McAfee Echtzeitscann deaktiviert sich von alleine. Malewarebytes protokoll.

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 09.12.2015
Suchlaufzeit: 16:42
Protokolldatei: scannprotokoll.txt
Administrator: Ja

Version: 2.2.0.1024
Malware-Datenbank: v2015.12.09.03
Rootkit-Datenbank: v2015.12.07.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Marco

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 358531
Abgelaufene Zeit: 20 Min., 13 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 17
PUP.Optional.SearchProtect.AppFlsh, HKU\S-1-5-21-2337794598-3040613713-3430843120-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}, In Quarantäne, [f710ccd76f1c1d191c39510cf30f27d9], 
PUP.Optional.SearchProtect.AppFlsh, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\CltMngSvc_RASAPI32, In Quarantäne, [bf48584b107b4aecd37ebd3cb64dfb05], 
PUP.Optional.SearchProtect.AppFlsh, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\CltMngSvc_RASMANCS, In Quarantäne, [17f0bbe8a4e71c1a8ac7b247df2418e8], 
PUP.Optional.RegCleanPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\RegCleanPro_RASAPI32, In Quarantäne, [d92e3b68bfcc1125a5f05f9be0239967], 
PUP.Optional.RegCleanPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\RegCleanPro_RASMANCS, In Quarantäne, [aa5d1a89236873c3385d20da36cdb749], 
PUP.Optional.SystemSpeedup, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\ssd, In Quarantäne, [848373303f4ca492ea80219653af06fa], 
PUP.Optional.Tuto4PC, HKLM\SOFTWARE\WOW6432NODE\TUTORIALS, In Quarantäne, [64a3aef5b5d67fb75afccbeb8182f50b], 
PUP.Optional.CrossRider, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\_CrossriderRegNamePlaceHolder_, In Quarantäne, [11f6d8cb52391a1c604e2266d3309c64], 
PUP.Optional.Tuto4PC, HKU\S-1-5-21-2337794598-3040613713-3430843120-1000\SOFTWARE\TutoTag, In Quarantäne, [37d0752e2e5d0b2bf16190267a8957a9], 
PUP.Optional.AnyProtect, HKU\S-1-5-21-2337794598-3040613713-3430843120-1000\SOFTWARE\ANYPROTECT, In Quarantäne, [47c0742f8cff0630010c5422d03320e0], 
PUP.Optional.BlockAndSurf, HKU\S-1-5-21-2337794598-3040613713-3430843120-1000\SOFTWARE\APPDATALOW\SOFTWARE\BlockAndSurf, In Quarantäne, [c0479d06e5a646f079590975e41f41bf], 
PUP.Optional.CrossRider, HKU\S-1-5-21-2337794598-3040613713-3430843120-1000\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, In Quarantäne, [52b5ecb7a7e412242f7fa1e7f90af30d], 
PUP.Optional.GlobalUpdate, HKU\S-1-5-21-2337794598-3040613713-3430843120-1000\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY, In Quarantäne, [cd3a396a24670036f85e6131758e56aa], 
PUP.Optional.InetStat, HKU\S-1-5-21-2337794598-3040613713-3430843120-1000\SOFTWARE\INETSTAT, In Quarantäne, [f80f9b087516b086adbff7cff90ac43c], 
PUP.Optional.CrossRider, HKU\S-1-5-21-2337794598-3040613713-3430843120-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3B5B609E-4D99-4EBB-A5D8-8FCBCE5788E9}, In Quarantäne, [8087ddc61b7045f1407efa8f659e8f71], 
PUP.Optional.CrossRider, HKU\S-1-5-21-2337794598-3040613713-3430843120-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A4712EC8-F5F7-4E39-B3BF-F73180D2D965}, In Quarantäne, [02058d1696f579bd4f701772e3202bd5], 
PUP.Optional.SystemSpeedup, HKU\S-1-5-21-2337794598-3040613713-3430843120-1000\SOFTWARE\SYSTWEAK\ssd, In Quarantäne, [bd4a614259320d293831d0e779891be5], 

Registrierungswerte: 10
PUP.Optional.MBot, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|mbot_de_300, In Quarantäne, [e91ec2e1fd8ef343661f6e2df50e3cc4], 
PUP.Optional.Tuto4PC, HKLM\SOFTWARE\WOW6432NODE\TUTORIALS|HostGUID, 159F9CF8-9D8D-484C-8307-FC255CC12089, In Quarantäne, [64a3aef5b5d67fb75afccbeb8182f50b]
PUP.Optional.AnyProtect, HKU\S-1-5-21-2337794598-3040613713-3430843120-1000\SOFTWARE\ANYPROTECT|ABTest, {"general":{"test_id":"B6","installer_pre_page":true,"scanner_pre_page":false},"1":{"email_check":true},"7":{"notification_20_mins":"3A"},"9":{"scan_page_id":2},"12":{"upclick_exit_show":false,"upclick_exit_countries":{"US":{"phone":"(855) 602-9762"},"CA":{"phone":"(855) 602-9762"},"UK":{"phone":"0800 031 4647"},"GB":{"phone":"0800 031 4647"},"AU":{"phone":"1800-762-367"}}},"14":{"upclick_scan_id_show":false,"upclick_scan_id":"000-000-000"},"15":{"upclick_bottom_offer_show":false,"upclick_bottom_offer_countries":{"US":{"phone":"(855) 602-9762"},"GB":{"phone":"0800 031 4647"},"UK":{"phone":"0800 031 4647"},"DE":{"phone":"800-182-0188"},"CA":{"phone":"(855) 602-9762"},"AU":{"phone":"1800-762-367"},"FR":{"phone":"9 75 18 72 00"}}},"18":{"movie":1}}, In Quarantäne, [47c0742f8cff0630010c5422d03320e0]
PUP.Optional.GlobalUpdate, HKU\S-1-5-21-2337794598-3040613713-3430843120-1000\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY|source, IE, In Quarantäne, [cd3a396a24670036f85e6131758e56aa]
PUP.Optional.InetStat, HKU\S-1-5-21-2337794598-3040613713-3430843120-1000\SOFTWARE\INETSTAT|status, In Quarantäne, [f80f9b087516b086adbff7cff90ac43c], 
PUP.Optional.CrossRider, HKU\S-1-5-21-2337794598-3040613713-3430843120-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3B5B609E-4D99-4EBB-A5D8-8FCBCE5788E9}|AppName, 007b6571-eb9c-4689-b446-6be75c1574c0-2.exe-buttonutil.exe, In Quarantäne, [8087ddc61b7045f1407efa8f659e8f71]
PUP.Optional.CrossRider, HKU\S-1-5-21-2337794598-3040613713-3430843120-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A4712EC8-F5F7-4E39-B3BF-F73180D2D965}|AppName, 007b6571-eb9c-4689-b446-6be75c1574c0-2.exe-codedownloader.exe, In Quarantäne, [02058d1696f579bd4f701772e3202bd5]
PUP.Optional.Trovi, HKU\S-1-5-21-2337794598-3040613713-3430843120-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}|URL, hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3331617&octid=EB_ORIGINAL_CTID&ISID=MA7141258-9637-4C4C-B4D2-59E35300AE8C&SearchSource=58&CUI=&UM=6&UP=SP2EF13B0B-346E-4380-9315-2A437A19ABFD&q={searchTerms}&SSPV=, In Quarantäne, [1becefb49af1d660bc30c5f059aa20e0]
PUP.Optional.Conduit, HKU\S-1-5-21-2337794598-3040613713-3430843120-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}|SuggestionsURL_JSON, hxxp://suggest.seccint.com/CSuggestJson.ashx?prefix={searchTerms}, In Quarantäne, [e91e3a69b7d4a78f61ee790cd72cd32d]
PUP.Optional.Trovi, HKU\S-1-5-21-2337794598-3040613713-3430843120-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}|DisplayName, Trovi search, In Quarantäne, [f80fc9dad3b8221468847d3833d0758b]

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 10
PUP.Optional.OpenCandy, C:\Users\Marco\AppData\Roaming\OpenCandy, In Quarantäne, [fe09366d6d1ea492f4d81b4e07fbbe42], 
PUP.Optional.OpenCandy, C:\Users\Marco\AppData\Roaming\OpenCandy\OpenCandy_0725B1596D2E471B8F16B7AC18F16E57, In Quarantäne, [fe09366d6d1ea492f4d81b4e07fbbe42], 
PUP.Optional.APNToolBar.Gen, C:\ProgramData\APN\APN-Stub, In Quarantäne, [7493dac9d7b4a492b5cab2bff111af51], 
PUP.Optional.AnyProtect, C:\Users\Marco\AppData\Roaming\AnyProtectEx, In Quarantäne, [46c1069db5d6b77f940bb1c2ef1348b8], 
PUP.Optional.AnyProtect, C:\Users\Marco\AppData\Roaming\AnyProtectEx\installer, In Quarantäne, [46c1069db5d6b77f940bb1c2ef1348b8], 
PUP.Optional.AnyProtect, C:\Users\Marco\AppData\Roaming\AnyProtectEx\language, In Quarantäne, [46c1069db5d6b77f940bb1c2ef1348b8], 
PUP.Optional.AnyProtect, C:\Users\Marco\AppData\Roaming\AnyProtectEx\logs, In Quarantäne, [46c1069db5d6b77f940bb1c2ef1348b8], 
PUP.Optional.AnyProtect, C:\Users\Marco\AppData\Roaming\AnyProtectEx\scan_results, In Quarantäne, [46c1069db5d6b77f940bb1c2ef1348b8], 
PUP.Optional.AnyProtect, C:\Users\Marco\AppData\Roaming\AnyProtectEx\swf, In Quarantäne, [46c1069db5d6b77f940bb1c2ef1348b8], 
PUP.Optional.AnyProtect, C:\Program Files (x86)\AnyProtectEx, In Quarantäne, [31d6277c5f2cf640b5eb74ffd52d57a9], 

Dateien: 10
PUP.Optional.CinemaPlus, C:\Users\Marco\AppData\Roaming\PQMQX.exe, In Quarantäne, [d7308d168a010234af7f138374904bb5], 
PUP.Optional.CinemaPlus, C:\Users\Marco\AppData\Roaming\TKDN.exe, In Quarantäne, [2ddab3f096f578beea448016808454ac], 
PUP.Optional.AnyProtect, C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe, In Quarantäne, [ba4df4af99f2f93de5e955400202de22], 
PUP.Optional.InetStat, C:\Users\Marco\AppData\Roaming\InetStat\inetstat.exe, In Quarantäne, [63a4465d62295ed850940f87ef141ae6], 
PUP.Optional.Patsearch, C:\Windows\patsearch.bin, In Quarantäne, [f90ef2b1543738fe60a8eaba887be31d], 
PUP.Optional.WebInstr, C:\Windows\System32\drivers\Msft_Kernel_webinstrT_01009.Wdf, In Quarantäne, [8087c6dd167588ae6234c3f6cb38bf41], 
PUP.Optional.AnyProtect, C:\Users\Marco\AppData\Roaming\AnyProtectEx\installer\ab.test.json, In Quarantäne, [46c1069db5d6b77f940bb1c2ef1348b8], 
PUP.Optional.AnyProtect, C:\Users\Marco\AppData\Roaming\AnyProtectEx\installer\tempfile.t, In Quarantäne, [46c1069db5d6b77f940bb1c2ef1348b8], 
PUP.Optional.AnyProtect, C:\Users\Marco\AppData\Roaming\AnyProtectEx\swf\mov01.swf, In Quarantäne, [46c1069db5d6b77f940bb1c2ef1348b8], 
PUP.Optional.AnyProtect, C:\Program Files (x86)\AnyProtectEx\product.guid, In Quarantäne, [31d6277c5f2cf640b5eb74ffd52d57a9], 

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)