.NetTock, C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\extensions\firefox@nettock.com.xpi, In Quarantäne, [c71515412f5cc37313c74a46e023718f], PUP.Optional.PCSpeedUp, C:\Program Files\PC Speed Up\unins000.dat, In Quarantäne, [ecf0461090fb89ad0baabcd7659e2dd3], PUP.Optional.PCSpeedUp, C:\Program Files\PC Speed Up\PCSpeedUp.s3db, In Quarantäne, [ecf0461090fb89ad0baabcd7659e2dd3], PUP.Optional.PCSpeedUp, C:\Program Files\PC Speed Up\PCSUService-Timer.log, In Quarantäne, [ecf0461090fb89ad0baabcd7659e2dd3], PUP.Optional.PCSpeedUp, C:\Program Files\PC Speed Up\PCSUService.conf, In Quarantäne, [ecf0461090fb89ad0baabcd7659e2dd3], PUP.Optional.PCSpeedUp, C:\Program Files\PC Speed Up\PCSUService.log, In Quarantäne, [ecf0461090fb89ad0baabcd7659e2dd3], PUP.Optional.PCSpeedUp, C:\Program Files\PC Speed Up\unins000.msg, In Quarantäne, [ecf0461090fb89ad0baabcd7659e2dd3], PUP.Optional.PCSpeedUp, C:\Program Files\PC Speed Up\uninstaller.dat, In Quarantäne, [ecf0461090fb89ad0baabcd7659e2dd3], PUP.Optional.Perion, C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dhdmjeclekijlogbipdlifcmgoanoemm_0.localstorage, In Quarantäne, [01dbb79f7a11f6405c8c9af9a360ab55], PUP.Optional.PCSpeedUp, C:\Users\*****\AppData\Local\Microsoft\Silverlight\OutOfBrowser\Speedchecker.PCSpeedUp\appicon_48.png, In Quarantäne, [b22a85d1f19ad75f9515db8a7a880ef2], PUP.Optional.PCSpeedUp, C:\Users\*****\AppData\Local\Microsoft\Silverlight\OutOfBrowser\Speedchecker.PCSpeedUp\application.xap, In Quarantäne, [b22a85d1f19ad75f9515db8a7a880ef2], PUP.Optional.PCSpeedUp, C:\Users\*****\AppData\Local\Microsoft\Silverlight\OutOfBrowser\Speedchecker.PCSpeedUp\Error.jpg, In Quarantäne, [b22a85d1f19ad75f9515db8a7a880ef2], PUP.Optional.PCSpeedUp, C:\Users\*****\AppData\Local\Microsoft\Silverlight\OutOfBrowser\Speedchecker.PCSpeedUp\index.html, In Quarantäne, [b22a85d1f19ad75f9515db8a7a880ef2], PUP.Optional.PCSpeedUp, C:\Users\*****\AppData\Local\Microsoft\Silverlight\OutOfBrowser\Speedchecker.PCSpeedUp\metadata, In Quarantäne, [b22a85d1f19ad75f9515db8a7a880ef2], PUP.Optional.PCSpeedUp, C:\Users\*****\AppData\Local\Microsoft\Silverlight\OutOfBrowser\Speedchecker.PCSpeedUp\SplashScreen.jpg, In Quarantäne, [b22a85d1f19ad75f9515db8a7a880ef2], PUP.Optional.PCSpeedUp, C:\Users\*****\AppData\Local\Microsoft\Silverlight\OutOfBrowser\Speedchecker.PCSpeedUp\state, In Quarantäne, [b22a85d1f19ad75f9515db8a7a880ef2], PUP.Optional.PCSpeedUp, C:\Users\*****\Documents\PCSpeedUp\App.log, In Quarantäne, [0cd0b99dc2c98da93c6fce97f012cc34], PUP.Optional.PCSpeedUp, C:\Users\*****\Documents\PCSpeedUp\ScanResults\FragmentedDisksCollection.log, In Quarantäne, [0cd0b99dc2c98da93c6fce97f012cc34], PUP.Optional.PCSpeedUp, C:\Users\*****\Documents\PCSpeedUp\ScanResults\JunkFilesCollection.log, In Quarantäne, [0cd0b99dc2c98da93c6fce97f012cc34], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\NewConfig.txt, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\sb.host.json, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\IEButton.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\XMLOperations.xml, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\bg.html, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\manifest.json, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\options.htm, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\popup.html, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\redirect.html, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\CSS\border.css, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down-1.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down-2.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down-3.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\fb.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\fblike.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\gmail.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\google.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\googleplus.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\hide-1.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\hide-2.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\hide-3.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\left.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\maximize-1.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\maximize-2.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\maximize-3.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\mgsplusvideo.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\minimize-1.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\minimize-2.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\minimize-3.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\pinit.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\right.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\searchBox.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\show-1.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\show-2.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\show-3.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\twitter.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up-1.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up-2.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up-3.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\SafeFinder.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\SafeFinder128.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\SafeFinder16.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\SafeFinder48.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\Configs\QueryParameters.xml, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\Configs\XmlSideBySideProtocol.xml, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\install.rdf, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FirefoxExtensionMain.css, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FirefoxExtensionMain.xul, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down-1.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down-2.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down-3.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\fb.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\fblike.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\gmail.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\googleplus.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\hide-1.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\hide-2.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\hide-3.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\left.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\maximize-1.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\maximize-2.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\maximize-3.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\mgsplusvideo.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\minimize-1.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\minimize-2.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\minimize-3.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\pinit.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\right.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\searchBox.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\show-1.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\show-2.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\show-3.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\twitter.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up-1.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up-2.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up-3.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\SafeFinder.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\SafeFinder128.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\SafeFinder16.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\SafeFinder_Small.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\ISmartbarFireFoxRemotePlugin.xpt, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\Configs\UserInfo.xml, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1D.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00c.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00chover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00cPress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7A.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Apress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABE.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABEhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABEpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827Ehover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Ahover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133CHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0A.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133C.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133CPress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0AHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0APress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\3DF17372-78B0-4978-81A5-F9D1800C1775.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\3DF17372-78B0-4978-81A5-F9D1800C1775Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\3DF17372-78B0-4978-81A5-F9D1800C1775Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089E.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089Ehover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089Epress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002A.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Ahover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Apress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0E.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0Ehover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0Epress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1Dhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1Dpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EC.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EChover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7ECpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FE.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307f.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307fPress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2C.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2Chover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2Cpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748C.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748CHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748CPress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6eba.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6ebaHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\929407CC-7E48-47E0-A9F9-A4A167AC24D1.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\929407CC-7E48-47E0-A9F9-A4A167AC24D1hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\929407CC-7E48-47E0-A9F9-A4A167AC24D1press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\95ae73f0-9799-46fd-bceb-57efcb7f0537.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\95ae73f0-9799-46fd-bceb-57efcb7f0537hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\95ae73f0-9799-46fd-bceb-57efcb7f0537press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8C.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Cpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\A75C6A50-13B0-4704-AA87-8DD113E31310.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\A75C6A50-13B0-4704-AA87-8DD113E31310hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\A75C6A50-13B0-4704-AA87-8DD113E31310press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\A89DA5A2-D390-47F4-84EF-6044EC8AC368.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\A89DA5A2-D390-47F4-84EF-6044EC8AC368hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\A89DA5A2-D390-47F4-84EF-6044EC8AC368press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\a94e6710-6021-4cdc-82de-1c001238bd8f.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\a94e6710-6021-4cdc-82de-1c001238bd8fHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\a94e6710-6021-4cdc-82de-1c001238bd8fPress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\B1BEF453-913F-4EC4-B057-A2BB21C09DCBhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\B1BEF453-913F-4EC4-B057-A2BB21C09DCBpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55F.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\B81443D4-15F7-4B97-9DC8-3645A012C817.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\B81443D4-15F7-4B97-9DC8-3645A012C817hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\C0AC006A-9C65-42F9-AE11-D675DCCC6840.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\C0AC006A-9C65-42F9-AE11-D675DCCC6840hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\C0AC006A-9C65-42F9-AE11-D675DCCC6840press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\c1546a00-e42d-4ce7-aac5-5353a895f3cfhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\c1546a00-e42d-4ce7-aac5-5353a895f3cfpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\C438F0F0-525A-4942-8307-6B71E596367D.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\C438F0F0-525A-4942-8307-6B71E596367Dhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\C438F0F0-525A-4942-8307-6B71E596367Dpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\C48E3725-71FB-4824-969A-C6D428C18A2B.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\C48E3725-71FB-4824-969A-C6D428C18A2Bhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307fHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6ebaPress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Chover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\B1BEF453-913F-4EC4-B057-A2BB21C09DCB.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\B81443D4-15F7-4B97-9DC8-3645A012C817press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\c1546a00-e42d-4ce7-aac5-5353a895f3cf.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\C48E3725-71FB-4824-969A-C6D428C18A2Bpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\D13971C4-4DA8-4C4B-87F6-17E97BFE7448hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\E458493F-867F-4712-A3AF-D9664ED47C19.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\f7fd4890-7f89-4c73-8ff2-52105657cbb6Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\CCF42F56-0405-4697-A513-AA01DEE5DF02.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\CCF42F56-0405-4697-A513-AA01DEE5DF02hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\CCF42F56-0405-4697-A513-AA01DEE5DF02press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\CE1500FE-6F59-421C-8005-3E137AC051A2.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\CE1500FE-6F59-421C-8005-3E137AC051A2hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\CE1500FE-6F59-421C-8005-3E137AC051A2press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\D13971C4-4DA8-4C4B-87F6-17E97BFE7448.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\D13971C4-4DA8-4C4B-87F6-17E97BFE7448press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\D2B0680C-17C4-492D-85D7-D4CA3E724D50.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\D2B0680C-17C4-492D-85D7-D4CA3E724D50hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\D2B0680C-17C4-492D-85D7-D4CA3E724D50press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\D469E1BA-B745-45B3-B7EE-378E000E74C8.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\D469E1BA-B745-45B3-B7EE-378E000E74C8Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\D469E1BA-B745-45B3-B7EE-378E000E74C8Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\D5113B95-781C-4737-A26F-3ED3A2CB876F.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\D5113B95-781C-4737-A26F-3ED3A2CB876Fhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\D5113B95-781C-4737-A26F-3ED3A2CB876Fpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4C.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Chover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Cpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\e2870479-a572-412b-8a8f-5604d19b55cd.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\e2870479-a572-412b-8a8f-5604d19b55cdhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\e2870479-a572-412b-8a8f-5604d19b55cdpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\E3345571-EEF9-4041-8C24-F7F5A9331C23.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\E3345571-EEF9-4041-8C24-F7F5A9331C23hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\E3345571-EEF9-4041-8C24-F7F5A9331C23press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12e.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12ehover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12epress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\E458493F-867F-4712-A3AF-D9664ED47C19hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\E458493F-867F-4712-A3AF-D9664ED47C19press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\E52BEFE7-6535-439c-B168-A3B105E4212E.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\E52BEFE7-6535-439c-B168-A3B105E4212Ehover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\E52BEFE7-6535-439c-B168-A3B105E4212Epress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\E8584703-6CA5-4351-82CC-09E40938A066.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\E8584703-6CA5-4351-82CC-09E40938A066hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\E8584703-6CA5-4351-82CC-09E40938A066press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\e8967c62-9ea0-4fde-9832-2c10f1d580de.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\e8967c62-9ea0-4fde-9832-2c10f1d580dehover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\e8967c62-9ea0-4fde-9832-2c10f1d580depress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\EA99E20A-FBBA-4197-954B-E2013280A29B.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\EA99E20A-FBBA-4197-954B-E2013280A29Bhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\EA99E20A-FBBA-4197-954B-E2013280A29Bpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\F5297DBC-3B3B-4744-A54D-308EAD98D223.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\F5297DBC-3B3B-4744-A54D-308EAD98D223hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\F5297DBC-3B3B-4744-A54D-308EAD98D223press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\f7fd4890-7f89-4c73-8ff2-52105657cbb6.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\f7fd4890-7f89-4c73-8ff2-52105657cbb6Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BD.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\F9218572-58F0-4FB9-B0C5-4EA74848D6EC.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\F9218572-58F0-4FB9-B0C5-4EA74848D6EChover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\F9218572-58F0-4FB9-B0C5-4EA74848D6ECpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\fac5189f-f2c7-4eed-bae8-011eca170d7b.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\fac5189f-f2c7-4eed-bae8-011eca170d7bhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\fac5189f-f2c7-4eed-bae8-011eca170d7bpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\FF927FFB-35DC-43A3-A502-690B99FCC056.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\FF927FFB-35DC-43A3-A502-690B99FCC056hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\icons\FF927FFB-35DC-43A3-A502-690B99FCC056press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00c.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00chover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00cpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Ahover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Apress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3D.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3DHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3DPress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABE.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABEhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABEpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7A.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BChover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\389DA7E0-2A26-40AB-ACA4-9417E3B9EF13Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BC.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BCpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\2F274118-68DC-4951-92D7-54CD244FE02A.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\2F274118-68DC-4951-92D7-54CD244FE02AHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\2F274118-68DC-4951-92D7-54CD244FE02APress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133C.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133CHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133CPress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\389DA7E0-2A26-40AB-ACA4-9417E3B9EF13.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\389DA7E0-2A26-40AB-ACA4-9417E3B9EF13Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0A.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0AHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0APress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\3DF17372-78B0-4978-81A5-F9D1800C1775.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\3DF17372-78B0-4978-81A5-F9D1800C1775Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\3DF17372-78B0-4978-81A5-F9D1800C1775Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\47BFF758-9581-4C68-9293-1181A70CDEE8.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\47BFF758-9581-4C68-9293-1181A70CDEE8Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\47BFF758-9581-4C68-9293-1181A70CDEE8Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BE.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BEHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089E.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089Ehover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089Epress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002A.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Ahover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Apress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0E.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0Ehover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0Epress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1D.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1Dhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1Dpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\65C4AD03-739F-4EC9-8FFD-457CC4241B9F.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\65C4AD03-739F-4EC9-8FFD-457CC4241B9Fhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\65C4AD03-739F-4EC9-8FFD-457CC4241B9Fpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\684B31D0-535B-45EC-B3D1-15923CF5F790.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\684B31D0-535B-45EC-B3D1-15923CF5F790Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\684B31D0-535B-45EC-B3D1-15923CF5F790Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EChover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7ECpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FE.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307f.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307fHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\82F730CA-BA1C-4AFB-AC7C-FE4ED6B532FD.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\82F730CA-BA1C-4AFB-AC7C-FE4ED6B532FDHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\82F730CA-BA1C-4AFB-AC7C-FE4ED6B532FDPress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], |
14.10.2015, 21:28 | #8 |
| Datum- und Uhrzeitanzeige falsch/Skype Account gehackt/Fehler SyncToy/Bluescreens/Bildschirmflimmern Malwarebytes Anti-Malware PART II Code:
ATTFilter PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2C.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2Chover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2Cpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6A.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6AHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6APress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748C.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748CHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748CPress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BEPress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EC.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307fPress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6eba.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6ebaHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6ebaPress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\929407CC-7E48-47E0-A9F9-A4A167AC24D1.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\929407CC-7E48-47E0-A9F9-A4A167AC24D1press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\95D9E2EA-40AD-40B8-95D0-58209F584BBE.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\95D9E2EA-40AD-40B8-95D0-58209F584BBEHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8C.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Chover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Cpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\A46C5E77-16B5-42A0-8761-C6F861D22308.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\A46C5E77-16B5-42A0-8761-C6F861D22308Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\A46C5E77-16B5-42A0-8761-C6F861D22308Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\A75C6A50-13B0-4704-AA87-8DD113E31310.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\A75C6A50-13B0-4704-AA87-8DD113E31310press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\A89DA5A2-D390-47F4-84EF-6044EC8AC368.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\A89DA5A2-D390-47F4-84EF-6044EC8AC368hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\A89DA5A2-D390-47F4-84EF-6044EC8AC368press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8f.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8fHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCB.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCBhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCBpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55F.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\B81443D4-15F7-4B97-9DC8-3645A012C817.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\B81443D4-15F7-4B97-9DC8-3645A012C817hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\B81443D4-15F7-4B97-9DC8-3645A012C817press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\BC303DD4-37E7-4242-8DDD-8DEE2171066B.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\BC303DD4-37E7-4242-8DDD-8DEE2171066Bhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\BC303DD4-37E7-4242-8DDD-8DEE2171066Bpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\BE3608B1-C2D5-4AD3-A382-45635338C6D1.PNG, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\BE3608B1-C2D5-4AD3-A382-45635338C6D1HOVER.PNG, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\BE3608B1-C2D5-4AD3-A382-45635338C6D1PRESS.PNG, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\C0AC006A-9C65-42F9-AE11-D675DCCC6840.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\C0AC006A-9C65-42F9-AE11-D675DCCC6840hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cf.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cfhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cfpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\C41AD485-FE91-4EFE-A613-66CB2BA96EAB.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\C41AD485-FE91-4EFE-A613-66CB2BA96EABHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\C41AD485-FE91-4EFE-A613-66CB2BA96EABPress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\C438F0F0-525A-4942-8307-6B71E596367D.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\C438F0F0-525A-4942-8307-6B71E596367Dhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\C438F0F0-525A-4942-8307-6B71E596367Dpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\C48E3725-71FB-4824-969A-C6D428C18A2B.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\C48E3725-71FB-4824-969A-C6D428C18A2Bhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\C48E3725-71FB-4824-969A-C6D428C18A2Bpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\CCF42F56-0405-4697-A513-AA01DEE5DF02.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\CCF42F56-0405-4697-A513-AA01DEE5DF02hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\CCF42F56-0405-4697-A513-AA01DEE5DF02press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\CE1500FE-6F59-421C-8005-3E137AC051A2.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\CE1500FE-6F59-421C-8005-3E137AC051A2hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\929407CC-7E48-47E0-A9F9-A4A167AC24D1hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\95D9E2EA-40AD-40B8-95D0-58209F584BBEPress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\A75C6A50-13B0-4704-AA87-8DD113E31310hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8fPress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\C0AC006A-9C65-42F9-AE11-D675DCCC6840press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\D13971C4-4DA8-4C4B-87F6-17E97BFE7448.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\D13971C4-4DA8-4C4B-87F6-17E97BFE7448hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\D13971C4-4DA8-4C4B-87F6-17E97BFE7448press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\D2B0680C-17C4-492D-85D7-D4CA3E724D50.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\D2B0680C-17C4-492D-85D7-D4CA3E724D50hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\D2B0680C-17C4-492D-85D7-D4CA3E724D50press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\D469E1BA-B745-45B3-B7EE-378E000E74C8.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\D469E1BA-B745-45B3-B7EE-378E000E74C8Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\D469E1BA-B745-45B3-B7EE-378E000E74C8Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\D5113B95-781C-4737-A26F-3ED3A2CB876F.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\D5113B95-781C-4737-A26F-3ED3A2CB876FPress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4C.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Chover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Cpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\e2870479-a572-412b-8a8f-5604d19b55cd.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\e2870479-a572-412b-8a8f-5604d19b55cdhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\e2870479-a572-412b-8a8f-5604d19b55cdpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\E3345571-EEF9-4041-8C24-F7F5A9331C23.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\E3345571-EEF9-4041-8C24-F7F5A9331C23press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12e.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12ehover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12epress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\e3c610dc-deed-47cd-acc0-493d71556c16.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\e3c610dc-deed-47cd-acc0-493d71556c16Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\E458493F-867F-4712-A3AF-D9664ED47C19.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\E458493F-867F-4712-A3AF-D9664ED47C19hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\E458493F-867F-4712-A3AF-D9664ED47C19press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\E52BEFE7-6535-439c-B168-A3B105E4212E.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\E52BEFE7-6535-439c-B168-A3B105E4212Ehover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\E52BEFE7-6535-439c-B168-A3B105E4212Epress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\E8584703-6CA5-4351-82CC-09E40938A066.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\E8584703-6CA5-4351-82CC-09E40938A066hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\E8584703-6CA5-4351-82CC-09E40938A066press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580dehover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580depress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\E9FFB47F-2B3F-430E-8F8D-0B640D6A9564.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\E9FFB47F-2B3F-430E-8F8D-0B640D6A9564Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\E9FFB47F-2B3F-430E-8F8D-0B640D6A9564Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\EA99E20A-FBBA-4197-954B-E2013280A29B.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\EA99E20A-FBBA-4197-954B-E2013280A29Bpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\EC116BC4-0583-4E07-908A-9D2AD3647177.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\EC116BC4-0583-4E07-908A-9D2AD3647177Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\EC116BC4-0583-4E07-908A-9D2AD3647177Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\EDDB2889-2088-4070-9F17-E71A95D7A1BC.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\EDDB2889-2088-4070-9F17-E71A95D7A1BCHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\EDDB2889-2088-4070-9F17-E71A95D7A1BCPress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\f41901a8-2a78-4794-b455-d53a24b37aef.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\f41901a8-2a78-4794-b455-d53a24b37aefHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\f41901a8-2a78-4794-b455-d53a24b37aefPress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\F5297DBC-3B3B-4744-A54D-308EAD98D223.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\F5297DBC-3B3B-4744-A54D-308EAD98D223hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\F5297DBC-3B3B-4744-A54D-308EAD98D223press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6Hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BD.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\F9218572-58F0-4FB9-B0C5-4EA74848D6EC.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\F9218572-58F0-4FB9-B0C5-4EA74848D6ECpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\D5113B95-781C-4737-A26F-3ED3A2CB876FHover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\E3345571-EEF9-4041-8C24-F7F5A9331C23hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\e3c610dc-deed-47cd-acc0-493d71556c16Press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580de.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\EA99E20A-FBBA-4197-954B-E2013280A29Bhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\F9218572-58F0-4FB9-B0C5-4EA74848D6EChover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\CE1500FE-6F59-421C-8005-3E137AC051A2press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7b.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7bhover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7bpress.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\FF927FFB-35DC-43A3-A502-690B99FCC056.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\FF927FFB-35DC-43A3-A502-690B99FCC056hover.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\Common\iconsWide\FF927FFB-35DC-43A3-A502-690B99FCC056press.png, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\DistributionFiles\Configs\IconsSettings.xml, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\DistributionFiles\Configs\LocalMethods.xml, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\DistributionFiles\Configs\ProfileManager.xml, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\DistributionFiles\Configs\PublisherSettings.xml, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\DistributionFiles\Configs\UserSettings.xml, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], PUP.Optional.SmartBar, C:\Users\*****\AppData\Local\Smartbar\DistributionFiles\Profiles\E7F486B7-B0DE-4B87-9268-EF90E899A460.xml, In Quarantäne, [e7f5eb6bf09bef473f2f96d5ad55bf41], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter # AdwCleaner v5.013 - Bericht erstellt am 14/10/2015 um 21:42:18 # Aktualisiert am 09/10/2015 von Xplode # Datenbank : 2015-10-13.2 [Server] # Betriebssystem : Windows 7 Professional Service Pack 1 (x86) # Benutzername : ***** - LAPTOP # Gestartet von : C:\Users\*****\Desktop\AdwCleaner_5.013.exe # Option : Löschen # Unterstützung : hxxp://toolslib.net/forum ***** [ Dienste ] ***** ***** [ Ordner ] ***** [-] Ordner Gelöscht : C:\Users\Gast\AppData\LocalLow\HPAppData [-] Ordner Gelöscht : C:\Users\*****\AppData\LocalLow\HPAppData ***** [ Dateien ] ***** [-] Datei Gelöscht : C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\user.js [-] Datei Gelöscht : C:\Windows\Reimage.ini ***** [ DLLs ] ***** ***** [ Verknüpfungen ] ***** ***** [ Geplante Tasks ] ***** [-] Task Gelöscht : RunAsStdUser Task for VeohWebPlayer [-] Task Gelöscht : YourFile Update ***** [ Registrierungsdatenbank ] ***** [-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC} [-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96} [-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{363F46BE-27B4-4C8D-99E7-B1E049B84376} [-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{90A9B7D2-3794-45EA-9E23-140E3938D2D9} [-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A753A1EC-973E-4718-AF8E-A3F554D45C44} [-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02AFA80F-4BEE-41FD-8572-214B58A9EF90} [-] Schlüssel Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} [-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10ECCE17-29B5-4880-A8F5-EAD298611484} [-] Schlüssel Gelöscht : HKCU\Software\Bitberry [-] Schlüssel Gelöscht : HKCU\Software\Reimage [-] Schlüssel Gelöscht : HKCU\Software\PCCleaners [-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FE5AE7DC-7B01-4263-A94C-B4526C276550_is1 ***** [ Internetbrowser ] ***** ************************* :: Proxy Einstellungen zurückgesetzt :: Winsock Einstellungen zurückgesetzt :: Chrome Richtlinien gelöscht ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [2243 Bytes] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 7.6.2 (09.14.2015:1) OS: Windows 7 Professional x86 Ran by ***** on 14.10.2015 at 21:49:50,45 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Tasks ~~~ Registry Values ~~~ Registry Keys ~~~ Files Successfully deleted: [File] C:\ProgramData\1425590022.bdinstall.bin ~~~ Folders Successfully deleted: [Folder] C:\Program Files\software4u Successfully deleted: [Folder] C:\ProgramData\software4u Successfully deleted: [Folder] C:\Users\*****\Appdata\Local\newsoft Successfully deleted: [Folder] C:\Users\*****\AppData\Roaming\newsoft Successfully deleted: [Folder] C:\Users\*****\AppData\Roaming\software4u Successfully deleted: [Folder] C:\Users\*****\Documents\add-in express Successfully deleted: [Folder] C:\Users\*****\Documents\my pagemanager ~~~ FireFox Successfully deleted: [File] C:\Users\*****\AppData\Roaming\mozilla\firefox\profiles\34urll22.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi Emptied folder: C:\Users\*****\AppData\Roaming\mozilla\firefox\profiles\34urll22.default\minidumps [39 files] ~~~ Chrome [C:\Users\*****\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset [C:\Users\*****\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted: [C:\Users\*****\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset [C:\Users\*****\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 14.10.2015 at 21:55:16,26 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version:12-10-2015 durchgeführt von ***** (Administrator) auf LAPTOP (14-10-2015 22:10:24) Gestartet von C:\Users\*****\Desktop\TrojanBoard 102015 Geladene Profile: ***** (Verfügbare Profile: ***** & Gast) Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (G Data Software AG) C:\Program Files\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) C:\Program Files\G DATA\TotalProtection\AVK\AVKWCtl.exe (G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) C:\Program Files\G DATA\TotalProtection\AVK\AVKService.exe (G Data Software AG) C:\Program Files\G DATA\TotalProtection\Firewall\GDFwSvc.exe (G Data Software AG) C:\Program Files\G DATA\TotalProtection\AVKTray\AVKTray.exe (G DATA Software AG) C:\Program Files\G DATA\TotalProtection\Firewall\GDFirewallTray.exe (G DATA Software AG) C:\Program Files\G DATA\TotalProtection\GUI\GDSC.exe (Cisco Systems, Inc.) C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (G Data Software AG) C:\Program Files\G DATA\TotalProtection\AVKBackup\AVKBackupService.exe (G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\GDKBFltExe32.exe (G Data Software AG) C:\Program Files\G DATA\TotalProtection\AVKTuner\AVKTunerService.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\prevhost.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [] => [X] HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1316136 2008-06-20] (Synaptics, Inc.) HKLM\...\Run: [DpAgent] => C:\Program Files\DigitalPersona\Bin\dpagent.exe [842816 2009-04-17] (DigitalPersona, Inc.) HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [458844 2009-07-21] (IDT, Inc.) HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard) HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [60688 2015-09-15] (Apple Inc.) HKLM\...\Run: [EEventManager] => C:\Program Files\Epson Software\Event Manager\EEventManager.exe [979328 2010-10-12] (SEIKO EPSON CORPORATION) HKLM\...\Run: [GDFirewallTray] => C:\Program Files\G DATA\TotalProtection\Firewall\GDFirewallTray.exe [1864312 2015-06-16] (G DATA Software AG) HKLM\...\Run: [ConnectionCenter] => C:\Users\*****\AppData\Local\Citrix\ICA Client\concentr.exe [103768 2009-09-13] (Citrix Systems, Inc.) HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2015-08-06] (Apple Inc.) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157456 2015-09-15] (Apple Inc.) HKLM\...\Winlogon: [Userinit] C:\Windows\System32\Userinit.exe,C:\Program Files\G DATA\TotalProtection\AVKTray\AVKTray.exe,c:\program files\g data\totalprotection\avkkid\avkcks.exe, HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\Run: [WinPatrol] => C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe [1128000 2014-06-03] (BillP Studios) HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\Run: [SecureBanking] => C:\Program Files\Secure Banking\SecureBanking.exe [507904 2013-06-30] (Secure Banking) HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\MountPoints2: {21f6d865-1543-11e0-bda8-00238b327113} - F:\.\Autorun.exe AUTORUN=1 HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\MountPoints2: {5fbe7ff5-8b09-11e0-a66f-001167b9d20a} - G:\AutoRun.exe HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\MountPoints2: {5fbe8005-8b09-11e0-a66f-001167b9d20a} - G:\AutoRun.exe HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\MountPoints2: {9b0eb52d-a5b7-11e1-a46e-001167b9d20a} - G:\install-tl.bat Lsa: [Notification Packages] scecli DPPWDFLT Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2012-07-09] ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2014-06-28] ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files\Secunia\PSI\psi_tray.exe (Secunia) Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk [2015-05-25] ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) BootExecute: autocheck autochk * bddel.exe ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 Tcpip\..\Interfaces\{34A61A64-7F90-4FE5-82C8-6FF9580B7146}: [DhcpNameServer] 8.8.8.8 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-117767610-4170920979-3955755671-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-117767610-4170920979-3955755671-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp URLSearchHook: HKU\S-1-5-21-117767610-4170920979-3955755671-1000 - (Kein Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} - Keine Datei SearchScopes: HKLM -> DefaultScope Wert fehlt SearchScopes: HKU\S-1-5-21-117767610-4170920979-3955755671-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=SKY2DF&PC=SKY2&q={searchTerms}&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-117767610-4170920979-3955755671-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=SKY2DF&PC=SKY2&q={searchTerms}&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-117767610-4170920979-3955755671-1000 -> {C3F162DB-0DE1-45D9-B94C-89F5253561B0} URL = hxxp://www.google.de/search?q={searchTerms} BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-23] (Hewlett-Packard Co.) BHO: RealPlayer Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2012-05-18] (RealPlayer) BHO: DigitalPersona Personal Extension -> {395610AE-C624-4f58-B89E-23733EA00F9A} -> C:\Program Files\DigitalPersona\Bin\DpOtsPluginIe8.dll [2009-04-17] (DigitalPersona, Inc.) BHO: SwissAcademic.Citavi.Picker.IEPicker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation) BHO: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems Incorporated) BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10] (Skype Technologies S.A.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO: NJStarBHO Class -> {E74F179F-F6CC-4BE0-9638-DEA49583953F} -> C:\Program Files\NJStar Communicator\NJStarBHO32.dll [2011-05-26] (NJStar Software Corp.) BHO: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems Incorporated) BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-23] (Hewlett-Packard Co.) Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems Incorporated) Toolbar: HKU\.DEFAULT -> Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems Incorporated) Toolbar: HKU\S-1-5-21-117767610-4170920979-3955755671-1000 -> Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems Incorporated) DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab DPF: {CAFEEFAC-0017-0000-0060-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10] (Skype Technologies S.A.) FireFox: ======== FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default FF SearchEngineOrder.3: Bing FF SelectedSearchEngine: Bing FF Homepage: hxxp://www.helpuu.com/ FF Session Restore: -> ist aktiviert. FF Keyword.URL: hxxp://www.bing.com/search?FORM=SKY2DF&PC=SKY2&q= FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_207.dll [2015-10-14] () FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] () FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google) FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei] FF Plugin: @real.com/nppl3260;version=15.0.4.53 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll [2012-05-18] (RealNetworks, Inc.) FF Plugin: @real.com/nprjplug;version=15.0.4.53 -> c:\program files\real\realplayer\Netscape6\nprjplug.dll [2012-05-18] (RealNetworks, Inc.) FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-05-18] (RealNetworks, Inc.) FF Plugin: @real.com/nprphtml5videoshim;version=15.0.4.53 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-05-18] (RealNetworks, Inc.) FF Plugin: @real.com/nprpplugin;version=15.0.4.53 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll [2012-05-18] (RealPlayer) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-21] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-21] (Google Inc.) FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin: @wacom.com/wacom-plugin,version=1.1.0.10 -> C:\Program Files\TabletPlugins\npwacom.dll [2011-04-20] (Wacom, Inc.) FF Plugin: @wacom.com/wtPlugin,version=2.0.0.1 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2011-05-31] (Wacom) FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll [2013-05-08] (Adobe Systems Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-117767610-4170920979-3955755671-1000: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2011-05-31] (Wacom) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\CCMSDK.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\cgpcfg.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\CgpCore.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\confmgr.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\ctxlogging.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\ctxmui.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\icafile.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\icalogon.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npicaN.dll [2009-09-13] () FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2015-06-29] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2012-05-18] (RealNetworks, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2015-09-01] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2015-09-01] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2015-09-01] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2015-09-01] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2015-09-01] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprjplug.dll [2012-05-18] (RealNetworks, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpplugin.dll [2012-05-18] (RealPlayer) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\sslsdk_b.dll [2009-08-14] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\TcpPServ.dll [2009-09-13] (Citrix Systems, Inc.) FF SearchPlugin: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\searchplugins\bing-.xml [2015-03-12] FF Extension: FireShot - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} [2015-06-18] FF Extension: SafeFinder Smartbar - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{167a2a7f-a817-09f9-4854-a1f882132afd} [2014-07-24] FF Extension: EPUBReader - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F} [2015-05-28] FF Extension: DownThemAll! AntiContainer - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\anticontainer@downthemall.net.xpi [2011-05-12] FF Extension: 1-Click YouTube Video Downloader - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2013-10-28] FF Extension: NoScript - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-06-28] FF Extension: Adblock Plus - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-05-15] FF Extension: DownThemAll! - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2011-05-12] FF Extension: Greasemonkey - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2012-08-27] FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-09-23] FF Extension: Kein Name - C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2015-09-23] FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-12-11] FF HKLM\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files\DigitalPersona\Bin\FirefoxExt FF Extension: DigitalPersona Extension - C:\Program Files\DigitalPersona\Bin\FirefoxExt [2010-12-11] FF HKLM\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2012-05-15] FF HKLM\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-05-18] FF HKLM\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdwteff => nicht gefunden FF HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files\DigitalPersona\Bin\firefoxext FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-09-14] Chrome: ======= CHR Profile: C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2011-11-02] CHR Extension: (NJStar Chromate - NJStar Communicator Plugin for Chrome) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlklhlmekdhcfmndodpbjmgpepoeiiaf [2012-05-18] CHR Extension: (Norton Identity Protection) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2012-05-18] CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2012-05-18] CHR HKLM\...\Chrome\Extension: [jlklhlmekdhcfmndodpbjmgpepoeiiaf] - C:\Program Files\NJStar Communicator\PLUGIN\NJChromate-3.0.2.crx [2011-05-26] CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-10-10] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AVKProxy; C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe [2558072 2015-06-19] (G Data Software AG) R2 AVKService; C:\Program Files\G DATA\TotalProtection\AVK\AVKService.exe [966776 2015-06-16] (G Data Software AG) R2 AVKWCtl; C:\Program Files\G DATA\TotalProtection\AVK\AVKWCtl.exe [2907776 2015-06-16] (G Data Software AG) S2 DpHost; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [322624 2009-04-17] (DigitalPersona, Inc.) [Datei ist nicht signiert] S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2010-12-11] (Macrovision Europe Ltd.) [Datei ist nicht signiert] R2 GDBackupSvc; C:\Program Files\G DATA\TotalProtection\AVKBackup\AVKBackupService.exe [3894392 2015-06-19] (G Data Software AG) R3 GDFwSvc; C:\Program Files\G DATA\TotalProtection\Firewall\GDFwSvc.exe [2550896 2015-06-19] (G Data Software AG) R3 GDScan; C:\Program Files\Common Files\G Data\GDScan\GDScan.exe [789624 2015-06-16] (G Data Software AG) R3 GDTunerSvc; C:\Program Files\G DATA\TotalProtection\AVKTuner\AVKTunerService.exe [2235512 2015-06-16] (G Data Software AG) S3 HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [121344 2010-06-30] (Hewlett-Packard Company) [Datei ist nicht signiert] R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-23] (Hewlett-Packard Co.) [Datei ist nicht signiert] R3 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-23] (Hewlett-Packard Co.) [Datei ist nicht signiert] R3 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [694784 2009-09-23] (Hewlett-Packard Co.) [Datei ist nicht signiert] S2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation) S3 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert] R3 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert] S2 Secunia PSI Agent; C:\Program Files\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia) S2 Secunia Update Agent; C:\Program Files\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia) S2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_8e7d5b9d3a91d8c5\STacSV.exe [221266 2009-07-21] (IDT, Inc.) S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert] S3 TSNxGService; C:\Program Files\G DATA\TotalProtection\TSNxG\TSNxGService.exe [255608 2014-07-01] (G DATA Software) R2 vpnagent; C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe [558480 2013-10-10] (Cisco Systems, Inc.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 acsock; C:\Windows\System32\DRIVERS\acsock.sys [92528 2013-10-10] (Cisco Systems, Inc.) R3 BlueletAudio; C:\Windows\System32\DRIVERS\blueletaudio.sys [34704 2007-05-11] (IVT Corporation.) R3 BlueletSCOAudio; C:\Windows\System32\DRIVERS\BlueletSCOAudio.sys [27792 2007-03-05] (IVT Corporation.) R3 BT; C:\Windows\System32\DRIVERS\btnetdrv.sys [16272 2007-05-23] (IVT Corporation.) S3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [36496 2007-05-23] (IVT Corporation.) R0 BTHidEnum; C:\Windows\System32\Drivers\vbtenum.sys [20880 2007-03-05] (IVT Corporation.) R0 BTHidMgr; C:\Windows\System32\Drivers\BTHidMgr.sys [35600 2007-03-05] (IVT Corporation.) S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [38400 2009-03-02] (Samsung Electronics Co., Ltd.) [Datei ist nicht signiert] R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [112640 2015-09-21] (G Data Software AG) R3 GDKBB; C:\Windows\system32\drivers\GDKBB32.sys [24192 2015-05-15] (G Data Software AG) R1 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt32.sys [20352 2015-05-15] (G Data Software AG) R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [161280 2015-09-21] (G Data Software AG) R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [73216 2015-09-21] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd32.sys [54272 2015-09-21] (G Data Software AG) R1 GRD; C:\Windows\system32\drivers\GRD.sys [29528 2015-05-23] (G Data Software) R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [87040 2015-09-21] (G Data Software AG) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-06-18] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-06-18] (Malwarebytes Corporation) R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_x86.sys [16024 2013-12-06] (Secunia) S4 sptd; C:\Windows\System32\Drivers\sptd.sys [639224 2012-05-24] (Duplex Secure Ltd.) R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2009-03-02] (Samsung Electronics) [Datei ist nicht signiert] S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project) R0 TS4NT; C:\Windows\System32\Drivers\TS4nt.sys [103928 2015-09-21] (G Data Software) R3 VComm; C:\Windows\System32\DRIVERS\VComm.sys [34448 2007-03-05] (IVT Corporation.) R3 VcommMgr; C:\Windows\System32\Drivers\VcommMgr.sys [44304 2007-03-05] (IVT Corporation.) S3 vpcbus; C:\Windows\System32\DRIVERS\vpchbus.sys [165376 2009-09-23] (Microsoft Corporation) [Datei ist nicht signiert] S3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [78336 2009-09-23] (Microsoft Corporation) [Datei ist nicht signiert] S3 vpnva; C:\Windows\System32\DRIVERS\vpnva-6.sys [43376 2013-10-10] (Cisco Systems, Inc.) S3 clwvd; system32\DRIVERS\clwvd.sys [X] S3 cpuz134; \??\C:\Users\*****\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X] S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X] S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X] S3 massfilter; system32\drivers\massfilter.sys [X] U5 TMUSB; C:\Windows\System32\DRIVERS\TMUSBXP.SYS [49408 2012-12-05] (Seiko Epson Corporation) S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X] S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X] S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-10-14 21:55 - 2015-10-14 22:07 - 00001898 _____ C:\Users\*****\Desktop\JRT.txt 2015-10-14 21:46 - 2015-10-14 21:53 - 00002310 _____ C:\Users\*****\Desktop\AdwCleaner[C1].txt 2015-10-14 21:39 - 2015-10-14 21:42 - 00000000 ____D C:\AdwCleaner 2015-10-14 21:37 - 2015-10-14 21:37 - 01798976 _____ (Malwarebytes) C:\Users\*****\Desktop\JRT.exe 2015-10-14 21:35 - 2015-10-14 21:53 - 00141338 _____ C:\Users\*****\Desktop\mbam.txt 2015-10-13 13:51 - 2015-10-14 22:10 - 00000000 ____D C:\Users\*****\Desktop\TrojanBoard 102015 2015-10-13 13:46 - 2015-10-14 22:10 - 00000000 ____D C:\FRST 2015-10-13 13:42 - 2015-10-13 13:43 - 00000020 _____ C:\Users\*****\defogger_reenable 2015-09-27 23:17 - 2015-09-27 23:17 - 00002159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015.lnk 2015-09-27 23:17 - 2015-09-27 23:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015 2015-09-27 23:15 - 2015-09-27 23:15 - 00000000 ____D C:\Users\*****\AppData\Roaming\AVG 2015-09-27 23:14 - 2015-09-27 23:14 - 00000000 ____D C:\Program Files\AVG 2015-09-27 23:08 - 2015-09-27 23:08 - 00000000 ____D C:\Users\*****\AppData\Local\Avg 2015-09-27 23:06 - 2015-09-27 23:06 - 00000000 ____D C:\ProgramData\AVG 2015-09-27 20:03 - 2015-09-27 20:50 - 00000000 ____D C:\Users\*****\Desktop\Konflikt Zeugs aus Papierkorb 2015-09-25 23:02 - 2015-09-25 23:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2015-09-25 22:53 - 2015-09-25 22:53 - 00000000 ____D C:\Program Files\Bonjour 2015-09-25 22:52 - 2015-09-25 22:52 - 00000000 ____D C:\Program Files\Apple Software Update 2015-09-23 18:28 - 2015-10-02 16:39 - 00000000 ____D C:\Program Files\Mozilla Firefox 2015-09-21 20:47 - 2015-09-21 20:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA TOTAL PROTECTION ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-10-14 21:58 - 2009-07-14 06:34 - 00013472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-10-14 21:58 - 2009-07-14 06:34 - 00013472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-10-14 21:48 - 2010-12-11 12:28 - 01839858 _____ C:\Windows\WindowsUpdate.log 2015-10-14 21:44 - 2012-08-13 12:17 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-10-14 21:44 - 2010-12-11 15:17 - 03529418 _____ C:\Windows\PFRO.log 2015-10-14 21:44 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-10-14 21:44 - 2009-07-14 06:39 - 00135997 _____ C:\Windows\setupact.log 2015-10-14 21:31 - 2010-12-11 12:36 - 01629284 _____ C:\Windows\system32\PerfStringBackup.INI 2015-10-14 21:30 - 2014-06-19 23:24 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-10-14 21:23 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\L2Schemas 2015-10-14 19:19 - 2013-05-21 13:10 - 00000000 ____D C:\Users\*****\AppData\Roaming\TeamDrive3 2015-10-14 18:29 - 2011-09-10 01:23 - 00155480 _____ C:\ProgramData\nvModes.001 2015-10-14 17:23 - 2012-08-13 12:17 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-10-14 17:20 - 2012-04-09 01:26 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-10-14 16:47 - 2013-06-28 22:21 - 00000000 ____D C:\Program Files\Recuva 2015-10-14 16:20 - 2012-04-09 01:26 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2015-10-14 16:20 - 2011-08-08 23:34 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2015-10-14 16:06 - 2014-06-19 23:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-10-14 16:06 - 2014-06-19 23:23 - 00000000 ____D C:\Program Files\ Malwarebytes Anti-Malware 2015-10-14 15:51 - 2014-02-08 17:04 - 00262144 _____ C:\Windows\system32\config\elam 2015-10-14 15:44 - 2011-06-02 12:58 - 00000000 ____D C:\Program Files\Mobile Partner 2015-10-14 15:43 - 2014-05-23 23:52 - 00000000 ____D C:\Program Files\CyberGhost 5 2015-10-13 19:34 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF 2015-10-13 13:42 - 2010-12-11 12:32 - 00000000 ____D C:\Users\***** 2015-10-13 13:17 - 2012-05-03 20:32 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2015-10-13 13:10 - 2011-02-01 21:55 - 00000000 ____D C:\Users\*****\AppData\Local\CrashDumps 2015-10-08 17:58 - 2015-07-03 12:33 - 00000421 _____ C:\Users\*****\Desktop\Plan Arbeitssuche.txt 2015-10-08 12:50 - 2012-05-28 17:36 - 00000000 ____D C:\Users\*****\AppData\Roaming\vlc 2015-10-08 12:49 - 2013-09-23 14:40 - 00000000 ____D C:\Users\*****\dwhelper 2015-09-25 23:02 - 2014-06-28 23:00 - 00030703 _____ C:\Windows\SecuniaPackage.log 2015-09-25 23:01 - 2011-10-07 18:18 - 00000000 ____D C:\Program Files\iTunes 2015-09-25 23:01 - 2011-10-07 18:18 - 00000000 ____D C:\Program Files\iPod 2015-09-25 23:01 - 2010-12-11 15:53 - 00000000 ____D C:\Program Files\Common Files\Apple 2015-09-25 22:52 - 2010-12-11 15:54 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2015-09-23 14:19 - 2012-05-15 13:47 - 00000000 ____D C:\Users\*****\Documents\Citavi 3 2015-09-23 13:54 - 2010-12-11 22:45 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR 2015-09-21 20:47 - 2015-05-15 19:32 - 00103928 _____ (G Data Software) C:\Windows\system32\Drivers\TS4nt.sys 2015-09-21 20:47 - 2015-05-15 19:32 - 00073216 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys 2015-09-21 20:46 - 2015-05-15 19:31 - 00161280 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys 2015-09-21 20:46 - 2015-05-15 19:31 - 00112640 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys 2015-09-21 20:46 - 2015-05-15 19:31 - 00087040 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys 2015-09-21 20:46 - 2015-05-15 19:31 - 00054272 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd32.sys 2015-09-21 20:45 - 2010-12-11 14:37 - 00051154 _____ C:\Windows\DPINST.LOG ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2011-07-08 00:24 - 2014-01-27 15:16 - 0000132 _____ () C:\Users\*****\AppData\Roaming\Adobe GIF Format CS5 Prefs 2011-02-01 23:30 - 2014-01-27 15:21 - 0000132 _____ () C:\Users\*****\AppData\Roaming\Adobe PNG Format CS5 Prefs 2015-05-15 19:31 - 2015-05-15 19:31 - 0000000 _____ () C:\Users\*****\AppData\Roaming\gdfw.log 2015-05-15 19:30 - 2015-05-15 19:31 - 0000779 _____ () C:\Users\*****\AppData\Roaming\gdscan.log 2012-08-27 23:42 - 2012-08-28 03:14 - 0000116 _____ () C:\Users\*****\AppData\Roaming\history.PDF.pwcdat 2012-04-16 01:03 - 2012-04-16 01:03 - 0000066 _____ () C:\Users\*****\AppData\Local\MODup-Log.txt 2011-01-04 23:53 - 2011-01-06 17:29 - 0001474 _____ () C:\Users\*****\AppData\Local\RecConfig.xml 2012-06-18 14:17 - 2012-06-18 14:17 - 0007605 _____ () C:\Users\*****\AppData\Local\Resmon.ResmonCfg 2011-04-20 09:13 - 2011-04-20 09:13 - 2522934 _____ () C:\Users\*****\AppData\Local\[j0003]-[p09].bmp 2010-12-12 19:39 - 2010-12-12 19:39 - 0000048 ____H () C:\ProgramData\ezsidmv.dat 2010-12-11 14:07 - 2012-12-07 02:17 - 0005057 _____ () C:\ProgramData\hpzinstall.log 2011-09-10 01:23 - 2015-10-14 18:29 - 0155480 _____ () C:\ProgramData\nvModes.001 2011-09-09 23:03 - 2012-06-15 20:14 - 0155480 _____ () C:\ProgramData\nvModes.dat Einige Dateien in TEMP: ==================== C:\Users\*****\AppData\Local\Temp\IrsoDLL.dll C:\Users\*****\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:12-10-2015 durchgeführt von ***** (2015-10-14 22:11:16) Gestartet von C:\Users\*****\Desktop\TrojanBoard 102015 Microsoft Windows 7 Professional Service Pack 1 (X86) (2010-12-11 10:32:28) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-117767610-4170920979-3955755671-500 - Administrator - Disabled) Gast (S-1-5-21-117767610-4170920979-3955755671-501 - Limited - Disabled) => C:\Users\Gast HomeGroupUser$ (S-1-5-21-117767610-4170920979-3955755671-1005 - Limited - Enabled) ***** (S-1-5-21-117767610-4170920979-3955755671-1000 - Administrator - Enabled) => C:\Users\***** ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: G DATA TOTAL PROTECTION (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0} AS: G DATA TOTAL PROTECTION (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: G DATA Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) 32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden 7-Zip 9.20 (HKLM\...\7-Zip) (Version: - ) 8500A909_eDocs (Version: 1.00.0000 - Hewlett-Packard) Hidden 8500A909_Help (Version: 1.00.0000 - Hewlett-Packard) Hidden 8500A909a (Version: 50.0.165.000 - Hewlett-Packard) Hidden ActiveCheck component for HP Active Support Library (Version: 3.0.0.3 - Hewlett-Packard) Hidden Adobe Acrobat 9 Pro - English, Français, Deutsch (HKLM\...\{AC76BA86-1033-F400-7760-000000000004}{AC76BA86-1033-F400-7760-000000000004}) (Version: 9.5.5 - Adobe Systems) Adobe Acrobat 9.5.5 - CPSID_83708 (HKLM\...\{AC76BA86-1033-F400-7760-000000000004}_955) (Version: - Adobe Systems Incorporated) Adobe AIR (HKLM\...\Adobe AIR) (Version: 19.0.0.190 - Adobe Systems Incorporated) Adobe Community Help (HKLM\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated) Adobe Digital Editions 2.0 (HKLM\...\Adobe Digital Editions 2.0) (Version: 2.0.1 - Adobe Systems Incorporated) Adobe Flash Player 19 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 19.0.0.207 - Adobe Systems Incorporated) Adobe Flash Player 19 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 19.0.0.207 - Adobe Systems Incorporated) Adobe Media Player (HKLM\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated) Adobe Reader XI (11.0.12) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated) AIO_CDA_ProductContext (Version: 130.0.365.000 - Hewlett-Packard) Hidden AIO_CDA_Software (Version: 130.0.365.000 - Hewlett-Packard) Hidden AIO_Scan (Version: 130.0.365.000 - Hewlett-Packard) Hidden Amazon Kindle (HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\Amazon Kindle) (Version: - Amazon) Amazon Send to Kindle (HKLM\...\SendToKindle) (Version: 1.0.1.237 - Amazon) AMP WinOFF 5.0.1 (HKLM\...\AMP WinOFF) (Version: 5.0.1 - Alberto Martinez Perez) Apple Application Support (32-Bit) (HKLM\...\{3540ADD5-822B-47FB-B1C2-CD7B2C8E9FEC}) (Version: 4.0.2 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{A75CA58D-DB9C-4D14-9428-E0C7B0F623DC}) (Version: 9.0.0.26 - Apple Inc.) Apple Software Update (HKLM\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.) AVG PC TuneUp 2015 (de-DE) (Version: 15.0.1001.638 - AVG Technologies) Hidden Bamboo (HKLM\...\Pen Tablet Driver) (Version: 5.2.5-5 - Wacom Technology Corp.) Bamboo Dock (HKLM\...\Bamboo Dock) (Version: 4.0 - Wacom Co., Ltd.) Bamboo Dock (Version: 4.1.0 - Wacom Europe GmbH) Hidden Bamboo Tablets Tutorial (Version: 3.0.20 - Wacom) Hidden Benutzerhandbuch EPSON BX535WD Series (HKLM\...\EPSON BX535WD Series Useg) (Version: - ) Bluesoleil2.6.0.9 Release 070606 (HKLM\...\{846AC73B-9394-48B9-B941-8F7F472F0047}) (Version: 2.6.0.9 Release 070606 - IVT Corporation) BoneLab (HKLM\...\{D16CBD59-07B3-4F98-A404-01B6D87A90F2}) (Version: 1.4.0.5 - Next Dimension Imaging) Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.) BPD_DSWizards (Version: 1.00.0000 - Hewlett-Packard) Hidden bpd_scan (Version: 3.00.0000 - Hewlett-Packard) Hidden BPDSoftware (Version: 50.0.165.000 - Hewlett-Packard) Hidden BPDSoftware_Ini (Version: 1.00.0000 - Hewlett-Packard) Hidden Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.18.12 - Broadcom Corporation) BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden C3100 (Version: 130.0.365.000 - Hewlett-Packard) Hidden c3100_Help (Version: 82.0.256.000 - Hewlett-Packard) Hidden calibre (HKLM\...\{F194B9D2-5BB0-4A36-912A-861DE0652181}) (Version: 1.23.0 - Kovid Goyal) Cisco AnyConnect Secure Mobility Client (HKLM\...\Cisco AnyConnect Secure Mobility Client) (Version: 3.1.04072 - Cisco Systems, Inc.) Cisco AnyConnect Secure Mobility Client (Version: 3.1.04072 - Cisco Systems, Inc.) Hidden Citavi (HKLM\...\{E12C6653-1FF0-4686-ADB8-589C13AE761F}) (Version: 3.4.0.2 - Swiss Academic Software) Citrix Online Plug-in - Web (HKLM\...\CitrixOnlinePluginPackWeb) (Version: 11.2.0.31560 - Citrix Systems, Inc.) Citrix Presentation Server Client - Nur Web (HKLM\...\{E9459BCF-0982-498B-ABA7-26C34323493F}) (Version: 10.200.2650 - Citrix Systems, Inc.) Consideo Modeler - Consideo GmbH (HKLM\...\ConsideoModeler) (Version: - ) Copy (Version: 130.0.428.000 - Hewlett-Packard) Hidden Destinations (Version: 140.0.77.000 - Hewlett-Packard) Hidden DeviceDiscovery (Version: 130.0.465.000 - Hewlett-Packard) Hidden DigitalPersona Personal 4.01 (HKLM\...\{8D4B1164-3935-44B2-9152-D0CB0AFBCCF4}) (Version: 4.01.3749 - DigitalPersona, Inc.) DocMgr (Version: 130.0.000.000 - Ihr Firmenname) Hidden DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden Download Navigator (HKLM\...\{2E214231-5FAD-410A-AF5D-99AAB8558434}) (Version: 2.1.0 - SEIKO EPSON CORPORATION) EPSON BX535WD Series Printer Uninstall (HKLM\...\EPSON BX535WD Series) (Version: - SEIKO EPSON Corporation) Epson Event Manager (HKLM\...\{FA9D303D-0FB2-49C7-9397-8E6B11EA892D}) (Version: 2.50.0001 - SEIKO EPSON CORPORATION) EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation) EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4j - SEIKO EPSON CORPORATION) Fax (Version: 130.0.418.000 - Hewlett-Packard) Hidden Free Video Flip and Rotate version 2.1.1.719 (HKLM\...\Free Video Flip and Rotate_is1) (Version: 2.1.1.719 - DVDVideoSoft Ltd.) Free YouTube to MP3 Converter version 3.9.35.324 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: - DVDVideoSoft Limited.) G DATA TOTAL PROTECTION (HKLM\...\{2A1FF304-D778-49F1-B340-E4BF4CDA2EB0}) (Version: 25.1.0.8 - G DATA Software AG) Google Earth Plug-in (HKLM\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (Version: 1.3.28.15 - Google Inc.) Hidden GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden HP Advisor (HKLM\...\{B53E61D7-7C80-40DF-82D2-CF5390D6D20A}) (Version: 3.2.9652.3188 - Hewlett-Packard) HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP) HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP) HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP) HP Photosmart All-In-One Driver Software 13.0 Rel. A (HKLM\...\{17016DA1-F040-4032-BD36-34DD317BC9D5}) (Version: 13.0 - HP) HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP) HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP) HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HPAsset component for HP Active Support Library (Version: 3.0.0.3 - Hewlett-Packard) Hidden HPPhotoGadget (Version: 130.0.282.000 - Hewlett-Packard) Hidden HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden IDT Audio (HKLM\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6225.0 - IDT) iStonsoft iPad iPod iPhone Data Recovery (HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\iStonsoft iPad iPod iPhone Data Recovery) (Version: 2.1.31 - iStonsoft) iTunes (HKLM\...\{9E9CFD9F-64D6-498F-8584-E5CD08BA60BE}) (Version: 12.3.0.44 - Apple Inc.) Java 8 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation) JMicron JMB38X Flash Media Controller (HKLM\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.00.18.07 - JMicron Technology Corp.) Joe (HKLM\...\{0AD3DEBC-5321-457E-8B43-8F546940169B}) (Version: 4.00.0050 - Wirth IT Design) LandOnline Client Components (HKLM\...\LandOnline Client Components) (Version: 1.0 - Land Information NZ) Livebrush Mini (HKLM\...\com.livebrush.2205ABAA7E8202CDC1251B1FA1E879364B7BAB52.1) (Version: 1.5 - MoreMeYou) Livebrush Mini (Version: 1.5 - MoreMeYou) Hidden Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation) MarketResearch (Version: 130.0.374.000 - Hewlett-Packard) Hidden MediaMonkey 4.1 (HKLM\...\MediaMonkey_is1) (Version: 4.1 - Ventis Media Inc.) Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft IntelliPoint 7.1 (HKLM\...\{7057ABC2-EFF3-4E43-9806-8BCB6EEA9FE6}) (Version: 7.10.344.0 - Microsoft) Microsoft IntelliType Pro 8.2 (HKLM\...\Microsoft IntelliType Pro 8.2) (Version: 8.20.469.0 - Microsoft Corporation) Microsoft Office Professional 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Sync Framework 2.0 Core Components (x86) ENU (HKLM\...\{FF63121D-91C6-42CC-B341-F1AA729728E7}) (Version: 2.0.1578.0 - Microsoft Corporation) Microsoft Sync Framework 2.0 Provider Services (x86) ENU (HKLM\...\{D3A80508-CD83-4CA3-8671-914A1BC78B61}) (Version: 2.0.1578.0 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) MoodTuner (HKLM\...\com.gugga.radiomini) (Version: 1.1 - GUGA EOOD) MoodTuner (Version: 1.1 - GUGA EOOD) Hidden Mozilla Firefox 41.0.1 (x86 de) (HKLM\...\Mozilla Firefox 41.0.1 (x86 de)) (Version: 41.0.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 41.0.1.5750 - Mozilla) MPM (HKLM\...\{CD8C5C7F-7C58-4F85-8977-A6C08C087912}) (Version: 1.00.0000 - Hewlett-Packard) MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Network (Version: 130.0.579.000 - Hewlett-Packard) Hidden Netzwerkhandbuch EPSON BX535WD Series (HKLM\...\EPSON BX535WD Series Netg) (Version: - ) NirSoft BlueScreenView (HKLM\...\NirSoft BlueScreenView) (Version: - ) NJStar Communicator (HKLM\...\NJStar Communicator) (Version: 3.00 - NJStar Software Corp.) Nokia Connectivity Cable Driver (HKLM\...\{4AA68A73-DB9C-439D-9481-981C82BD008B}) (Version: 7.1.69.0 - Nokia) Nokia PC Suite (HKLM\...\Nokia PC Suite) (Version: 7.1.180.64 - Nokia) Nokia PC Suite (Version: 7.1.180.64 - Nokia) Hidden NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: - ) OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP) Officejet Pro 8500 A909 Series (HKLM\...\{D850BEF5-67AF-4071-9538-FA9AC725D62C}) (Version: 13.0 - HP) OpenOffice.org 3.3 (HKLM\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org) Oracle VM VirtualBox 4.1.12 (HKLM\...\{BD2DF5E1-0B64-40EB-93CC-77F984ADB408}) (Version: 4.1.12 - Oracle Corporation) PC Connectivity Solution (HKLM\...\{A2AA4204-C05A-4013-888A-AD153139297F}) (Version: 11.5.29.0 - Nokia) PDF Settings CS5 (Version: 10.0 - Adobe Systems Incorporated) Hidden ProductContext (Version: 50.0.165.000 - Hewlett-Packard) Hidden QuickTime 7 (HKLM\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.) RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden RealPlayer (HKLM\...\RealPlayer 15.0) (Version: 15.0.4 - RealNetworks) Realtek USB 2.0 Card Reader (HKLM\...\{DC24971E-1946-445D-8A82-CE685433FA7D}) (Version: 3.0.1.3 - Realtek Semiconductor Corp.) RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) Safari (HKLM\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.) Samsung ML-1510_700 Series (HKLM\...\Samsung ML-1510_700 Series) (Version: - ) Samsung_MonSetup (HKLM\...\{8EA79DBF-D637-448A-89D6-410A087A4493}) (Version: 1.00.0000 - Samsung) Scan (Version: 140.0.80.000 - Hewlett-Packard) Hidden Secunia PSI (3.0.0.9016) (HKLM\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia) Secure Banking Version 1.5.2 (HKLM\...\{0BEE0AF9-79F3-4C4F-B374-90C0A16BF294}_is1) (Version: 1.5.2 - Hopfgartner Niklas) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.6.8442 - Skype Technologies S.A.) Skype™ 7.2 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.2.103 - Skype Technologies S.A.) SmartWebPrinting (Version: 130.0.457.000 - Hewlett-Packard) Hidden SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden Status (Version: 130.0.469.000 - Hewlett-Packard) Hidden SyncToy 2.1 (x86) (HKLM\...\{A066194B-DC8F-449A-8E0F-B57BDD3A2072}) (Version: 2.1.0 - Microsoft) TeamDrive 3 (HKLM\...\TeamDrive 3) (Version: 3.1.0.316 - TeamDrive Systems GmbH) TeX Live 2011 (HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\TeXLive2011) (Version: 2011 - ) Texmaker (HKLM\...\Texmaker) (Version: - ) Toolbox (Version: 130.0.648.000 - Hewlett-Packard) Hidden TrayApp (Version: 130.0.422.000 - Hewlett-Packard) Hidden Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version: - ) UniPrint Client 4.0 (HKLM\...\{50A7D603-B3DD-48C1-A518-486B2EDFFA3F}) (Version: 4.0.6 - UniPrint, a division of GFI Business Solutions Inc.) UnloadSupport (Version: 11.0.0 - Hewlett-Packard) Hidden v2010.build.42 (HKLM\...\{B93DCF58-AA57-41EC-8D69-B05C66C6312D}_is1) (Version: v2010.build.42 - eRightSoft) Validity Sensors software (HKLM\...\{F65B8208-5221-43D9-AA12-DDEA64EC4AF6}) (Version: 2.8.116 - Validity Sensors, Inc.) VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN) WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden WebTablet FB Plugin (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.0.0.1 - Wacom Technology Corp.) WebTablet IE Plugin (HKLM\...\Wacom WebTabletPlugin for IE) (Version: 1.1.0.12 - Wacom Technology Corp.) WebTablet Netscape Plugin (HKLM\...\Wacom WebTabletPlugin for Netscape) (Version: 1.1.0.10 - Wacom Technology Corp.) Windows-Treiberpaket - Nokia Modem (02/25/2011 4.7) (HKLM\...\E0AC723A3DE3A04256288CADBBB011B112AED454) (Version: 02/25/2011 4.7 - Nokia) Windows-Treiberpaket - Nokia Modem (02/25/2011 7.01.0.9) (HKLM\...\72A50F48CC5601190B9C4E74D81161693133E7F7) (Version: 02/25/2011 7.01.0.9 - Nokia) Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0) (HKLM\...\504244733D18C8F63FF584AEB290E3904E791693) (Version: 08/22/2008 7.0.0.0 - Nokia) WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 31.0.2014.0 - BillP Studios) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\ProgramData\Skype Extras\ezPMUtils.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{092dfa86-5807-5a94-bf3b-5a53ba9e5308}\InprocServer32 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{1EFF7739-9BDA-4295-BC07-383554CAAC84}\InprocServer32 -> C:\Users\*****\AppData\Local\Citrix\ICA Client\CCMProxy.dll (Citrix Systems, Inc.) CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{238F6F83-B8B4-11CF-8771-00A024541EE3}\InprocServer32 -> C:\Users\*****\AppData\Local\Citrix\ICA Client\Wfica.ocx (Citrix Systems, Inc.) CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{238F6F85-B8B4-11CF-8771-00A024541EE3}\InprocServer32 -> C:\Users\*****\AppData\Local\Citrix\ICA Client\Wfica.ocx (Citrix Systems, Inc.) CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\ProgramData\Skype Extras\ezPMUtils.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{D085A4AB-CAB1-4729-9DF8-FCEEDDBD19E4}\localserver32 -> C:\Users\*****\AppData\Local\Citrix\ICA Client\wfcrun32.exe (Citrix Systems, Inc.) CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{D0D38C6E-BF64-4C42-840D-3E0019D9F7A6}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => Keine Datei ==================== Wiederherstellungspunkte ========================= 26-09-2015 10:16:36 Geplanter Prüfpunkt 27-09-2015 23:09:05 AVG PC TuneUp 2015 wird installiert 14-10-2015 15:48:10 Removed Skype Click to Call 14-10-2015 20:29:23 Revo Uninstaller's restore point - AppSafe 14-10-2015 20:34:55 Revo Uninstaller's restore point - SGC 2.0.1.250 14-10-2015 21:49:57 JRT Pre-Junkware Removal ==================== Hosts Inhalt: ========================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2012-04-26 11:39 - 2014-11-05 21:36 - 00444869 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 1000gratisproben.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 1001namen.com 127.0.0.1 www.1001namen.com 127.0.0.1 www.100888290cs.com 127.0.0.1 100888290cs.com 127.0.0.1 100sexlinks.com 127.0.0.1 www.100sexlinks.com 127.0.0.1 www.10sek.com 127.0.0.1 10sek.com 127.0.0.1 1-2005-search.com 127.0.0.1 www.1-2005-search.com 127.0.0.1 www.123fporn.info 127.0.0.1 123fporn.info 127.0.0.1 www.123haustiereundmehr.com 127.0.0.1 123haustiereundmehr.com 127.0.0.1 www.123moviedownload.com Da befinden sich 15300 zusätzliche Einträge. ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {01A58B17-9994-4F84-9B8A-788B88D86081} - System32\Tasks\{C2FA0599-B043-4F27-9276-365D7402AD4B} => pcalua.exe -a "C:\Program Files\RelevantKnowledge\rlvknlg.exe" -c -bootremove -uninst:RelevantKnowledge Task: {04DA8095-7A2E-4947-93B6-AA3DC01EA294} - System32\Tasks\{4F687082-90D4-4BF6-B8B1-6A47C975F70A} => pcalua.exe -a C:\Users\*****\Desktop\HP\sp45499.exe -d C:\Users\*****\Desktop\HP Task: {0A27E96C-F7CA-4B6F-A081-4E0D6C934EB1} - System32\Tasks\{A9AF9DF9-8AB4-4780-B05C-845F3A4F7F80} => pcalua.exe -a C:\Users\*****\Desktop\HP\sp41701.exe -d C:\Users\*****\Desktop\HP Task: {226A226F-D32F-434A-9550-9B71C95A49EB} - System32\Tasks\{57A1538B-9FC1-4013-8D09-3401422AB79D} => pcalua.exe -a C:\Users\*****\Desktop\AntiTwin_Setup.exe -d C:\Users\*****\Desktop Task: {23F96337-0509-4DEB-B16A-4A882262C1CA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.) Task: {2931D861-9B82-4689-9257-D47728EFDAA4} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-117767610-4170920979-3955755671-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-04-30] (RealNetworks, Inc.) Task: {2BBECF94-610A-47AF-ADC8-A4B95626871A} - System32\Tasks\{63B728FC-7546-4B7D-99D9-65A0874A65DC} => pcalua.exe -a "C:\Users\*****\Desktop\Neuer Ordner\Epson Zeug\epson374735eu.exe" -d "C:\Users\*****\Desktop\Neuer Ordner\Epson Zeug" Task: {2C6B0F51-9EB4-44CA-A332-1371EF777A34} - System32\Tasks\ReclaimerUpdateXML_***** => C:\Users\*****\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.90\agent\rnupgagent.exe [2014-04-08] (RealNetworks, Inc.) Task: {2E880432-BE78-4708-B404-BDED3EF170F8} - System32\Tasks\{C230C231-6276-4147-BB27-0E09D78DDDC5} => pcalua.exe -a C:\Users\*****\Desktop\everest\Dictionary.exe -d C:\Users\*****\Desktop\everest Task: {3386ED1D-AF3D-438C-9E4C-4159259DE9A6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.) Task: {3560B0FF-E40C-490E-A409-C49FFBF7ECE5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-14] (Adobe Systems Incorporated) Task: {3B9DAFC3-0E82-4BC0-B323-A589D770D1D0} - System32\Tasks\Microsoft_Hardware_Launch_IType_exe => c:\Program Files\Microsoft IntelliType Pro\IType.exe [2011-08-10] (Microsoft Corporation) Task: {6EB6D0E5-3238-40AC-82DC-A1166B2ABB25} - System32\Tasks\{D430D610-1028-4E95-B527-F019589A4F36} => pcalua.exe -a C:\Users\*****\Desktop\winstger.exe -d C:\Users\*****\Desktop Task: {719AB619-BCBE-41D0-892F-0C478F8C136F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.) Task: {8B6D6D5C-D37F-4EEF-B072-5A334685E228} - System32\Tasks\{A7737EA2-A290-4226-97EE-BFCEFB607B2C} => C:\Program Files\Skype\\Phone\Skype.exe [2015-02-26] (Skype Technologies S.A.) Task: {B9952096-A45D-4B31-938A-F15AD6450873} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-117767610-4170920979-3955755671-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-04-30] (RealNetworks, Inc.) Task: {D0BDD82D-18D1-4C22-AA38-068E004B7BE8} - System32\Tasks\{2EFB6DAE-93C8-49A4-8484-23E78456EBD6} => pcalua.exe -a C:\Users\*****\Desktop\epson373094eu.exe -d C:\Users\*****\Desktop Task: {D18E9D75-7CA2-45C1-ACD8-B7F597892B83} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files\Norton Identity Safe\Engine\2014.7.0.47\SymErr.exe Task: {D5943F47-F722-48D5-B29A-54508B0B371D} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files\Norton Identity Safe\Engine\2014.7.0.47\SymErr.exe Task: {D9D185E5-4D90-4182-8E28-3D62F94E1F59} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2009-11-05] (Microsoft Corporation) Task: {F2C8252A-15AF-4ADE-A782-0A73C9303EA5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated) Task: {F6FE2553-24A4-4823-95F4-3F5DC179BBBF} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation) Task: {FF2844FF-EA07-4FF2-8E24-CD8330D2248E} - System32\Tasks\AdobeAAMUpdater-1.0-LAPTOP-***** => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2015-06-16 11:17 - 2015-06-16 11:17 - 00318584 ____N () C:\Program Files\Common Files\G Data\AVKProxy\PktIcpt2.dll 2013-10-10 23:48 - 2013-10-10 23:48 - 00063376 _____ () C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll 2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2015-09-15 14:25 - 2015-09-15 14:25 - 01040144 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) AlternateDataStreams: C:\ProgramData\Temp:5C321E34 AlternateDataStreams: C:\ProgramData\Temp:B1FBBD09 ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) ==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) |
14.10.2015, 21:30 | #9 |
| Datum- und Uhrzeitanzeige falsch/Skype Account gehackt/Fehler SyncToy/Bluescreens/Bildschirmflimmern adwCleaner Code:
ATTFilter # AdwCleaner v5.013 - Bericht erstellt am 14/10/2015 um 21:42:18 # Aktualisiert am 09/10/2015 von Xplode # Datenbank : 2015-10-13.2 [Server] # Betriebssystem : Windows 7 Professional Service Pack 1 (x86) # Benutzername : ***** - LAPTOP # Gestartet von : C:\Users\*****\Desktop\AdwCleaner_5.013.exe # Option : Löschen # Unterstützung : hxxp://toolslib.net/forum ***** [ Dienste ] ***** ***** [ Ordner ] ***** [-] Ordner Gelöscht : C:\Users\Gast\AppData\LocalLow\HPAppData [-] Ordner Gelöscht : C:\Users\*****\AppData\LocalLow\HPAppData ***** [ Dateien ] ***** [-] Datei Gelöscht : C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\user.js [-] Datei Gelöscht : C:\Windows\Reimage.ini ***** [ DLLs ] ***** ***** [ Verknüpfungen ] ***** ***** [ Geplante Tasks ] ***** [-] Task Gelöscht : RunAsStdUser Task for VeohWebPlayer [-] Task Gelöscht : YourFile Update ***** [ Registrierungsdatenbank ] ***** [-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC} [-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96} [-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{363F46BE-27B4-4C8D-99E7-B1E049B84376} [-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{90A9B7D2-3794-45EA-9E23-140E3938D2D9} [-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A753A1EC-973E-4718-AF8E-A3F554D45C44} [-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02AFA80F-4BEE-41FD-8572-214B58A9EF90} [-] Schlüssel Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} [-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10ECCE17-29B5-4880-A8F5-EAD298611484} [-] Schlüssel Gelöscht : HKCU\Software\Bitberry [-] Schlüssel Gelöscht : HKCU\Software\Reimage [-] Schlüssel Gelöscht : HKCU\Software\PCCleaners [-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FE5AE7DC-7B01-4263-A94C-B4526C276550_is1 ***** [ Internetbrowser ] ***** ************************* :: Proxy Einstellungen zurückgesetzt :: Winsock Einstellungen zurückgesetzt :: Chrome Richtlinien gelöscht ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [2243 Bytes] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 7.6.2 (09.14.2015:1) OS: Windows 7 Professional x86 Ran by ***** on 14.10.2015 at 21:49:50,45 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Tasks ~~~ Registry Values ~~~ Registry Keys ~~~ Files Successfully deleted: [File] C:\ProgramData\1425590022.bdinstall.bin ~~~ Folders Successfully deleted: [Folder] C:\Program Files\software4u Successfully deleted: [Folder] C:\ProgramData\software4u Successfully deleted: [Folder] C:\Users\*****\Appdata\Local\newsoft Successfully deleted: [Folder] C:\Users\*****\AppData\Roaming\newsoft Successfully deleted: [Folder] C:\Users\*****\AppData\Roaming\software4u Successfully deleted: [Folder] C:\Users\*****\Documents\add-in express Successfully deleted: [Folder] C:\Users\*****\Documents\my pagemanager ~~~ FireFox Successfully deleted: [File] C:\Users\*****\AppData\Roaming\mozilla\firefox\profiles\34urll22.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi Emptied folder: C:\Users\*****\AppData\Roaming\mozilla\firefox\profiles\34urll22.default\minidumps [39 files] ~~~ Chrome [C:\Users\*****\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset [C:\Users\*****\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted: [C:\Users\*****\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset [C:\Users\*****\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 14.10.2015 at 21:55:16,26 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version:12-10-2015 durchgeführt von ***** (Administrator) auf LAPTOP (14-10-2015 22:10:24) Gestartet von C:\Users\*****\Desktop\TrojanBoard 102015 Geladene Profile: ***** (Verfügbare Profile: ***** & Gast) Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (G Data Software AG) C:\Program Files\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) C:\Program Files\G DATA\TotalProtection\AVK\AVKWCtl.exe (G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) C:\Program Files\G DATA\TotalProtection\AVK\AVKService.exe (G Data Software AG) C:\Program Files\G DATA\TotalProtection\Firewall\GDFwSvc.exe (G Data Software AG) C:\Program Files\G DATA\TotalProtection\AVKTray\AVKTray.exe (G DATA Software AG) C:\Program Files\G DATA\TotalProtection\Firewall\GDFirewallTray.exe (G DATA Software AG) C:\Program Files\G DATA\TotalProtection\GUI\GDSC.exe (Cisco Systems, Inc.) C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (G Data Software AG) C:\Program Files\G DATA\TotalProtection\AVKBackup\AVKBackupService.exe (G Data Software AG) C:\Program Files\Common Files\G Data\AVKProxy\GDKBFltExe32.exe (G Data Software AG) C:\Program Files\G DATA\TotalProtection\AVKTuner\AVKTunerService.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\prevhost.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [] => [X] HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1316136 2008-06-20] (Synaptics, Inc.) HKLM\...\Run: [DpAgent] => C:\Program Files\DigitalPersona\Bin\dpagent.exe [842816 2009-04-17] (DigitalPersona, Inc.) HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [458844 2009-07-21] (IDT, Inc.) HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard) HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [60688 2015-09-15] (Apple Inc.) HKLM\...\Run: [EEventManager] => C:\Program Files\Epson Software\Event Manager\EEventManager.exe [979328 2010-10-12] (SEIKO EPSON CORPORATION) HKLM\...\Run: [GDFirewallTray] => C:\Program Files\G DATA\TotalProtection\Firewall\GDFirewallTray.exe [1864312 2015-06-16] (G DATA Software AG) HKLM\...\Run: [ConnectionCenter] => C:\Users\*****\AppData\Local\Citrix\ICA Client\concentr.exe [103768 2009-09-13] (Citrix Systems, Inc.) HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2015-08-06] (Apple Inc.) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157456 2015-09-15] (Apple Inc.) HKLM\...\Winlogon: [Userinit] C:\Windows\System32\Userinit.exe,C:\Program Files\G DATA\TotalProtection\AVKTray\AVKTray.exe,c:\program files\g data\totalprotection\avkkid\avkcks.exe, HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\Run: [WinPatrol] => C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe [1128000 2014-06-03] (BillP Studios) HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\Run: [SecureBanking] => C:\Program Files\Secure Banking\SecureBanking.exe [507904 2013-06-30] (Secure Banking) HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\MountPoints2: {21f6d865-1543-11e0-bda8-00238b327113} - F:\.\Autorun.exe AUTORUN=1 HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\MountPoints2: {5fbe7ff5-8b09-11e0-a66f-001167b9d20a} - G:\AutoRun.exe HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\MountPoints2: {5fbe8005-8b09-11e0-a66f-001167b9d20a} - G:\AutoRun.exe HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\MountPoints2: {9b0eb52d-a5b7-11e1-a46e-001167b9d20a} - G:\install-tl.bat Lsa: [Notification Packages] scecli DPPWDFLT Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2012-07-09] ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2014-06-28] ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files\Secunia\PSI\psi_tray.exe (Secunia) Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk [2015-05-25] ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) BootExecute: autocheck autochk * bddel.exe ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 Tcpip\..\Interfaces\{34A61A64-7F90-4FE5-82C8-6FF9580B7146}: [DhcpNameServer] 8.8.8.8 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-117767610-4170920979-3955755671-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-117767610-4170920979-3955755671-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp URLSearchHook: HKU\S-1-5-21-117767610-4170920979-3955755671-1000 - (Kein Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} - Keine Datei SearchScopes: HKLM -> DefaultScope Wert fehlt SearchScopes: HKU\S-1-5-21-117767610-4170920979-3955755671-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=SKY2DF&PC=SKY2&q={searchTerms}&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-117767610-4170920979-3955755671-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=SKY2DF&PC=SKY2&q={searchTerms}&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-117767610-4170920979-3955755671-1000 -> {C3F162DB-0DE1-45D9-B94C-89F5253561B0} URL = hxxp://www.google.de/search?q={searchTerms} BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-23] (Hewlett-Packard Co.) BHO: RealPlayer Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2012-05-18] (RealPlayer) BHO: DigitalPersona Personal Extension -> {395610AE-C624-4f58-B89E-23733EA00F9A} -> C:\Program Files\DigitalPersona\Bin\DpOtsPluginIe8.dll [2009-04-17] (DigitalPersona, Inc.) BHO: SwissAcademic.Citavi.Picker.IEPicker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation) BHO: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems Incorporated) BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10] (Skype Technologies S.A.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO: NJStarBHO Class -> {E74F179F-F6CC-4BE0-9638-DEA49583953F} -> C:\Program Files\NJStar Communicator\NJStarBHO32.dll [2011-05-26] (NJStar Software Corp.) BHO: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems Incorporated) BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-23] (Hewlett-Packard Co.) Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems Incorporated) Toolbar: HKU\.DEFAULT -> Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems Incorporated) Toolbar: HKU\S-1-5-21-117767610-4170920979-3955755671-1000 -> Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems Incorporated) DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab DPF: {CAFEEFAC-0017-0000-0060-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_60-windows-i586.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10] (Skype Technologies S.A.) FireFox: ======== FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default FF SearchEngineOrder.3: Bing FF SelectedSearchEngine: Bing FF Homepage: hxxp://www.helpuu.com/ FF Session Restore: -> ist aktiviert. FF Keyword.URL: hxxp://www.bing.com/search?FORM=SKY2DF&PC=SKY2&q= FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_207.dll [2015-10-14] () FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] () FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google) FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei] FF Plugin: @real.com/nppl3260;version=15.0.4.53 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll [2012-05-18] (RealNetworks, Inc.) FF Plugin: @real.com/nprjplug;version=15.0.4.53 -> c:\program files\real\realplayer\Netscape6\nprjplug.dll [2012-05-18] (RealNetworks, Inc.) FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-05-18] (RealNetworks, Inc.) FF Plugin: @real.com/nprphtml5videoshim;version=15.0.4.53 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-05-18] (RealNetworks, Inc.) FF Plugin: @real.com/nprpplugin;version=15.0.4.53 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll [2012-05-18] (RealPlayer) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-21] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-21] (Google Inc.) FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin: @wacom.com/wacom-plugin,version=1.1.0.10 -> C:\Program Files\TabletPlugins\npwacom.dll [2011-04-20] (Wacom, Inc.) FF Plugin: @wacom.com/wtPlugin,version=2.0.0.1 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2011-05-31] (Wacom) FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll [2013-05-08] (Adobe Systems Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-117767610-4170920979-3955755671-1000: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2011-05-31] (Wacom) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\CCMSDK.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\cgpcfg.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\CgpCore.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\confmgr.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\ctxlogging.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\ctxmui.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\icafile.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\icalogon.dll [2009-09-13] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npicaN.dll [2009-09-13] () FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2015-06-29] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2012-05-18] (RealNetworks, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2015-09-01] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2015-09-01] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2015-09-01] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2015-09-01] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2015-09-01] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprjplug.dll [2012-05-18] (RealNetworks, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpplugin.dll [2012-05-18] (RealPlayer) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\sslsdk_b.dll [2009-08-14] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\TcpPServ.dll [2009-09-13] (Citrix Systems, Inc.) FF SearchPlugin: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\searchplugins\bing-.xml [2015-03-12] FF Extension: FireShot - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} [2015-06-18] FF Extension: SafeFinder Smartbar - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{167a2a7f-a817-09f9-4854-a1f882132afd} [2014-07-24] FF Extension: EPUBReader - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F} [2015-05-28] FF Extension: DownThemAll! AntiContainer - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\anticontainer@downthemall.net.xpi [2011-05-12] FF Extension: 1-Click YouTube Video Downloader - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2013-10-28] FF Extension: NoScript - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-06-28] FF Extension: Adblock Plus - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-05-15] FF Extension: DownThemAll! - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2011-05-12] FF Extension: Greasemonkey - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\34urll22.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2012-08-27] FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-09-23] FF Extension: Kein Name - C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2015-09-23] FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-12-11] FF HKLM\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files\DigitalPersona\Bin\FirefoxExt FF Extension: DigitalPersona Extension - C:\Program Files\DigitalPersona\Bin\FirefoxExt [2010-12-11] FF HKLM\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2012-05-15] FF HKLM\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-05-18] FF HKLM\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdwteff => nicht gefunden FF HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files\DigitalPersona\Bin\firefoxext FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-09-14] Chrome: ======= CHR Profile: C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2011-11-02] CHR Extension: (NJStar Chromate - NJStar Communicator Plugin for Chrome) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlklhlmekdhcfmndodpbjmgpepoeiiaf [2012-05-18] CHR Extension: (Norton Identity Protection) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2012-05-18] CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2012-05-18] CHR HKLM\...\Chrome\Extension: [jlklhlmekdhcfmndodpbjmgpepoeiiaf] - C:\Program Files\NJStar Communicator\PLUGIN\NJChromate-3.0.2.crx [2011-05-26] CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-10-10] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AVKProxy; C:\Program Files\Common Files\G Data\AVKProxy\AVKProxy.exe [2558072 2015-06-19] (G Data Software AG) R2 AVKService; C:\Program Files\G DATA\TotalProtection\AVK\AVKService.exe [966776 2015-06-16] (G Data Software AG) R2 AVKWCtl; C:\Program Files\G DATA\TotalProtection\AVK\AVKWCtl.exe [2907776 2015-06-16] (G Data Software AG) S2 DpHost; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [322624 2009-04-17] (DigitalPersona, Inc.) [Datei ist nicht signiert] S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2010-12-11] (Macrovision Europe Ltd.) [Datei ist nicht signiert] R2 GDBackupSvc; C:\Program Files\G DATA\TotalProtection\AVKBackup\AVKBackupService.exe [3894392 2015-06-19] (G Data Software AG) R3 GDFwSvc; C:\Program Files\G DATA\TotalProtection\Firewall\GDFwSvc.exe [2550896 2015-06-19] (G Data Software AG) R3 GDScan; C:\Program Files\Common Files\G Data\GDScan\GDScan.exe [789624 2015-06-16] (G Data Software AG) R3 GDTunerSvc; C:\Program Files\G DATA\TotalProtection\AVKTuner\AVKTunerService.exe [2235512 2015-06-16] (G Data Software AG) S3 HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [121344 2010-06-30] (Hewlett-Packard Company) [Datei ist nicht signiert] R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-23] (Hewlett-Packard Co.) [Datei ist nicht signiert] R3 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-23] (Hewlett-Packard Co.) [Datei ist nicht signiert] R3 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [694784 2009-09-23] (Hewlett-Packard Co.) [Datei ist nicht signiert] S2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation) S3 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert] R3 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert] S2 Secunia PSI Agent; C:\Program Files\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia) S2 Secunia Update Agent; C:\Program Files\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia) S2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_8e7d5b9d3a91d8c5\STacSV.exe [221266 2009-07-21] (IDT, Inc.) S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert] S3 TSNxGService; C:\Program Files\G DATA\TotalProtection\TSNxG\TSNxGService.exe [255608 2014-07-01] (G DATA Software) R2 vpnagent; C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe [558480 2013-10-10] (Cisco Systems, Inc.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 acsock; C:\Windows\System32\DRIVERS\acsock.sys [92528 2013-10-10] (Cisco Systems, Inc.) R3 BlueletAudio; C:\Windows\System32\DRIVERS\blueletaudio.sys [34704 2007-05-11] (IVT Corporation.) R3 BlueletSCOAudio; C:\Windows\System32\DRIVERS\BlueletSCOAudio.sys [27792 2007-03-05] (IVT Corporation.) R3 BT; C:\Windows\System32\DRIVERS\btnetdrv.sys [16272 2007-05-23] (IVT Corporation.) S3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [36496 2007-05-23] (IVT Corporation.) R0 BTHidEnum; C:\Windows\System32\Drivers\vbtenum.sys [20880 2007-03-05] (IVT Corporation.) R0 BTHidMgr; C:\Windows\System32\Drivers\BTHidMgr.sys [35600 2007-03-05] (IVT Corporation.) S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [38400 2009-03-02] (Samsung Electronics Co., Ltd.) [Datei ist nicht signiert] R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [112640 2015-09-21] (G Data Software AG) R3 GDKBB; C:\Windows\system32\drivers\GDKBB32.sys [24192 2015-05-15] (G Data Software AG) R1 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt32.sys [20352 2015-05-15] (G Data Software AG) R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [161280 2015-09-21] (G Data Software AG) R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [73216 2015-09-21] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd32.sys [54272 2015-09-21] (G Data Software AG) R1 GRD; C:\Windows\system32\drivers\GRD.sys [29528 2015-05-23] (G Data Software) R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [87040 2015-09-21] (G Data Software AG) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-06-18] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-06-18] (Malwarebytes Corporation) R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_x86.sys [16024 2013-12-06] (Secunia) S4 sptd; C:\Windows\System32\Drivers\sptd.sys [639224 2012-05-24] (Duplex Secure Ltd.) R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2009-03-02] (Samsung Electronics) [Datei ist nicht signiert] S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35288 2013-08-22] (The OpenVPN Project) R0 TS4NT; C:\Windows\System32\Drivers\TS4nt.sys [103928 2015-09-21] (G Data Software) R3 VComm; C:\Windows\System32\DRIVERS\VComm.sys [34448 2007-03-05] (IVT Corporation.) R3 VcommMgr; C:\Windows\System32\Drivers\VcommMgr.sys [44304 2007-03-05] (IVT Corporation.) S3 vpcbus; C:\Windows\System32\DRIVERS\vpchbus.sys [165376 2009-09-23] (Microsoft Corporation) [Datei ist nicht signiert] S3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [78336 2009-09-23] (Microsoft Corporation) [Datei ist nicht signiert] S3 vpnva; C:\Windows\System32\DRIVERS\vpnva-6.sys [43376 2013-10-10] (Cisco Systems, Inc.) S3 clwvd; system32\DRIVERS\clwvd.sys [X] S3 cpuz134; \??\C:\Users\*****\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X] S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X] S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X] S3 massfilter; system32\drivers\massfilter.sys [X] U5 TMUSB; C:\Windows\System32\DRIVERS\TMUSBXP.SYS [49408 2012-12-05] (Seiko Epson Corporation) S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X] S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X] S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-10-14 21:55 - 2015-10-14 22:07 - 00001898 _____ C:\Users\*****\Desktop\JRT.txt 2015-10-14 21:46 - 2015-10-14 21:53 - 00002310 _____ C:\Users\*****\Desktop\AdwCleaner[C1].txt 2015-10-14 21:39 - 2015-10-14 21:42 - 00000000 ____D C:\AdwCleaner 2015-10-14 21:37 - 2015-10-14 21:37 - 01798976 _____ (Malwarebytes) C:\Users\*****\Desktop\JRT.exe 2015-10-14 21:35 - 2015-10-14 21:53 - 00141338 _____ C:\Users\*****\Desktop\mbam.txt 2015-10-13 13:51 - 2015-10-14 22:10 - 00000000 ____D C:\Users\*****\Desktop\TrojanBoard 102015 2015-10-13 13:46 - 2015-10-14 22:10 - 00000000 ____D C:\FRST 2015-10-13 13:42 - 2015-10-13 13:43 - 00000020 _____ C:\Users\*****\defogger_reenable 2015-09-27 23:17 - 2015-09-27 23:17 - 00002159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015.lnk 2015-09-27 23:17 - 2015-09-27 23:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015 2015-09-27 23:15 - 2015-09-27 23:15 - 00000000 ____D C:\Users\*****\AppData\Roaming\AVG 2015-09-27 23:14 - 2015-09-27 23:14 - 00000000 ____D C:\Program Files\AVG 2015-09-27 23:08 - 2015-09-27 23:08 - 00000000 ____D C:\Users\*****\AppData\Local\Avg 2015-09-27 23:06 - 2015-09-27 23:06 - 00000000 ____D C:\ProgramData\AVG 2015-09-27 20:03 - 2015-09-27 20:50 - 00000000 ____D C:\Users\*****\Desktop\Konflikt Zeugs aus Papierkorb 2015-09-25 23:02 - 2015-09-25 23:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2015-09-25 22:53 - 2015-09-25 22:53 - 00000000 ____D C:\Program Files\Bonjour 2015-09-25 22:52 - 2015-09-25 22:52 - 00000000 ____D C:\Program Files\Apple Software Update 2015-09-23 18:28 - 2015-10-02 16:39 - 00000000 ____D C:\Program Files\Mozilla Firefox 2015-09-21 20:47 - 2015-09-21 20:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA TOTAL PROTECTION ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-10-14 21:58 - 2009-07-14 06:34 - 00013472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-10-14 21:58 - 2009-07-14 06:34 - 00013472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-10-14 21:48 - 2010-12-11 12:28 - 01839858 _____ C:\Windows\WindowsUpdate.log 2015-10-14 21:44 - 2012-08-13 12:17 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-10-14 21:44 - 2010-12-11 15:17 - 03529418 _____ C:\Windows\PFRO.log 2015-10-14 21:44 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-10-14 21:44 - 2009-07-14 06:39 - 00135997 _____ C:\Windows\setupact.log 2015-10-14 21:31 - 2010-12-11 12:36 - 01629284 _____ C:\Windows\system32\PerfStringBackup.INI 2015-10-14 21:30 - 2014-06-19 23:24 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-10-14 21:23 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\L2Schemas 2015-10-14 19:19 - 2013-05-21 13:10 - 00000000 ____D C:\Users\*****\AppData\Roaming\TeamDrive3 2015-10-14 18:29 - 2011-09-10 01:23 - 00155480 _____ C:\ProgramData\nvModes.001 2015-10-14 17:23 - 2012-08-13 12:17 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-10-14 17:20 - 2012-04-09 01:26 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-10-14 16:47 - 2013-06-28 22:21 - 00000000 ____D C:\Program Files\Recuva 2015-10-14 16:20 - 2012-04-09 01:26 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2015-10-14 16:20 - 2011-08-08 23:34 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2015-10-14 16:06 - 2014-06-19 23:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-10-14 16:06 - 2014-06-19 23:23 - 00000000 ____D C:\Program Files\ Malwarebytes Anti-Malware 2015-10-14 15:51 - 2014-02-08 17:04 - 00262144 _____ C:\Windows\system32\config\elam 2015-10-14 15:44 - 2011-06-02 12:58 - 00000000 ____D C:\Program Files\Mobile Partner 2015-10-14 15:43 - 2014-05-23 23:52 - 00000000 ____D C:\Program Files\CyberGhost 5 2015-10-13 19:34 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF 2015-10-13 13:42 - 2010-12-11 12:32 - 00000000 ____D C:\Users\***** 2015-10-13 13:17 - 2012-05-03 20:32 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2015-10-13 13:10 - 2011-02-01 21:55 - 00000000 ____D C:\Users\*****\AppData\Local\CrashDumps 2015-10-08 17:58 - 2015-07-03 12:33 - 00000421 _____ C:\Users\*****\Desktop\Plan Arbeitssuche.txt 2015-10-08 12:50 - 2012-05-28 17:36 - 00000000 ____D C:\Users\*****\AppData\Roaming\vlc 2015-10-08 12:49 - 2013-09-23 14:40 - 00000000 ____D C:\Users\*****\dwhelper 2015-09-25 23:02 - 2014-06-28 23:00 - 00030703 _____ C:\Windows\SecuniaPackage.log 2015-09-25 23:01 - 2011-10-07 18:18 - 00000000 ____D C:\Program Files\iTunes 2015-09-25 23:01 - 2011-10-07 18:18 - 00000000 ____D C:\Program Files\iPod 2015-09-25 23:01 - 2010-12-11 15:53 - 00000000 ____D C:\Program Files\Common Files\Apple 2015-09-25 22:52 - 2010-12-11 15:54 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2015-09-23 14:19 - 2012-05-15 13:47 - 00000000 ____D C:\Users\*****\Documents\Citavi 3 2015-09-23 13:54 - 2010-12-11 22:45 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR 2015-09-21 20:47 - 2015-05-15 19:32 - 00103928 _____ (G Data Software) C:\Windows\system32\Drivers\TS4nt.sys 2015-09-21 20:47 - 2015-05-15 19:32 - 00073216 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys 2015-09-21 20:46 - 2015-05-15 19:31 - 00161280 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys 2015-09-21 20:46 - 2015-05-15 19:31 - 00112640 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys 2015-09-21 20:46 - 2015-05-15 19:31 - 00087040 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys 2015-09-21 20:46 - 2015-05-15 19:31 - 00054272 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd32.sys 2015-09-21 20:45 - 2010-12-11 14:37 - 00051154 _____ C:\Windows\DPINST.LOG ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2011-07-08 00:24 - 2014-01-27 15:16 - 0000132 _____ () C:\Users\*****\AppData\Roaming\Adobe GIF Format CS5 Prefs 2011-02-01 23:30 - 2014-01-27 15:21 - 0000132 _____ () C:\Users\*****\AppData\Roaming\Adobe PNG Format CS5 Prefs 2015-05-15 19:31 - 2015-05-15 19:31 - 0000000 _____ () C:\Users\*****\AppData\Roaming\gdfw.log 2015-05-15 19:30 - 2015-05-15 19:31 - 0000779 _____ () C:\Users\*****\AppData\Roaming\gdscan.log 2012-08-27 23:42 - 2012-08-28 03:14 - 0000116 _____ () C:\Users\*****\AppData\Roaming\history.PDF.pwcdat 2012-04-16 01:03 - 2012-04-16 01:03 - 0000066 _____ () C:\Users\*****\AppData\Local\MODup-Log.txt 2011-01-04 23:53 - 2011-01-06 17:29 - 0001474 _____ () C:\Users\*****\AppData\Local\RecConfig.xml 2012-06-18 14:17 - 2012-06-18 14:17 - 0007605 _____ () C:\Users\*****\AppData\Local\Resmon.ResmonCfg 2011-04-20 09:13 - 2011-04-20 09:13 - 2522934 _____ () C:\Users\*****\AppData\Local\[j0003]-[p09].bmp 2010-12-12 19:39 - 2010-12-12 19:39 - 0000048 ____H () C:\ProgramData\ezsidmv.dat 2010-12-11 14:07 - 2012-12-07 02:17 - 0005057 _____ () C:\ProgramData\hpzinstall.log 2011-09-10 01:23 - 2015-10-14 18:29 - 0155480 _____ () C:\ProgramData\nvModes.001 2011-09-09 23:03 - 2012-06-15 20:14 - 0155480 _____ () C:\ProgramData\nvModes.dat Einige Dateien in TEMP: ==================== C:\Users\*****\AppData\Local\Temp\IrsoDLL.dll C:\Users\*****\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:12-10-2015 durchgeführt von ***** (2015-10-14 22:11:16) Gestartet von C:\Users\*****\Desktop\TrojanBoard 102015 Microsoft Windows 7 Professional Service Pack 1 (X86) (2010-12-11 10:32:28) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-117767610-4170920979-3955755671-500 - Administrator - Disabled) Gast (S-1-5-21-117767610-4170920979-3955755671-501 - Limited - Disabled) => C:\Users\Gast HomeGroupUser$ (S-1-5-21-117767610-4170920979-3955755671-1005 - Limited - Enabled) ***** (S-1-5-21-117767610-4170920979-3955755671-1000 - Administrator - Enabled) => C:\Users\***** ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: G DATA TOTAL PROTECTION (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0} AS: G DATA TOTAL PROTECTION (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: G DATA Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) 32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden 7-Zip 9.20 (HKLM\...\7-Zip) (Version: - ) 8500A909_eDocs (Version: 1.00.0000 - Hewlett-Packard) Hidden 8500A909_Help (Version: 1.00.0000 - Hewlett-Packard) Hidden 8500A909a (Version: 50.0.165.000 - Hewlett-Packard) Hidden ActiveCheck component for HP Active Support Library (Version: 3.0.0.3 - Hewlett-Packard) Hidden Adobe Acrobat 9 Pro - English, Français, Deutsch (HKLM\...\{AC76BA86-1033-F400-7760-000000000004}{AC76BA86-1033-F400-7760-000000000004}) (Version: 9.5.5 - Adobe Systems) Adobe Acrobat 9.5.5 - CPSID_83708 (HKLM\...\{AC76BA86-1033-F400-7760-000000000004}_955) (Version: - Adobe Systems Incorporated) Adobe AIR (HKLM\...\Adobe AIR) (Version: 19.0.0.190 - Adobe Systems Incorporated) Adobe Community Help (HKLM\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated) Adobe Digital Editions 2.0 (HKLM\...\Adobe Digital Editions 2.0) (Version: 2.0.1 - Adobe Systems Incorporated) Adobe Flash Player 19 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 19.0.0.207 - Adobe Systems Incorporated) Adobe Flash Player 19 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 19.0.0.207 - Adobe Systems Incorporated) Adobe Media Player (HKLM\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated) Adobe Reader XI (11.0.12) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated) AIO_CDA_ProductContext (Version: 130.0.365.000 - Hewlett-Packard) Hidden AIO_CDA_Software (Version: 130.0.365.000 - Hewlett-Packard) Hidden AIO_Scan (Version: 130.0.365.000 - Hewlett-Packard) Hidden Amazon Kindle (HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\Amazon Kindle) (Version: - Amazon) Amazon Send to Kindle (HKLM\...\SendToKindle) (Version: 1.0.1.237 - Amazon) AMP WinOFF 5.0.1 (HKLM\...\AMP WinOFF) (Version: 5.0.1 - Alberto Martinez Perez) Apple Application Support (32-Bit) (HKLM\...\{3540ADD5-822B-47FB-B1C2-CD7B2C8E9FEC}) (Version: 4.0.2 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{A75CA58D-DB9C-4D14-9428-E0C7B0F623DC}) (Version: 9.0.0.26 - Apple Inc.) Apple Software Update (HKLM\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.) AVG PC TuneUp 2015 (de-DE) (Version: 15.0.1001.638 - AVG Technologies) Hidden Bamboo (HKLM\...\Pen Tablet Driver) (Version: 5.2.5-5 - Wacom Technology Corp.) Bamboo Dock (HKLM\...\Bamboo Dock) (Version: 4.0 - Wacom Co., Ltd.) Bamboo Dock (Version: 4.1.0 - Wacom Europe GmbH) Hidden Bamboo Tablets Tutorial (Version: 3.0.20 - Wacom) Hidden Benutzerhandbuch EPSON BX535WD Series (HKLM\...\EPSON BX535WD Series Useg) (Version: - ) Bluesoleil2.6.0.9 Release 070606 (HKLM\...\{846AC73B-9394-48B9-B941-8F7F472F0047}) (Version: 2.6.0.9 Release 070606 - IVT Corporation) BoneLab (HKLM\...\{D16CBD59-07B3-4F98-A404-01B6D87A90F2}) (Version: 1.4.0.5 - Next Dimension Imaging) Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.) BPD_DSWizards (Version: 1.00.0000 - Hewlett-Packard) Hidden bpd_scan (Version: 3.00.0000 - Hewlett-Packard) Hidden BPDSoftware (Version: 50.0.165.000 - Hewlett-Packard) Hidden BPDSoftware_Ini (Version: 1.00.0000 - Hewlett-Packard) Hidden Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.18.12 - Broadcom Corporation) BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden C3100 (Version: 130.0.365.000 - Hewlett-Packard) Hidden c3100_Help (Version: 82.0.256.000 - Hewlett-Packard) Hidden calibre (HKLM\...\{F194B9D2-5BB0-4A36-912A-861DE0652181}) (Version: 1.23.0 - Kovid Goyal) Cisco AnyConnect Secure Mobility Client (HKLM\...\Cisco AnyConnect Secure Mobility Client) (Version: 3.1.04072 - Cisco Systems, Inc.) Cisco AnyConnect Secure Mobility Client (Version: 3.1.04072 - Cisco Systems, Inc.) Hidden Citavi (HKLM\...\{E12C6653-1FF0-4686-ADB8-589C13AE761F}) (Version: 3.4.0.2 - Swiss Academic Software) Citrix Online Plug-in - Web (HKLM\...\CitrixOnlinePluginPackWeb) (Version: 11.2.0.31560 - Citrix Systems, Inc.) Citrix Presentation Server Client - Nur Web (HKLM\...\{E9459BCF-0982-498B-ABA7-26C34323493F}) (Version: 10.200.2650 - Citrix Systems, Inc.) Consideo Modeler - Consideo GmbH (HKLM\...\ConsideoModeler) (Version: - ) Copy (Version: 130.0.428.000 - Hewlett-Packard) Hidden Destinations (Version: 140.0.77.000 - Hewlett-Packard) Hidden DeviceDiscovery (Version: 130.0.465.000 - Hewlett-Packard) Hidden DigitalPersona Personal 4.01 (HKLM\...\{8D4B1164-3935-44B2-9152-D0CB0AFBCCF4}) (Version: 4.01.3749 - DigitalPersona, Inc.) DocMgr (Version: 130.0.000.000 - Ihr Firmenname) Hidden DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden Download Navigator (HKLM\...\{2E214231-5FAD-410A-AF5D-99AAB8558434}) (Version: 2.1.0 - SEIKO EPSON CORPORATION) EPSON BX535WD Series Printer Uninstall (HKLM\...\EPSON BX535WD Series) (Version: - SEIKO EPSON Corporation) Epson Event Manager (HKLM\...\{FA9D303D-0FB2-49C7-9397-8E6B11EA892D}) (Version: 2.50.0001 - SEIKO EPSON CORPORATION) EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation) EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4j - SEIKO EPSON CORPORATION) Fax (Version: 130.0.418.000 - Hewlett-Packard) Hidden Free Video Flip and Rotate version 2.1.1.719 (HKLM\...\Free Video Flip and Rotate_is1) (Version: 2.1.1.719 - DVDVideoSoft Ltd.) Free YouTube to MP3 Converter version 3.9.35.324 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: - DVDVideoSoft Limited.) G DATA TOTAL PROTECTION (HKLM\...\{2A1FF304-D778-49F1-B340-E4BF4CDA2EB0}) (Version: 25.1.0.8 - G DATA Software AG) Google Earth Plug-in (HKLM\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (Version: 1.3.28.15 - Google Inc.) Hidden GPBaseService2 (Version: 130.0.371.000 - Hewlett-Packard) Hidden HP Advisor (HKLM\...\{B53E61D7-7C80-40DF-82D2-CF5390D6D20A}) (Version: 3.2.9652.3188 - Hewlett-Packard) HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP) HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP) HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP) HP Photosmart All-In-One Driver Software 13.0 Rel. A (HKLM\...\{17016DA1-F040-4032-BD36-34DD317BC9D5}) (Version: 13.0 - HP) HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP) HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP) HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HPAsset component for HP Active Support Library (Version: 3.0.0.3 - Hewlett-Packard) Hidden HPPhotoGadget (Version: 130.0.282.000 - Hewlett-Packard) Hidden HPProductAssistant (Version: 130.0.371.000 - Hewlett-Packard) Hidden IDT Audio (HKLM\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6225.0 - IDT) iStonsoft iPad iPod iPhone Data Recovery (HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\iStonsoft iPad iPod iPhone Data Recovery) (Version: 2.1.31 - iStonsoft) iTunes (HKLM\...\{9E9CFD9F-64D6-498F-8584-E5CD08BA60BE}) (Version: 12.3.0.44 - Apple Inc.) Java 8 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation) JMicron JMB38X Flash Media Controller (HKLM\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.00.18.07 - JMicron Technology Corp.) Joe (HKLM\...\{0AD3DEBC-5321-457E-8B43-8F546940169B}) (Version: 4.00.0050 - Wirth IT Design) LandOnline Client Components (HKLM\...\LandOnline Client Components) (Version: 1.0 - Land Information NZ) Livebrush Mini (HKLM\...\com.livebrush.2205ABAA7E8202CDC1251B1FA1E879364B7BAB52.1) (Version: 1.5 - MoreMeYou) Livebrush Mini (Version: 1.5 - MoreMeYou) Hidden Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation) MarketResearch (Version: 130.0.374.000 - Hewlett-Packard) Hidden MediaMonkey 4.1 (HKLM\...\MediaMonkey_is1) (Version: 4.1 - Ventis Media Inc.) Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft IntelliPoint 7.1 (HKLM\...\{7057ABC2-EFF3-4E43-9806-8BCB6EEA9FE6}) (Version: 7.10.344.0 - Microsoft) Microsoft IntelliType Pro 8.2 (HKLM\...\Microsoft IntelliType Pro 8.2) (Version: 8.20.469.0 - Microsoft Corporation) Microsoft Office Professional 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Sync Framework 2.0 Core Components (x86) ENU (HKLM\...\{FF63121D-91C6-42CC-B341-F1AA729728E7}) (Version: 2.0.1578.0 - Microsoft Corporation) Microsoft Sync Framework 2.0 Provider Services (x86) ENU (HKLM\...\{D3A80508-CD83-4CA3-8671-914A1BC78B61}) (Version: 2.0.1578.0 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) MoodTuner (HKLM\...\com.gugga.radiomini) (Version: 1.1 - GUGA EOOD) MoodTuner (Version: 1.1 - GUGA EOOD) Hidden Mozilla Firefox 41.0.1 (x86 de) (HKLM\...\Mozilla Firefox 41.0.1 (x86 de)) (Version: 41.0.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 41.0.1.5750 - Mozilla) MPM (HKLM\...\{CD8C5C7F-7C58-4F85-8977-A6C08C087912}) (Version: 1.00.0000 - Hewlett-Packard) MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Network (Version: 130.0.579.000 - Hewlett-Packard) Hidden Netzwerkhandbuch EPSON BX535WD Series (HKLM\...\EPSON BX535WD Series Netg) (Version: - ) NirSoft BlueScreenView (HKLM\...\NirSoft BlueScreenView) (Version: - ) NJStar Communicator (HKLM\...\NJStar Communicator) (Version: 3.00 - NJStar Software Corp.) Nokia Connectivity Cable Driver (HKLM\...\{4AA68A73-DB9C-439D-9481-981C82BD008B}) (Version: 7.1.69.0 - Nokia) Nokia PC Suite (HKLM\...\Nokia PC Suite) (Version: 7.1.180.64 - Nokia) Nokia PC Suite (Version: 7.1.180.64 - Nokia) Hidden NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: - ) OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP) Officejet Pro 8500 A909 Series (HKLM\...\{D850BEF5-67AF-4071-9538-FA9AC725D62C}) (Version: 13.0 - HP) OpenOffice.org 3.3 (HKLM\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org) Oracle VM VirtualBox 4.1.12 (HKLM\...\{BD2DF5E1-0B64-40EB-93CC-77F984ADB408}) (Version: 4.1.12 - Oracle Corporation) PC Connectivity Solution (HKLM\...\{A2AA4204-C05A-4013-888A-AD153139297F}) (Version: 11.5.29.0 - Nokia) PDF Settings CS5 (Version: 10.0 - Adobe Systems Incorporated) Hidden ProductContext (Version: 50.0.165.000 - Hewlett-Packard) Hidden QuickTime 7 (HKLM\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.) RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden RealPlayer (HKLM\...\RealPlayer 15.0) (Version: 15.0.4 - RealNetworks) Realtek USB 2.0 Card Reader (HKLM\...\{DC24971E-1946-445D-8A82-CE685433FA7D}) (Version: 3.0.1.3 - Realtek Semiconductor Corp.) RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) Safari (HKLM\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.) Samsung ML-1510_700 Series (HKLM\...\Samsung ML-1510_700 Series) (Version: - ) Samsung_MonSetup (HKLM\...\{8EA79DBF-D637-448A-89D6-410A087A4493}) (Version: 1.00.0000 - Samsung) Scan (Version: 140.0.80.000 - Hewlett-Packard) Hidden Secunia PSI (3.0.0.9016) (HKLM\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia) Secure Banking Version 1.5.2 (HKLM\...\{0BEE0AF9-79F3-4C4F-B374-90C0A16BF294}_is1) (Version: 1.5.2 - Hopfgartner Niklas) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.6.8442 - Skype Technologies S.A.) Skype™ 7.2 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.2.103 - Skype Technologies S.A.) SmartWebPrinting (Version: 130.0.457.000 - Hewlett-Packard) Hidden SolutionCenter (Version: 130.0.373.000 - Hewlett-Packard) Hidden Status (Version: 130.0.469.000 - Hewlett-Packard) Hidden SyncToy 2.1 (x86) (HKLM\...\{A066194B-DC8F-449A-8E0F-B57BDD3A2072}) (Version: 2.1.0 - Microsoft) TeamDrive 3 (HKLM\...\TeamDrive 3) (Version: 3.1.0.316 - TeamDrive Systems GmbH) TeX Live 2011 (HKU\S-1-5-21-117767610-4170920979-3955755671-1000\...\TeXLive2011) (Version: 2011 - ) Texmaker (HKLM\...\Texmaker) (Version: - ) Toolbox (Version: 130.0.648.000 - Hewlett-Packard) Hidden TrayApp (Version: 130.0.422.000 - Hewlett-Packard) Hidden Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version: - ) UniPrint Client 4.0 (HKLM\...\{50A7D603-B3DD-48C1-A518-486B2EDFFA3F}) (Version: 4.0.6 - UniPrint, a division of GFI Business Solutions Inc.) UnloadSupport (Version: 11.0.0 - Hewlett-Packard) Hidden v2010.build.42 (HKLM\...\{B93DCF58-AA57-41EC-8D69-B05C66C6312D}_is1) (Version: v2010.build.42 - eRightSoft) Validity Sensors software (HKLM\...\{F65B8208-5221-43D9-AA12-DDEA64EC4AF6}) (Version: 2.8.116 - Validity Sensors, Inc.) VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN) WebReg (Version: 130.0.132.017 - Hewlett-Packard) Hidden WebTablet FB Plugin (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.0.0.1 - Wacom Technology Corp.) WebTablet IE Plugin (HKLM\...\Wacom WebTabletPlugin for IE) (Version: 1.1.0.12 - Wacom Technology Corp.) WebTablet Netscape Plugin (HKLM\...\Wacom WebTabletPlugin for Netscape) (Version: 1.1.0.10 - Wacom Technology Corp.) Windows-Treiberpaket - Nokia Modem (02/25/2011 4.7) (HKLM\...\E0AC723A3DE3A04256288CADBBB011B112AED454) (Version: 02/25/2011 4.7 - Nokia) Windows-Treiberpaket - Nokia Modem (02/25/2011 7.01.0.9) (HKLM\...\72A50F48CC5601190B9C4E74D81161693133E7F7) (Version: 02/25/2011 7.01.0.9 - Nokia) Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0) (HKLM\...\504244733D18C8F63FF584AEB290E3904E791693) (Version: 08/22/2008 7.0.0.0 - Nokia) WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 31.0.2014.0 - BillP Studios) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\ProgramData\Skype Extras\ezPMUtils.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{092dfa86-5807-5a94-bf3b-5a53ba9e5308}\InprocServer32 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{1EFF7739-9BDA-4295-BC07-383554CAAC84}\InprocServer32 -> C:\Users\*****\AppData\Local\Citrix\ICA Client\CCMProxy.dll (Citrix Systems, Inc.) CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{238F6F83-B8B4-11CF-8771-00A024541EE3}\InprocServer32 -> C:\Users\*****\AppData\Local\Citrix\ICA Client\Wfica.ocx (Citrix Systems, Inc.) CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{238F6F85-B8B4-11CF-8771-00A024541EE3}\InprocServer32 -> C:\Users\*****\AppData\Local\Citrix\ICA Client\Wfica.ocx (Citrix Systems, Inc.) CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\ProgramData\Skype Extras\ezPMUtils.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{D085A4AB-CAB1-4729-9DF8-FCEEDDBD19E4}\localserver32 -> C:\Users\*****\AppData\Local\Citrix\ICA Client\wfcrun32.exe (Citrix Systems, Inc.) CustomCLSID: HKU\S-1-5-21-117767610-4170920979-3955755671-1000_Classes\CLSID\{D0D38C6E-BF64-4C42-840D-3E0019D9F7A6}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => Keine Datei ==================== Wiederherstellungspunkte ========================= 26-09-2015 10:16:36 Geplanter Prüfpunkt 27-09-2015 23:09:05 AVG PC TuneUp 2015 wird installiert 14-10-2015 15:48:10 Removed Skype Click to Call 14-10-2015 20:29:23 Revo Uninstaller's restore point - AppSafe 14-10-2015 20:34:55 Revo Uninstaller's restore point - SGC 2.0.1.250 14-10-2015 21:49:57 JRT Pre-Junkware Removal ==================== Hosts Inhalt: ========================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2012-04-26 11:39 - 2014-11-05 21:36 - 00444869 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 1000gratisproben.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 1001namen.com 127.0.0.1 www.1001namen.com 127.0.0.1 www.100888290cs.com 127.0.0.1 100888290cs.com 127.0.0.1 100sexlinks.com 127.0.0.1 www.100sexlinks.com 127.0.0.1 www.10sek.com 127.0.0.1 10sek.com 127.0.0.1 1-2005-search.com 127.0.0.1 www.1-2005-search.com 127.0.0.1 www.123fporn.info 127.0.0.1 123fporn.info 127.0.0.1 www.123haustiereundmehr.com 127.0.0.1 123haustiereundmehr.com 127.0.0.1 www.123moviedownload.com Da befinden sich 15300 zusätzliche Einträge. ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {01A58B17-9994-4F84-9B8A-788B88D86081} - System32\Tasks\{C2FA0599-B043-4F27-9276-365D7402AD4B} => pcalua.exe -a "C:\Program Files\RelevantKnowledge\rlvknlg.exe" -c -bootremove -uninst:RelevantKnowledge Task: {04DA8095-7A2E-4947-93B6-AA3DC01EA294} - System32\Tasks\{4F687082-90D4-4BF6-B8B1-6A47C975F70A} => pcalua.exe -a C:\Users\*****\Desktop\HP\sp45499.exe -d C:\Users\*****\Desktop\HP Task: {0A27E96C-F7CA-4B6F-A081-4E0D6C934EB1} - System32\Tasks\{A9AF9DF9-8AB4-4780-B05C-845F3A4F7F80} => pcalua.exe -a C:\Users\*****\Desktop\HP\sp41701.exe -d C:\Users\*****\Desktop\HP Task: {226A226F-D32F-434A-9550-9B71C95A49EB} - System32\Tasks\{57A1538B-9FC1-4013-8D09-3401422AB79D} => pcalua.exe -a C:\Users\*****\Desktop\AntiTwin_Setup.exe -d C:\Users\*****\Desktop Task: {23F96337-0509-4DEB-B16A-4A882262C1CA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.) Task: {2931D861-9B82-4689-9257-D47728EFDAA4} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-117767610-4170920979-3955755671-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-04-30] (RealNetworks, Inc.) Task: {2BBECF94-610A-47AF-ADC8-A4B95626871A} - System32\Tasks\{63B728FC-7546-4B7D-99D9-65A0874A65DC} => pcalua.exe -a "C:\Users\*****\Desktop\Neuer Ordner\Epson Zeug\epson374735eu.exe" -d "C:\Users\*****\Desktop\Neuer Ordner\Epson Zeug" Task: {2C6B0F51-9EB4-44CA-A332-1371EF777A34} - System32\Tasks\ReclaimerUpdateXML_***** => C:\Users\*****\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.90\agent\rnupgagent.exe [2014-04-08] (RealNetworks, Inc.) Task: {2E880432-BE78-4708-B404-BDED3EF170F8} - System32\Tasks\{C230C231-6276-4147-BB27-0E09D78DDDC5} => pcalua.exe -a C:\Users\*****\Desktop\everest\Dictionary.exe -d C:\Users\*****\Desktop\everest Task: {3386ED1D-AF3D-438C-9E4C-4159259DE9A6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.) Task: {3560B0FF-E40C-490E-A409-C49FFBF7ECE5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-14] (Adobe Systems Incorporated) Task: {3B9DAFC3-0E82-4BC0-B323-A589D770D1D0} - System32\Tasks\Microsoft_Hardware_Launch_IType_exe => c:\Program Files\Microsoft IntelliType Pro\IType.exe [2011-08-10] (Microsoft Corporation) Task: {6EB6D0E5-3238-40AC-82DC-A1166B2ABB25} - System32\Tasks\{D430D610-1028-4E95-B527-F019589A4F36} => pcalua.exe -a C:\Users\*****\Desktop\winstger.exe -d C:\Users\*****\Desktop Task: {719AB619-BCBE-41D0-892F-0C478F8C136F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.) Task: {8B6D6D5C-D37F-4EEF-B072-5A334685E228} - System32\Tasks\{A7737EA2-A290-4226-97EE-BFCEFB607B2C} => C:\Program Files\Skype\\Phone\Skype.exe [2015-02-26] (Skype Technologies S.A.) Task: {B9952096-A45D-4B31-938A-F15AD6450873} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-117767610-4170920979-3955755671-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-04-30] (RealNetworks, Inc.) Task: {D0BDD82D-18D1-4C22-AA38-068E004B7BE8} - System32\Tasks\{2EFB6DAE-93C8-49A4-8484-23E78456EBD6} => pcalua.exe -a C:\Users\*****\Desktop\epson373094eu.exe -d C:\Users\*****\Desktop Task: {D18E9D75-7CA2-45C1-ACD8-B7F597892B83} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files\Norton Identity Safe\Engine\2014.7.0.47\SymErr.exe Task: {D5943F47-F722-48D5-B29A-54508B0B371D} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files\Norton Identity Safe\Engine\2014.7.0.47\SymErr.exe Task: {D9D185E5-4D90-4182-8E28-3D62F94E1F59} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2009-11-05] (Microsoft Corporation) Task: {F2C8252A-15AF-4ADE-A782-0A73C9303EA5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated) Task: {F6FE2553-24A4-4823-95F4-3F5DC179BBBF} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation) Task: {FF2844FF-EA07-4FF2-8E24-CD8330D2248E} - System32\Tasks\AdobeAAMUpdater-1.0-LAPTOP-***** => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2015-06-16 11:17 - 2015-06-16 11:17 - 00318584 ____N () C:\Program Files\Common Files\G Data\AVKProxy\PktIcpt2.dll 2013-10-10 23:48 - 2013-10-10 23:48 - 00063376 _____ () C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll 2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2015-09-15 14:25 - 2015-09-15 14:25 - 01040144 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) AlternateDataStreams: C:\ProgramData\Temp:5C321E34 AlternateDataStreams: C:\ProgramData\Temp:B1FBBD09 ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) ==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) |
19.10.2015, 13:48 | #10 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Datum- und Uhrzeitanzeige falsch/Skype Account gehackt/Fehler SyncToy/Bluescreens/Bildschirmflimmern FRST-Fix Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft! Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter HKLM\...\Run: [] => [X] SearchScopes: HKLM -> DefaultScope Wert fehlt EmptyTemp: Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ Logfiles bitte immer in CODE-Tags posten |
20.10.2015, 11:21 | #11 | |
| Datum- und Uhrzeitanzeige falsch/Skype Account gehackt/Fehler SyncToy/Bluescreens/BildschirmflimmernZitat:
Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x86) Version:12-10-2015 durchgeführt von ***** (2015-10-20 15:12:29) Run:1 Gestartet von C:\Users\*****\Desktop\TrojanBoard 102015 Geladene Profile: ***** (Verfügbare Profile: ***** & Gast) Start-Modus: Normal ============================================== fixlist Inhalt: ***************** HKLM\...\Run: [] => [X] SearchScopes: HKLM -> DefaultScope Wert fehlt EmptyTemp: ***************** HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => Wert erfolgreich entfernt HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wert erfolgreich wiederhergestellt EmptyTemp: => 231.6 MB temporäre Dateien entfernt. Das System musste neu gestartet werden. ==== Ende vom Fixlog 15:12:41 ==== danke! |
20.10.2015, 12:55 | #12 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Datum- und Uhrzeitanzeige falsch/Skype Account gehackt/Fehler SyncToy/Bluescreens/Bildschirmflimmern Passt schon so Okay, dann Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte: 1. Schritt: MBAM Downloade Dir bitte Malwarebytes Anti-Malware
2. Schritt: ESETl ESET Online Scanner
3. Schritt: SecurityCheck Downloade Dir bitte SecurityCheck und:
__________________ Logfiles bitte immer in CODE-Tags posten |
25.10.2015, 19:05 | #13 |
| Datum- und Uhrzeitanzeige falsch/Skype Account gehackt/Fehler SyncToy/Bluescreens/Bildschirmflimmern So, das hat jetzt etwas gedauert, aber jetzt endlich Malwarebytes Anti-Malware Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Update, 24.10.2015 00:18, SYSTEM, LAPTOP, Manual, Remediation Database, 2015.9.16.1, 2015.10.21.1, Update, 24.10.2015 00:18, SYSTEM, LAPTOP, Manual, IP Database, 2015.9.21.2, 2015.10.24.1, Update, 24.10.2015 00:18, SYSTEM, LAPTOP, Manual, Rootkit Database, 2015.9.18.1, 2015.10.23.1, Update, 24.10.2015 00:18, SYSTEM, LAPTOP, Manual, Domain Database, 2015.9.22.3, 2015.10.24.8, Update, 24.10.2015 00:20, SYSTEM, LAPTOP, Manual, Malware Database, 2015.9.22.5, 2015.10.24.5, Scan, 24.10.2015 00:52, SYSTEM, LAPTOP, Manual, Start: 24.10.2015 00:22, Dauer: 30 Min. 45 Sek., Bedrohungssuchlauf, Abgeschlossen, 0 Malware-Erkennung, 0 Nicht-Malware-Erkennungen, (end) Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=aa6518ccbc6f9646bfe02070707894a3 # end=init # utc_time=2015-10-23 10:39:03 # local_time=2015-10-24 12:39:03 (+0100, Mitteleuropäische Sommerzeit) # country="Austria" # osver=6.1.7601 NT Service Pack 1 Update Init Update Download Update Finalize Updated modules version: 26399 # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=aa6518ccbc6f9646bfe02070707894a3 # end=updated # utc_time=2015-10-23 11:11:20 # local_time=2015-10-24 01:11:20 (+0100, Mitteleuropäische Sommerzeit) # country="Austria" # osver=6.1.7601 NT Service Pack 1 # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7777 # api_version=3.1.1 # EOSSerial=aa6518ccbc6f9646bfe02070707894a3 # engine=26399 # end=stopped # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2015-10-24 02:48:26 # local_time=2015-10-24 04:48:26 (+0100, Mitteleuropäische Sommerzeit) # country="Austria" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode_1='G DATA TOTAL PROTECTION' # compatibility_mode=4111 16777213 100 100 309895 21254910 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776573 100 94 2399973 197286097 0 0 # scanned=251066 # found=0 # cleaned=0 # scan_time=13025 ESETSmartInstaller@High as downloader log: Can not open internetESETSmartInstaller@High as downloader log: Can not open internet# product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=aa6518ccbc6f9646bfe02070707894a3 # end=init # utc_time=2015-10-24 05:48:06 # local_time=2015-10-24 07:48:06 (+0100, Mitteleuropäische Sommerzeit) # country="Austria" # osver=6.1.7601 NT Service Pack 1 Update Init Update Download Update Finalize Updated modules version: 26405 # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=aa6518ccbc6f9646bfe02070707894a3 # end=updated # utc_time=2015-10-24 05:50:55 # local_time=2015-10-24 07:50:55 (+0100, Mitteleuropäische Sommerzeit) # country="Austria" # osver=6.1.7601 NT Service Pack 1 # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7777 # api_version=3.1.1 # EOSSerial=aa6518ccbc6f9646bfe02070707894a3 # engine=26405 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2015-10-25 05:10:11 # local_time=2015-10-25 06:10:11 (+0100, Mitteleuropäische Zeit) # country="Austria" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode_1='G DATA TOTAL PROTECTION' # compatibility_mode=4111 16777213 100 100 448000 21393015 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776573 100 94 2538078 197424202 0 0 # scanned=351671 # found=0 # cleaned=0 # scan_time=83955 Code:
ATTFilter Results of screen317's Security Check version 1.009 Windows 7 Service Pack 1 x86 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` G DATA TOTAL PROTECTION Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` WinPatrol MVPS Hosts File Secunia PSI (3.0.0.9016) AVG PC TuneUp 2015 (de-DE) Java 8 Update 51 Java version 32-bit out of Date! Adobe Flash Player 19.0.0.226 Adobe Reader XI Mozilla Firefox (41.0.2) ````````Process Check: objlist.exe by Laurent```````` WinPatrol winpatrol.exe G DATA TotalProtection Firewall GDFwSvc.exe G DATA TotalProtection Firewall GDFirewallTray.exe BillP Studios WinPatrol WinPatrol.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` |
25.10.2015, 19:24 | #14 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Datum- und Uhrzeitanzeige falsch/Skype Account gehackt/Fehler SyncToy/Bluescreens/Bildschirmflimmern bitte das richtige Log von Malwarebytes posten...
__________________ Logfiles bitte immer in CODE-Tags posten |
25.10.2015, 20:43 | #15 |
| Datum- und Uhrzeitanzeige falsch/Skype Account gehackt/Fehler SyncToy/Bluescreens/Bildschirmflimmern Oh, sorry! Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 24.10.2015 Suchlaufzeit: 00:22 Protokolldatei: MBAM2.txt Administrator: Ja Version: 2.2.0.1024 Malware-Datenbank: v2015.10.24.05 Rootkit-Datenbank: v2015.10.23.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x86 Dateisystem: NTFS Benutzer: ***** Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 353909 Abgelaufene Zeit: 30 Min., 45 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 0 (keine bösartigen Elemente erkannt) Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) |
Themen zu Datum- und Uhrzeitanzeige falsch/Skype Account gehackt/Fehler SyncToy/Bluescreens/Bildschirmflimmern |
avira, bildschirm, bonjour, chromium, converter, cyberghost, dnsapi.dll, downloader, error, fehler, firefox, flash player, homepage, hängen, kaspersky, langsam, launch, mozilla, mp3, prozess, registry, rundll, software, starten, stick, svchost.exe, usb, virtualbox, windows, windows xp |