Windows 7 Home: Ungewollte Tabs mit Werbung im Firefox

Kespa · 03.01.2016, 11:42

Hallo,

ich habe vor ein paar Tagen ein Laptop eines Bekannten übernommen und beim surfen gleich mal fest gestellt, dass sporadisch eigene Tabs mit Werbung erscheinen und manchmal nach einem click auf einen Button einer Website ebenfalls.

Ein Virenscanner ist und war wahrscheinlich auch nicht installiert.

Bevor ich jetzt Dinge wie Onlinebanking mache, würde ich den gerne erst bereinigen.

Ein Tipp für einen freeware Virenprogramm nehme ich auch gerne an!

FRST-Log:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:31-12-2015
durchgeführt von oli (Administrator) auf OLI-PC (03-01-2016 11:24:37)
Gestartet von C:\Users\oli\Desktop
Geladene Profile: oli (Verfügbare Profile: oli)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: IE)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(SIEN S.A.) C:\Program Files (x86)\Common Files\IMGUpdater\IMGUpdater.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
() C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancerService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
() C:\Program Files (x86)\Universal Updater\UpdaterService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
() C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancer.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2011-02-04] (Intel(R) Corporation)
HKLM-x32\...\Run: [fst_de_169] => [X]
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-18\...\Run: [AviraSpeedup] => "C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup.exe" -autorun
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-09-09] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei
GroupPolicy: Beschränkung - Chrome <======= ACHTUNG
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG
CHR HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

ProxyEnable: [.DEFAULT] => Proxy ist aktiviert.
ProxyServer: [.DEFAULT] => http=127.0.0.1:49417;https=127.0.0.1:49417
ProxyEnable: [S-1-5-21-1335512877-2763367150-1506735299-1000] => Proxy ist aktiviert.
ProxyServer: [S-1-5-21-1335512877-2763367150-1506735299-1000] => http=127.0.0.1:49417;https=127.0.0.1:49417
Winsock: Catalog9 01 C:\Windows\SysWOW64\MyOSProtect.dll [304776 2014-09-01] (MyOSCompany)
Winsock: Catalog9 02 C:\Windows\SysWOW64\MyOSProtect.dll [304776 2014-09-01] (MyOSCompany)
Winsock: Catalog9 03 C:\Windows\SysWOW64\MyOSProtect.dll [304776 2014-09-01] (MyOSCompany)
Winsock: Catalog9 04 C:\Windows\SysWOW64\MyOSProtect.dll [304776 2014-09-01] (MyOSCompany)
Winsock: Catalog9 16 C:\Windows\SysWOW64\MyOSProtect.dll [304776 2014-09-01] (MyOSCompany)
Winsock: Catalog9-x64 01 C:\Windows\system32\MyOSProtect64.dll [350768 2014-09-01] (MyOSCompany)
Winsock: Catalog9-x64 02 C:\Windows\system32\MyOSProtect64.dll [350768 2014-09-01] (MyOSCompany)
Winsock: Catalog9-x64 03 C:\Windows\system32\MyOSProtect64.dll [350768 2014-09-01] (MyOSCompany)
Winsock: Catalog9-x64 04 C:\Windows\system32\MyOSProtect64.dll [350768 2014-09-01] (MyOSCompany)
Winsock: Catalog9-x64 16 C:\Windows\system32\MyOSProtect64.dll [350768 2014-09-01] (MyOSCompany)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{555AEA56-8BDF-4D13-913C-1F8EAFB2D65B}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.delta-homes.com/?type=hp&ts=1418803757&from=wpm12173&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.delta-homes.com/?type=hp&ts=1418803757&from=wpm12173&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1410567811&from=adks&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.delta-homes.com/?type=hp&ts=1418803757&from=wpm12173&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.delta-homes.com/?type=hp&ts=1418803757&from=wpm12173&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1410567811&from=adks&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.t-online.de
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.t-online.de
HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx880JXKe86_GbHG1dd3_ZUO7f9P-erwHNCqTNC2N-bD_VuqW9_GZEo6bb-GY_2lvBgAcriofDrYyDvmqS_ZpHgRgysb59A7GkwC3ueSlLX88DN4XVZSgirsHT763s_7cNJ-P-Vo6zXfcSNd4VFQnwmzYzAPzWviZOhw_mXxbE5_Q,,&q={searchTerms}
HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.delta-homes.com/?type=hp&ts=1418803757&from=wpm12173&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX
HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx880JXKe86_GbHG1dd3_ZUO7f9P-erwHNCqTNC2N-bD_VuqW9_GZEo6bb-GY_2lvBgAcriofDrYyDvmqS_ZpHgRgysb59A7GkwC3ueSlLX88DN4XVZSgirsHT763s_7cNJ-P-Vo6zXfcSNd4VFQnwmzYzAPzWviZOhw_mXxbE5_Q,,&q={searchTerms}
HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.delta-homes.com/?type=hp&ts=1418803757&from=wpm12173&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1410567811&from=adks&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1410567811&from=adks&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX&q={searchTerms}
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = hxxp://www.default-search.net/search?sid=498&aid=156&itype=n&ver=13892&tm=488&src=ds&p={searchTerms}
SearchScopes: HKLM -> {CC865B26-C31D-4D23-B17B-96548EEF03F6} URL = 
SearchScopes: HKLM-x32 -> DefaultScope Wert fehlt
SearchScopes: HKLM-x32 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx880JXKe86_GbHG1dd3_ZUO7f9P-erwHNCqTNC2N-bD_VuqW9_GZEo6bb-GY_2lvBgAcriofDrYyDvmqS_ZpHgRgysb59A7GkwC3ueSlLX88DN4XVZSgirsHT763s_7cNJ-P-Vo6zXfcSNd4VFQnwmzYzAPzWviZOhw_mXxbE5_Q,,&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1410567811&from=adks&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX&q={searchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = hxxp://www.default-search.net/search?sid=498&aid=156&itype=n&ver=13892&tm=488&src=ds&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = hxxp://www.default-search.net/search?sid=498&aid=156&itype=n&ver=13892&tm=488&src=ds&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx880JXKe86_GbHG1dd3_ZUO7f9P-erwHNCqTNC2N-bD_VuqW9_GZEo6bb-GY_2lvBgAcriofDrYyDvmqS_ZpHgRgysb59A7GkwC3ueSlLX88DN4XVZSgirsHT763s_7cNJ-P-Vo6zXfcSNd4VFQnwmzYzAPzWviZOhw_mXxbE5_Q,,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://groovorio.com/results.php?f=4&q={searchTerms}&a=grv_bndl2_14_26&cd=2XzuyEtN2Y1L1Qzu0B0CyByBtAyBtD0ByDyD0B0C0CtDyDzztN0D0Tzu0SzyzzyCtN1L2XzutAtFtBtFtCtFtDtN1L1Czu1N1C2X1V1S1G1Q1ItB1VtCyE1VtByCtN1L1G1B1V1N2Y1L1Qzu2SyCtBzyzz0C0E0DtAtGzy0CzztBtGyD0D0C0AtGyDtC0CyEtGtB0F0D0FyD0F0EtCyDyB0B0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0F0FtA0A0AtCzztGyC0B0EtBtGyEtCtByDtG0AyB0DtAtGtAtAtCyCyB0CyCyEzztAtC0F2Q&cr=1650614473&ir=
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {02E47D68-8EA7-4F7A-AB03-257EE8CF60E3} URL = hxxp://suche.t-online.de/fast-cgi/tsc?sr=twiki&q={searchTerms}&dia=tie8
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {07455994-2258-4AE5-8744-00DDBE0B51AA} URL = hxxp://dict.leo.org/esde?lp=esde&search={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {07A34A13-F379-4FED-A1C2-C42359281989} URL = hxxp://suche.t-online.de/fast-cgi/tsc?sr=tportal&q={searchTerms}&dia=tie8
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.only-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=0025BC77370B55B9&affID=129300&tt=020914_onst&tsp=5377
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.delta-homes.com/web/?type=ds&ts=1418803757&from=wpm12173&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://www.mystart.com/results.php?gen=ms&pr=vmn&id=mystarttb&v=5_4&ent=ch_5108&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {3C3B4442-076C-4A08-A3E4-933BBB6B11FE} URL = hxxp://dict.leo.org/ende?lp=ende&search={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://suche.t-online.de/fast-cgi/tsc?sr=tweb&q={searchTerms}&dia=tie8
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {4DB99919-E1B4-4CF4-AB25-E53741564EAC} URL = hxxp://www.only-search.com/?babsrc=SP_kms&affID=129359&tt=020914_onst&mntrid=0025BC77370B55B9&tsp=5365&q={searchTerms}&r=251
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {84B78CBA-5069-454F-89A4-3F9EEA8FAB1E} URL = hxxp://dict.leo.org/frde?lp=frde&search={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = hxxp://www.default-search.net/search?sid=498&aid=156&itype=n&ver=13892&tm=488&src=ds&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {A1C6D67B-F5C4-403C-A865-DD6EB6CB7AC7} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag=tonline-browser_toolbar3_search-21&index=blended&linkCode=ur2
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {A4B7EB37-C169-4EFE-8A3C-3A7B7349BB12} URL = hxxp://rover.ebay.com/rover/1/707-1403-42072-3/4?satitle={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {A862526B-F34C-4E56-BC50-58645AC37A43} URL = hxxp://start.iminent.com/?appId=5094E0B2-3734-44D1-BC47-5D124393935B&ref=toolbox&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {CC865B26-C31D-4D23-B17B-96548EEF03F6} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3324369&octid=EB_ORIGINAL_CTID&ISID=M9DF984A5-503A-4EBD-99FC-EE1E306F110A&SearchSource=58&CUI=&UM=6&UP=SP6900C91C-353E-4B6C-95E1-334E65D4E6BB&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {EA80AACC-A779-42C0-9BA8-4FD379D50185} URL = hxxp://preisvergleich.t-online.de/angebote/{searchTerms}?soid=42534758
BHO: V-bates -> {21EAF666-26B3-4a3c-ABD0-CA2F5A326744} -> Keine Datei
BHO: SafeFinder SmartbarEngine -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} -> C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation)
BHO: Boost -> {8DE6FC60-E023-4AD7-A3B7-591E1460E7F7} -> C:\Program Files (x86)\Boost\64Boost.dll [2014-05-16] (Jigsaw)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: IMinent WebBooster (BHO) -> {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} -> Keine Datei
BHO-x32: SafeFinder SmartbarEngine -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} -> C:\Windows\SysWOW64\mscoree.dll [2010-11-05] (Microsoft Corporation)
BHO-x32: Kein Name -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> Keine Datei
BHO-x32: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-01-14] (Microsoft Corporation)
BHO-x32: Boost -> {8DE6FC60-E023-4AD7-A3B7-591E1460E7F7} -> C:\Program Files (x86)\Boost\Boost.dll [2014-05-16] (Jigsaw)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Kein Name -> {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} -> Keine Datei
BHO-x32: Bing Bar BHO -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll [2010-04-27] (Microsoft Corporation)
Toolbar: HKLM - SafeFinder Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation)
Toolbar: HKLM-x32 - SafeFinder Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\SysWOW64\mscoree.dll [2010-11-05] (Microsoft Corporation)
Toolbar: HKLM-x32 - @C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll [2010-04-27] (Microsoft Corporation)
Toolbar: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> Kein Name - {2015C8D4-8534-48DB-B5FB-5C76291F080C} -  Keine Datei
IE Session Restore: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> ist aktiviert.

FireFox:
========
FF ProfilePath: C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: delta-homes
FF SearchEngineOrder.1: default-search.net
FF SelectedSearchEngine: delta-homes
FF Homepage: hxxp://www.google.de/
FF Keyword.URL: hxxp://www.mystart.com/results.php?pr=vmn&id=mystarttb&v=5_3&ent=bs____campaignID___&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2016-01-03] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2016-01-03] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\4.0.60129.0\npctrl.dll [2011-01-28] ( Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpWinExt,version=5.0 -> C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll [2010-04-27] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-23] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-23] (Google Inc.)
FF user.js: detected! => C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\user.js [2014-12-27]
FF Plugin ProgramFiles/Appdata: C:\Users\oli\AppData\Roaming\mozilla\plugins\np-mswmp.dll [2009-09-25] (Microsoft Corporation)
FF SearchPlugin: C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\searchplugins\default-search.xml [2014-10-02]
FF SearchPlugin: C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\searchplugins\Groovorio.xml [2014-09-13]
FF SearchPlugin: C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\searchplugins\MyOnlineSearch.xml [2014-09-20]
FF SearchPlugin: C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\searchplugins\onlysearchkms.xml [2014-09-20]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\default-search.xml [2014-10-02]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\delta-homes.xml [2014-12-17]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mystarttb.xml [2014-10-01]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\webssearches.xml [2014-09-13]
FF Extension: Boost - C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\extensions\boost@boost.net.xpi [2014-05-16] [ist nicht signiert]
FF Extension: Fast Start - C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\extensions\faststartff@gmail.com [2014-09-13] [ist nicht signiert]
FF Extension: Yahoo! Toolbar - C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [2014-10-21] [ist nicht signiert]
FF Extension: Security Protection - C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\extensions\detgdp@gmail.com [2014-12-17] [ist nicht signiert]
FF Extension: ClickMovie1-Downloaderv10 - C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\extensions\LPESNIOB27154074@RO39491085.com [2014-09-20] [ist nicht signiert]
FF Extension: TotalPlus01-3.1V20.09 - C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com [2014-09-20] [ist nicht signiert]
FF Extension: Avira Browser Safety - C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\abs@avira.com [2016-01-03]
FF Extension: Groovorio - C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\{73843edf-1075-4a55-947c-e13e0dc9349e} [2014-09-13] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox
FF Extension: V-bates - C:\Program Files\V-bates\Firefox [2014-09-08] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\extensions\faststartff@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [msntoolbar@msn.com] - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\Firefox
FF Extension: Bing Bar - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\Firefox [2014-10-07] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{27182e60-b5f3-411c-b545-b44205977502}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension
FF Extension: Search Helper Extension - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension [2014-10-07] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [detgdp@gmail.com] - C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\extensions\detgdp@gmail.com

Chrome: 
=======
CHR HomePage: Default -> hxxp://start.iminent.com/__PARAM__
CHR Profile: C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-27]
CHR Extension: (Google Drive) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-03]
CHR Extension: (YouTube) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-03]
CHR Extension: (Google-Suche) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-03]
CHR Extension: (Avira Browserschutz) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-01-03]
CHR Extension: (Google Docs Offline) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-03]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-03]
CHR Extension: (Google Mail) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-21]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [noajmlkipclmeolfcnflkjhijkigpfjh] - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\noajmlkipclmeolfcnflkjhijkigpfjh.crx [2014-12-17]
CHR HKLM-x32\...\Chrome\Extension: [ehhlaekjfiiojlddgndcnefflngfmhen] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [nbljechdpodpbchbmjcoamidppmpnmlc] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [noajmlkipclmeolfcnflkjhijkigpfjh] - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\noajmlkipclmeolfcnflkjhijkigpfjh.crx [2014-12-17]

Opera: 
=======
OPR Extension: (ClickMovie1-Downloaderv10) - C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\Extensions\gkookgoofbomddkomagahpnpdcnebnad [2014-09-20]
OPR Extension: (TotalPlus01-3.1V20.09) - C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\Extensions\ljefoakgfhcoeobgicjgejglnpfpemgb [2014-09-20]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 EZ Software Updater; C:\Program Files (x86)\EZ Software Updater\EZ Software Updater.exe [220672 2014-09-07] () [Datei ist nicht signiert] <==== ACHTUNG
R2 GlobalUpdater; C:\Program Files (x86)\Common Files\IMGUpdater\IMGUpdater.exe [378152 2014-08-13] (SIEN S.A.)
R2 Internet Enhancer Service; C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancerService.exe [312320 2014-12-19] () [Datei ist nicht signiert]
S2 LPTSystemUpdater; C:\Program Files (x86)\LPT\srpts.exe [32768 2014-08-27] () <==== ACHTUNG
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-02-04] ()
S2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG) [Datei ist nicht signiert]
R2 UniversalUpdater; C:\Program Files (x86)\Universal Updater\UpdaterService.exe [623064 2014-09-29] () <==== ACHTUNG
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /medsvc [X] <==== ACHTUNG

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R1 zgjmm2f2oxm1bdf; C:\Windows\System32\drivers\zgjmm2f2oxm1bdf.sys [50520 2015-05-27] (Windows (R) Win 7 DDK provider)
R1 {9f93bd66-d3d2-427d-b37f-743603e2388d}Gw64; C:\Windows\System32\drivers\{9f93bd66-d3d2-427d-b37f-743603e2388d}Gw64.sys [61112 2014-09-07] (StdLib)
R1 {e6ca9971-30ed-444a-9489-82fca50b2062}Gw64; C:\Windows\System32\drivers\{e6ca9971-30ed-444a-9489-82fca50b2062}Gw64.sys [61064 2014-09-06] (StdLib)
S1 b786bdb3c67d; system32\drivers\b786bdb3c67d.sys [X]
S3 cpuz134; \??\C:\Users\oli\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S1 mwiynzm4ndy1yjz; system32\drivers\mwiynzm4ndy1yjz.sys [X]
S1 ttnfd; system32\drivers\ttnfd.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-01-03 11:24 - 2016-01-03 11:25 - 00026801 _____ C:\Users\oli\Desktop\FRST.txt
2016-01-03 11:24 - 2016-01-03 11:24 - 00000000 ____D C:\Users\oli\Desktop\FRST-OlderVersion
2016-01-03 11:23 - 2016-01-03 11:24 - 00000000 ____D C:\FRST
2016-01-03 11:22 - 2016-01-03 11:24 - 02370560 _____ (Farbar) C:\Users\oli\Desktop\FRST64.exe
2016-01-03 11:07 - 2016-01-03 11:07 - 00000000 ____D C:\Users\oli\Desktop\Aktuell
2015-12-24 11:44 - 2015-12-24 11:44 - 00000000 ____D C:\Users\oli\AppData\Local\GWX
2015-12-23 18:10 - 2015-12-23 18:10 - 00000000 ____D C:\Windows\pss

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-01-03 11:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2016-01-03 11:15 - 2014-11-18 12:02 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-03 11:14 - 2009-07-14 05:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-01-03 11:14 - 2009-07-14 05:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-01-03 11:01 - 2014-11-15 13:50 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-01-03 11:01 - 2014-11-15 13:50 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-01-03 11:01 - 2014-09-08 09:24 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-01-03 11:01 - 2014-09-08 09:24 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-01-03 10:58 - 2014-09-08 21:58 - 00000278 _____ C:\Windows\Tasks\FF Watcher {3B3C4322-A6AE-4B22-9262-9712DFF22F22}.job
2016-01-03 10:20 - 2014-11-18 12:02 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-03 10:11 - 2014-09-08 08:07 - 00003914 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{F24EC260-0E3D-4DA9-9732-FAFB9C26E3E3}
2016-01-03 10:10 - 2014-09-20 17:01 - 00001478 _____ C:\Windows\Tasks\8acd8cfe-0d49-4c23-96a4-cb0ff6208028.job
2016-01-03 10:10 - 2014-09-20 17:00 - 00004492 _____ C:\Windows\Tasks\8f9ed4af-5111-4f71-812c-1b094e27d2ce-11.job
2016-01-03 10:10 - 2014-09-20 17:00 - 00003810 _____ C:\Windows\Tasks\8f9ed4af-5111-4f71-812c-1b094e27d2ce-4.job
2016-01-03 10:10 - 2014-09-20 17:00 - 00002782 _____ C:\Windows\Tasks\8f9ed4af-5111-4f71-812c-1b094e27d2ce-1.job
2016-01-03 10:10 - 2014-09-20 17:00 - 00002106 _____ C:\Windows\Tasks\8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.job
2016-01-03 10:10 - 2014-09-20 17:00 - 00000644 _____ C:\Windows\Tasks\5ca3d7ee-b3a9-4616-8d61-5908263d6ef2.job
2016-01-03 10:10 - 2014-09-20 16:59 - 00003810 _____ C:\Windows\Tasks\8f9ed4af-5111-4f71-812c-1b094e27d2ce-3.job
2016-01-03 10:10 - 2014-09-20 16:57 - 00002798 _____ C:\Windows\Tasks\a36cfb56-9617-43f8-8549-4249948493a3-1.job
2016-01-03 10:10 - 2014-09-20 16:57 - 00002794 _____ C:\Windows\Tasks\a36cfb56-9617-43f8-8549-4249948493a3-5_user.job
2016-01-03 10:10 - 2014-09-20 16:57 - 00002450 _____ C:\Windows\Tasks\a36cfb56-9617-43f8-8549-4249948493a3-5.job
2016-01-03 10:10 - 2014-09-20 16:57 - 00002114 _____ C:\Windows\Tasks\a36cfb56-9617-43f8-8549-4249948493a3-2.job
2016-01-03 10:10 - 2014-09-20 16:57 - 00001428 _____ C:\Windows\Tasks\0b2adad4-80dd-4db6-9974-ea67098cfd80.job
2016-01-03 10:10 - 2014-09-20 16:56 - 00004500 _____ C:\Windows\Tasks\a36cfb56-9617-43f8-8549-4249948493a3-11.job
2016-01-03 10:10 - 2014-09-20 16:56 - 00003818 _____ C:\Windows\Tasks\a36cfb56-9617-43f8-8549-4249948493a3-4.job
2016-01-03 10:10 - 2014-09-20 16:56 - 00000594 _____ C:\Windows\Tasks\c5ae52c4-0626-4df0-b05a-24ca24de9f8a.job
2016-01-03 10:10 - 2014-09-20 16:55 - 00003138 _____ C:\Windows\Tasks\a36cfb56-9617-43f8-8549-4249948493a3-3.job
2015-12-30 02:08 - 2014-09-20 17:01 - 00002442 _____ C:\Windows\Tasks\8f9ed4af-5111-4f71-812c-1b094e27d2ce-5_user.job
2015-12-30 02:08 - 2014-09-20 17:01 - 00002442 _____ C:\Windows\Tasks\8f9ed4af-5111-4f71-812c-1b094e27d2ce-5.job
2015-12-24 11:48 - 2009-07-14 18:58 - 00699666 _____ C:\Windows\system32\perfh007.dat
2015-12-24 11:48 - 2009-07-14 18:58 - 00149774 _____ C:\Windows\system32\perfc007.dat
2015-12-24 11:48 - 2009-07-14 06:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-24 11:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2015-12-23 18:53 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-23 18:08 - 2014-09-08 07:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\T-Online
2015-12-23 18:08 - 2014-09-08 07:51 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-12-23 18:08 - 2014-02-27 13:16 - 00000162 _____ C:\TO_InstallLog.txt
2015-12-23 17:20 - 2014-09-08 11:34 - 01594892 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2015-12-23 17:04 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-12-23 17:01 - 2014-10-07 20:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-12-23 17:00 - 2014-10-07 20:14 - 00000000 ____D C:\Program Files (x86)\HP
2015-12-23 17:00 - 2014-10-07 20:12 - 00000000 ____D C:\Users\oli\AppData\Local\HP
2015-12-23 16:55 - 2014-09-08 11:11 - 00000000 ____D C:\Users\oli\AppData\Roaming\Gameo
2015-12-23 16:22 - 2014-11-18 12:02 - 00002403 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-23 16:13 - 2014-12-17 09:10 - 00000000 ____D C:\Program Files (x86)\WinZipper
2015-12-23 16:10 - 2014-11-18 12:02 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-23 16:10 - 2014-11-18 12:02 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-09-08 11:23 - 2014-10-02 06:53 - 0000310 _____ () C:\Users\oli\AppData\Roaming\aps.uninstall.scan.results
2014-09-01 09:18 - 2014-09-01 09:18 - 0001248 _____ () C:\Users\oli\AppData\Roaming\BRNIADFR
2014-09-13 07:36 - 2014-09-13 07:36 - 0000046 _____ () C:\Users\oli\AppData\Roaming\WB.CFG
2014-09-01 09:18 - 2014-09-01 09:18 - 0002086 _____ () C:\Users\oli\AppData\Roaming\WN
2014-09-08 11:16 - 2014-09-08 11:16 - 0616240 _____ (ClickMeIn Limited) C:\Users\oli\AppData\Local\nseFDB.tmp
2014-09-08 11:34 - 2014-09-08 11:34 - 0617277 _____ (ClickMeIn Limited) C:\Users\oli\AppData\Local\nsfD3C.tmp
2014-10-02 06:46 - 2014-10-02 06:46 - 0612096 _____ (ClickMeIn Limited) C:\Users\oli\AppData\Local\nsj57B3.tmp
2014-09-14 00:39 - 2014-09-14 00:39 - 0617369 _____ (ClickMeIn Limited) C:\Users\oli\AppData\Local\nswC4D5.tmp

Einige Dateien in TEMP:
====================
C:\Users\oli\AppData\Local\Temp\scp7B5A.tmp.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2014-12-27 00:02

==================== Ende von FRST.txt ============================

Additions.log:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:31-12-2015
durchgeführt von oli (2016-01-03 11:25:21)
Gestartet von C:\Users\oli\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2014-09-07 19:03:45)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1335512877-2763367150-1506735299-500 - Administrator - Disabled)
Gast (S-1-5-21-1335512877-2763367150-1506735299-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1335512877-2763367150-1506735299-1002 - Limited - Enabled)
oli (S-1-5-21-1335512877-2763367150-1506735299-1000 - Administrator - Enabled) => C:\Users\oli

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.270 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated)
Bing Bar (HKLM-x32\...\{08234a0d-cf39-4dca-99f0-0c5cb496da81}) (Version: 5.0.1449.0 - Microsoft Corporation)
Bing Bar Platform (x32 Version: 5.0.1449.0 - Microsoft Corporation) Hidden
Boost for Internet Explorer (HKLM-x32\...\Boost) (Version: 3.0.0.10 - Verti Technology Group, Inc.)
ClickMovie1-Downloaderv10 (HKLM-x32\...\ClickMovie1-Downloaderv10) (Version: 1.35.9.16 - end)
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
DriverUpdate (HKLM-x32\...\{8AE269B5-4133-4FFC-9896-D718886D7D8F}) (Version: 2.2.43335 - SlimWare Utilities, Inc.)
EZ Software Updater version 1.2.0.4 (HKLM-x32\...\EZ Software Updater_is1) (Version: 1.2.0.4 - )
FLV Player (remove only) (HKLM-x32\...\FLVM Player) (Version:  - ) <==== ACHTUNG
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
Hades (HKLM-x32\...\Hades) (Version: 2.05.27.0 - Hades)
HP Update (HKLM-x32\...\{787D1A33-A97B-4245-87C0-7174609A540C}) (Version: 5.002.005.003 - Hewlett-Packard)
Iminent (HKLM-x32\...\IMBoosterARP) (Version: 7.5.3.1 - Iminent) <==== ACHTUNG
IminentToolbar (HKLM-x32\...\IminentToolbar) (Version: 7.5.3.1 - Iminent) <==== ACHTUNG
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{794E5C90-96E5-4413-B3F5-C803205AE30C}) (Version: 14.0.3000 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.0.1008 - Intel Corporation)
LPT System Updater Service (HKLM-x32\...\{BC0BF363-63AB-4FF7-8EF1-AE0D7F711B24}) (Version: 1.0.0.0 - LPT) <==== ACHTUNG
Media Downloader version 1.5 (HKLM-x32\...\Media Downloader_is1) (Version: 1.5 - Media Downloader)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.60129.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 33.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 32.0.1 - Mozilla)
Netzmanager (HKLM-x32\...\Netzmanager) (Version: 1.081 - Deutsche Telekom AG)
Netzmanager (Version: 1.081 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden
One More Game! (HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\...\OneMoreGame) (Version: 1.0 - One More Game!)
Remote Desktop Access (VuuPC) (HKLM-x32\...\VOPackage) (Version: 1.0.0.0 - CMI Limited) <==== ACHTUNG
SafeFinder Smartbar (HKLM-x32\...\{1898B668-CCF5-429F-A86F-9837E5439D77}) (Version: 11.114.72.19232 - Linkury Ltd.) <==== ACHTUNG
Salus (HKLM-x32\...\Salus) (Version: 2.01.01.0 - Salus) <==== ACHTUNG
Software Version Updater (HKLM-x32\...\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}) (Version: 1.1.3.8 - ) <==== ACHTUNG
Telekom Fotoservice (HKLM-x32\...\Telekom Fotoservice) (Version:  - )
T-Online WLAN-Access Finder (HKLM-x32\...\{295C31E5-3F91-498E-9623-DA24D2FA2B6A}) (Version:  - )
V-bates 2.0.0.445 (HKLM\...\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}_is1) (Version: 2.0.0.445 - Wajamu) <==== ACHTUNG
Wajam (HKLM-x32\...\WInterEnhance) (Version: 2.21.2.21 (i2.6) - WInterEnhance) <==== ACHTUNG
webssearches uninstall (HKLM-x32\...\webssearches uninstall) (Version:  - webssearches) <==== ACHTUNG
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {016B4B2D-2211-4F80-8A15-476F7DFC55D1} - System32\Tasks\FF Watcher {3B3C4322-A6AE-4B22-9262-9712DFF22F22} => C:\Program Files\V-bates\PrefHelper.exe <==== ACHTUNG
Task: {146E885C-109A-49DF-883F-E8A0A97389FF} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG
Task: {147720C6-1AFF-432B-A216-43A87FA3224D} - System32\Tasks\gameo_update => C:\Users\oli\AppData\Roaming\Gameo\gameo.exe [2014-12-24] () <==== ACHTUNG
Task: {19E61BA1-2F90-43A5-B6EE-69D0BE2761C4} - System32\Tasks\8f9ed4af-5111-4f71-812c-1b094e27d2ce-5 => C:\Program Files (x86)\TotalPlus01-3.1V20.09\8f9ed4af-5111-4f71-812c-1b094e27d2ce-5.exe <==== ACHTUNG
Task: {1A08A80F-464B-475E-84DC-6C768DDCBE49} - System32\Tasks\a36cfb56-9617-43f8-8549-4249948493a3-4 => C:\Program Files (x86)\ClickMovie1-Downloaderv10\a36cfb56-9617-43f8-8549-4249948493a3-4.exe <==== ACHTUNG
Task: {1DC36DAC-F5CE-4A27-BB2D-58F023E5F8E9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-03] (Adobe Systems Incorporated)
Task: {2AC1E168-8FB4-4ED9-B7AB-7705A28C6028} - System32\Tasks\8f9ed4af-5111-4f71-812c-1b094e27d2ce-4 => C:\Program Files (x86)\TotalPlus01-3.1V20.09\8f9ed4af-5111-4f71-812c-1b094e27d2ce-4.exe <==== ACHTUNG
Task: {331E8EAC-E838-4CCC-B8B3-C4B9A3CCDA2C} - System32\Tasks\a36cfb56-9617-43f8-8549-4249948493a3-1 => C:\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-codedownloader.exe <==== ACHTUNG
Task: {3884276D-EC3E-46CC-B228-EE1F0041BE63} - System32\Tasks\8f9ed4af-5111-4f71-812c-1b094e27d2ce-5_user => C:\Program Files (x86)\TotalPlus01-3.1V20.09\8f9ed4af-5111-4f71-812c-1b094e27d2ce-5.exe <==== ACHTUNG
Task: {42F0E4D6-F932-43D6-BE1D-70BEA18BECF0} - System32\Tasks\Mext Guard FBE8818C-5B13-48C2-A93E-AD731167DBF2 => C:\Program Files\V-bates\startsc.bat [2014-03-24] () <==== ACHTUNG
Task: {4FC5CE07-330A-4AA6-A62B-7274A1BD2F6B} - System32\Tasks\8f9ed4af-5111-4f71-812c-1b094e27d2ce-1 => C:\Program Files (x86)\TotalPlus01-3.1V20.09\TotalPlus01-3.1V20.09-codedownloader.exe <==== ACHTUNG
Task: {52B59B83-0FE6-4547-BA5B-DBBE17E66AB8} - System32\Tasks\a36cfb56-9617-43f8-8549-4249948493a3-2 => C:\Program Files (x86)\ClickMovie1-Downloaderv10\a36cfb56-9617-43f8-8549-4249948493a3-2.exe <==== ACHTUNG
Task: {5A40E926-9E86-4B89-9CFD-B12311724371} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {67706043-B3B8-4370-9E34-AAA5B5031A3B} - System32\Tasks\8f9ed4af-5111-4f71-812c-1b094e27d2ce-3 => C:\Program Files (x86)\TotalPlus01-3.1V20.09\8f9ed4af-5111-4f71-812c-1b094e27d2ce-3.exe <==== ACHTUNG
Task: {71D0EA60-E7E1-400A-A88D-C8EB4488F4A8} - System32\Tasks\a36cfb56-9617-43f8-8549-4249948493a3-5 => C:\Program Files (x86)\ClickMovie1-Downloaderv10\a36cfb56-9617-43f8-8549-4249948493a3-5.exe <==== ACHTUNG
Task: {7D27A6EF-4194-4940-A6E5-96DC1D949797} - System32\Tasks\5ca3d7ee-b3a9-4616-8d61-5908263d6ef2 => C:\Program Files (x86)\TotalPlus01-3.1V20.09\5ca3d7ee-b3a9-4616-8d61-5908263d6ef2.exe <==== ACHTUNG
Task: {7F1E84D8-1D81-47CD-86E0-3F5A19995112} - System32\Tasks\SlimCleaner Plus (Scheduled Scan - oli) => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe
Task: {819DFECF-24D2-4130-95C4-8259A70CAF54} - System32\Tasks\a36cfb56-9617-43f8-8549-4249948493a3-5_user => C:\Program Files (x86)\ClickMovie1-Downloaderv10\a36cfb56-9617-43f8-8549-4249948493a3-5.exe <==== ACHTUNG
Task: {938786C3-B2FD-465A-9E80-3FC6E5614821} - System32\Tasks\c5ae52c4-0626-4df0-b05a-24ca24de9f8a => C:\Program Files (x86)\ClickMovie1-Downloaderv10\c5ae52c4-0626-4df0-b05a-24ca24de9f8a.exe <==== ACHTUNG
Task: {975D67BC-5167-4489-B723-2E938C5CCD70} - System32\Tasks\0b2adad4-80dd-4db6-9974-ea67098cfd80 => C:\Program Files (x86)\ClickMovie1-Downloaderv10\0b2adad4-80dd-4db6-9974-ea67098cfd80.exe <==== ACHTUNG
Task: {A3F62893-5143-4634-89FE-347A19DE18C2} - System32\Tasks\8f9ed4af-5111-4f71-812c-1b094e27d2ce-11 => C:\Program Files (x86)\TotalPlus01-3.1V20.09\8f9ed4af-5111-4f71-812c-1b094e27d2ce-11.exe <==== ACHTUNG
Task: {A5487850-4B7E-4E07-B61E-0D690254983F} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG
Task: {BAB99CCE-EAAE-43CA-B7E5-5F9EE16A3B10} - System32\Tasks\8acd8cfe-0d49-4c23-96a4-cb0ff6208028 => C:\Program Files (x86)\TotalPlus01-3.1V20.09\8acd8cfe-0d49-4c23-96a4-cb0ff6208028.exe <==== ACHTUNG
Task: {C463872F-8E4C-4EF6-BF6D-9F836C3E690C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-23] (Google Inc.)
Task: {D83B6F72-D6C4-49D6-9F14-B1F1B7EBAC32} - System32\Tasks\8f9ed4af-5111-4f71-812c-1b094e27d2ce-2 => C:\Program Files (x86)\TotalPlus01-3.1V20.09\8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe <==== ACHTUNG
Task: {D8BC1150-1DEB-4E6F-AC67-FB224E5BB937} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe <==== ACHTUNG
Task: {DA5BEE9B-BB51-434D-8B8C-4FB98526F072} - System32\Tasks\a36cfb56-9617-43f8-8549-4249948493a3-11 => C:\Program Files (x86)\ClickMovie1-Downloaderv10\a36cfb56-9617-43f8-8549-4249948493a3-11.exe <==== ACHTUNG
Task: {DBBCE30E-D3A9-4126-8E90-EFCF8973EC6D} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG
Task: {DD9F510C-95F4-499A-90C8-BAC5BC372FF4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask => start sppsvc
Task: {E3DB9353-33AF-45D1-B772-D5162CDC6E6C} - System32\Tasks\{B5148E8A-823B-4075-BBA3-F2737C38A502} => pcalua.exe -a C:\Users\oli\AppData\Roaming\webssearches\UninstallManager.exe -c  -ptid=adks <==== ACHTUNG
Task: {F1783727-A3F9-4506-86CD-DBF11C2BD004} - System32\Tasks\a36cfb56-9617-43f8-8549-4249948493a3-3 => C:\Program Files (x86)\ClickMovie1-Downloaderv10\a36cfb56-9617-43f8-8549-4249948493a3-3.exe <==== ACHTUNG
Task: {F2E6EB96-5306-4A77-B97C-E4D9AFB9D2B9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-23] (Google Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\0b2adad4-80dd-4db6-9974-ea67098cfd80.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\0b2adad4-80dd-4db6-9974-ea67098cfd80.exeȍ/agentregpath='ClickMovie1-Downloaderv10' /appid=63317 /srcid='001820' /subid='0' /zdata='0' /bic=6EFD957EC0F049FB976A4D50297E1981IE /verifier=2ac813b287711ea764815532be57a214 /installerversion=1_35_09_16 /installationtime=1411228548 /statsdomain=hxxp:/stats.newclientonlinestorage.com /errorsdomain=hxxp:/errors.newclientonlinestorage.com /extensionname='Information' /torpedoiesleeps=1000 /torpedoieplugins=93-0,102-0,104-0,184-0 /monetizationdomain=hxxp:/logs.newclientonlinestorage.com <==== ACHTUNG
Task: C:\Windows\Tasks\5ca3d7ee-b3a9-4616-8d61-5908263d6ef2.job => C:\Program Files (x86)\TotalPlus01-3.1V20.09\5ca3d7ee-b3a9-4616-8d61-5908263d6ef2.exe <==== ACHTUNG
Task: C:\Windows\Tasks\8acd8cfe-0d49-4c23-96a4-cb0ff6208028.job => C:\Program Files (x86)\TotalPlus01-3.1V20.09\8acd8cfe-0d49-4c23-96a4-cb0ff6208028.exeȪ/agentregpath='TotalPlus01-3.1V20.09' /appid=63285 /srcid='002174' /subid='0' /zdata='0' /bic=6EFD957EC0F049FB976A4D50297E1981IE /verifier=2ac813b287711ea764815532be57a214 /installerversion=1_35_09_16 /installationtime=1411228791 /statsdomain=hxxp:/stats.newclientonlinestorage.com /errorsdomain=hxxp:/errors.newclientonlinestorage.com /extensionname='Information' /torpedoiesleeps=1000 /torpedoieplugins=93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 /monetizationdomain=hxxp:/logs.newclientonlinestorage.com <==== ACHTUNG
Task: C:\Windows\Tasks\8f9ed4af-5111-4f71-812c-1b094e27d2ce-1.job => C:\Program Files (x86)\TotalPlus01-3.1V20.09\TotalPlus01-3.1V20.09-codedownloader.exe <==== ACHTUNG
Task: C:\Windows\Tasks\8f9ed4af-5111-4f71-812c-1b094e27d2ce-11.job => C:\Program Files (x86)\TotalPlus01-3.1V20.09\8f9ed4af-5111-4f71-812c-1b094e27d2ce-11.exe <==== ACHTUNG
Task: C:\Windows\Tasks\8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.job => C:\Program Files (x86)\TotalPlus01-3.1V20.09\8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe <==== ACHTUNG
Task: C:\Windows\Tasks\8f9ed4af-5111-4f71-812c-1b094e27d2ce-3.job => C:\Program Files (x86)\TotalPlus01-3.1V20.09\8f9ed4af-5111-4f71-812c-1b094e27d2ce-3.exe <==== ACHTUNG
Task: C:\Windows\Tasks\8f9ed4af-5111-4f71-812c-1b094e27d2ce-4.job => C:\Program Files (x86)\TotalPlus01-3.1V20.09\8f9ed4af-5111-4f71-812c-1b094e27d2ce-4.exe <==== ACHTUNG
Task: C:\Windows\Tasks\8f9ed4af-5111-4f71-812c-1b094e27d2ce-5.job => C:\Program Files (x86)\TotalPlus01-3.1V20.09\8f9ed4af-5111-4f71-812c-1b094e27d2ce-5.exe <==== ACHTUNG
Task: C:\Windows\Tasks\8f9ed4af-5111-4f71-812c-1b094e27d2ce-5_user.job => C:\Program Files (x86)\TotalPlus01-3.1V20.09\8f9ed4af-5111-4f71-812c-1b094e27d2ce-5.exe <==== ACHTUNG
Task: C:\Windows\Tasks\a36cfb56-9617-43f8-8549-4249948493a3-1.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-codedownloader.exe <==== ACHTUNG
Task: C:\Windows\Tasks\a36cfb56-9617-43f8-8549-4249948493a3-11.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\a36cfb56-9617-43f8-8549-4249948493a3-11.exe <==== ACHTUNG
Task: C:\Windows\Tasks\a36cfb56-9617-43f8-8549-4249948493a3-2.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\a36cfb56-9617-43f8-8549-4249948493a3-2.exe <==== ACHTUNG
Task: C:\Windows\Tasks\a36cfb56-9617-43f8-8549-4249948493a3-3.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\a36cfb56-9617-43f8-8549-4249948493a3-3.exe <==== ACHTUNG
Task: C:\Windows\Tasks\a36cfb56-9617-43f8-8549-4249948493a3-4.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\a36cfb56-9617-43f8-8549-4249948493a3-4.exe <==== ACHTUNG
Task: C:\Windows\Tasks\a36cfb56-9617-43f8-8549-4249948493a3-5.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\a36cfb56-9617-43f8-8549-4249948493a3-5.exe <==== ACHTUNG
Task: C:\Windows\Tasks\a36cfb56-9617-43f8-8549-4249948493a3-5_user.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\a36cfb56-9617-43f8-8549-4249948493a3-5.exe <==== ACHTUNG
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG
Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG
Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG
Task: C:\Windows\Tasks\c5ae52c4-0626-4df0-b05a-24ca24de9f8a.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\c5ae52c4-0626-4df0-b05a-24ca24de9f8a.exe <==== ACHTUNG
Task: C:\Windows\Tasks\FF Watcher {3B3C4322-A6AE-4B22-9262-9712DFF22F22}.job => C:\Program Files\V-bates\PrefHelper.exe <==== ACHTUNG
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - oli).job => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

ShortcutWithArgument: C:\Users\oli\Desktop\Search.lnk -> C:\ProgramData\DSearchLink\DSearchLink.exe () -> -url hxxp://www.only-search.com/?babsrc=DT_ss&mntrId=0025BC77370B55B9&affID=129359&tt=020914_onst&tsp=5365 -wbr 2
ShortcutWithArgument: C:\Users\oli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://istart.webssearches.com/?type=sc&ts=1410567811&from=adks&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX
ShortcutWithArgument: C:\Users\oli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://istart.webssearches.com/?type=sc&ts=1410567811&from=adks&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX
ShortcutWithArgument: C:\Users\oli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://istart.webssearches.com/?type=sc&ts=1410567811&from=adks&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX
ShortcutWithArgument: C:\Users\oli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://istart.webssearches.com/?type=sc&ts=1410567811&from=adks&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX
ShortcutWithArgument: C:\Users\oli\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://istart.webssearches.com/?type=sc&ts=1410567811&from=adks&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX
ShortcutWithArgument: C:\Users\oli\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.delta-homes.com/?type=sc&ts=1418803757&from=wpm12173&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.delta-homes.com/?type=sc&ts=1418803757&from=wpm12173&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.delta-homes.com/?type=sc&ts=1418803757&from=wpm12173&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.delta-homes.com/?type=sc&ts=1418803757&from=wpm12173&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX
ShortcutWithArgument: C:\Users\Public\Desktop\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.delta-homes.com/?type=sc&ts=1418803757&from=wpm12173&uid=HitachiXHTS547575A9E384_J2540054GL9K4EGL9K4EX

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2011-02-04 14:42 - 2011-02-04 14:42 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2014-12-19 17:51 - 2014-12-19 17:51 - 00312320 _____ () C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancerService.exe
2011-02-04 14:42 - 2011-02-04 14:42 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2014-01-29 22:02 - 2014-01-29 22:02 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-09-29 14:00 - 2014-09-29 14:00 - 00623064 _____ () C:\Program Files (x86)\Universal Updater\UpdaterService.exe
2014-12-19 17:51 - 2014-12-19 17:51 - 00083456 _____ () C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancer.exe
2014-11-12 21:25 - 2014-11-12 21:25 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\93182e9779b8be0f688fd0784df6d7fb\IsdiInterop.ni.dll
2014-11-12 21:25 - 2010-11-05 23:50 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-09-08 11:05 - 2014-11-14 18:52 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2015-12-23 16:21 - 2015-12-11 04:54 - 01583432 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\libglesv2.dll
2015-12-23 16:21 - 2015-12-11 04:54 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\oli\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\startupfolder: C:^Users^oli^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^BoostUpdater.lnk => C:\Windows\pss\BoostUpdater.lnk.Startup
MSCONFIG\startupfolder: C:^Users^oli^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Netzmanager.lnk => C:\Windows\pss\Netzmanager.lnk.Startup
MSCONFIG\startupreg: Bing Bar => "C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\mswinext.exe"
MSCONFIG\startupreg: CrashMon => "C:\Program Files (x86)\Universal Updater\CrashMon.exe" "UniversalUpdater" "hxxp://log.data-url.com/crash/"
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
MSCONFIG\startupreg: Microsoft Default Manager => "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
MSCONFIG\startupreg: mwyyntm1ndi1zdz => C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf.exe
MSCONFIG\startupreg: OneMoreGame => C:\Users\oli\AppData\Roaming\OneMoreGame\OMG.exe
MSCONFIG\startupreg: Only-search => C:\Users\oli\AppData\Local\onlysearch\onlysearch\1.3.12.9\onlysearch.exe
MSCONFIG\startupreg: Salus CrashMon => "C:\Program Files (x86)\f552dd4c52e3\a7d12b5975b4.exe" "b786bdb3c67d.exe" "hxxp://log.data-url.com/salus/crash"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{ED8C0EF7-4EBD-48A7-BE9E-CAFFDAF6F337}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [TCP Query User{1B6DF512-096F-4DE8-BBF1-7CB6763EC952}C:\program files\hp\hp deskjet 3050 j610 series\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp deskjet 3050 j610 series\bin\hpnetworkcommunicator.exe
FirewallRules: [UDP Query User{93DC7369-D643-499B-B588-12FF16F9D2CA}C:\program files\hp\hp deskjet 3050 j610 series\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp deskjet 3050 j610 series\bin\hpnetworkcommunicator.exe
FirewallRules: [{C77C91DA-F219-4B61-848C-B47691AC54DD}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Wiederherstellungspunkte =========================

23-12-2014 16:14:08 Windows Update
27-12-2014 12:12:30 Removed Studie zur Verbesserung von HP Deskjet 3050 J610 series Produkten
30-12-2014 21:55:26 Windows Update
21-05-2015 21:43:01 Windows Update
22-05-2015 00:10:56 Windows Update
29-05-2015 12:38:02 Windows Update
23-12-2015 16:59:17 Removed HP Deskjet 3050 J610 series - Grundlegende Software für das Gerät
23-12-2015 17:00:09 Removed HP Deskjet 3050 J610 series - Grundlegende Software für das Gerät
23-12-2015 17:01:01 Removed HP Deskjet 3050 J610 series Hilfe
23-12-2015 17:16:37 Windows Update
23-12-2015 18:06:32 Entfernt T-Online 6.0
23-12-2015 18:08:00 Entfernt T-Online Router Web-IF Management
23-12-2015 18:08:22 Entfernt Marmiko Infrastruktur Informationssystem
03-01-2016 10:22:28 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: USB2.0-CRW
Description: USB2.0-CRW
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: b786bdb3c67d
Description: b786bdb3c67d
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: b786bdb3c67d
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: mwiynzm4ndy1yjz
Description: mwiynzm4ndy1yjz
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: mwiynzm4ndy1yjz
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: ttnfd
Description: ttnfd
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: ttnfd
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/23/2015 06:01:37 PM) (Source: NMInfraIS2Svc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. Der Dienstprozess konnte keine Verbindung mit dem Dienstcontroller herstellen

Error: (12/23/2015 05:13:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: msi.dll, Version: 5.0.7601.18637, Zeitstempel: 0x543c864f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000001f1046
ID des fehlerhaften Prozesses: 0x620
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3

Error: (12/23/2015 04:13:30 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (05/27/2015 04:51:19 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (05/26/2015 11:24:47 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x81000101).

Error: (01/03/2015 09:05:11 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Volume "(C:)" wurde aufgrund eines Fehlers nicht defragmentiert: Die Startoptimierung konnte aufgrund fehlenden Speicherplatzes nicht abgeschlossen werden. (0x89000019)

Error: (01/03/2015 08:57:00 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (01/03/2015 08:57:00 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (01/03/2015 08:56:12 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (12/30/2014 05:18:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Notifier.exe, Version: 6.4.0.2, Zeitstempel: 0x45a38d1f
Name des fehlerhaften Moduls: eMailPlugIn.dll, Version: 6.6.0.2, Zeitstempel: 0x47d9e700
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00065aca
ID des fehlerhaften Prozesses: 0xd00
Startzeit der fehlerhaften Anwendung: 0xNotifier.exe0
Pfad der fehlerhaften Anwendung: Notifier.exe1
Pfad des fehlerhaften Moduls: Notifier.exe2
Berichtskennung: Notifier.exe3


Systemfehler:
=============
Error: (12/24/2015 11:44:21 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
b786bdb3c67d
mwiynzm4ndy1yjz
ttnfd

Error: (12/24/2015 11:44:08 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Netzmanager Infrastruktur Informationssystem Dienst erreicht.

Error: (12/24/2015 11:43:35 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "LPT System Updater Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (12/24/2015 11:43:35 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst LPT System Updater Service erreicht.

Error: (12/24/2015 12:53:52 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\System32\IWMSSvc.dll
Fehlercode: 1726

Error: (12/24/2015 12:53:52 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\Windows\System32\IWMSSvc.dll

Error: (12/24/2015 12:53:48 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "EZ Software Updater" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (12/24/2015 12:53:48 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst EZ Software Updater erreicht.

Error: (12/23/2015 06:15:25 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
b786bdb3c67d
mwiynzm4ndy1yjz
ttnfd

Error: (12/23/2015 06:14:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "LPT System Updater Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053


CodeIntegrity:
===================================
  Date: 2015-05-29 13:45:02.399
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-27 17:48:39.309
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-11 04:44:39.271
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-15 07:28:09.250
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-15 07:28:09.079
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-15 07:27:25.406
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-14 04:34:17.568
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-14 04:34:17.444
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-14 04:32:46.894
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-14 04:31:10.676
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i3-2310M CPU @ 2.10GHz
Prozentuale Nutzung des RAM: 58%
Installierter physikalischer RAM: 4003.07 MB
Verfügbarer physikalischer RAM: 1668.97 MB
Summe virtueller Speicher: 8004.33 MB
Verfügbarer virtueller Speicher: 5462.07 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:657.54 GB) (Free:615.86 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: D3AF660C)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=657.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=40 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== Ende von Addition.txt ============================

deeprybka · 03.01.2016, 12:40

Mein Name ist Jürgen und ich werde Dir bei Deinem Problem behilflich sein. Zusammen schaffen wir das...

Bitte arbeite alle Schritte der Reihe nach ab.
Lies die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem.
Führe bitte nur Scans durch, zu denen Du von mir aufgefordert wurdest.
Bitte kein Crossposting (posten in mehreren Foren).
Installiere oder deinstalliere während der Bereinigung keine Software, außer Du wurdest dazu aufgefordert.
Speichere alle unsere Tools auf dem Desktop ab. Link: So ladet Ihr unsere Tools richtig
Poste die Logfiles direkt in Deinen Thread in Code-Tags.
Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 24 Stunden nichts von mir liest, dann schreibe mir bitte eine PM.

Hinweis:
Ich kann Dir niemals eine Garantie geben, dass wir alle schädlichen Dateien finden werden.
Eine Formatierung ist meist der schnellere und immer der sicherste Weg, aber auch nur bei wirklicher Malware empfehlenswert.
Adware & Co. können wir sehr gut entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Du mein clean bekommst.

Los geht's:

Schritt 1

Bitte deinstalliere folgende Programme:

FLV Player
Iminent
IminentToolbar
LPT System Updater Service
Remote Desktop Access
SafeFinder Smartbar
Salus
Software Version Updater
V-bates 2.0.0.445
Wajam
webssearches uninstall

Versuche es bei Windows 7

zunächst über Systemsteuerung/Programme deinstallieren.

Sollte das nicht gehen, lade Dir bitte Revo Uninstaller

hier herunter. Entpacke die zip-Datei auf den Desktop. Anleitung

Starte die Revouninstaller.exe
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche im Uninstallerfeld nach den oben angegebenen Programmen und wähle sie einzeln aus.
Klicke jedes Mal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Wenn Du ein Programm nicht deinstallieren kannst, mach mit dem nächsten weiter.
Auch wenn am Ende noch Programme übrig geblieben sind, führe den nächsten Schritt aus:

Schritt 2
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 3

Download und Anleitung
Starte Malwarebytes' Anti-Malware (MBAM).
Unter Einstellungen/ Erkennung und Schutz setze bitte einen Haken bei "Suche nach Rootkits".
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass Deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 4

Bitte starte FRST erneut, markiere auch die checkbox

und drücke auf Untersuchen.
Bitte poste mir den Inhalt der beiden Logs die erstellt werden.

Kespa · 04.01.2016, 12:21

Ich habe gestern probiert den Schritten zu folgen, allerdings konnte ich nur ein Programm entfernen, danach bekam ich im Taskmanager immer die Meldung, dass ein anderer Prozess erst beendet werden müsse.Ich habe dann einen Neustart gemacht und dabei wurden dann 55 (windows?)updates gemacht.Seitdem tauch öffters eine stnmp-Fehlermeldung auf.
Beim deinstallieren der o.a. Programme bekam ich mehrfach die Meldung, daß auf ein Netzwerkpfad nicht zugegriffen werden könne.
Ich habe nach Anleitung weiter gemacht, aber irgendwas ist hier im Argen.

Deswegen habe ich jetzt erstmal eine neue FRST und Additions erstellt, das hielt ich für am sinnvollsten:

FRST:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:31-12-2015
durchgeführt von oli (Administrator) auf OLI-PC (04-01-2016 12:10:10)
Gestartet von C:\Users\oli\Desktop
Geladene Profile: oli (Verfügbare Profile: oli)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: IE)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\mcbuilder.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2011-02-04] (Intel(R) Corporation)
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-18\...\Run: [AviraSpeedup] => "C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup.exe" -autorun
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-09-09] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei
CHR HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{555AEA56-8BDF-4D13-913C-1F8EAFB2D65B}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130962973552149474&GUID=00000000-0000-0000-0000-000000000000
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130962973552305474&GUID=00000000-0000-0000-0000-000000000000
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130962973558389485&GUID=00000000-0000-0000-0000-000000000000
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130962973558389485&GUID=00000000-0000-0000-0000-000000000000
HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130962973557453484&GUID=00000000-0000-0000-0000-000000000000
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = hxxp://www.default-search.net/search?sid=498&aid=156&itype=n&ver=13892&tm=488&src=ds&p={searchTerms}
SearchScopes: HKLM -> {CC865B26-C31D-4D23-B17B-96548EEF03F6} URL = 
SearchScopes: HKLM-x32 -> DefaultScope Wert fehlt
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {02E47D68-8EA7-4F7A-AB03-257EE8CF60E3} URL = hxxp://suche.t-online.de/fast-cgi/tsc?sr=twiki&q={searchTerms}&dia=tie8
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {07455994-2258-4AE5-8744-00DDBE0B51AA} URL = hxxp://dict.leo.org/esde?lp=esde&search={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {07A34A13-F379-4FED-A1C2-C42359281989} URL = hxxp://suche.t-online.de/fast-cgi/tsc?sr=tportal&q={searchTerms}&dia=tie8
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {3C3B4442-076C-4A08-A3E4-933BBB6B11FE} URL = hxxp://dict.leo.org/ende?lp=ende&search={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://suche.t-online.de/fast-cgi/tsc?sr=tweb&q={searchTerms}&dia=tie8
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {84B78CBA-5069-454F-89A4-3F9EEA8FAB1E} URL = hxxp://dict.leo.org/frde?lp=frde&search={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {A1C6D67B-F5C4-403C-A865-DD6EB6CB7AC7} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag=tonline-browser_toolbar3_search-21&index=blended&linkCode=ur2
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {A4B7EB37-C169-4EFE-8A3C-3A7B7349BB12} URL = hxxp://rover.ebay.com/rover/1/707-1403-42072-3/4?satitle={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {EA80AACC-A779-42C0-9BA8-4FD379D50185} URL = hxxp://preisvergleich.t-online.de/angebote/{searchTerms}?soid=42534758
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-01-14] (Microsoft Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Bing Bar BHO -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll [2010-04-27] (Microsoft Corporation)
Toolbar: HKLM-x32 - @C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll [2010-04-27] (Microsoft Corporation)
Toolbar: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> Kein Name - {2015C8D4-8534-48DB-B5FB-5C76291F080C} -  Keine Datei
IE Session Restore: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> ist aktiviert.

FireFox:
========
FF ProfilePath: C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: delta-homes
FF SearchEngineOrder.1: default-search.net
FF SelectedSearchEngine: delta-homes
FF Homepage: hxxp://www.google.de/
FF Keyword.URL: hxxp://www.mystart.com/results.php?pr=vmn&id=mystarttb&v=5_3&ent=bs____campaignID___&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2016-01-03] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2016-01-03] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\4.0.60129.0\npctrl.dll [2011-01-28] ( Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpWinExt,version=5.0 -> C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll [2010-04-27] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-23] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-23] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\oli\AppData\Roaming\mozilla\plugins\np-mswmp.dll [2009-09-25] (Microsoft Corporation)
FF Extension: Avira Browser Safety - C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\abs@avira.com [2016-01-03]
FF HKLM-x32\...\Firefox\Extensions: [msntoolbar@msn.com] - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\Firefox
FF Extension: Bing Bar - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\Firefox [2014-10-07] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{27182e60-b5f3-411c-b545-b44205977502}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension
FF Extension: Search Helper Extension - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension [2014-10-07] [ist nicht signiert]

Chrome: 
=======
CHR Profile: C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-27]
CHR Extension: (Google Drive) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-03]
CHR Extension: (YouTube) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-03]
CHR Extension: (Google-Suche) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-03]
CHR Extension: (Avira Browserschutz) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-01-03]
CHR Extension: (Google Docs Offline) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-03]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-03]
CHR Extension: (Google Mail) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-21]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [noajmlkipclmeolfcnflkjhijkigpfjh] - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\noajmlkipclmeolfcnflkjhijkigpfjh.crx <nicht gefunden>
CHR HKLM-x32\...\Chrome\Extension: [ehhlaekjfiiojlddgndcnefflngfmhen] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [nbljechdpodpbchbmjcoamidppmpnmlc] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [noajmlkipclmeolfcnflkjhijkigpfjh] - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\noajmlkipclmeolfcnflkjhijkigpfjh.crx <nicht gefunden>

Opera: 
=======
OPR Extension: (ClickMovie1-Downloaderv10) - C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\Extensions\gkookgoofbomddkomagahpnpdcnebnad [2014-09-20]
OPR Extension: (TotalPlus01-3.1V20.09) - C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\Extensions\ljefoakgfhcoeobgicjgejglnpfpemgb [2014-09-20]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-02-04] ()
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG) [Datei ist nicht signiert]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R1 zgjmm2f2oxm1bdf; C:\Windows\System32\drivers\zgjmm2f2oxm1bdf.sys [50520 2015-05-27] (Windows (R) Win 7 DDK provider)
S1 b786bdb3c67d; system32\drivers\b786bdb3c67d.sys [X]
S3 cpuz134; \??\C:\Users\oli\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S1 mwiynzm4ndy1yjz; system32\drivers\mwiynzm4ndy1yjz.sys [X]
S1 {9f93bd66-d3d2-427d-b37f-743603e2388d}Gw64; system32\drivers\{9f93bd66-d3d2-427d-b37f-743603e2388d}Gw64.sys [X]
S1 {e6ca9971-30ed-444a-9489-82fca50b2062}Gw64; system32\drivers\{e6ca9971-30ed-444a-9489-82fca50b2062}Gw64.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-01-04 12:10 - 2016-01-04 12:12 - 00015707 _____ C:\Users\oli\Desktop\FRST.txt
2016-01-03 14:18 - 2016-01-03 14:22 - 00000000 ____D C:\AdwCleaner
2016-01-03 14:16 - 2016-01-03 14:16 - 01745920 _____ C:\Users\oli\Desktop\AdwCleaner_5.027.exe
2016-01-03 13:58 - 2016-01-03 13:58 - 00000000 ____D C:\Users\oli\Desktop\RevoUninstallerPortable
2016-01-03 13:56 - 2016-01-03 13:57 - 02785665 _____ (PortableApps.com) C:\Users\oli\Desktop\RevoUninstallerPortable_1.95_Rev_2.paf.exe
2016-01-03 13:52 - 2016-01-03 13:52 - 00003098 _____ C:\Windows\System32\Tasks\Seventh
2016-01-03 13:52 - 2016-01-03 13:52 - 00003090 _____ C:\Windows\System32\Tasks\Sixth
2016-01-03 13:51 - 2016-01-03 14:22 - 00000000 ____D C:\Users\oli\AppData\Roaming\Common
2016-01-03 11:25 - 2016-01-03 11:25 - 00040180 _____ C:\Users\oli\Desktop\_Addition.txt
2016-01-03 11:24 - 2016-01-03 14:10 - 00085840 _____ C:\Users\oli\Desktop\_FRST.txt
2016-01-03 11:24 - 2016-01-03 11:24 - 00000000 ____D C:\Users\oli\Desktop\FRST-OlderVersion
2016-01-03 11:23 - 2016-01-04 12:10 - 00000000 ____D C:\FRST
2016-01-03 11:22 - 2016-01-03 11:24 - 02370560 _____ (Farbar) C:\Users\oli\Desktop\FRST64.exe
2016-01-03 11:07 - 2016-01-03 11:07 - 00000000 ____D C:\Users\oli\Desktop\Aktuell
2016-01-03 10:56 - 2015-11-05 20:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-01-03 10:56 - 2015-11-05 20:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-01-03 10:56 - 2015-08-05 18:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-01-03 10:56 - 2015-06-15 22:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-01-03 10:56 - 2015-06-15 22:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-01-03 10:56 - 2015-06-15 22:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-01-03 10:56 - 2015-06-15 22:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-01-03 10:56 - 2015-06-15 22:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2016-01-03 10:56 - 2015-06-15 22:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-01-03 10:56 - 2015-06-15 22:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-01-03 10:56 - 2015-06-15 22:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2016-01-03 10:56 - 2015-06-02 01:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2016-01-03 10:56 - 2015-06-02 00:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2016-01-03 10:56 - 2015-04-29 19:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-01-03 10:56 - 2015-04-29 19:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-01-03 10:56 - 2015-04-29 19:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-01-03 10:56 - 2015-04-29 19:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-01-03 10:56 - 2015-04-29 19:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-01-03 10:56 - 2015-04-29 19:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-01-03 10:56 - 2015-04-29 19:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-01-03 10:56 - 2015-04-29 19:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-01-03 10:56 - 2015-04-29 19:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-01-03 10:56 - 2015-04-29 19:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-01-03 10:55 - 2015-11-03 20:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2016-01-03 10:55 - 2015-11-03 19:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2016-01-03 10:55 - 2015-08-06 19:04 - 14176768 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-01-03 10:55 - 2015-08-06 19:03 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-01-03 10:55 - 2015-08-06 18:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-01-03 10:55 - 2015-08-06 18:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-01-03 10:55 - 2015-07-15 19:15 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-01-03 10:55 - 2015-07-15 19:10 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2016-01-03 10:55 - 2015-07-15 19:10 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2016-01-03 10:55 - 2015-07-10 18:51 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-01-03 10:55 - 2015-07-10 18:51 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2016-01-03 10:55 - 2015-07-10 18:51 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2016-01-03 10:55 - 2015-07-10 18:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-01-03 10:55 - 2015-07-10 18:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2016-01-03 10:55 - 2015-07-10 18:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2016-01-03 10:55 - 2015-05-25 19:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2016-01-03 10:55 - 2015-05-25 19:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2016-01-03 10:55 - 2015-05-25 19:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2016-01-03 10:55 - 2015-05-25 19:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2016-01-03 10:55 - 2015-05-25 19:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2016-01-03 10:55 - 2015-05-25 19:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2016-01-03 10:55 - 2015-05-25 19:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2016-01-03 10:55 - 2015-05-25 19:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2016-01-03 10:55 - 2015-05-25 19:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2016-01-03 10:55 - 2015-05-25 19:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2016-01-03 10:55 - 2015-05-25 19:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2016-01-03 10:55 - 2015-05-25 19:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2016-01-03 10:54 - 2015-11-20 19:54 - 03170304 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 02609152 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 00709632 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-01-03 10:54 - 2015-11-20 19:54 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-01-03 10:54 - 2015-11-20 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-01-03 10:54 - 2015-11-20 19:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-01-03 10:54 - 2015-11-20 19:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-01-03 10:54 - 2015-11-20 19:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-01-03 10:54 - 2015-11-20 19:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-01-03 10:54 - 2015-11-20 19:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-01-03 10:54 - 2015-11-10 19:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-01-03 10:54 - 2015-11-10 19:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-01-03 10:54 - 2015-11-10 19:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-01-03 10:54 - 2015-11-10 19:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2016-01-03 10:54 - 2015-11-10 19:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-01-03 10:54 - 2015-11-10 18:47 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-01-03 10:54 - 2015-07-15 04:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-01-03 10:54 - 2015-07-09 18:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-01-03 10:54 - 2015-07-09 18:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-01-03 10:54 - 2015-07-09 18:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-01-03 10:54 - 2015-07-09 18:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2016-01-03 10:54 - 2015-07-01 21:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2016-01-03 10:54 - 2015-07-01 21:48 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-01-03 10:54 - 2015-07-01 21:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2016-01-03 10:54 - 2015-07-01 21:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2016-01-03 10:54 - 2015-06-17 18:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-01-03 10:54 - 2015-06-17 18:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-01-03 10:53 - 2015-11-05 20:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2016-01-03 10:53 - 2015-11-05 20:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll
2016-01-03 10:53 - 2015-11-05 10:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2016-01-03 10:53 - 2015-10-01 19:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-01-03 10:53 - 2015-10-01 19:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-01-03 10:53 - 2015-10-01 19:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-01-03 10:53 - 2015-10-01 19:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-01-03 10:53 - 2015-10-01 19:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-01-03 10:53 - 2015-10-01 19:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-01-03 10:53 - 2015-10-01 19:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-01-03 10:53 - 2015-10-01 18:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-01-03 10:53 - 2015-10-01 18:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-01-03 10:53 - 2015-09-18 20:22 - 00025432 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-01-03 10:53 - 2015-09-18 20:19 - 01291264 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-01-03 10:53 - 2015-09-18 20:19 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-01-03 10:53 - 2015-09-18 20:19 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-01-03 10:53 - 2015-09-18 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-01-03 10:53 - 2015-09-18 20:19 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-01-03 10:53 - 2015-09-18 20:09 - 01163776 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-01-03 10:53 - 2015-07-04 19:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-01-03 10:53 - 2015-07-04 18:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-01-03 10:53 - 2015-06-03 21:16 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-01-03 10:53 - 2015-04-27 20:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-01-03 10:53 - 2015-04-27 20:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-01-03 10:53 - 2015-04-27 20:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-01-03 10:53 - 2015-04-27 20:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-01-03 10:53 - 2015-04-27 20:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-01-03 10:53 - 2015-04-27 20:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-01-03 10:53 - 2015-04-27 20:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2016-01-03 10:53 - 2015-04-27 20:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2016-01-03 10:53 - 2015-04-24 19:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2016-01-03 10:53 - 2015-04-24 18:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2016-01-03 10:52 - 2015-11-11 19:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-01-03 10:52 - 2015-11-11 19:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2016-01-03 10:52 - 2015-11-11 19:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2016-01-03 10:52 - 2015-11-11 19:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2016-01-03 10:52 - 2015-10-29 18:50 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2016-01-03 10:52 - 2015-10-29 18:50 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2016-01-03 10:52 - 2015-10-29 18:50 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2016-01-03 10:52 - 2015-10-29 18:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2016-01-03 10:52 - 2015-10-29 18:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2016-01-03 10:52 - 2015-10-29 18:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2016-01-03 10:52 - 2015-10-29 18:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2016-01-03 10:52 - 2015-10-20 02:12 - 05570496 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-01-03 10:52 - 2015-10-20 02:12 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-01-03 10:52 - 2015-10-20 02:12 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-01-03 10:52 - 2015-10-20 02:09 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-01-03 10:52 - 2015-10-20 02:06 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-01-03 10:52 - 2015-10-20 02:06 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-01-03 10:52 - 2015-10-20 02:06 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-01-03 10:52 - 2015-10-20 02:06 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-01-03 10:52 - 2015-10-20 02:05 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-01-03 10:52 - 2015-10-20 02:05 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-01-03 10:52 - 2015-10-20 02:04 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-01-03 10:52 - 2015-10-20 02:04 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-01-03 10:52 - 2015-10-20 02:04 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-01-03 10:52 - 2015-10-20 02:00 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-01-03 10:52 - 2015-10-20 01:59 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:52 - 03991488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-01-03 10:52 - 2015-10-20 01:52 - 03935680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-01-03 10:52 - 2015-10-20 01:48 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-01-03 10:52 - 2015-10-20 01:45 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-01-03 10:52 - 2015-10-20 01:44 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-01-03 10:52 - 2015-10-20 01:44 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-01-03 10:52 - 2015-10-20 01:44 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-01-03 10:52 - 2015-10-20 01:44 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-01-03 10:52 - 2015-10-20 01:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-01-03 10:52 - 2015-10-20 01:44 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-01-03 10:52 - 2015-10-20 01:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-01-03 10:52 - 2015-10-20 01:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 00:41 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-01-03 10:52 - 2015-10-20 00:40 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-01-03 10:52 - 2015-10-20 00:40 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-01-03 10:52 - 2015-10-20 00:29 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-01-03 10:52 - 2015-10-20 00:29 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-01-03 10:52 - 2015-10-20 00:27 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 00:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 00:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 00:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-01-03 10:52 - 2015-10-13 17:41 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-01-03 10:52 - 2015-10-13 17:40 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2016-01-03 10:52 - 2015-09-23 14:15 - 00460776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-01-03 10:52 - 2015-09-23 14:15 - 00299632 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-01-03 10:52 - 2015-09-23 14:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-01-03 10:52 - 2015-07-30 19:06 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-01-03 10:52 - 2015-07-30 18:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-01-03 10:51 - 2015-11-11 22:12 - 00387792 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-01-03 10:51 - 2015-11-11 21:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-01-03 10:51 - 2015-11-11 17:21 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-01-03 10:51 - 2015-11-11 17:00 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-01-03 10:51 - 2015-11-11 16:44 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-01-03 10:51 - 2015-11-11 16:44 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-01-03 10:51 - 2015-11-11 16:41 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-01-03 10:51 - 2015-11-11 16:12 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-01-03 10:51 - 2015-11-11 15:57 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-01-03 10:51 - 2015-11-10 01:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-01-03 10:51 - 2015-11-10 01:13 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-01-03 10:51 - 2015-11-10 01:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-01-03 10:51 - 2015-11-10 01:12 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-01-03 10:51 - 2015-11-10 01:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-01-03 10:51 - 2015-11-10 01:11 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-01-03 10:51 - 2015-11-10 01:08 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-01-03 10:51 - 2015-11-10 01:06 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-01-03 10:51 - 2015-11-10 01:06 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-01-03 10:51 - 2015-11-10 01:04 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-01-03 10:51 - 2015-11-10 01:03 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-01-03 10:51 - 2015-11-10 01:02 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-01-03 10:51 - 2015-11-10 01:02 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-01-03 10:51 - 2015-11-10 00:50 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-01-03 10:51 - 2015-11-10 00:47 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-01-03 10:51 - 2015-11-10 00:46 - 04514816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-01-03 10:51 - 2015-11-10 00:44 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-01-03 10:51 - 2015-11-10 00:37 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-01-03 10:51 - 2015-11-10 00:36 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-01-03 10:51 - 2015-11-10 00:36 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-01-03 10:51 - 2015-11-10 00:35 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-01-03 10:51 - 2015-11-10 00:17 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-01-03 10:51 - 2015-11-10 00:14 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-01-03 10:51 - 2015-11-10 00:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-01-03 10:51 - 2015-11-08 23:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-01-03 10:51 - 2015-11-08 23:32 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-01-03 10:51 - 2015-11-08 23:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-01-03 10:51 - 2015-11-08 23:15 - 02887168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-01-03 10:51 - 2015-11-08 23:15 - 00571392 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-01-03 10:51 - 2015-11-08 23:15 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-01-03 10:51 - 2015-11-08 23:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-01-03 10:51 - 2015-11-08 23:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-01-03 10:51 - 2015-11-08 23:07 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-01-03 10:51 - 2015-11-08 23:06 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-01-03 10:51 - 2015-11-08 23:04 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-01-03 10:51 - 2015-11-08 23:02 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-01-03 10:51 - 2015-11-08 23:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-01-03 10:51 - 2015-11-08 23:01 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-01-03 10:51 - 2015-11-08 23:01 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-01-03 10:51 - 2015-11-08 23:01 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-01-03 10:51 - 2015-11-08 22:52 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-01-03 10:51 - 2015-11-08 22:48 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-01-03 10:51 - 2015-11-08 22:40 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-01-03 10:51 - 2015-11-08 22:35 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-01-03 10:51 - 2015-11-08 22:32 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-01-03 10:51 - 2015-11-08 22:29 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-01-03 10:51 - 2015-11-08 22:18 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-01-03 10:51 - 2015-11-08 22:15 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-01-03 10:51 - 2015-11-08 22:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-01-03 10:51 - 2015-11-08 22:14 - 14456832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-01-03 10:51 - 2015-11-08 22:14 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-01-03 10:51 - 2015-11-08 22:13 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-01-03 10:51 - 2015-11-08 21:53 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-01-03 10:51 - 2015-11-08 21:41 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-01-03 10:51 - 2015-11-08 21:30 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-01-03 10:51 - 2015-08-27 19:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-01-03 10:51 - 2015-08-27 19:18 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-01-03 10:51 - 2015-08-27 19:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2016-01-03 10:51 - 2015-08-27 19:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2016-01-03 10:51 - 2015-08-27 18:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2016-01-03 10:51 - 2015-08-27 18:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-01-03 10:51 - 2015-08-27 18:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2016-01-03 10:51 - 2015-08-27 18:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2016-01-03 10:51 - 2015-07-23 01:02 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-01-03 10:51 - 2015-07-23 01:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-01-03 10:51 - 2015-07-23 01:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-01-03 10:51 - 2015-07-22 18:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-01-03 10:51 - 2015-07-22 18:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2016-01-03 10:51 - 2015-07-22 17:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2016-01-03 10:51 - 2015-07-09 18:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2016-01-03 10:51 - 2015-07-09 18:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2016-01-03 10:51 - 2015-07-09 18:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2016-01-03 10:51 - 2015-06-25 11:06 - 00115136 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-01-03 10:51 - 2015-06-25 11:01 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-01-03 10:51 - 2015-06-25 11:01 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-01-03 10:51 - 2015-06-25 10:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-01-03 10:51 - 2015-04-11 04:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2016-01-03 10:49 - 2015-11-03 20:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2016-01-03 10:49 - 2015-11-03 19:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll
2016-01-03 10:49 - 2015-10-13 05:57 - 00950720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-01-03 10:49 - 2015-10-01 19:00 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-01-03 10:49 - 2015-10-01 19:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-01-03 10:49 - 2015-10-01 18:50 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-01-03 10:49 - 2015-09-02 04:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-01-03 10:49 - 2015-09-02 04:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-01-03 10:49 - 2015-09-02 04:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-01-03 10:49 - 2015-09-02 04:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-01-03 10:49 - 2015-09-02 03:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-01-03 10:49 - 2015-09-02 03:48 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-01-03 10:49 - 2015-09-02 03:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-01-03 10:49 - 2015-09-02 03:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-01-03 10:49 - 2015-09-02 02:47 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-01-03 10:49 - 2015-09-02 02:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-12-24 11:44 - 2015-12-24 11:44 - 00000000 ____D C:\Users\oli\AppData\Local\GWX
2015-12-23 18:10 - 2015-12-23 18:10 - 00000000 ____D C:\Windows\pss

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-01-04 12:10 - 2014-09-08 08:07 - 00003914 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{F24EC260-0E3D-4DA9-9732-FAFB9C26E3E3}
2016-01-04 12:09 - 2014-11-18 12:02 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-04 12:07 - 2014-11-18 12:02 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-04 12:07 - 2014-11-15 13:50 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-01-04 12:07 - 2014-09-20 17:01 - 00001478 _____ C:\Windows\Tasks\8acd8cfe-0d49-4c23-96a4-cb0ff6208028.job
2016-01-04 12:07 - 2014-09-20 17:00 - 00000644 _____ C:\Windows\Tasks\5ca3d7ee-b3a9-4616-8d61-5908263d6ef2.job
2016-01-04 12:07 - 2014-09-20 16:57 - 00001428 _____ C:\Windows\Tasks\0b2adad4-80dd-4db6-9974-ea67098cfd80.job
2016-01-04 12:07 - 2014-09-20 16:56 - 00000594 _____ C:\Windows\Tasks\c5ae52c4-0626-4df0-b05a-24ca24de9f8a.job
2016-01-04 12:07 - 2014-09-13 06:57 - 00000362 _____ C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - oli).job
2016-01-03 14:33 - 2009-07-14 05:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-01-03 14:33 - 2009-07-14 05:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-01-03 14:32 - 2009-07-14 18:58 - 00699666 _____ C:\Windows\system32\perfh007.dat
2016-01-03 14:32 - 2009-07-14 18:58 - 00149774 _____ C:\Windows\system32\perfc007.dat
2016-01-03 14:32 - 2009-07-14 06:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI
2016-01-03 14:32 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-01-03 14:24 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-01-03 14:23 - 2014-09-08 11:10 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-01-03 14:22 - 2015-05-21 22:33 - 00000000 ____D C:\Windows\system32\log
2016-01-03 14:22 - 2014-11-18 12:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2016-01-03 14:22 - 2014-09-08 11:11 - 00001083 _____ C:\Users\oli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2016-01-03 14:22 - 2014-09-08 11:11 - 00000601 _____ C:\Users\oli\Desktop\Search.lnk
2016-01-03 14:22 - 2014-09-08 11:05 - 00001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-01-03 14:22 - 2014-09-07 20:04 - 00001178 _____ C:\Users\oli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-01-03 14:22 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2016-01-03 13:52 - 2014-11-22 10:51 - 00000000 __SHD C:\Users\oli\AppData\Local\EmieBrowserModeList
2016-01-03 13:52 - 2014-09-13 15:57 - 00000000 __SHD C:\Users\oli\AppData\Local\EmieUserList
2016-01-03 13:52 - 2014-09-13 15:57 - 00000000 __SHD C:\Users\oli\AppData\Local\EmieSiteList
2016-01-03 13:44 - 2009-07-14 05:45 - 00267816 _____ C:\Windows\system32\FNTCACHE.DAT
2016-01-03 13:41 - 2014-12-10 15:16 - 00000000 ____D C:\Windows\system32\appraiser
2016-01-03 13:41 - 2014-09-09 00:15 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-01-03 13:41 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-01-03 13:40 - 2015-05-24 15:22 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-01-03 13:40 - 2015-05-24 15:22 - 00000000 ___SD C:\Windows\system32\GWX
2016-01-03 13:40 - 2009-07-14 19:18 - 00000000 ____D C:\Program Files\Windows Journal
2016-01-03 13:23 - 2014-09-08 11:34 - 01594892 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-01-03 13:11 - 2014-09-13 11:19 - 00000000 ____D C:\Windows\system32\MRT
2016-01-03 12:08 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2016-01-03 12:07 - 2014-12-11 16:11 - 00000000 ____D C:\Users\oli\AppData\Local\ElevatedDiagnostics
2016-01-03 11:01 - 2014-11-15 13:50 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-01-03 11:01 - 2014-09-08 09:24 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-01-03 11:01 - 2014-09-08 09:24 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-23 18:08 - 2014-09-08 07:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\T-Online
2015-12-23 18:08 - 2014-09-08 07:51 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-12-23 18:08 - 2014-02-27 13:16 - 00000162 _____ C:\TO_InstallLog.txt
2015-12-23 17:04 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-12-23 17:01 - 2014-10-07 20:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-12-23 17:00 - 2014-10-07 20:14 - 00000000 ____D C:\Program Files (x86)\HP
2015-12-23 17:00 - 2014-10-07 20:12 - 00000000 ____D C:\Users\oli\AppData\Local\HP
2015-12-23 16:22 - 2014-11-18 12:02 - 00002403 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-23 16:10 - 2014-11-18 12:02 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-23 16:10 - 2014-11-18 12:02 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-09-01 09:18 - 2014-09-01 09:18 - 0001248 _____ () C:\Users\oli\AppData\Roaming\BRNIADFR
2014-09-13 07:36 - 2014-09-13 07:36 - 0000046 _____ () C:\Users\oli\AppData\Roaming\WB.CFG
2014-09-01 09:18 - 2014-09-01 09:18 - 0002086 _____ () C:\Users\oli\AppData\Roaming\WN
2014-09-08 11:16 - 2014-09-08 11:16 - 0616240 _____ (ClickMeIn Limited) C:\Users\oli\AppData\Local\nseFDB.tmp
2014-09-08 11:34 - 2014-09-08 11:34 - 0617277 _____ (ClickMeIn Limited) C:\Users\oli\AppData\Local\nsfD3C.tmp
2014-10-02 06:46 - 2014-10-02 06:46 - 0612096 _____ (ClickMeIn Limited) C:\Users\oli\AppData\Local\nsj57B3.tmp
2014-09-14 00:39 - 2014-09-14 00:39 - 0617369 _____ (ClickMeIn Limited) C:\Users\oli\AppData\Local\nswC4D5.tmp

Einige Dateien in TEMP:
====================
C:\Users\oli\AppData\Local\Temp\scp7B5A.tmp.exe
C:\Users\oli\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-01-03 12:00

==================== Ende von FRST.txt ============================

Additions:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:31-12-2015
durchgeführt von oli (2016-01-04 12:13:23)
Gestartet von C:\Users\oli\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2014-09-07 19:03:45)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1335512877-2763367150-1506735299-500 - Administrator - Disabled)
Gast (S-1-5-21-1335512877-2763367150-1506735299-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1335512877-2763367150-1506735299-1002 - Limited - Enabled)
oli (S-1-5-21-1335512877-2763367150-1506735299-1000 - Administrator - Enabled) => C:\Users\oli

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.270 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated)
Bing Bar (HKLM-x32\...\{08234a0d-cf39-4dca-99f0-0c5cb496da81}) (Version: 5.0.1449.0 - Microsoft Corporation)
Bing Bar Platform (x32 Version: 5.0.1449.0 - Microsoft Corporation) Hidden
ClickMovie1-Downloaderv10 (HKLM-x32\...\ClickMovie1-Downloaderv10) (Version: 1.35.9.16 - end)
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
DriverUpdate (HKLM-x32\...\{8AE269B5-4133-4FFC-9896-D718886D7D8F}) (Version: 2.2.43335 - SlimWare Utilities, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
HP Update (HKLM-x32\...\{787D1A33-A97B-4245-87C0-7174609A540C}) (Version: 5.002.005.003 - Hewlett-Packard)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{794E5C90-96E5-4413-B3F5-C803205AE30C}) (Version: 14.0.3000 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.0.1008 - Intel Corporation)
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.60129.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 33.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 32.0.1 - Mozilla)
Netzmanager (HKLM-x32\...\Netzmanager) (Version: 1.081 - Deutsche Telekom AG)
Netzmanager (Version: 1.081 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden
One More Game! (HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\...\OneMoreGame) (Version: 1.0 - One More Game!)
Telekom Fotoservice (HKLM-x32\...\Telekom Fotoservice) (Version:  - )
T-Online WLAN-Access Finder (HKLM-x32\...\{295C31E5-3F91-498E-9623-DA24D2FA2B6A}) (Version:  - )
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {1DC36DAC-F5CE-4A27-BB2D-58F023E5F8E9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-03] (Adobe Systems Incorporated)
Task: {386A60D9-48CA-4BA1-9402-1B54668303EE} - System32\Tasks\Sixth => C:\Users\oli\AppData\Roaming\Sixth\Sixth.exe <==== ACHTUNG
Task: {571D0839-2366-4E6E-82DB-2F5D8A1B0CFC} - System32\Tasks\Seventh => C:\Users\oli\AppData\Roaming\Seventh\Seventh.exe <==== ACHTUNG
Task: {5A40E926-9E86-4B89-9CFD-B12311724371} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {71D67CA6-7815-4E5A-91EA-86798F871FF2} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {7D27A6EF-4194-4940-A6E5-96DC1D949797} - System32\Tasks\5ca3d7ee-b3a9-4616-8d61-5908263d6ef2 => C:\Program Files (x86)\TotalPlus01-3.1V20.09\5ca3d7ee-b3a9-4616-8d61-5908263d6ef2.exe <==== ACHTUNG
Task: {7F1E84D8-1D81-47CD-86E0-3F5A19995112} - System32\Tasks\SlimCleaner Plus (Scheduled Scan - oli) => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe
Task: {938786C3-B2FD-465A-9E80-3FC6E5614821} - System32\Tasks\c5ae52c4-0626-4df0-b05a-24ca24de9f8a => C:\Program Files (x86)\ClickMovie1-Downloaderv10\c5ae52c4-0626-4df0-b05a-24ca24de9f8a.exe <==== ACHTUNG
Task: {975D67BC-5167-4489-B723-2E938C5CCD70} - System32\Tasks\0b2adad4-80dd-4db6-9974-ea67098cfd80 => C:\Program Files (x86)\ClickMovie1-Downloaderv10\0b2adad4-80dd-4db6-9974-ea67098cfd80.exe <==== ACHTUNG
Task: {BAB99CCE-EAAE-43CA-B7E5-5F9EE16A3B10} - System32\Tasks\8acd8cfe-0d49-4c23-96a4-cb0ff6208028 => C:\Program Files (x86)\TotalPlus01-3.1V20.09\8acd8cfe-0d49-4c23-96a4-cb0ff6208028.exe <==== ACHTUNG
Task: {C463872F-8E4C-4EF6-BF6D-9F836C3E690C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-23] (Google Inc.)
Task: {DD9F510C-95F4-499A-90C8-BAC5BC372FF4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask => start sppsvc
Task: {E3DB9353-33AF-45D1-B772-D5162CDC6E6C} - System32\Tasks\{B5148E8A-823B-4075-BBA3-F2737C38A502} => pcalua.exe -a C:\Users\oli\AppData\Roaming\webssearches\UninstallManager.exe -c  -ptid=adks <==== ACHTUNG
Task: {F2E6EB96-5306-4A77-B97C-E4D9AFB9D2B9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-23] (Google Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\0b2adad4-80dd-4db6-9974-ea67098cfd80.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\0b2adad4-80dd-4db6-9974-ea67098cfd80.exeȍ/agentregpath='ClickMovie1-Downloaderv10' /appid=63317 /srcid='001820' /subid='0' /zdata='0' /bic=6EFD957EC0F049FB976A4D50297E1981IE /verifier=2ac813b287711ea764815532be57a214 /installerversion=1_35_09_16 /installationtime=1411228548 /statsdomain=hxxp:/stats.newclientonlinestorage.com /errorsdomain=hxxp:/errors.newclientonlinestorage.com /extensionname='Information' /torpedoiesleeps=1000 /torpedoieplugins=93-0,102-0,104-0,184-0 /monetizationdomain=hxxp:/logs.newclientonlinestorage.com <==== ACHTUNG
Task: C:\Windows\Tasks\5ca3d7ee-b3a9-4616-8d61-5908263d6ef2.job => C:\Program Files (x86)\TotalPlus01-3.1V20.09\5ca3d7ee-b3a9-4616-8d61-5908263d6ef2.exe <==== ACHTUNG
Task: C:\Windows\Tasks\8acd8cfe-0d49-4c23-96a4-cb0ff6208028.job => C:\Program Files (x86)\TotalPlus01-3.1V20.09\8acd8cfe-0d49-4c23-96a4-cb0ff6208028.exeȪ/agentregpath='TotalPlus01-3.1V20.09' /appid=63285 /srcid='002174' /subid='0' /zdata='0' /bic=6EFD957EC0F049FB976A4D50297E1981IE /verifier=2ac813b287711ea764815532be57a214 /installerversion=1_35_09_16 /installationtime=1411228791 /statsdomain=hxxp:/stats.newclientonlinestorage.com /errorsdomain=hxxp:/errors.newclientonlinestorage.com /extensionname='Information' /torpedoiesleeps=1000 /torpedoieplugins=93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 /monetizationdomain=hxxp:/logs.newclientonlinestorage.com <==== ACHTUNG
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\c5ae52c4-0626-4df0-b05a-24ca24de9f8a.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\c5ae52c4-0626-4df0-b05a-24ca24de9f8a.exe <==== ACHTUNG
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - oli).job => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2011-02-04 14:42 - 2011-02-04 14:42 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2011-02-04 14:42 - 2011-02-04 14:42 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2014-01-29 22:02 - 2014-01-29 22:02 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-11-12 21:25 - 2014-11-12 21:25 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\93182e9779b8be0f688fd0784df6d7fb\IsdiInterop.ni.dll
2014-11-12 21:25 - 2010-11-05 23:50 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-09-08 11:05 - 2014-11-14 18:52 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\oli\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\startupfolder: C:^Users^oli^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^BoostUpdater.lnk => C:\Windows\pss\BoostUpdater.lnk.Startup
MSCONFIG\startupfolder: C:^Users^oli^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Netzmanager.lnk => C:\Windows\pss\Netzmanager.lnk.Startup
MSCONFIG\startupreg: Bing Bar => "C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\mswinext.exe"
MSCONFIG\startupreg: CrashMon => "C:\Program Files (x86)\Universal Updater\CrashMon.exe" "UniversalUpdater" "hxxp://log.data-url.com/crash/"
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
MSCONFIG\startupreg: Microsoft Default Manager => "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
MSCONFIG\startupreg: mwyyntm1ndi1zdz => C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf.exe
MSCONFIG\startupreg: OneMoreGame => C:\Users\oli\AppData\Roaming\OneMoreGame\OMG.exe
MSCONFIG\startupreg: Only-search => C:\Users\oli\AppData\Local\onlysearch\onlysearch\1.3.12.9\onlysearch.exe
MSCONFIG\startupreg: Salus CrashMon => "C:\Program Files (x86)\f552dd4c52e3\a7d12b5975b4.exe" "b786bdb3c67d.exe" "hxxp://log.data-url.com/salus/crash"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{ED8C0EF7-4EBD-48A7-BE9E-CAFFDAF6F337}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [TCP Query User{1B6DF512-096F-4DE8-BBF1-7CB6763EC952}C:\program files\hp\hp deskjet 3050 j610 series\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp deskjet 3050 j610 series\bin\hpnetworkcommunicator.exe
FirewallRules: [UDP Query User{93DC7369-D643-499B-B588-12FF16F9D2CA}C:\program files\hp\hp deskjet 3050 j610 series\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp deskjet 3050 j610 series\bin\hpnetworkcommunicator.exe
FirewallRules: [{C77C91DA-F219-4B61-848C-B47691AC54DD}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Wiederherstellungspunkte =========================

30-12-2014 21:55:26 Windows Update
21-05-2015 21:43:01 Windows Update
22-05-2015 00:10:56 Windows Update
29-05-2015 12:38:02 Windows Update
23-12-2015 16:59:17 Removed HP Deskjet 3050 J610 series - Grundlegende Software für das Gerät
23-12-2015 17:00:09 Removed HP Deskjet 3050 J610 series - Grundlegende Software für das Gerät
23-12-2015 17:01:01 Removed HP Deskjet 3050 J610 series Hilfe
23-12-2015 17:16:37 Windows Update
23-12-2015 18:06:32 Entfernt T-Online 6.0
23-12-2015 18:08:00 Entfernt T-Online Router Web-IF Management
23-12-2015 18:08:22 Entfernt Marmiko Infrastruktur Informationssystem
03-01-2016 10:22:28 Windows Update
03-01-2016 12:57:11 Windows Update
03-01-2016 14:02:00 Revo Uninstaller's restore point - LPT System Updater Service
03-01-2016 14:03:44 Revo Uninstaller's restore point - Salus
03-01-2016 14:04:32 Revo Uninstaller's restore point - SafeFinder Smartbar

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: USB2.0-CRW
Description: USB2.0-CRW
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: b786bdb3c67d
Description: b786bdb3c67d
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: b786bdb3c67d
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: mwiynzm4ndy1yjz
Description: mwiynzm4ndy1yjz
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: mwiynzm4ndy1yjz
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: {9f93bd66-d3d2-427d-b37f-743603e2388d}Gw64
Description: {9f93bd66-d3d2-427d-b37f-743603e2388d}Gw64
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: {9f93bd66-d3d2-427d-b37f-743603e2388d}Gw64
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: {e6ca9971-30ed-444a-9489-82fca50b2062}Gw64
Description: {e6ca9971-30ed-444a-9489-82fca50b2062}Gw64
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: {e6ca9971-30ed-444a-9489-82fca50b2062}Gw64
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/03/2016 01:51:58 PM) (Source: MsiInstaller) (EventID: 11311) (User: oli-PC)
Description: Produkt: Microsoft Visual C++ 2005 Redistributable -- Error 1311.Die Quelldatei wurde nicht gefunden (CAB-Datei): C:\Users\oli\AppData\Local\Temp\nsi42BC.tmp\vcredis1.cab. Stellen Sie sicher, dass die Datei vorhanden ist, und Sie darauf zugreifen können.

Error: (01/03/2016 01:46:56 PM) (Source: ESENT) (EventID: 215) (User: )
Description: WinMail (4016) WindowsMail0: Die Sicherung wurde abgebrochen, weil sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen wurde.

Error: (01/03/2016 12:06:35 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Volume "(C:)" wurde aufgrund eines Fehlers nicht defragmentiert: Die Startoptimierung konnte aufgrund fehlenden Speicherplatzes nicht abgeschlossen werden. (0x89000019)

Error: (01/03/2016 12:01:35 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (12/23/2015 06:01:37 PM) (Source: NMInfraIS2Svc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. Der Dienstprozess konnte keine Verbindung mit dem Dienstcontroller herstellen

Error: (12/23/2015 05:13:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: msi.dll, Version: 5.0.7601.18637, Zeitstempel: 0x543c864f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000001f1046
ID des fehlerhaften Prozesses: 0x620
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3

Error: (12/23/2015 04:13:30 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (05/27/2015 04:51:19 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (05/26/2015 11:24:47 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x81000101).

Error: (01/03/2015 09:05:11 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Volume "(C:)" wurde aufgrund eines Fehlers nicht defragmentiert: Die Startoptimierung konnte aufgrund fehlenden Speicherplatzes nicht abgeschlossen werden. (0x89000019)


Systemfehler:
=============
Error: (01/03/2016 08:57:24 PM) (Source: BTHUSB) (EventID: 17) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (01/03/2016 02:25:05 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
b786bdb3c67d
mwiynzm4ndy1yjz
{9f93bd66-d3d2-427d-b37f-743603e2388d}Gw64
{e6ca9971-30ed-444a-9489-82fca50b2062}Gw64

Error: (01/03/2016 02:23:50 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\Windows\System32\IWMSSvc.dll

Error: (01/03/2016 02:23:50 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\Windows\System32\IWMSSvc.dll

Error: (01/03/2016 02:23:50 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\Windows\System32\IWMSSvc.dll

Error: (01/03/2016 02:23:47 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\Windows\System32\IWMSSvc.dll

Error: (01/03/2016 02:23:46 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (01/03/2016 02:23:06 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056

Error: (01/03/2016 02:23:06 PM) (Source: WMPNetworkSvc) (EventID: 14348) (User: )
Description: 0x80070057

Error: (01/03/2016 02:23:06 PM) (Source: WMPNetworkSvc) (EventID: 14323) (User: )
Description: WMPNetworkSvc0xc00d4268


CodeIntegrity:
===================================
  Date: 2015-05-29 13:45:02.399
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-27 17:48:39.309
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-11 04:44:39.271
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-15 07:28:09.250
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-15 07:28:09.079
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-15 07:27:25.406
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-14 04:34:17.568
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-14 04:34:17.444
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-14 04:32:46.894
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-14 04:31:10.676
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i3-2310M CPU @ 2.10GHz
Prozentuale Nutzung des RAM: 34%
Installierter physikalischer RAM: 4003.07 MB
Verfügbarer physikalischer RAM: 2641.56 MB
Summe virtueller Speicher: 8004.35 MB
Verfügbarer virtueller Speicher: 6570.52 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:657.54 GB) (Free:615.96 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: D3AF660C)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=657.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=40 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== Ende von Addition.txt ============================

deeprybka · 04.01.2016, 22:43

Und wo sind die Logs von Schritt 2 und 3?

Kespa · 05.01.2016, 11:50

Also

Scan 1 ADW-Cleaner (nicht alle Haken gesetzt...):

Code:

ATTFilter

# AdwCleaner v5.028 - Bericht erstellt am 05/01/2016 um 09:21:14
# Aktualisiert am 04/01/2016 von Xplode
# Datenbank : 2016-01-04.2 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : oli - OLI-PC
# Gestartet von : C:\Users\oli\Downloads\adwcleaner_5.028.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****

[#] Ordner Gelöscht : C:\Windows\SysNative\Tasks\Seventh
[#] Ordner Gelöscht : C:\Windows\SysNative\Tasks\Sixth

***** [ Dateien ] *****


***** [ DLLs ] *****


***** [ Verknüpfungen ] *****


***** [ Aufgabenplanung ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Internetbrowser ] *****

[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("browser.search.defaultenginename", "delta-homes");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("browser.search.order.1", "default-search.net");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("browser.search.selectedEngine", "delta-homes");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("extensions.a6cfae8cc4676442fa78d9dcdfbd4ea874e76d4af1994bacom63285.63285.internaldb.__ICM_LITE__blacklist_domain.value", "%7B%22SLIDERS%22%3A%5B%226pm.com%22%2C%22amazon.co.uk%22%2C%22amazo[...]
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("extensions.a6cfae8cc4676442fa78d9dcdfbd4ea874e76d4af1994bacom63285.63285.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%[...]
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("extensions.aLPESNIOB27154074RO39491085com63317.63317.internaldb.__ICM_LITE__blacklist_domain.value", "%7B%22SLIDERS%22%3A%5B%226pm.com%22%2C%22amazon.co.uk%22%2C%22amazon.com%22%2C%22anthro[...]
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("extensions.aLPESNIOB27154074RO39491085com63317.63317.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%22dealply_p%22%3A[...]
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("extensions.crossrider.bic", "1486c71a1293d243db6e48d3524fc7c8");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("extensions.quick_start.enable_search1", false);
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("ff.pingUrl", "hxxp://api.funfeedr.com/ping.php?ch=fft4p");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("keyword.URL", "hxxp://www.mystart.com/results.php?pr=vmn&id=mystarttb&v=5_3&ent=bs____campaignID___&q=");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_executeCode", "var VBATES_IsValidUrl=function(currentUrl,currentBrowser,queryParam){try{var urlParts=currentUrl.split('/');var baseU[...]
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_ga_redirected", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_ga_redirectedUrl", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_lastUpdate", "14322394055908641432239405593");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_4343d83bf38ebcec5d64-90e492ccad1e6835a708df980f059ec0.r72.cf5.rackcdn.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_a.targetingnets.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_abradora.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_ad.livelyrics00.live-lyrics.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_ads.adsrvmedia.net", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_ads1.teddybrinkofski.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_alh.gogorithm.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_avira.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_cache.icmwebserv.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_cdn.adsrvmedia.net", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_click.dealshark.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_clkmon.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_cluster.adultadworld.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_congratulations-you-won.claimprizenow.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_consumer-approval.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_consumers-response.org", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_coreclickhoo.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_cr3.gogorithm.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_creatives.livejasmin.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_cts.adssend.net", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_de.ikariam.gameforge.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_de.reimageplus.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_de.xhamster.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_de.yhs4.search.yahoo.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_disc.gogorithm.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_download1441bucket.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_download2442endpoint.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_download6735endpoint.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_downloadactivation.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_engine.pgmediaserve.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_eu.wargaming.net", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_freempr9.softsofast.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_fugupdates105.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_gameoapp.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_get.adobe.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_gty.campaignism.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_html.usagc.org", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_istart.webssearches.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_jkc.thespatialists.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_linkeyproject.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_lp.koramgame.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_lp.playerpage139.info", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_network.adsmarket.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_newupdatesneeded.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_offers.bycontext.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_p.display-trk.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_pc-update-1024.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_pc-update-1024.net", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_powerbundle.systweak.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_pro-secure.net", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_profit-expert.net", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_promos.bwin.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_s.ptrk-wn.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_savy.utop.it", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_search.webssearches.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_searches.safehomepage.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_secretfuckclub.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_sexiba.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_software-club.org", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_software-security.org", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_spaces.slimspots.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_static.mybet.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_support.kaspersky.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_torexa.de", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_update-for-pc-512.org", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_upgrade-24.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_upgrade-software.org", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_videos1.uvidi.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_vouchergiveaways.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_winnerseveryweek.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.6ya3i8ohy.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.activeris.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.adcash.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.anyprotect.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.avast.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.avira.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.big7.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.cloudtracked.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.default-search.net", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.delta-homes.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.driverupdate.net", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.erovie.de", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.google.de", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.gratis-sexvideos.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.gratissexvideos.net", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.gratissexvideos.org", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.gspxtny93b.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.hotchatdate.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.kaspersky.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.lpmxp2191.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.neveryoneair.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.onlineschlampen.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.only-search.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.pornhub-porno.net", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.pornhub.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.reimageplus.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.sadomaso.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.sexvideo.info", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.sexvideos-tube.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.slimcleaner.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.systemspeedup.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.systweak.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.teenysexvideos.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.trovi.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.tube8.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.updateultimatedlw.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.visit-x.net", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.xncounter.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.xxx-porno-sexvideo.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.xxx-porno-sexvideos.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.youradexchange.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www.youtube.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www1.fastplayerpro.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_www1.newvideoplayer.com", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_zpuzz.watchmovies.installedtrick.eu", "not set");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partners", "[]8641432239472954");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_redirectURL", "hxxp://ssl.v-bates.com/rd/rmain.php?8641410210079091");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_referer", "hxxp://shop.market-beast.com/?r=8641410210079091");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_status", "active");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_whiteList", "{\"shop.otto.de\":\"cookie\",\"www.otto.de\":\"cookie\",\"secure.de.vente-privee.com\":\"12558\",\"www.autoscout24.de\"[...]
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData__VBATES_partner24", "true1432325872955");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_installer_name", "vbates_inmzDEex9346_.exe");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_pxl_VBATES_dailyPing", "dailyPing1432325866485");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_temp_installer_name", "vbates_inmzDEex9346_.exe");
[-] [C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\prefs.js] [Preference] Gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_whiteListSearch", "{\"isearch.babylon.com\":\"q\",\"search.imesh.net\":\"q\",\"www.search-results.com\":\"q\",\"home.mywebsearch.com\":\"se[...]

*************************

:: "Tracing" Schlüssel gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Chrome Richtlinien gelöscht

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [33182 Bytes] ##########

ADW-Cleaner mit Haken:

Code:

ATTFilter

# AdwCleaner v5.028 - Bericht erstellt am 05/01/2016 um 09:35:22
# Aktualisiert am 04/01/2016 von Xplode
# Datenbank : 2016-01-04.2 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : oli - OLI-PC
# Gestartet von : C:\Users\oli\Downloads\adwcleaner_5.028 (1).exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****

[#] Ordner Gelöscht : C:\Windows\SysNative\Tasks\Seventh
[#] Ordner Gelöscht : C:\Windows\SysNative\Tasks\Sixth

***** [ Dateien ] *****


***** [ DLLs ] *****


***** [ Verknüpfungen ] *****


***** [ Aufgabenplanung ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Internetbrowser ] *****


*************************

:: "Tracing" Schlüssel gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Chrome Richtlinien gelöscht

########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt - [935 Bytes] ##########

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 05.01.2016
Suchlaufzeit: 09:42
Protokolldatei: mbam.txt
Administrator: Ja

Version: 2.2.0.1024
Malware-Datenbank: v2016.01.05.02
Rootkit-Datenbank: v2015.12.26.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: oli

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 327795
Abgelaufene Zeit: 53 Min., 59 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 359
PUP.Optional.Agent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{34BE6615-ADA0-46D1-9457-ABE77C82B0AD}, In Quarantäne, [000693a35e3bdb5b572a2f1851b135cb], 
PUP.Optional.Agent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{34BE6615-ADA0-46D1-9457-ABE77C82B0AD}, In Quarantäne, [000693a35e3bdb5b572a2f1851b135cb], 
PUP.Optional.DefaultSearch.ShrtCln, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498}, In Quarantäne, [6b9b46f0247550e611cd1b4d55adbe42], 
PUP.Optional.DefaultSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498}, In Quarantäne, [6b9b46f0247550e611cd1b4d55adbe42], 
PUP.Optional.OneMoreGame, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\OneMoreGame, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.SecurityProtection, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\noajmlkipclmeolfcnflkjhijkigpfjh, In Quarantäne, [a5612c0adabfb185b0be2c9dac57bf41], 
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5A58998F-4D27-4F7F-81C6-78DB00BC11E8}, In Quarantäne, [23e3bb7b88113bfb8c4d7b2b867d3cc4], 
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5B277B25-C7F7-427D-AB4B-3B5458092FFD}, In Quarantäne, [72942610d8c1b58103d53373b152867a], 
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E16B18F2-9730-442C-BCAD-48B862B90176}, In Quarantäne, [fe086acc9ffae254f5e38d1948bb6799], 
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\LAYERS\SPVC32LDR, In Quarantäne, [8a7c2b0be8b1d3636c5ebf13ce35946c], 
PUP.Optional.SearchProtect.AppFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}, In Quarantäne, [c34354e2b1e8a49229e4be589272926e], 
PUP.Optional.SearchProtect.AppFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{cf2797aa-b7ec-e311-8ed9-005056c00008}, In Quarantäne, [52b4ae88782153e35cb2b5612dd7ec14], 
PUP.Optional.Snoozer, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Seventh, Löschen bei Neustart, [1ee89e98851470c6d224cd15e22150b0], 
PUP.Optional.Snoozer, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Sixth, Löschen bei Neustart, [a95dd660efaa68ce2bcc984aae55f40c], 
PUP.Optional.1ClickMovieDownload, HKLM\SOFTWARE\WOW6432NODE\ClickMovie1-Downloaderv10, In Quarantäne, [d333270f93060234d7b2633406fd0cf4], 
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\TotalPlus01-3.1V20.09, In Quarantäne, [54b261d5debb0234cdf2673f10f37a86], 
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\ehhlaekjfiiojlddgndcnefflngfmhen, In Quarantäne, [08fe1c1a82178ea888c7d7dc8e751de3], 
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\nbljechdpodpbchbmjcoamidppmpnmlc, In Quarantäne, [d630ff37871238fefe55a80b2bd8a15f], 
PUP.Optional.SecurityProtection, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\noajmlkipclmeolfcnflkjhijkigpfjh, In Quarantäne, [4eb8aa8c0099db5bf777d4f521e2916f], 
PUP.Optional.MyStartToolbar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\${IEUTILSLIGHTELEVATIONPOLICYID}, In Quarantäne, [fe08a1951287d26444df4d71020145bb], 
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5A58998F-4D27-4F7F-81C6-78DB00BC11E8}, In Quarantäne, [3accf640dfbaea4c5b7e2a7cf70c22de], 
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5B277B25-C7F7-427D-AB4B-3B5458092FFD}, In Quarantäne, [30d6a6901a7f43f3e5f312945da6d42c], 
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E16B18F2-9730-442C-BCAD-48B862B90176}, In Quarantäne, [28deae88c6d30e287b5db7efb84b6e92], 
PUP.Optional.SystemSpeedup, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\ssd, In Quarantäne, [6e98ec4a27721c1acaa8b51fc240d12f], 
PUP.Optional.Salus.PrxySvrRST, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\b786bdb3c67d, In Quarantäne, [7e8885b187128caa35189d2c4ab84bb5], 
PUP.Optional.Salus.PrxySvrRST, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\mwiynzm4ndy1yjz, In Quarantäne, [9a6cdd59b5e432042cdbc207c042b947], 
PUP.Optional.Sanbreel, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{9f93bd66-d3d2-427d-b37f-743603e2388d}Gw64, In Quarantäne, [af5751e504952610250c0bbcaf5425db], 
PUP.Optional.Sanbreel, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{e6ca9971-30ed-444a-9489-82fca50b2062}Gw64, In Quarantäne, [f4123df92277a88e37fa18afea19e51b], 
PUP.Optional.Yontoo, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\Update App Bud, In Quarantäne, [b74fcb6b97022115fc83ef28669e4bb5], 
PUP.Optional.Yontoo, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\Util App Bud, In Quarantäne, [ac5aff37b3e66bcb156a5eb92bd99868], 
PUP.Optional.1ClickMovieDownload, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\ClickMovie1-Downloaderv10, In Quarantäne, [4db9142248514aec5e28f7a0aa59b34d], 
PUP.Optional.SmartSaver, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\SmartSaver+ 21, In Quarantäne, [fd09ce686e2bb482efd9c10a52b1f50b], 
PUP.Optional.CrossRider, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\TotalPlus01-3.1V20.09, In Quarantäne, [9175b87ee8b19d999b04fca9a55ea65a], 
PUP.Optional.1ClickMovieDownload, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\APPDATALOW\SOFTWARE\ClickMovie1-Downloaderv10, In Quarantäne, [5bab0d2979201422a0e65a3ddd26bd43], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\APPDATALOW\SOFTWARE\TotalPlus01-3.1V20.09, In Quarantäne, [b2546fc70e8b58dea1fefea70102ed13], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{11943506-432A-49EE-ACB8-C8637899C1AC}, In Quarantäne, [8d79bb7bd4c5191deccd198d1fe4e31d], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{13F6E8AF-FD9A-42A2-B05C-607A53181DC3}, In Quarantäne, [4bbb1c1a831611253781495da65d8a76], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{140E31AB-B1B8-4ECA-8DE1-56C0FB7484E3}, In Quarantäne, [49bd80b6fe9be5510dab05a10300b947], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{151CCF91-6A9F-49EB-91D1-8BD136E8B728}, In Quarantäne, [64a230069ffa1224f9c095110201659b], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{153D2E9A-4259-406A-BA5C-9DB05EF11283}, In Quarantäne, [b6509b9bdcbdd363d4e523838a792ad6], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{173A1BC9-BCD1-4EB9-ACB2-483997E2185F}, In Quarantäne, [ad59bd79a4f5ce6824947f27f112f30d], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{193A9B0B-5C1C-4ADD-A8D2-F151FC776BEE}, In Quarantäne, [63a3be781584df5781388224b84b8a76], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1A65A26E-88B9-45B7-BBE5-90433548C9C8}, In Quarantäne, [58aedc5a2d6c47efe2d75452ad56a65a], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1B94E218-BD46-46B1-A360-DAFD8510DE16}, In Quarantäne, [c83e39fd3762350119a06d3947bccc34], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1C7D2D70-C546-454D-948A-F83670AB34EC}, In Quarantäne, [c83e96a09dfc2c0a70494462c2413bc5], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1CB1240E-F289-4846-AD77-71EE29446D2B}, In Quarantäne, [6c9ad4620f8ac37314a5178f659e7a86], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1E77A07A-33C1-484C-A88C-C83FBEF3BA87}, In Quarantäne, [ad592313debb3df98038cbdbc14249b7], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{20197798-B76E-413D-9DF1-BF238FB697DF}, In Quarantäne, [7690b680c5d4e254b3064165f90a629e], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{20242430-36F3-46AE-933B-D614C71AA940}, In Quarantäne, [e4222d0924752016a415c3e358abde22], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{207A2D65-1ABF-4FC8-B49A-B8156BC6FA5C}, In Quarantäne, [d92dc96d1e7b0f276355eabc4fb419e7], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{20C36BFA-E3FF-4CD4-A25B-F4429EB0FD7E}, In Quarantäne, [8d796ccac8d1ac8a3c7db8ee907302fe], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{232CF5A3-AE5F-422D-9F27-D5C9AEE083BE}, In Quarantäne, [bd4987afa0f93cfab800852131d252ae], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{23DF8FC9-3607-4795-8EAF-BD1B664AE11B}, In Quarantäne, [f5116bcb2b6e23131f995c4a42c17e82], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{281DDCFA-CF22-4074-82C0-E9E05B5C6B9E}, In Quarantäne, [3bcb3df92a6ff73f4c6c7f27c1420bf5], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{286D5371-943D-422E-A478-647DA5FF93CD}, In Quarantäne, [32d4f73fa6f30c2a67513175dc2702fe], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{28B37FC6-BB52-4FD6-95F3-9F8830195A7B}, In Quarantäne, [15f16ec82277aa8c6158693df50e18e8], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{28DE2194-F141-4489-AE57-90C777F696EE}, In Quarantäne, [c93d84b2dabfe155e1d794126e955ca4], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2A2A2F07-7620-4B32-902C-50F65CBFF9FE}, In Quarantäne, [aa5cf83ebfda66d0d6e250567d86e51b], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2A94673D-9EC8-447B-BCC8-9EE6DFEC6096}, In Quarantäne, [a46250e66336092d1c9c2a7caf5425db], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2AA43C3D-B889-490E-B667-EF623FB964A6}, In Quarantäne, [b650072fbfdae452595f881e31d2e41c], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2B172A8F-C445-478A-84AA-319B928CE76B}, In Quarantäne, [3ec80a2c8910d6602e8ab4f2e91afc04], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2B600DAE-14F4-46F5-88F2-439A6B8C1BB6}, In Quarantäne, [31d5fa3c1f7a69cdceea01a58e75d32d], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2BDA3BD3-B1C6-4135-A0E5-143BF782C339}, In Quarantäne, [36d02e089dfceb4bfeba139372912ed2], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2BE0F191-97DA-41AD-8C4C-5267D84B7E7E}, In Quarantäne, [7393d660c4d5072fa018eeb8ef1432ce], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2CBD4638-68CA-49CC-A068-59FE50A6FB5F}, In Quarantäne, [8c7a9d99f7a2f04607b1baeca65dd12f], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2CCFD2DA-170B-4003-8CBC-3EFC932AD433}, In Quarantäne, [2dd9e551b8e18aac5d5bdec8db282fd1], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2D07B9BC-3940-41AA-8180-89A456511767}, In Quarantäne, [ee189b9b4d4c3bfbd4e5c0e60bf82fd1], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2D624EDB-EF0F-489D-A751-9A891A36E533}, In Quarantäne, [4eb8ef4779203402f2c7f2b47f84df21], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2EF64C84-24E7-4D97-8265-F3507F118790}, In Quarantäne, [dd2992a4edaca195f8c12284eb1807f9], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2F296344-E5F7-49F1-8F5F-21C7B11F2562}, In Quarantäne, [ba4c90a6c2d743f34f69f1b5e2215ea2], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2F2EC474-F007-4A72-99CA-1337FB475BFD}, In Quarantäne, [2bdb4cea38611b1b9128dfc7f70cc23e], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{305C1727-5603-4652-AC7A-E6E481982046}, In Quarantäne, [e32345f12b6e8fa77147376f61a2718f], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{30EB655E-7BE4-4DC9-9C78-127B77836955}, In Quarantäne, [1fe70c2ac7d2cc6a15a49a0cd132e31d], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{323F4A03-3A95-44DD-95F4-32368761F184}, In Quarantäne, [10f6a6909504f44296223e68fd06a15f], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{32E52200-11AE-40D1-90F9-B2A3DB60FDFF}, In Quarantäne, [40c6da5cc9d0fa3cb702208653b0aa56], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{33B19A18-5E5F-4804-9E7D-CCF534D0CC8D}, In Quarantäne, [2dd9f14541586ec8ffb9307635ce748c], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{341600D3-A560-4943-B2DC-D86919AA176F}, In Quarantäne, [11f50531efaa92a466533472e51edf21], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{34C71333-4E25-42F9-B595-8A9FAB85B64B}, In Quarantäne, [0ef8b18563363600e0d8cadced166898], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{34D3465F-9A4F-4387-AB3C-7161E52BC92F}, In Quarantäne, [778f5ed81386f2443188cbdb50b3f808], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{34E45EBC-EB09-4585-A63C-C3F29114CDA1}, In Quarantäne, [24e246f072271026eeca71355ba82dd3], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{35B3DD86-C469-4262-B0B6-D1C61359D862}, In Quarantäne, [a75f30067f1a71c5b9009c0a42c1718f], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{362D24C7-BA2E-4CFC-A733-859B82EA14B3}, In Quarantäne, [74924de9e4b561d500b9c8deea1925db], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{36FCF014-CF86-45BC-9BFA-E2856D8C829E}, In Quarantäne, [8f772d09663396a07e3ac4e207fc1de3], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{37D77569-566E-4DC0-8D5F-9831A6D9B6FD}, In Quarantäne, [d72fc86eaeebdb5b50691393966db749], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{38D7BAF2-D345-41AB-B355-3631373CA1A8}, In Quarantäne, [c3430c2a72275cda0eaac6e0fc07728e], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{38EDC8FF-BF14-4C1C-BCE4-28F0DF3DA072}, In Quarantäne, [de282b0b2871ff376c4d574f3ac96e92], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{394A1B15-55AD-4E56-BF81-769B94592AE6}, In Quarantäne, [ea1ca78f5148a88e2099ffa759aa04fc], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3967EA6A-B2C3-49E5-A53F-1964803BCCB8}, In Quarantäne, [f610191d21785bdbe0d8475f50b3a65a], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{39934753-CA47-440F-8639-E0D7648E2891}, In Quarantäne, [be4835015346bd797345d6d0de25e51b], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3A86D483-E9B2-4831-A727-6D69514DAFDD}, In Quarantäne, [9571e1552d6c2511259433739b6822de], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3AF49CCD-41C5-413F-8164-F3CD987F6176}, In Quarantäne, [db2bdf57fa9f49ed9425f6b022e108f8], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3BA1893E-426B-4D52-8AF8-B2611B704BD7}, In Quarantäne, [40c64fe7edacd26406b28a1c996a31cf], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3C7F4710-5B20-4D81-BA9A-C4322AE0C5CB}, In Quarantäne, [0bfba4920d8cd462c4f41492d33022de], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3D16BD8F-8C6D-4373-A89A-2810C2A71364}, In Quarantäne, [858195a127727bbbcaee3670b94a966a], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3D722079-379D-420C-B020-98F9AA31105E}, In Quarantäne, [55b12511e2b7f244befa12940cf79e62], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3DDB9A2D-BD31-4092-A9DA-48A898BB8C57}, In Quarantäne, [7591e84e6a2f0c2a0dab1096da29d030], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3E782DA2-813F-40B9-A58E-F1ADCB90BFA6}, In Quarantäne, [55b1a096633606302a8f396d0ff4fb05], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3EFA4CD4-A8C1-407B-8E1E-431226D15C91}, In Quarantäne, [e026aa8c6e2b033305b42d7932d17090], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3F4AA56B-8520-4EB7-A912-CC6DAF33D0EB}, In Quarantäne, [af5786b01386b284ae0b990d3bc83ac6], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3FB989C2-7EFB-4C33-A53E-8AF6B76DD01A}, In Quarantäne, [3ec82d09b5e42b0b3880297dab588c74], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{40BD7A40-3BD7-4F4B-B660-DF73B7B43DA4}, In Quarantäne, [996d3cfaff9a2b0bd7e2495d52b1e719], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{40F6AE2B-48FD-4157-AE2A-F05C6EC45628}, In Quarantäne, [a561e84e5148082ec9f0bbebe51ed32d], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{411330E7-D284-4638-A6A5-8F9EC2334FFE}, In Quarantäne, [f70fbf77b6e366d08831644205fe0af6], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4367A3B4-2147-43C3-BE80-C9BA1F695F8F}, In Quarantäne, [90763402debbe452a217bfe728db629e], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{444B90EA-5A9F-4921-9E62-9566E0C1A994}, In Quarantäne, [f3132c0a633680b66a4e6e382ed5d22e], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{44CD2AD7-15DE-471E-BDCD-6A7972BB3F21}, In Quarantäne, [7e881224b3e6f54111a7832336cd669a], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{44CDCEFA-8A6E-4B92-B6D3-20348197741B}, In Quarantäne, [51b561d57b1e92a4496f9b0b8c775ea2], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{458CF6D4-D75D-4382-A782-82DEDFD6FD8D}, In Quarantäne, [4fb7979ff4a54ceaf1c74c5a08fb02fe], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{45C9EE62-2A5C-4946-A359-43C063353042}, In Quarantäne, [4bbbd1654f4a6bcb90291a8c53b003fd], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{46239DE3-A5B0-4589-AB1E-70AFC4982557}, In Quarantäne, [39cd082ed6c38aaccdeb3373c43f7888], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4AC518C8-3FDC-4096-B9C1-B15DDA5791F7}, In Quarantäne, [be48a98df4a51125635575319271c33d], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4B0E1039-D969-4B5A-9121-AB45DF95A94B}, In Quarantäne, [3fc776c0e5b40e28a019e7bf9271ac54], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4B178569-BF1D-423E-B1C6-163ADCEDCBBE}, In Quarantäne, [ad5963d3c9d02016fdbcdec81fe447b9], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4B24D787-6362-4E87-8E13-CBD9A428567E}, In Quarantäne, [94727db9970252e419a08b1b6a992ad6], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4BA22141-2BED-4F7A-8F9F-6B37A895F993}, In Quarantäne, [96700a2ca4f5290dd0e805a155ae748c], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4BE2FF8C-D958-4B12-92D5-EFEBEACF89BF}, In Quarantäne, [778f12240b8ec86eb900b1f5cb3820e0], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4BFE71CF-AD6A-4E4C-B8C1-B67A31A0DC34}, In Quarantäne, [1de91521e8b1c86eb305683e8e75e917], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4C65731D-C1B5-4788-AAF7-B88133BE441F}, In Quarantäne, [1aecf244bedb57df0dac347271928779], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4CFAE6BC-73D5-47C7-8E32-D1E94BC328FB}, In Quarantäne, [19edbb7b6a2f2313694fb3f3956e758b], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4D6FB557-D3E8-4E89-87BD-8786203E47CC}, In Quarantäne, [ae589d990297f6405563376f73909e62], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4D8D6371-FD45-4A75-B85B-A46BA0FB8BF9}, In Quarantäne, [3cca5adc56433006a414268012f1be42], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4EE169F9-7944-4A84-8F88-80178063EC3F}, In Quarantäne, [48beef47e7b242f400b99214d42ffb05], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4F2D8938-785E-468C-985E-BFE432138968}, In Quarantäne, [3acca59122773501eeca22844bb8629e], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4F5F0CBF-E007-4F89-A0AE-7DADA956B440}, In Quarantäne, [e91d979f5b3e4fe7d4e4386ef80bff01], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4FA6F8D1-5FFC-47ED-8CF2-B99EA31AFEC9}, In Quarantäne, [d036b086f1a871c50bae9115ac570df3], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{50083C24-B51A-463F-B945-38AE34FE44B6}, In Quarantäne, [3acc63d3b3e65dd9af09ccdabe454eb2], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5188744D-AD38-49FB-B5BC-E5C09E20FD4D}, In Quarantäne, [2adc4cea8910e25437813f67669d7e82], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{523724E7-8F36-4279-AA25-83913A80D41F}, In Quarantäne, [ca3cfc3a9009b3838039edb92bd84ab6], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{53387A56-E4F9-481E-B0AF-E571222E94C5}, In Quarantäne, [da2cb383b6e31e189820188e63a0cf31], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{53B339F6-296C-415F-9DBF-5D4623A46B10}, In Quarantäne, [39cdc96d0a8f70c60eaa5b4b7093bb45], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{53ECCCCE-45B2-4230-BA27-85DF6D383B96}, In Quarantäne, [808620164653d16555632482d72cd42c], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5431B311-9249-4DB6-98FB-8849E9E9A529}, In Quarantäne, [f01660d65544ef472d8cc8deea19f907], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5609C76F-8576-468E-A98E-43B2816FD6D8}, In Quarantäne, [3ec849edd0c985b13e7a6b3bd033a65a], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{57F38030-25ED-47A9-8E23-C3D2A34252D0}, In Quarantäne, [56b0a492d8c138fea910327434cfd030], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{586545FE-C1B3-474A-B4F7-17F284FE3122}, In Quarantäne, [2cda7eb8c3d6c76fbafe9d0917ec4db3], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{58FB95F5-E0BC-4D7B-BA77-FEB258D0137E}, In Quarantäne, [ad590e28ff9ac76fa0188026946fd030], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{59EE7212-E45B-45CB-8497-B15048A95353}, In Quarantäne, [868040f6f7a2ec4a52663a6c19eaad53], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5A58998F-4D27-4F7F-81C6-78DB00BC11E8}, In Quarantäne, [ef173bfb1a7ff54121972a7c39ca9967], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5AC76B3D-FEDE-45B5-8EFF-A79EB042D62E}, In Quarantäne, [9b6b0a2cb6e356e0ad0c456135ce5ca4], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5AFC7E06-58C5-4FD1-A11B-5B80B3EC7A7F}, In Quarantäne, [11f550e689100e28eecb6d392cd7fb05], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5B277B25-C7F7-427D-AB4B-3B5458092FFD}, In Quarantäne, [9670b383188147ef9b1cfda9c43f18e8], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5C355580-2322-47DD-BD21-5929424FAF2F}, In Quarantäne, [ac5afd39b7e2d06622968125db28aa56], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5DF4A682-874F-48C0-A73E-5A20CF126CD4}, In Quarantäne, [976fe94d2079bd79ab0deabc55ae9f61], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5E46C21F-5629-42D4-B7E0-AD988010147E}, In Quarantäne, [50b6e3535f3aa98dbbfd763058ab6b95], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5E72168A-7EAE-41B7-9223-4A73AFF05450}, In Quarantäne, [b4524cea85141026b6024e58b251b749], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5F4211B6-7DB4-4491-A796-AD286425D4E9}, In Quarantäne, [1aec77bf2d6c092d06b28224699a0df3], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5F481E4A-1B9A-49DF-8F4A-9DA7606F8983}, In Quarantäne, [18ee45f17821d66025947b2b1ee505fb], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5F604DDF-C256-4D11-BF5F-1DD0382B34F7}, In Quarantäne, [1bebec4a326740f66b4e9e086f940df3], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5FF8373D-C76E-42A7-8CAC-591F17D7BCC5}, In Quarantäne, [5ea8c07611884de9c3f62f77ec17ac54], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{608C9541-2741-4A20-B84B-FBAD5DB87243}, In Quarantäne, [689e02343465df575465ced8df24e719], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{610FEF13-98D5-460D-B935-1937D8C8C519}, In Quarantäne, [a95d58dec9d0a4924277f0b60cf7a25e], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{613E3B24-219E-4BE5-B295-9715C43BC0E3}, In Quarantäne, [c93d7fb766334fe79a1e386e42c1f60a], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{614C5EE9-2F20-4EEF-A35C-46831FA6B156}, In Quarantäne, [9c6a8caa3366a78f04b4c0e6eb18d42c], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{61DE333A-80FC-4FDC-9592-E51AFBE1B964}, In Quarantäne, [f115a88e514847ef15a403a33ec5f40c], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{61DFE2BD-237D-4253-935E-3A78AFC22C72}, In Quarantäne, [2bdb69cdc8d15dd9cfe9149213f0c937], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{64B3D430-2012-41FD-9B48-5FC16FA2D113}, In Quarantäne, [60a60135a4f5e3539227347215eee31d], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6A030AC7-A822-4D7C-A8FA-8CD76E8F14CA}, In Quarantäne, [dd299f97fc9dbc7a6157881e57aced13], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6BB8E3A6-802A-4F7A-BF2F-2E4741D5AC7F}, In Quarantäne, [e5211224ddbca98d2594f0b66e956e92], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6C29AC4C-544A-4CF9-9521-FADD5F20EB93}, In Quarantäne, [a85ed95da7f2a78f6554e5c126dd5ba5], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6CC861FC-75A0-442B-99EC-96C49DF28B5A}, In Quarantäne, [d036a3936e2bfc3a6c4dccdaed16aa56], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6CDF4789-4D54-421C-A8E6-2B54F578755F}, In Quarantäne, [59ad30062772ce681d9cdbcbb350e11f], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6DC81D85-DFD1-46D3-9210-C65799BCF7CB}, In Quarantäne, [7f87171f0a8f34022990aafc82819a66], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6EE221AD-692C-43A9-A06E-5B495ED7FD4E}, In Quarantäne, [9a6c7cbab6e3132312a763437192c13f], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F20B8E4-97A6-4418-A5C8-DC1E344ABC77}, In Quarantäne, [d92da98d3e5b64d23682dbcb73906799], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F4E63C2-6911-40C6-AD17-C38DB2F4D49D}, In Quarantäne, [947294a2752455e136836541bd46a55b], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F87CA32-6B3C-4164-9B83-E555F743771A}, In Quarantäne, [66a04ee84d4cbf777f398b1b758eb64a], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6FE6F236-C994-410D-9252-BB9A64AF1F3C}, In Quarantäne, [82844cea67327eb86356bfe78a791de3], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{707F3A08-5F80-4901-A310-DAAD4627B2F5}, In Quarantäne, [c4424bebc4d58babc9efe8befc07b947], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7174C250-6D73-43E6-9E68-9CAC56AD25F8}, In Quarantäne, [798da591e1b84cea9e1a5a4cd82b8a76], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{76352586-CCD8-40D9-B48F-5AF7FF9C3043}, In Quarantäne, [b353a3933c5db2847543ebbbd72cb848], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7644BCE1-2B58-417E-8F52-C6A03391274E}, In Quarantäne, [699dfc3a1f7a66d03a7e7f275ca7da26], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{77C9AFD2-CFD1-4ED0-BEA6-36F72BE89657}, In Quarantäne, [bc4afe389efb6ec8e2d75650c63de21e], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{788B4F43-E712-43B5-84F5-BAD7A318E9E2}, In Quarantäne, [bf4759dd55447bbbfeba8f170cf726da], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7AC78DDC-B72D-4358-9F6B-B2F886E77C89}, In Quarantäne, [10f6fe386c2da5915e5bd3d3e023fc04], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7B593027-E67D-45B8-8F2A-B497B3BA38F2}, In Quarantäne, [d0363bfbb9e041f5823712941fe44ab6], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7BDCFC8C-98F3-475F-9739-D48F9C63B99A}, In Quarantäne, [52b45dd9cbcecc6a9e1b4561fc07e020], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7D0DA7FB-5F6D-4841-A126-2FF7FBEF4355}, In Quarantäne, [7f873df945542e080eabe5c115ee15eb], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7DE53398-669E-4985-A884-35A8CD5CCF40}, In Quarantäne, [000633037c1d3cfa0bad1e88659eb14f], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7E01F202-31BD-424B-9ECE-7BD3356CCFF5}, In Quarantäne, [6b9bb2847a1f69cd3286d5d162a108f8], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7E04D567-30A4-4E60-88FF-3D95A0E31958}, In Quarantäne, [0ff7d5614d4c69cdf2c65d49d3307e82], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7F0BE2A3-DB5F-4C19-BEAF-274D8E199A97}, In Quarantäne, [0bfb82b47425ac8ac3f6abfbe91a10f0], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{801DC01A-842F-4979-8676-B04CA06AE374}, In Quarantäne, [9c6a48ee95044cea3584a8fe0300d62a], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{81B02E73-303F-4ECE-841A-5E2120CD3323}, In Quarantäne, [70969a9c0396f5411f99e7bfcb383cc4], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{826606F1-BF87-4815-99A7-87E31712B462}, In Quarantäne, [42c4a096712878be7d3b66408083f20e], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{83364075-2EA7-46CE-B263-5AE06F35C8D1}, In Quarantäne, [30d6f640f5a42b0b3a7fe2c4ae5501ff], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{84591FFB-76D4-481D-8D56-2621F75988B8}, In Quarantäne, [cd399d992178ad8940783670e1220af6], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{868D1F18-F2C4-4A31-B1A3-B587CCB252AB}, In Quarantäne, [02044ee87326e5514276d5d14bb8fe02], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{873BD106-BE91-4401-8235-AAC9601DF837}, In Quarantäne, [05019e98346588ae199fd0d6719260a0], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{877B4142-D784-4BF3-BEE8-B38C92E21F1D}, In Quarantäne, [b65056e019808da95168f7af9a69c63a], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{88388ACB-DF1B-4006-AF7A-4B41F8EBBDA8}, In Quarantäne, [8c7a54e223765ed8c6f20e981ae9fc04], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{88CE9599-958A-4402-8F19-392F83EA7A42}, In Quarantäne, [cd3969cd5544a492338590168d76b050], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{88D74963-EA6A-4B77-91D8-1E3B8BE6CACF}, In Quarantäne, [3fc742f4f9a0033352675f4707fc0bf5], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8A3CAE60-EB32-4B44-8A36-4A8CB289C3D7}, In Quarantäne, [47bfbb7bd4c53204d1e8b6f04fb49d63], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8AEE8D5C-F8D2-43CB-B1E0-763FB9ECA91F}, In Quarantäne, [9f67c274fc9d3df9c5f37c2a3cc719e7], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8C825CD5-81F5-4F5B-A111-90F89654ECEC}, In Quarantäne, [27dfa98d564379bd4b6d5d49976c7090], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8D149FCC-CDDA-459B-B288-D41B2955E1E6}, In Quarantäne, [18ee47efb2e7da5cbdfbf9add72ca957], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8D556722-5276-4D8B-B450-A9C593FB5647}, In Quarantäne, [c640be78b2e755e1a0190b9b1be854ac], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8D74A4A2-7FC7-4248-9332-ED27885BE8EC}, In Quarantäne, [c046d6602a6f6dc9546452546b98b050], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8DD93A2E-9F4C-445A-AC9D-5E901B8EC4FC}, In Quarantäne, [57af51e5c0d9181ecdec129409faa35d], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{90146CF9-8C6E-4A2D-9618-121ECFDFEBF2}, In Quarantäne, [e620ab8b1188092d2a8fbee88281fc04], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{916D8317-3F2E-4FE3-AED9-3D88C476FE3A}, In Quarantäne, [e4222c0a752437ff31889a0ce32019e7], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{91D000F2-AE1F-47D0-B327-40E5FCEC7C86}, In Quarantäne, [13f3a98d5346bb7b2a8ff6b061a2ee12], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{938AD885-9814-4E7A-8B77-1A845C7F5728}, In Quarantäne, [40c62f0716832511eacfeabc53b033cd], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9391E858-2D52-4FE1-B499-49CF6E938EE1}, In Quarantäne, [1cea4ee86138bc7aa513e8be57ac7e82], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{945CC8A2-1DBF-4E5A-AF33-E4E6E1D0FE14}, In Quarantäne, [f70fd3634a4f0e285f597531b94afb05], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{95324EF6-F9C6-488A-BF97-EF1F3CE4CF29}, In Quarantäne, [6b9b16200099b1856554485ef013d32d], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{953B18E3-6570-4741-83D7-BAA6F2A8509B}, In Quarantäne, [f70f1026fa9fe155dade9412bf44649c], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{963E03D1-1DC5-44C9-AA5F-28E5A77F685D}, In Quarantäne, [8185c0767c1d033353659f07db28f40c], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{963F5ED4-5130-40F0-8E4A-CF9EDA63ECCB}, In Quarantäne, [9c6a979f0e8b6ec890295551b74cc838], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{972822CF-D844-4B55-B699-E1F15ED7E35E}, In Quarantäne, [26e0b3833f5a44f2694ff4b21ce7b54b], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{983CA81A-EB62-4CA1-AB8A-791887A0924E}, In Quarantäne, [a264f83e4c4d73c30fa9881e7f84ca36], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{98B41487-7EA6-4DD2-A010-C0B2AB39DCE6}, In Quarantäne, [47bf52e40f8a6dc90aaf9f07bd46b24e], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9A31E06F-A393-456B-B74D-8FFBFD12FB18}, In Quarantäne, [b84e71c50e8bda5cd8e106a02fd4926e], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9A49FEC4-5A4F-4A0D-871A-9CA6273FE9F0}, In Quarantäne, [ee18a78fa4f50c2a2d8c7a2c996acb35], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9ADCB9AD-AB62-4BE7-BC27-A7B99C3E623B}, In Quarantäne, [7f8750e6cccd1125f4c410963cc753ad], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9D604B38-AB1E-443C-A7E7-854C5BB9E693}, In Quarantäne, [af57a492eaaf06307e3b6f374bb83fc1], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9EB6C41E-3923-49A5-8685-3A28AE749F17}, In Quarantäne, [3bcb3df96732f343dbdd5551f0132fd1], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9EE313A1-C0B1-4B96-86D6-13CE484026DF}, In Quarantäne, [0105e155cfca43f33d7c4066c83b02fe], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9EF7C43F-4341-4A23-B739-6B792DDC3E43}, In Quarantäne, [39cdde58aced8ea818a1b9eda26142be], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9F16B0DF-BEF5-45E3-9382-9AEF707673F8}, In Quarantäne, [2dd980b66c2d4aecfabf2b7b21e2c838], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9F3F9CBB-478C-4DF3-8BB2-7610EF327BB7}, In Quarantäne, [a165a195fe9bca6c82375d495ea5ff01], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9FA279D1-6BF5-45F5-8419-36C7C3C1F3FF}, In Quarantäne, [bf4726104c4ddf578236e1c5ca3951af], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9FCE3856-DE0D-49D2-82E0-CA529D5E4371}, In Quarantäne, [0ef80c2a8c0da88ea811b4f2ec17f907], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A1519D66-4CB9-471C-AF1E-B07EED1C4E80}, In Quarantäne, [ad5993a3227767cf0cad4561b25150b0], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A1E1D53F-5120-4879-9256-AC6FDDD697F1}, In Quarantäne, [c64050e6cecb41f5a1186046ec17c040], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A200E8DC-2B7D-4C96-9983-85A5485D7F3E}, In Quarantäne, [62a41e18554431054673852115eeda26], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A24FFDF4-54CA-4E95-A1E6-ED8A8F599C51}, In Quarantäne, [81855fd71089d85e6752a303e1227b85], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A50119C4-16A6-40F4-98BC-696913C0CE1B}, In Quarantäne, [7b8bcc6aa3f6181e6059d0d6d42f956b], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A62A638F-50E2-411E-8EB1-DC52E6D88C39}, In Quarantäne, [d03679bd603937ff7444f7af36cd50b0], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A729211D-CD2F-4BE4-8C23-F59EA3505794}, In Quarantäne, [5fa792a4a0f9f046feba6b3ba063f20e], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A7BB7C09-BE86-4034-8E57-6990D4C31B25}, In Quarantäne, [e323c2749bfecf6714a4bde936cd6b95], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A7C10586-7C8D-4E7A-9468-C0B4B4FED5A6}, In Quarantäne, [16f031050396ff37d6e311959271ae52], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A8BD8E12-7FC6-46AE-B2C0-9AD575841612}, In Quarantäne, [8482f541f5a43bfb298f475fe023fc04], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A935DAEE-160C-4EF0-9692-1727C3793F73}, In Quarantäne, [0ef884b2019884b2883005a15ca7b64a], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A94934C1-7694-4195-A090-1386FFDBAC10}, In Quarantäne, [e6203105d5c4b87e496fe9bd5ea5ba46], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A97BF999-8261-4A34-AD60-165D6081A041}, In Quarantäne, [fd09ad89e1b859dd2d8b1a8c20e353ad], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AA87D131-C1FB-43CC-9795-F9CD417A70B3}, In Quarantäne, [9472cd69e8b1fb3b595f1c8ab94aa759], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AAA2B320-3A2A-46BC-AA52-789CD7C184CC}, In Quarantäne, [0cfa41f58613082e9425970f45bed828], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AB52BCB0-8DC8-4991-A37B-371B1490E8B3}, In Quarantäne, [e91d1c1a405972c45365d8ce28dbc040], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ACE742F0-BAE6-4584-81A5-11458BEC539B}, In Quarantäne, [31d587afcdcc68ce4276e8be2ad91ee2], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ACFC103C-7139-4F8E-9D72-BAE06E38EE9D}, In Quarantäne, [4abcd2645b3eb1853d7cf2b4d52e10f0], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ADF19A65-1D18-4EB4-BB5A-11C7836A9BB4}, In Quarantäne, [d2342313376269cd58616b3b1ee59b65], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B0DAC0AB-95AD-49A3-A183-4E6B639A9491}, In Quarantäne, [a56148eec3d6290d06b2119558ab2ad6], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B1CE9230-5D30-46C1-BA24-8B79A3486ACB}, In Quarantäne, [eb1bfe383e5bdc5a5a5e9610966d946c], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B1F0B28D-8633-428C-8830-F8C692EC55F1}, In Quarantäne, [dd29cf67d3c6280e7147891ddd264db3], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B206963F-22F4-428A-B3F7-C3E67624BC20}, In Quarantäne, [877f40f62376f54124943274bb48bc44], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B21C133A-31D7-477D-9BFC-6A65B383936F}, In Quarantäne, [9b6b181e7920c96dc0f8881ecb3846ba], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B2A1170F-3457-4975-8867-5EEF927B4545}, In Quarantäne, [48be53e365343bfb9523a105ab58728e], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B39D1EC0-C115-489A-AFA9-7980642D988A}, In Quarantäne, [8185191d3c5db383d4e4e8bef21142be], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B440A2C7-DE52-4A86-875D-DFA44AD7E899}, In Quarantäne, [3cca73c33e5bbc7a96231690c73c41bf], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B50C0D30-87F5-40D4-A9C7-BE14F3F5DA7E}, In Quarantäne, [39cd74c2cdccf93d04b54d592ed532ce], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B531A878-C005-4B88-A3BD-82455714CDC0}, In Quarantäne, [22e41f1723767abc7f3a3c6aaf545aa6], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B556DD13-1A4A-49F8-8C46-A359CE2F1DCC}, In Quarantäne, [6c9a92a4f4a560d65c5dbde947bcee12], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B5E190FC-29CE-4859-A6F7-2347C2F05F9A}, In Quarantäne, [9670a88e2d6c55e16751f0b6da299f61], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B688FFCE-C30B-43A3-8387-44E8A6BC2420}, In Quarantäne, [aa5cc37363367eb8edcb792db84b55ab], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B723CAAD-D091-4264-9B77-9967AC19C4E6}, In Quarantäne, [976f16202b6e51e55860673f9b68659b], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B833CAFF-4FAC-49F8-B4BC-FDAB98BA3EE4}, In Quarantäne, [29ddc4726138b87e31872e78857e44bc], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B904873E-1C0C-41B0-AADF-B9975C67BD90}, In Quarantäne, [55b171c56c2d2e08892f8f177093ea16], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B908D22D-1720-4F1C-9AD4-F425F883E8ED}, In Quarantäne, [2bdb1224376273c3eecb2c7a4fb4a957], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BA698095-DA24-477E-A03C-2C57D22622A6}, In Quarantäne, [c24454e2e7b2979f4a6e792d8d76b54b], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BA91157F-4AD2-4CC3-8EEE-BDEF9C9E4B2A}, In Quarantäne, [b84ea690cfca2016bbfd6f37a95a36ca], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BAB660A2-DCDA-4B3F-95B5-E35DEF254379}, In Quarantäne, [5aac0432dbbe4ee84c6c5a4cbe452fd1], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BAFFFA39-B228-46AE-B01B-CF298081797B}, In Quarantäne, [49bdf3430e8b79bd5069e3c3956e6d93], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BC1B9673-3804-46B5-B78D-DA40B6DE6843}, In Quarantäne, [679f71c5ff9a76c02297baec7192a65a], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BCEAA414-67D7-4FDD-8BD6-8FF0EC456CC1}, In Quarantäne, [c4426bcbc5d430067e3a723447bc19e7], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BD64EF26-46C2-4699-BC32-4350AF9F57CC}, In Quarantäne, [c83e6acc4d4c13235465c3e37b888e72], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BD6AA4A0-2D6F-4EC2-B7A5-7212E957D346}, In Quarantäne, [7f871125fb9e8fa7b009c6e053b0e31d], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BF3A6838-4B75-45F4-96E7-EE5E24F53EE3}, In Quarantäne, [61a5f73f8c0d73c346726442ec17e020], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C047AEC5-39E6-444A-BF7D-EB557787ACA2}, In Quarantäne, [34d21c1a6831171f2297e6c037cc6799], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C0D05560-7597-4D4F-871B-FBBBC7FCB2F4}, In Quarantäne, [3acc0036bbde71c5bafe099d0df6ca36], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C10F4F8C-74F5-48EA-BCED-A5CF796B459C}, In Quarantäne, [986eaf87a8f11e18eecb9511e91aaa56], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C32C6529-CC18-4B69-8DF8-49643C658BED}, In Quarantäne, [5fa7b284cfca1b1bae0bf9ad0df6da26], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C3EDDCAA-BA77-4CAF-9D22-B2536B8325B0}, In Quarantäne, [04023006336669cde6d352540af953ad], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C4D77E71-7012-4D1B-A3B4-7A58E73C6DD7}, In Quarantäne, [ae5895a15445e155803824827a89d62a], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C5F3A664-8E4B-437E-B8E0-D8B6431BDA56}, In Quarantäne, [c046a195e0b975c19a1e7630fe05f60a], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C66F24D4-C451-4EF9-8D83-EC6B98419177}, In Quarantäne, [1fe70036ecad3402219886208182966a], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C6D0EDD7-BA38-4AF7-BFD6-C79099CBFC37}, In Quarantäne, [05018aac91089f97378244620003669a], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C80328E5-4959-4EE0-8779-2F15C8EAC232}, In Quarantäne, [7a8c3006eeab211510a8a7ff4db69d63], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C94ED44F-8566-4C4E-8A29-FC149E76E718}, In Quarantäne, [14f21125a2f78da90eab60461ee5c937], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CA169D1B-3B37-428C-AA2E-F79AF997F632}, In Quarantäne, [ca3c2c0aadec092d1f996d39c340cd33], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CB013D24-4FF3-4CA8-99DC-50ECD91089E6}, In Quarantäne, [f70fcb6b8c0de84eeeca2b7bc83bcb35], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CB2A3999-7049-46A7-9257-3771C18AF9E6}, In Quarantäne, [41c5ab8b4d4c082ec9f0b4f217ec639d], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CB3A2AEB-A162-4874-A5BC-C1D7C486B5A4}, In Quarantäne, [f41240f69ffadb5bceea1e8804ff01ff], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CB5C558B-A5E6-42A9-9247-8DA44D57E4AE}, In Quarantäne, [eb1b48ee76237abcf0c9703604ffec14], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CBC8351A-8C7C-4F15-9ABE-A151358E74FD}, In Quarantäne, [e5219e9897024fe7aa0ff1b542c16a96], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CE8A609B-1251-424E-983F-84A0AF291B2F}, In Quarantäne, [907635013e5b46f06553cadc7b88e31d], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CF8ABF70-B024-464E-AEC7-4F33F745832B}, In Quarantäne, [689ebf77a5f40d297841475f18eb8a76], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D049E732-BF33-4C57-8A1E-5B77B9D1C68A}, In Quarantäne, [cf37b185cfca4ee8dddb42646a99b54b], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D087990F-5C68-4561-A349-EBFE22A33DB9}, In Quarantäne, [ed19e650f0a98caad6e3e0c6a261f709], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D1A2CBC3-FC5F-46F5-8A4E-3F14CBCFA3C3}, In Quarantäne, [4abc60d6adecad89af092b7b7c87f50b], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D1BB0915-8A35-46BF-B748-C06CE1108D6D}, In Quarantäne, [44c282b42a6fba7c4772891da1627b85], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D2030DF2-FC52-4CA5-9EFB-F6EB798CD48D}, In Quarantäne, [f115fb3b9bfe9b9b00b9c7dff50e9967], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D2423BCE-64B3-4BD8-B99B-9A62757F8FD6}, In Quarantäne, [7f873006b6e301358b2dc7dfd62d728e], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D30229CA-59B7-4C2A-ACE4-EDBF16A96236}, In Quarantäne, [778fee48eaaf89ad4574dbcbd82b04fc], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D3750139-A850-49A7-8FC2-903321529A1F}, In Quarantäne, [e32323130297112595238d194cb713ed], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D675FCC7-ED7A-4FA4-AA5B-6AA1925AA635}, In Quarantäne, [54b2ba7c03961d19bbfdefb78a7949b7], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D7A3BFF0-CEAC-4F42-8E7E-C2B79D19B925}, In Quarantäne, [1fe7ed497b1e5ed8dfda159157ac9a66], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D7BDCE56-8BBC-422C-AE53-39D44D117D58}, In Quarantäne, [4cba21152871bf77d6e3782e5da67c84], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D81A1D29-FDBA-4898-BAAF-EBA144E0BE27}, In Quarantäne, [cb3b3df98e0b1a1c1e9befb7ab580cf4], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D99BFEA2-132D-4D36-86C9-C370AA5018EB}, In Quarantäne, [eb1b69cdadecc373e4d56640ca391be5], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DA710FB9-51AD-4C6F-9EE0-CEC1E94D841D}, In Quarantäne, [22e451e535644ee80eaafea8d42f2fd1], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DAD1BB7A-EC58-4C43-BBF8-37619F20D36E}, In Quarantäne, [ff07171f06934fe74276d8ced1329868], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DAD72A1E-98BA-4BAF-8BD9-33D98D81BAB2}, In Quarantäne, [bc4aac8a07926acc6652c1e5867d59a7], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DB8BDD36-24D9-4B86-B5E5-246E5E3C3F64}, In Quarantäne, [22e43105e5b483b3a0187b2be91a31cf], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DB98D4B0-B214-462B-836B-50FCA6E3BBD3}, In Quarantäne, [e02659dd9405290df5c3e8befc0709f7], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DC9C69BB-C882-46F2-A424-D73BB1474193}, In Quarantäne, [4db9e254d2c753e30dacfda9d42f6d93], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DCA7CBA2-C0B5-4BA7-AFCE-376B80AC5735}, In Quarantäne, [749296a02a6f93a3cdebf9adc93a0ef2], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DD2AEB2D-C924-40B5-8133-AA831C1452CF}, In Quarantäne, [de282313eaaf4ee83385d1d58b78847c], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DDD2C404-5D6D-4DCB-A55E-A1BA74CD79E0}, In Quarantäne, [ee18b87e6534e452fbbed4d223e06d93], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E037DB00-4FF9-4AA8-888E-6539DC62B325}, In Quarantäne, [bc4a0e289405270ff8c07e2804ff41bf], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E0965C8D-7B83-45E0-A91E-E52EE6CD1AF4}, In Quarantäne, [e81e0e280c8dbd79ae0a198dd42f15eb], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E16B18F2-9730-442C-BCAD-48B862B90176}, In Quarantäne, [ad591d19bedb6ccac5f2acfa7b8829d7], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E1912EB3-AB97-4A08-BD93-7E89FD773A56}, In Quarantäne, [6f97b2848712989ed7e17f279c6751af], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E234B0F9-6918-4A56-848D-5EEE51486E1D}, In Quarantäne, [d630c96d0b8e7fb763561492ba49639d], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E30961CB-7C66-4B30-8543-A1497950FC55}, In Quarantäne, [c73fcb6b2c6d3402b305eabc649f28d8], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E31061BF-C120-4545-98B7-853A146F84E0}, In Quarantäne, [18eefd393960a98d0baeecbaf31050b0], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E3ABA26B-4064-443C-8B50-3EFB6FBB671A}, In Quarantäne, [c343c96d683153e36157792dcb3813ed], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E54ACC28-2B76-402C-97F4-223D63E18288}, In Quarantäne, [788e4aecdbbe2f070bae3373ec17dd23], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E54D8496-B585-42D4-80BF-EBAB7CBAD1A8}, In Quarantäne, [bd49bd79e1b882b44474079fc04309f7], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E5634291-8DDB-4328-86ED-C93B80C2D4C4}, In Quarantäne, [a561e0564257b28461582c7a4cb78e72], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6DF7B83-4D01-4329-8F69-106C13B872F8}, In Quarantäne, [49bd4bebdebba5917a3f772f3ec515eb], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E74EB524-F310-4771-915C-B57C3FBD8796}, In Quarantäne, [868086b0821750e67940adf96b98a858], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E7E88BB4-3C87-441E-9ABB-694D6EF5779F}, In Quarantäne, [29ddd75ff1a8ae88e4d480269d66f10f], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E8380771-2877-4333-8F20-38D43E7850DF}, In Quarantäne, [a85e47efd8c10333942550568f74d030], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E95348AB-5CCF-4808-ABED-9B58FCDC6276}, In Quarantäne, [5aac55e1722764d2af09f8ae7f84f907], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EA33186F-D865-4838-98BD-2F91F248FA27}, In Quarantäne, [808635015e3bc4722f8af8ae90733bc5], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EA619E8F-E843-4790-8FA0-FDBD8D5A96F5}, In Quarantäne, [c046fb3bdbbe56e0ab0efbabc2419967], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EB641C40-804B-4F0A-B791-C6F14BB9421A}, In Quarantäne, [7f879f9729702610bbfd5551847f9769], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EB74D167-4E5E-492C-9B68-1B21DF439876}, In Quarantäne, [ac5a80b6326769cde2d723838d766b95], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EBEB05FE-6425-439C-9BBA-147E4BAA4A45}, In Quarantäne, [12f4f2445148cc6ac7f12b7b26dde719], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ECE0BC26-43C9-4DDE-8035-784D1412CA30}, In Quarantäne, [cf37b086acedb0869028e8becb38c33d], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ED3688AC-498F-42AB-ADC0-90A5B1C7B799}, In Quarantäne, [47bfba7ccacff73fae0a941215ee7888], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F007B4FB-2826-43D6-8EDB-894C497565A9}, In Quarantäne, [ae5815215f3a75c1c5f3c7dfc43fc33d], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F070F8C3-6BF5-43E5-89BA-12632E7B3730}, In Quarantäne, [9e68a88e5148270f3584b9ede3206c94], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F254BA56-5B93-44D9-A0E9-317B178064F0}, In Quarantäne, [a75f90a6b5e45ed8ccedfea8f80b2ad6], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F274A70D-8D1E-4759-976D-F933451C85A5}, In Quarantäne, [ca3cf4425b3eb5810badc0e6c241966a], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F3996039-7CF9-4FFD-9982-FF52A5A1DDF7}, In Quarantäne, [2bdbc5715e3b5cdab107b6f02dd6f40c], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F4189EA0-96E3-4D6C-8734-EFF279C0C670}, In Quarantäne, [fc0a7db97c1df145e1d7dcca976c2ad6], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F5E6061B-6D6D-41DA-A41C-AB8CEBCD9CBA}, In Quarantäne, [b0561c1ab4e543f312a6c9dde51e7f81], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F66EC5BC-F7C5-41FA-BE1D-355FCC6B4E20}, In Quarantäne, [b353c076f7a243f315a36b3be81bc23e], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F6CD108C-28F2-4AD3-9818-1CE154A9DCBE}, In Quarantäne, [ff072e08cbce122467511492da29d12f], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F6E312D5-1DFD-4E77-94B6-282E6F2815D7}, In Quarantäne, [dc2a6cca7b1e1e18befa911513f0718f], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F6EA41AE-FFF0-421C-8A1F-9BEB841867B4}, In Quarantäne, [a75f96a04950cf678138e8becd360cf4], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F70EFCA0-6ED4-4196-8B33-B0A3BBA1163D}, In Quarantäne, [3cca30063366b87e6f49d6d0f60d6c94], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F74917AC-F9F0-4A7B-B439-45A49B848838}, In Quarantäne, [986e989e65343303d5e4efb7ef143bc5], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F762BA9C-AED2-44B6-B341-E439458F6A1C}, In Quarantäne, [b94dea4cdebb46f0c3f5198dbc470df3], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F7CFCF63-BB71-4250-8DFB-3CC5C41814E9}, In Quarantäne, [f214fb3bebae85b1dfda3c6a31d254ac], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F82A7EA2-A3A4-43A2-875C-3B92D1519CEB}, In Quarantäne, [eb1b6bcbe5b42c0a6455f2b4699a867a], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F842B076-DB2C-4600-ACA9-C1924287F03E}, In Quarantäne, [9f672c0ac1d8c96dd2e754529c6724dc], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F855607E-1CB9-42E7-94D0-47DA7FB2D234}, In Quarantäne, [12f4f83ec2d7bf770fa9c2e448bbfa06], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FA7B4C5B-3147-4897-8619-393579F3F03A}, In Quarantäne, [c73fb185abee2511e7d242648e7548b8], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FAF07F9A-EBDA-4DD6-8CA6-E1ED911B2BD3}, In Quarantäne, [b6502e080d8c05316058bbeb8c774eb2], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FB6A9E94-3A03-4804-AA31-48BFE685C7D7}, In Quarantäne, [a66015211089142202b6ffa7bb48d52b], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FDAA9F7F-8F1A-41CC-AFF9-75457F8552C8}, In Quarantäne, [788e7fb75c3d5bdb962302a4d62dfe02], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FDF59068-83A7-4B3E-A0E7-B57C60259319}, In Quarantäne, [ad597eb89ffa5bdb8a2fffa73ec556aa], 
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FF4BFDEC-FCD3-4633-9525-251B88D9F518}, In Quarantäne, [bc4aa88e6534de5810a951557e858e72], 
PUP.Optional.Iminent, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOWREGISTRY\Iminent, In Quarantäne, [53b35dd93e5b043262e89f14996afd03], 
PUP.Optional.SafeFinder.ShrtCln, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\SMARTBAR, In Quarantäne, [5aac81b5752454e260f68c45ea18ea16], 
PUP.Optional.SystemSpeedup, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\SYSTWEAK\ssd, In Quarantäne, [d6305fd7d1c8e650452cf0e447bbff01],

Kespa · 05.01.2016, 11:52

2. Teil mbam.txt:

Code:

ATTFilter

2/3

Registrierungswerte: 338
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5a58998f-4d27-4f7f-81c6-78db00bc11e8}|AppName, ClickMovie1-Downloaderv10-buttonutil.exe, In Quarantäne, [23e3bb7b88113bfb8c4d7b2b867d3cc4]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5b277b25-c7f7-427d-ab4b-3b5458092ffd}|AppName, ClickMovie1-Downloaderv10-bg.exe, In Quarantäne, [72942610d8c1b58103d53373b152867a]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{e16b18f2-9730-442c-bcad-48b862b90176}|AppName, TotalPlus01-3.1V20.09-bg.exe, In Quarantäne, [fe086acc9ffae254f5e38d1948bb6799]
PUP.Optional.DefaultSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498}|URL, hxxp://www.default-search.net/search?sid=498&aid=156&itype=n&ver=13892&tm=488&src=ds&p={searchTerms}, In Quarantäne, [1aec7cbafa9f2214f66362af27ddb947]
PUP.Optional.DefaultSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498}|DisplayName, default-search.net, In Quarantäne, [bf476fc7b9e032047f80a40338cbef11]
PUP.Optional.DefaultSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498}|SuggestionsURL_JSON, hxxp://www.default-search.net?sid=498&aid=156&itype=n&ver=13892&tm=488&src=ds&p={searchTerms}&ft=json, In Quarantäne, [f70fc96de0b9d26425dabaedb251847c]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\chrome.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130546459936368173, In Quarantäne, [4eb81b1b15847db99435fcd6778cdd23]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\explorer.xxx|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130546459936368173, In Quarantäne, [2ed856e06336fd39b712864c2ed58d73]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\firefox.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130546459936368173, In Quarantäne, [e323e05649508bab62678949c43f53ad]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\iexplore.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130546459936368173, In Quarantäne, [9670270fd1c89a9c7059bb17ec173cc4]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\LAYERS\SPVC32Ldr|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130546459936368173, In Quarantäne, [8a7c2b0be8b1d3636c5ebf13ce35946c]
PUP.Optional.Groovorio, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY|AppPath, C:\Program Files (x86)\Groovorio\\, In Quarantäne, [10f614228f0acb6bcb6dd4dc9d66c13f]
PUP.Optional.MyStartToolbar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\${IEUTILSLIGHTELEVATIONPOLICYID}|AppPath, C:\Program Files (x86)\mystarttb, In Quarantäne, [fe08a1951287d26444df4d71020145bb]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5a58998f-4d27-4f7f-81c6-78db00bc11e8}|AppName, ClickMovie1-Downloaderv10-buttonutil.exe, In Quarantäne, [3accf640dfbaea4c5b7e2a7cf70c22de]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5b277b25-c7f7-427d-ab4b-3b5458092ffd}|AppName, ClickMovie1-Downloaderv10-bg.exe, In Quarantäne, [30d6a6901a7f43f3e5f312945da6d42c]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{e16b18f2-9730-442c-bcad-48b862b90176}|AppName, TotalPlus01-3.1V20.09-bg.exe, In Quarantäne, [28deae88c6d30e287b5db7efb84b6e92]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{11943506-432A-49EE-ACB8-C8637899C1AC}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [8d79bb7bd4c5191deccd198d1fe4e31d]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{13F6E8AF-FD9A-42A2-B05C-607A53181DC3}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [4bbb1c1a831611253781495da65d8a76]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{140E31AB-B1B8-4ECA-8DE1-56C0FB7484E3}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [49bd80b6fe9be5510dab05a10300b947]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{151CCF91-6A9F-49EB-91D1-8BD136E8B728}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [64a230069ffa1224f9c095110201659b]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{153D2E9A-4259-406A-BA5C-9DB05EF11283}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [b6509b9bdcbdd363d4e523838a792ad6]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{173A1BC9-BCD1-4EB9-ACB2-483997E2185F}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [ad59bd79a4f5ce6824947f27f112f30d]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{193A9B0B-5C1C-4ADD-A8D2-F151FC776BEE}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [63a3be781584df5781388224b84b8a76]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1A65A26E-88B9-45B7-BBE5-90433548C9C8}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [58aedc5a2d6c47efe2d75452ad56a65a]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1B94E218-BD46-46B1-A360-DAFD8510DE16}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [c83e39fd3762350119a06d3947bccc34]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1C7D2D70-C546-454D-948A-F83670AB34EC}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [c83e96a09dfc2c0a70494462c2413bc5]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1CB1240E-F289-4846-AD77-71EE29446D2B}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [6c9ad4620f8ac37314a5178f659e7a86]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1E77A07A-33C1-484C-A88C-C83FBEF3BA87}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [ad592313debb3df98038cbdbc14249b7]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{20197798-B76E-413D-9DF1-BF238FB697DF}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [7690b680c5d4e254b3064165f90a629e]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{20242430-36F3-46AE-933B-D614C71AA940}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [e4222d0924752016a415c3e358abde22]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{207A2D65-1ABF-4FC8-B49A-B8156BC6FA5C}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [d92dc96d1e7b0f276355eabc4fb419e7]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{20C36BFA-E3FF-4CD4-A25B-F4429EB0FD7E}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [8d796ccac8d1ac8a3c7db8ee907302fe]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{232CF5A3-AE5F-422D-9F27-D5C9AEE083BE}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [bd4987afa0f93cfab800852131d252ae]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{23DF8FC9-3607-4795-8EAF-BD1B664AE11B}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [f5116bcb2b6e23131f995c4a42c17e82]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{281DDCFA-CF22-4074-82C0-E9E05B5C6B9E}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [3bcb3df92a6ff73f4c6c7f27c1420bf5]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{286D5371-943D-422E-A478-647DA5FF93CD}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [32d4f73fa6f30c2a67513175dc2702fe]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{28B37FC6-BB52-4FD6-95F3-9F8830195A7B}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [15f16ec82277aa8c6158693df50e18e8]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{28DE2194-F141-4489-AE57-90C777F696EE}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [c93d84b2dabfe155e1d794126e955ca4]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2A2A2F07-7620-4B32-902C-50F65CBFF9FE}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [aa5cf83ebfda66d0d6e250567d86e51b]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2A94673D-9EC8-447B-BCC8-9EE6DFEC6096}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [a46250e66336092d1c9c2a7caf5425db]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2AA43C3D-B889-490E-B667-EF623FB964A6}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-buttonutil.exe, In Quarantäne, [b650072fbfdae452595f881e31d2e41c]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2B172A8F-C445-478A-84AA-319B928CE76B}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [3ec80a2c8910d6602e8ab4f2e91afc04]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2B600DAE-14F4-46F5-88F2-439A6B8C1BB6}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [31d5fa3c1f7a69cdceea01a58e75d32d]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2BDA3BD3-B1C6-4135-A0E5-143BF782C339}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [36d02e089dfceb4bfeba139372912ed2]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2BE0F191-97DA-41AD-8C4C-5267D84B7E7E}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [7393d660c4d5072fa018eeb8ef1432ce]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2CBD4638-68CA-49CC-A068-59FE50A6FB5F}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [8c7a9d99f7a2f04607b1baeca65dd12f]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2CCFD2DA-170B-4003-8CBC-3EFC932AD433}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [2dd9e551b8e18aac5d5bdec8db282fd1]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2D07B9BC-3940-41AA-8180-89A456511767}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [ee189b9b4d4c3bfbd4e5c0e60bf82fd1]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2D624EDB-EF0F-489D-A751-9A891A36E533}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [4eb8ef4779203402f2c7f2b47f84df21]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2EF64C84-24E7-4D97-8265-F3507F118790}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [dd2992a4edaca195f8c12284eb1807f9]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2F296344-E5F7-49F1-8F5F-21C7B11F2562}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [ba4c90a6c2d743f34f69f1b5e2215ea2]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2F2EC474-F007-4A72-99CA-1337FB475BFD}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [2bdb4cea38611b1b9128dfc7f70cc23e]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{305C1727-5603-4652-AC7A-E6E481982046}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [e32345f12b6e8fa77147376f61a2718f]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{30EB655E-7BE4-4DC9-9C78-127B77836955}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [1fe70c2ac7d2cc6a15a49a0cd132e31d]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{323F4A03-3A95-44DD-95F4-32368761F184}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [10f6a6909504f44296223e68fd06a15f]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{32E52200-11AE-40D1-90F9-B2A3DB60FDFF}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [40c6da5cc9d0fa3cb702208653b0aa56]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{33B19A18-5E5F-4804-9E7D-CCF534D0CC8D}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [2dd9f14541586ec8ffb9307635ce748c]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{341600D3-A560-4943-B2DC-D86919AA176F}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [11f50531efaa92a466533472e51edf21]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{34C71333-4E25-42F9-B595-8A9FAB85B64B}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [0ef8b18563363600e0d8cadced166898]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{34D3465F-9A4F-4387-AB3C-7161E52BC92F}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [778f5ed81386f2443188cbdb50b3f808]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{34E45EBC-EB09-4585-A63C-C3F29114CDA1}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [24e246f072271026eeca71355ba82dd3]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{35B3DD86-C469-4262-B0B6-D1C61359D862}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [a75f30067f1a71c5b9009c0a42c1718f]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{362D24C7-BA2E-4CFC-A733-859B82EA14B3}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [74924de9e4b561d500b9c8deea1925db]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{36FCF014-CF86-45BC-9BFA-E2856D8C829E}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [8f772d09663396a07e3ac4e207fc1de3]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{37D77569-566E-4DC0-8D5F-9831A6D9B6FD}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [d72fc86eaeebdb5b50691393966db749]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{38D7BAF2-D345-41AB-B355-3631373CA1A8}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [c3430c2a72275cda0eaac6e0fc07728e]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{38EDC8FF-BF14-4C1C-BCE4-28F0DF3DA072}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [de282b0b2871ff376c4d574f3ac96e92]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{394A1B15-55AD-4E56-BF81-769B94592AE6}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [ea1ca78f5148a88e2099ffa759aa04fc]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3967EA6A-B2C3-49E5-A53F-1964803BCCB8}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [f610191d21785bdbe0d8475f50b3a65a]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{39934753-CA47-440F-8639-E0D7648E2891}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [be4835015346bd797345d6d0de25e51b]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3A86D483-E9B2-4831-A727-6D69514DAFDD}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [9571e1552d6c2511259433739b6822de]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3AF49CCD-41C5-413F-8164-F3CD987F6176}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [db2bdf57fa9f49ed9425f6b022e108f8]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3BA1893E-426B-4D52-8AF8-B2611B704BD7}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [40c64fe7edacd26406b28a1c996a31cf]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3C7F4710-5B20-4D81-BA9A-C4322AE0C5CB}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [0bfba4920d8cd462c4f41492d33022de]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3D16BD8F-8C6D-4373-A89A-2810C2A71364}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [858195a127727bbbcaee3670b94a966a]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3D722079-379D-420C-B020-98F9AA31105E}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [55b12511e2b7f244befa12940cf79e62]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3DDB9A2D-BD31-4092-A9DA-48A898BB8C57}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [7591e84e6a2f0c2a0dab1096da29d030]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3E782DA2-813F-40B9-A58E-F1ADCB90BFA6}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [55b1a096633606302a8f396d0ff4fb05]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3EFA4CD4-A8C1-407B-8E1E-431226D15C91}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-codedownloader.exe, In Quarantäne, [e026aa8c6e2b033305b42d7932d17090]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3F4AA56B-8520-4EB7-A912-CC6DAF33D0EB}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-codedownloader.exe, In Quarantäne, [af5786b01386b284ae0b990d3bc83ac6]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3FB989C2-7EFB-4C33-A53E-8AF6B76DD01A}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [3ec82d09b5e42b0b3880297dab588c74]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{40BD7A40-3BD7-4F4B-B660-DF73B7B43DA4}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [996d3cfaff9a2b0bd7e2495d52b1e719]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{40F6AE2B-48FD-4157-AE2A-F05C6EC45628}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [a561e84e5148082ec9f0bbebe51ed32d]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{411330E7-D284-4638-A6A5-8F9EC2334FFE}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [f70fbf77b6e366d08831644205fe0af6]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4367A3B4-2147-43C3-BE80-C9BA1F695F8F}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [90763402debbe452a217bfe728db629e]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{444B90EA-5A9F-4921-9E62-9566E0C1A994}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [f3132c0a633680b66a4e6e382ed5d22e]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{44CD2AD7-15DE-471E-BDCD-6A7972BB3F21}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [7e881224b3e6f54111a7832336cd669a]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{44CDCEFA-8A6E-4B92-B6D3-20348197741B}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [51b561d57b1e92a4496f9b0b8c775ea2]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{458CF6D4-D75D-4382-A782-82DEDFD6FD8D}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [4fb7979ff4a54ceaf1c74c5a08fb02fe]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{45C9EE62-2A5C-4946-A359-43C063353042}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [4bbbd1654f4a6bcb90291a8c53b003fd]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{46239DE3-A5B0-4589-AB1E-70AFC4982557}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [39cd082ed6c38aaccdeb3373c43f7888]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4AC518C8-3FDC-4096-B9C1-B15DDA5791F7}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-buttonutil.exe, In Quarantäne, [be48a98df4a51125635575319271c33d]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4B0E1039-D969-4B5A-9121-AB45DF95A94B}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [3fc776c0e5b40e28a019e7bf9271ac54]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4B178569-BF1D-423E-B1C6-163ADCEDCBBE}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [ad5963d3c9d02016fdbcdec81fe447b9]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4B24D787-6362-4E87-8E13-CBD9A428567E}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [94727db9970252e419a08b1b6a992ad6]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4BA22141-2BED-4F7A-8F9F-6B37A895F993}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [96700a2ca4f5290dd0e805a155ae748c]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4BE2FF8C-D958-4B12-92D5-EFEBEACF89BF}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [778f12240b8ec86eb900b1f5cb3820e0]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4BFE71CF-AD6A-4E4C-B8C1-B67A31A0DC34}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [1de91521e8b1c86eb305683e8e75e917]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4C65731D-C1B5-4788-AAF7-B88133BE441F}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [1aecf244bedb57df0dac347271928779]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4CFAE6BC-73D5-47C7-8E32-D1E94BC328FB}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [19edbb7b6a2f2313694fb3f3956e758b]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4D6FB557-D3E8-4E89-87BD-8786203E47CC}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [ae589d990297f6405563376f73909e62]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4D8D6371-FD45-4A75-B85B-A46BA0FB8BF9}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [3cca5adc56433006a414268012f1be42]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4EE169F9-7944-4A84-8F88-80178063EC3F}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [48beef47e7b242f400b99214d42ffb05]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4F2D8938-785E-468C-985E-BFE432138968}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-buttonutil.exe, In Quarantäne, [3acca59122773501eeca22844bb8629e]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4F5F0CBF-E007-4F89-A0AE-7DADA956B440}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [e91d979f5b3e4fe7d4e4386ef80bff01]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4FA6F8D1-5FFC-47ED-8CF2-B99EA31AFEC9}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [d036b086f1a871c50bae9115ac570df3]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{50083C24-B51A-463F-B945-38AE34FE44B6}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-buttonutil.exe, In Quarantäne, [3acc63d3b3e65dd9af09ccdabe454eb2]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5188744D-AD38-49FB-B5BC-E5C09E20FD4D}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [2adc4cea8910e25437813f67669d7e82]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{523724E7-8F36-4279-AA25-83913A80D41F}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [ca3cfc3a9009b3838039edb92bd84ab6]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{53387A56-E4F9-481E-B0AF-E571222E94C5}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [da2cb383b6e31e189820188e63a0cf31]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{53B339F6-296C-415F-9DBF-5D4623A46B10}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [39cdc96d0a8f70c60eaa5b4b7093bb45]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{53ECCCCE-45B2-4230-BA27-85DF6D383B96}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [808620164653d16555632482d72cd42c]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5431B311-9249-4DB6-98FB-8849E9E9A529}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [f01660d65544ef472d8cc8deea19f907]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5609C76F-8576-468E-A98E-43B2816FD6D8}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-buttonutil.exe, In Quarantäne, [3ec849edd0c985b13e7a6b3bd033a65a]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{57F38030-25ED-47A9-8E23-C3D2A34252D0}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [56b0a492d8c138fea910327434cfd030]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{586545FE-C1B3-474A-B4F7-17F284FE3122}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-buttonutil.exe, In Quarantäne, [2cda7eb8c3d6c76fbafe9d0917ec4db3]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{58FB95F5-E0BC-4D7B-BA77-FEB258D0137E}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [ad590e28ff9ac76fa0188026946fd030]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{59EE7212-E45B-45CB-8497-B15048A95353}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [868040f6f7a2ec4a52663a6c19eaad53]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5a58998f-4d27-4f7f-81c6-78db00bc11e8}|AppName, ClickMovie1-Downloaderv10-buttonutil.exe, In Quarantäne, [ef173bfb1a7ff54121972a7c39ca9967]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5AC76B3D-FEDE-45B5-8EFF-A79EB042D62E}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [9b6b0a2cb6e356e0ad0c456135ce5ca4]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5AFC7E06-58C5-4FD1-A11B-5B80B3EC7A7F}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [11f550e689100e28eecb6d392cd7fb05]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5b277b25-c7f7-427d-ab4b-3b5458092ffd}|AppName, ClickMovie1-Downloaderv10-bg.exe, In Quarantäne, [9670b383188147ef9b1cfda9c43f18e8]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5C355580-2322-47DD-BD21-5929424FAF2F}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [ac5afd39b7e2d06622968125db28aa56]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5DF4A682-874F-48C0-A73E-5A20CF126CD4}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [976fe94d2079bd79ab0deabc55ae9f61]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5E46C21F-5629-42D4-B7E0-AD988010147E}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [50b6e3535f3aa98dbbfd763058ab6b95]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5E72168A-7EAE-41B7-9223-4A73AFF05450}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [b4524cea85141026b6024e58b251b749]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5F4211B6-7DB4-4491-A796-AD286425D4E9}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [1aec77bf2d6c092d06b28224699a0df3]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5F481E4A-1B9A-49DF-8F4A-9DA7606F8983}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [18ee45f17821d66025947b2b1ee505fb]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5F604DDF-C256-4D11-BF5F-1DD0382B34F7}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [1bebec4a326740f66b4e9e086f940df3]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5FF8373D-C76E-42A7-8CAC-591F17D7BCC5}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [5ea8c07611884de9c3f62f77ec17ac54]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{608C9541-2741-4A20-B84B-FBAD5DB87243}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [689e02343465df575465ced8df24e719]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{610FEF13-98D5-460D-B935-1937D8C8C519}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [a95d58dec9d0a4924277f0b60cf7a25e]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{613E3B24-219E-4BE5-B295-9715C43BC0E3}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [c93d7fb766334fe79a1e386e42c1f60a]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{614C5EE9-2F20-4EEF-A35C-46831FA6B156}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-buttonutil.exe, In Quarantäne, [9c6a8caa3366a78f04b4c0e6eb18d42c]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{61DE333A-80FC-4FDC-9592-E51AFBE1B964}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [f115a88e514847ef15a403a33ec5f40c]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{61DFE2BD-237D-4253-935E-3A78AFC22C72}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [2bdb69cdc8d15dd9cfe9149213f0c937]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{64B3D430-2012-41FD-9B48-5FC16FA2D113}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [60a60135a4f5e3539227347215eee31d]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6A030AC7-A822-4D7C-A8FA-8CD76E8F14CA}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [dd299f97fc9dbc7a6157881e57aced13]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6bb8e3a6-802a-4f7a-bf2f-2e4741d5ac7f}|AppName, TotalPlus01-3.1V20.09-codedownloader.exe, In Quarantäne, [e5211224ddbca98d2594f0b66e956e92]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6C29AC4C-544A-4CF9-9521-FADD5F20EB93}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [a85ed95da7f2a78f6554e5c126dd5ba5]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6CC861FC-75A0-442B-99EC-96C49DF28B5A}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [d036a3936e2bfc3a6c4dccdaed16aa56]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6CDF4789-4D54-421C-A8E6-2B54F578755F}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-codedownloader.exe, In Quarantäne, [59ad30062772ce681d9cdbcbb350e11f]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6DC81D85-DFD1-46D3-9210-C65799BCF7CB}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [7f87171f0a8f34022990aafc82819a66]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6EE221AD-692C-43A9-A06E-5B495ED7FD4E}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [9a6c7cbab6e3132312a763437192c13f]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F20B8E4-97A6-4418-A5C8-DC1E344ABC77}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [d92da98d3e5b64d23682dbcb73906799]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F4E63C2-6911-40C6-AD17-C38DB2F4D49D}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [947294a2752455e136836541bd46a55b]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F87CA32-6B3C-4164-9B83-E555F743771A}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [66a04ee84d4cbf777f398b1b758eb64a]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6FE6F236-C994-410D-9252-BB9A64AF1F3C}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [82844cea67327eb86356bfe78a791de3]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{707F3A08-5F80-4901-A310-DAAD4627B2F5}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-buttonutil.exe, In Quarantäne, [c4424bebc4d58babc9efe8befc07b947]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7174C250-6D73-43E6-9E68-9CAC56AD25F8}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-buttonutil.exe, In Quarantäne, [798da591e1b84cea9e1a5a4cd82b8a76]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{76352586-CCD8-40D9-B48F-5AF7FF9C3043}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [b353a3933c5db2847543ebbbd72cb848]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7644BCE1-2B58-417E-8F52-C6A03391274E}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [699dfc3a1f7a66d03a7e7f275ca7da26]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{77C9AFD2-CFD1-4ED0-BEA6-36F72BE89657}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [bc4afe389efb6ec8e2d75650c63de21e]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{788B4F43-E712-43B5-84F5-BAD7A318E9E2}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [bf4759dd55447bbbfeba8f170cf726da]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7AC78DDC-B72D-4358-9F6B-B2F886E77C89}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [10f6fe386c2da5915e5bd3d3e023fc04]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7B593027-E67D-45B8-8F2A-B497B3BA38F2}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [d0363bfbb9e041f5823712941fe44ab6]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7BDCFC8C-98F3-475F-9739-D48F9C63B99A}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-codedownloader.exe, In Quarantäne, [52b45dd9cbcecc6a9e1b4561fc07e020]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7D0DA7FB-5F6D-4841-A126-2FF7FBEF4355}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [7f873df945542e080eabe5c115ee15eb]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7DE53398-669E-4985-A884-35A8CD5CCF40}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [000633037c1d3cfa0bad1e88659eb14f]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7E01F202-31BD-424B-9ECE-7BD3356CCFF5}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-buttonutil.exe, In Quarantäne, [6b9bb2847a1f69cd3286d5d162a108f8]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7E04D567-30A4-4E60-88FF-3D95A0E31958}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [0ff7d5614d4c69cdf2c65d49d3307e82]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7F0BE2A3-DB5F-4C19-BEAF-274D8E199A97}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [0bfb82b47425ac8ac3f6abfbe91a10f0]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{801DC01A-842F-4979-8676-B04CA06AE374}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [9c6a48ee95044cea3584a8fe0300d62a]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{81B02E73-303F-4ECE-841A-5E2120CD3323}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [70969a9c0396f5411f99e7bfcb383cc4]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{826606F1-BF87-4815-99A7-87E31712B462}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [42c4a096712878be7d3b66408083f20e]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{83364075-2EA7-46CE-B263-5AE06F35C8D1}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [30d6f640f5a42b0b3a7fe2c4ae5501ff]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{84591FFB-76D4-481D-8D56-2621F75988B8}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [cd399d992178ad8940783670e1220af6]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{868D1F18-F2C4-4A31-B1A3-B587CCB252AB}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [02044ee87326e5514276d5d14bb8fe02]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{873BD106-BE91-4401-8235-AAC9601DF837}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [05019e98346588ae199fd0d6719260a0]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{877B4142-D784-4BF3-BEE8-B38C92E21F1D}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [b65056e019808da95168f7af9a69c63a]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{88388ACB-DF1B-4006-AF7A-4B41F8EBBDA8}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-buttonutil.exe, In Quarantäne, [8c7a54e223765ed8c6f20e981ae9fc04]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{88CE9599-958A-4402-8F19-392F83EA7A42}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [cd3969cd5544a492338590168d76b050]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{88D74963-EA6A-4B77-91D8-1E3B8BE6CACF}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [3fc742f4f9a0033352675f4707fc0bf5]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8A3CAE60-EB32-4B44-8A36-4A8CB289C3D7}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [47bfbb7bd4c53204d1e8b6f04fb49d63]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8AEE8D5C-F8D2-43CB-B1E0-763FB9ECA91F}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [9f67c274fc9d3df9c5f37c2a3cc719e7]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8C825CD5-81F5-4F5B-A111-90F89654ECEC}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [27dfa98d564379bd4b6d5d49976c7090]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8D149FCC-CDDA-459B-B288-D41B2955E1E6}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [18ee47efb2e7da5cbdfbf9add72ca957]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8D556722-5276-4D8B-B450-A9C593FB5647}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [c640be78b2e755e1a0190b9b1be854ac]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8D74A4A2-7FC7-4248-9332-ED27885BE8EC}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [c046d6602a6f6dc9546452546b98b050]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8DD93A2E-9F4C-445A-AC9D-5E901B8EC4FC}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [57af51e5c0d9181ecdec129409faa35d]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{90146CF9-8C6E-4A2D-9618-121ECFDFEBF2}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [e620ab8b1188092d2a8fbee88281fc04]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{916D8317-3F2E-4FE3-AED9-3D88C476FE3A}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [e4222c0a752437ff31889a0ce32019e7]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{91D000F2-AE1F-47D0-B327-40E5FCEC7C86}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-codedownloader.exe, In Quarantäne, [13f3a98d5346bb7b2a8ff6b061a2ee12]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{938AD885-9814-4E7A-8B77-1A845C7F5728}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [40c62f0716832511eacfeabc53b033cd]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9391E858-2D52-4FE1-B499-49CF6E938EE1}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [1cea4ee86138bc7aa513e8be57ac7e82]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{945CC8A2-1DBF-4E5A-AF33-E4E6E1D0FE14}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [f70fd3634a4f0e285f597531b94afb05]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{95324EF6-F9C6-488A-BF97-EF1F3CE4CF29}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [6b9b16200099b1856554485ef013d32d]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{953B18E3-6570-4741-83D7-BAA6F2A8509B}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [f70f1026fa9fe155dade9412bf44649c]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{963E03D1-1DC5-44C9-AA5F-28E5A77F685D}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [8185c0767c1d033353659f07db28f40c]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{963f5ed4-5130-40f0-8e4a-cf9eda63eccb}|AppName, ClickMovie1-Downloaderv10-codedownloader.exe, In Quarantäne, [9c6a979f0e8b6ec890295551b74cc838]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{972822CF-D844-4B55-B699-E1F15ED7E35E}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-buttonutil.exe, In Quarantäne, [26e0b3833f5a44f2694ff4b21ce7b54b]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{983CA81A-EB62-4CA1-AB8A-791887A0924E}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [a264f83e4c4d73c30fa9881e7f84ca36]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{98B41487-7EA6-4DD2-A010-C0B2AB39DCE6}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [47bf52e40f8a6dc90aaf9f07bd46b24e]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9A31E06F-A393-456B-B74D-8FFBFD12FB18}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [b84e71c50e8bda5cd8e106a02fd4926e]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9A49FEC4-5A4F-4A0D-871A-9CA6273FE9F0}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [ee18a78fa4f50c2a2d8c7a2c996acb35]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9ADCB9AD-AB62-4BE7-BC27-A7B99C3E623B}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-buttonutil.exe, In Quarantäne, [7f8750e6cccd1125f4c410963cc753ad]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9D604B38-AB1E-443C-A7E7-854C5BB9E693}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [af57a492eaaf06307e3b6f374bb83fc1]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9EB6C41E-3923-49A5-8685-3A28AE749F17}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [3bcb3df96732f343dbdd5551f0132fd1]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9EE313A1-C0B1-4B96-86D6-13CE484026DF}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [0105e155cfca43f33d7c4066c83b02fe]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9EF7C43F-4341-4A23-B739-6B792DDC3E43}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [39cdde58aced8ea818a1b9eda26142be]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9F16B0DF-BEF5-45E3-9382-9AEF707673F8}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-codedownloader.exe, In Quarantäne, [2dd980b66c2d4aecfabf2b7b21e2c838]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9F3F9CBB-478C-4DF3-8BB2-7610EF327BB7}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [a165a195fe9bca6c82375d495ea5ff01]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9FA279D1-6BF5-45F5-8419-36C7C3C1F3FF}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [bf4726104c4ddf578236e1c5ca3951af]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9FCE3856-DE0D-49D2-82E0-CA529D5E4371}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [0ef80c2a8c0da88ea811b4f2ec17f907]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A1519D66-4CB9-471C-AF1E-B07EED1C4E80}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [ad5993a3227767cf0cad4561b25150b0]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A1E1D53F-5120-4879-9256-AC6FDDD697F1}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [c64050e6cecb41f5a1186046ec17c040]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A200E8DC-2B7D-4C96-9983-85A5485D7F3E}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [62a41e18554431054673852115eeda26]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A24FFDF4-54CA-4E95-A1E6-ED8A8F599C51}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [81855fd71089d85e6752a303e1227b85]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A50119C4-16A6-40F4-98BC-696913C0CE1B}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [7b8bcc6aa3f6181e6059d0d6d42f956b]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A62A638F-50E2-411E-8EB1-DC52E6D88C39}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [d03679bd603937ff7444f7af36cd50b0]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A729211D-CD2F-4BE4-8C23-F59EA3505794}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [5fa792a4a0f9f046feba6b3ba063f20e]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A7BB7C09-BE86-4034-8E57-6990D4C31B25}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [e323c2749bfecf6714a4bde936cd6b95]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A7C10586-7C8D-4E7A-9468-C0B4B4FED5A6}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [16f031050396ff37d6e311959271ae52]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A8BD8E12-7FC6-46AE-B2C0-9AD575841612}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [8482f541f5a43bfb298f475fe023fc04]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A935DAEE-160C-4EF0-9692-1727C3793F73}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [0ef884b2019884b2883005a15ca7b64a]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A94934C1-7694-4195-A090-1386FFDBAC10}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [e6203105d5c4b87e496fe9bd5ea5ba46]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A97BF999-8261-4A34-AD60-165D6081A041}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [fd09ad89e1b859dd2d8b1a8c20e353ad]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AA87D131-C1FB-43CC-9795-F9CD417A70B3}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [9472cd69e8b1fb3b595f1c8ab94aa759]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AAA2B320-3A2A-46BC-AA52-789CD7C184CC}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [0cfa41f58613082e9425970f45bed828]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AB52BCB0-8DC8-4991-A37B-371B1490E8B3}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [e91d1c1a405972c45365d8ce28dbc040]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ACE742F0-BAE6-4584-81A5-11458BEC539B}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [31d587afcdcc68ce4276e8be2ad91ee2]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ACFC103C-7139-4F8E-9D72-BAE06E38EE9D}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [4abcd2645b3eb1853d7cf2b4d52e10f0]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ADF19A65-1D18-4EB4-BB5A-11C7836A9BB4}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [d2342313376269cd58616b3b1ee59b65]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B0DAC0AB-95AD-49A3-A183-4E6B639A9491}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [a56148eec3d6290d06b2119558ab2ad6]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B1CE9230-5D30-46C1-BA24-8B79A3486ACB}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-buttonutil.exe, In Quarantäne, [eb1bfe383e5bdc5a5a5e9610966d946c]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B1F0B28D-8633-428C-8830-F8C692EC55F1}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [dd29cf67d3c6280e7147891ddd264db3]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B206963F-22F4-428A-B3F7-C3E67624BC20}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [877f40f62376f54124943274bb48bc44]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B21C133A-31D7-477D-9BFC-6A65B383936F}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-buttonutil.exe, In Quarantäne, [9b6b181e7920c96dc0f8881ecb3846ba]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B2A1170F-3457-4975-8867-5EEF927B4545}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [48be53e365343bfb9523a105ab58728e]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B39D1EC0-C115-489A-AFA9-7980642D988A}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [8185191d3c5db383d4e4e8bef21142be]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B440A2C7-DE52-4A86-875D-DFA44AD7E899}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [3cca73c33e5bbc7a96231690c73c41bf]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B50C0D30-87F5-40D4-A9C7-BE14F3F5DA7E}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-codedownloader.exe, In Quarantäne, [39cd74c2cdccf93d04b54d592ed532ce]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B531A878-C005-4B88-A3BD-82455714CDC0}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [22e41f1723767abc7f3a3c6aaf545aa6]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B556DD13-1A4A-49F8-8C46-A359CE2F1DCC}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-codedownloader.exe, In Quarantäne, [6c9a92a4f4a560d65c5dbde947bcee12]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B5E190FC-29CE-4859-A6F7-2347C2F05F9A}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [9670a88e2d6c55e16751f0b6da299f61]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B688FFCE-C30B-43A3-8387-44E8A6BC2420}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [aa5cc37363367eb8edcb792db84b55ab]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B723CAAD-D091-4264-9B77-9967AC19C4E6}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [976f16202b6e51e55860673f9b68659b]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B833CAFF-4FAC-49F8-B4BC-FDAB98BA3EE4}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [29ddc4726138b87e31872e78857e44bc]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B904873E-1C0C-41B0-AADF-B9975C67BD90}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [55b171c56c2d2e08892f8f177093ea16]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B908D22D-1720-4F1C-9AD4-F425F883E8ED}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [2bdb1224376273c3eecb2c7a4fb4a957]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BA698095-DA24-477E-A03C-2C57D22622A6}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [c24454e2e7b2979f4a6e792d8d76b54b]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BA91157F-4AD2-4CC3-8EEE-BDEF9C9E4B2A}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [b84ea690cfca2016bbfd6f37a95a36ca]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BAB660A2-DCDA-4B3F-95B5-E35DEF254379}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [5aac0432dbbe4ee84c6c5a4cbe452fd1]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BAFFFA39-B228-46AE-B01B-CF298081797B}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [49bdf3430e8b79bd5069e3c3956e6d93]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BC1B9673-3804-46B5-B78D-DA40B6DE6843}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [679f71c5ff9a76c02297baec7192a65a]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BCEAA414-67D7-4FDD-8BD6-8FF0EC456CC1}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [c4426bcbc5d430067e3a723447bc19e7]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BD64EF26-46C2-4699-BC32-4350AF9F57CC}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [c83e6acc4d4c13235465c3e37b888e72]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BD6AA4A0-2D6F-4EC2-B7A5-7212E957D346}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [7f871125fb9e8fa7b009c6e053b0e31d]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BF3A6838-4B75-45F4-96E7-EE5E24F53EE3}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [61a5f73f8c0d73c346726442ec17e020]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C047AEC5-39E6-444A-BF7D-EB557787ACA2}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [34d21c1a6831171f2297e6c037cc6799]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C0D05560-7597-4D4F-871B-FBBBC7FCB2F4}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [3acc0036bbde71c5bafe099d0df6ca36]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C10F4F8C-74F5-48EA-BCED-A5CF796B459C}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [986eaf87a8f11e18eecb9511e91aaa56]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C32C6529-CC18-4B69-8DF8-49643C658BED}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [5fa7b284cfca1b1bae0bf9ad0df6da26]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C3EDDCAA-BA77-4CAF-9D22-B2536B8325B0}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [04023006336669cde6d352540af953ad]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C4D77E71-7012-4D1B-A3B4-7A58E73C6DD7}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [ae5895a15445e155803824827a89d62a]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C5F3A664-8E4B-437E-B8E0-D8B6431BDA56}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-buttonutil.exe, In Quarantäne, [c046a195e0b975c19a1e7630fe05f60a]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C66F24D4-C451-4EF9-8D83-EC6B98419177}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [1fe70036ecad3402219886208182966a]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C6D0EDD7-BA38-4AF7-BFD6-C79099CBFC37}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [05018aac91089f97378244620003669a]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C80328E5-4959-4EE0-8779-2F15C8EAC232}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [7a8c3006eeab211510a8a7ff4db69d63]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C94ED44F-8566-4C4E-8A29-FC149E76E718}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [14f21125a2f78da90eab60461ee5c937]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CA169D1B-3B37-428C-AA2E-F79AF997F632}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [ca3c2c0aadec092d1f996d39c340cd33]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CB013D24-4FF3-4CA8-99DC-50ECD91089E6}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [f70fcb6b8c0de84eeeca2b7bc83bcb35]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CB2A3999-7049-46A7-9257-3771C18AF9E6}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-codedownloader.exe, In Quarantäne, [41c5ab8b4d4c082ec9f0b4f217ec639d]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CB3A2AEB-A162-4874-A5BC-C1D7C486B5A4}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [f41240f69ffadb5bceea1e8804ff01ff]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CB5C558B-A5E6-42A9-9247-8DA44D57E4AE}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [eb1b48ee76237abcf0c9703604ffec14]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CBC8351A-8C7C-4F15-9ABE-A151358E74FD}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [e5219e9897024fe7aa0ff1b542c16a96]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CE8A609B-1251-424E-983F-84A0AF291B2F}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [907635013e5b46f06553cadc7b88e31d]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CF8ABF70-B024-464E-AEC7-4F33F745832B}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [689ebf77a5f40d297841475f18eb8a76]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D049E732-BF33-4C57-8A1E-5B77B9D1C68A}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [cf37b185cfca4ee8dddb42646a99b54b]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D087990F-5C68-4561-A349-EBFE22A33DB9}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [ed19e650f0a98caad6e3e0c6a261f709]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D1A2CBC3-FC5F-46F5-8A4E-3F14CBCFA3C3}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [4abc60d6adecad89af092b7b7c87f50b]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D1BB0915-8A35-46BF-B748-C06CE1108D6D}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-codedownloader.exe, In Quarantäne, [44c282b42a6fba7c4772891da1627b85]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D2030DF2-FC52-4CA5-9EFB-F6EB798CD48D}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [f115fb3b9bfe9b9b00b9c7dff50e9967]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D2423BCE-64B3-4BD8-B99B-9A62757F8FD6}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [7f873006b6e301358b2dc7dfd62d728e]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D30229CA-59B7-4C2A-ACE4-EDBF16A96236}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [778fee48eaaf89ad4574dbcbd82b04fc]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D3750139-A850-49A7-8FC2-903321529A1F}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [e32323130297112595238d194cb713ed]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D675FCC7-ED7A-4FA4-AA5B-6AA1925AA635}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [54b2ba7c03961d19bbfdefb78a7949b7]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D7A3BFF0-CEAC-4F42-8E7E-C2B79D19B925}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [1fe7ed497b1e5ed8dfda159157ac9a66]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D7BDCE56-8BBC-422C-AE53-39D44D117D58}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [4cba21152871bf77d6e3782e5da67c84]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D81A1D29-FDBA-4898-BAAF-EBA144E0BE27}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [cb3b3df98e0b1a1c1e9befb7ab580cf4]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D99BFEA2-132D-4D36-86C9-C370AA5018EB}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [eb1b69cdadecc373e4d56640ca391be5]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DA710FB9-51AD-4C6F-9EE0-CEC1E94D841D}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-buttonutil.exe, In Quarantäne, [22e451e535644ee80eaafea8d42f2fd1]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DAD1BB7A-EC58-4C43-BBF8-37619F20D36E}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [ff07171f06934fe74276d8ced1329868]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DAD72A1E-98BA-4BAF-8BD9-33D98D81BAB2}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [bc4aac8a07926acc6652c1e5867d59a7]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DB8BDD36-24D9-4B86-B5E5-246E5E3C3F64}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [22e43105e5b483b3a0187b2be91a31cf]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DB98D4B0-B214-462B-836B-50FCA6E3BBD3}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [e02659dd9405290df5c3e8befc0709f7]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DC9C69BB-C882-46F2-A424-D73BB1474193}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [4db9e254d2c753e30dacfda9d42f6d93]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DCA7CBA2-C0B5-4BA7-AFCE-376B80AC5735}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [749296a02a6f93a3cdebf9adc93a0ef2]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DD2AEB2D-C924-40B5-8133-AA831C1452CF}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [de282313eaaf4ee83385d1d58b78847c]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DDD2C404-5D6D-4DCB-A55E-A1BA74CD79E0}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [ee18b87e6534e452fbbed4d223e06d93]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E037DB00-4FF9-4AA8-888E-6539DC62B325}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [bc4a0e289405270ff8c07e2804ff41bf]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E0965C8D-7B83-45E0-A91E-E52EE6CD1AF4}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [e81e0e280c8dbd79ae0a198dd42f15eb]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{e16b18f2-9730-442c-bcad-48b862b90176}|AppName, TotalPlus01-3.1V20.09-bg.exe, In Quarantäne, [ad591d19bedb6ccac5f2acfa7b8829d7]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E1912EB3-AB97-4A08-BD93-7E89FD773A56}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-buttonutil.exe, In Quarantäne, [6f97b2848712989ed7e17f279c6751af]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E234B0F9-6918-4A56-848D-5EEE51486E1D}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [d630c96d0b8e7fb763561492ba49639d]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E30961CB-7C66-4B30-8543-A1497950FC55}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [c73fcb6b2c6d3402b305eabc649f28d8]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E31061BF-C120-4545-98B7-853A146F84E0}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [18eefd393960a98d0baeecbaf31050b0]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E3ABA26B-4064-443C-8B50-3EFB6FBB671A}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [c343c96d683153e36157792dcb3813ed]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E54ACC28-2B76-402C-97F4-223D63E18288}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [788e4aecdbbe2f070bae3373ec17dd23]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E54D8496-B585-42D4-80BF-EBAB7CBAD1A8}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [bd49bd79e1b882b44474079fc04309f7]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E5634291-8DDB-4328-86ED-C93B80C2D4C4}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [a561e0564257b28461582c7a4cb78e72]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6DF7B83-4D01-4329-8F69-106C13B872F8}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [49bd4bebdebba5917a3f772f3ec515eb]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E74EB524-F310-4771-915C-B57C3FBD8796}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [868086b0821750e67940adf96b98a858]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E7E88BB4-3C87-441E-9ABB-694D6EF5779F}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [29ddd75ff1a8ae88e4d480269d66f10f]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E8380771-2877-4333-8F20-38D43E7850DF}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [a85e47efd8c10333942550568f74d030]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E95348AB-5CCF-4808-ABED-9B58FCDC6276}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [5aac55e1722764d2af09f8ae7f84f907]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EA33186F-D865-4838-98BD-2F91F248FA27}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [808635015e3bc4722f8af8ae90733bc5]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EA619E8F-E843-4790-8FA0-FDBD8D5A96F5}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-codedownloader.exe, In Quarantäne, [c046fb3bdbbe56e0ab0efbabc2419967]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EB641C40-804B-4F0A-B791-C6F14BB9421A}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [7f879f9729702610bbfd5551847f9769]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EB74D167-4E5E-492C-9B68-1B21DF439876}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [ac5a80b6326769cde2d723838d766b95]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EBEB05FE-6425-439C-9BBA-147E4BAA4A45}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [12f4f2445148cc6ac7f12b7b26dde719]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ECE0BC26-43C9-4DDE-8035-784D1412CA30}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [cf37b086acedb0869028e8becb38c33d]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ED3688AC-498F-42AB-ADC0-90A5B1C7B799}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-buttonutil.exe, In Quarantäne, [47bfba7ccacff73fae0a941215ee7888]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F007B4FB-2826-43D6-8EDB-894C497565A9}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [ae5815215f3a75c1c5f3c7dfc43fc33d]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F070F8C3-6BF5-43E5-89BA-12632E7B3730}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-codedownloader.exe, In Quarantäne, [9e68a88e5148270f3584b9ede3206c94]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F254BA56-5B93-44D9-A0E9-317B178064F0}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [a75f90a6b5e45ed8ccedfea8f80b2ad6]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F274A70D-8D1E-4759-976D-F933451C85A5}|AppName, e8906dd6-a5e5-4775-91ee-7fd8b923488c-2.exe-buttonutil.exe, In Quarantäne, [ca3cf4425b3eb5810badc0e6c241966a]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F3996039-7CF9-4FFD-9982-FF52A5A1DDF7}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [2bdbc5715e3b5cdab107b6f02dd6f40c]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F4189EA0-96E3-4D6C-8734-EFF279C0C670}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [fc0a7db97c1df145e1d7dcca976c2ad6]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F5E6061B-6D6D-41DA-A41C-AB8CEBCD9CBA}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [b0561c1ab4e543f312a6c9dde51e7f81]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F66EC5BC-F7C5-41FA-BE1D-355FCC6B4E20}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [b353c076f7a243f315a36b3be81bc23e]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F6CD108C-28F2-4AD3-9818-1CE154A9DCBE}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [ff072e08cbce122467511492da29d12f]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F6E312D5-1DFD-4E77-94B6-282E6F2815D7}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [dc2a6cca7b1e1e18befa911513f0718f]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F6EA41AE-FFF0-421C-8A1F-9BEB841867B4}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [a75f96a04950cf678138e8becd360cf4]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F70EFCA0-6ED4-4196-8B33-B0A3BBA1163D}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [3cca30063366b87e6f49d6d0f60d6c94]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F74917AC-F9F0-4A7B-B439-45A49B848838}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [986e989e65343303d5e4efb7ef143bc5]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F762BA9C-AED2-44B6-B341-E439458F6A1C}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [b94dea4cdebb46f0c3f5198dbc470df3]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F7CFCF63-BB71-4250-8DFB-3CC5C41814E9}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [f214fb3bebae85b1dfda3c6a31d254ac]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F82A7EA2-A3A4-43A2-875C-3B92D1519CEB}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [eb1b6bcbe5b42c0a6455f2b4699a867a]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F842B076-DB2C-4600-ACA9-C1924287F03E}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [9f672c0ac1d8c96dd2e754529c6724dc]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F855607E-1CB9-42E7-94D0-47DA7FB2D234}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-buttonutil.exe, In Quarantäne, [12f4f83ec2d7bf770fa9c2e448bbfa06]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FA7B4C5B-3147-4897-8619-393579F3F03A}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [c73fb185abee2511e7d242648e7548b8]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FAF07F9A-EBDA-4DD6-8CA6-E1ED911B2BD3}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [b6502e080d8c05316058bbeb8c774eb2]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FB6A9E94-3A03-4804-AA31-48BFE685C7D7}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-buttonutil.exe, In Quarantäne, [a66015211089142202b6ffa7bb48d52b]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FDAA9F7F-8F1A-41CC-AFF9-75457F8552C8}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [788e7fb75c3d5bdb962302a4d62dfe02]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FDF59068-83A7-4B3E-A0E7-B57C60259319}|AppName, 8f9ed4af-5111-4f71-812c-1b094e27d2ce-2.exe-codedownloader.exe, In Quarantäne, [ad597eb89ffa5bdb8a2fffa73ec556aa]
PUP.Optional.CrossRider, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FF4BFDEC-FCD3-4633-9525-251B88D9F518}|AppName, a36cfb56-9617-43f8-8549-4249948493a3-2.exe-codedownloader.exe, In Quarantäne, [bc4aa88e6534de5810a951557e858e72]
PUP.Optional.SafeFinder.ShrtCln, HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\SMARTBAR|Publisher, IrsSF, In Quarantäne, [5aac81b5752454e260f68c45ea18ea16]

Kespa · 05.01.2016, 12:00

Teil 3 von 3 mbam.txt:

Code:

ATTFilter

3/3



Registrierungsdaten: 1
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[f90d73c3e2b78aac9217d1cd92729769]

Ordner: 38
PUP.Optional.Amonetize, C:\Users\oli\AppData\Local\4933, In Quarantäne, [2fd749ed9affb086d60b1aa9ea18a25e], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\imageformats, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\platforms, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.VBates, C:\Users\oli\AppData\LocalLow\Company\Product\1.0, In Quarantäne, [b94daa8c7128e0561df7c123a85b16ea], 
PUP.Optional.VBates, C:\Users\oli\AppData\LocalLow\Company\Product, In Quarantäne, [b94daa8c7128e0561df7c123a85b16ea], 
Rogue.Multiple, C:\ProgramData\374311380, In Quarantäne, [4bbb39fdd9c072c4a82d10691ce6b24e], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\nss, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.1ClickMovieDownload, C:\Program Files (x86)\ClickMovie1-Downloaderv10, In Quarantäne, [b0569b9b801985b1b444830bf50d4db3], 
PUP.Optional.1ClickMovieDownload, C:\Users\oli\AppData\LocalLow\ClickMovie1-Downloaderv10, In Quarantäne, [9e6887af0198dc5a46b4038ba55d28d8], 
PUP.Optional.CrossRider, C:\Program Files (x86)\TotalPlus01-3.1V20.09, In Quarantäne, [55b1a690dcbde0561a7f584459a94fb1], 
PUP.Optional.FastPlayer, C:\Users\oli\AppData\Local\com\FastPlayer.exe_Url_ypw5ldaz5xtubzl3ykl5vaw3nmhswq1q, In Quarantäne, [5da9de58a9f00c2a0c713768f111ac54], 
PUP.Optional.FastPlayer, C:\Users\oli\AppData\Local\com\FastPlayer.exe_Url_ypw5ldaz5xtubzl3ykl5vaw3nmhswq1q\1.0.0.2, In Quarantäne, [5da9de58a9f00c2a0c713768f111ac54], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\api, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\lib, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\lib\popupResource, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\userCode, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\icons, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\icons\actions, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\api, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\lib, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\lib\popupResource, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\userCode, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\icons, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\icons\actions, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 

Dateien: 646
PUP.Optional.PrxySvrRST, C:\WINDOWS\SYSTEM32\drivers\zgjmm2f2oxm1bdf.sys, Löschen bei Neustart, [fcd05b3cee9924e79140413cd1ecce50], 
PUP.Optional.WebInstr, C:\Windows\System32\drivers\Msft_Kernel_webinstr_01009.Wdf, Löschen bei Neustart, , 
PUP.Optional.1ClickMovieDownload, C:\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-bg.exe, In Quarantäne, [7195d95df3a6f4423b613fef5aa7659b], 
PUP.Optional.1ClickMovieDownload, C:\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-buttonutil.exe, In Quarantäne, [3dc920161881f6407d1f81adfb0622de], 
PUP.Optional.1ClickMovieDownload, C:\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-buttonutil64.exe, In Quarantäne, [bd49f145edac2a0c247855d9df2256aa], 
PUP.Optional.CrossRider, C:\Program Files (x86)\ClickMovie1-Downloaderv10\SuperSocket.ClientEngine.Common.dll, In Quarantäne, [7c8a9c9a4356dc5a70be1c988b76ea16], 
PUP.Optional.CrossRider, C:\Program Files (x86)\ClickMovie1-Downloaderv10\utils.exe, In Quarantäne, [09fd3ff7d4c5af87c4888ba13bc53ac6], 
PUP.Optional.Salus, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf.exe, In Quarantäne, [56b0181e5d3c6cca5014b3768e728878], 
PUP.Optional.CrossRider, C:\Program Files (x86)\TotalPlus01-3.1V20.09\utils.exe, In Quarantäne, [c83e280ef7a2270fa6e11517cd334bb5], 
Adware.EoRezo, C:\Users\oli\AppData\Local\Temp\is-EKO31.tmp\662.exe, In Quarantäne, [41c51b1bb5e4b2849a68d3f9ca37dd23], 
PUP.Optional.PrxySvrRST, C:\Windows\Temp\142B.tmp, In Quarantäne, [8a7cd363c0d9ec4a5dcb1ca7758f0cf4], 
PUP.Optional.PrxySvrRST, C:\Windows\Temp\2970.tmp, In Quarantäne, [e81e54e28613ae88d850c003976df20e], 
PUP.Optional.PrxySvrRST, C:\Windows\Temp\FC90.tmp, In Quarantäne, [778f37ffbddc88aef731596a55af09f7], 
PUP.Optional.InstallCore, C:\Users\oli\Downloads\adobe_flash_setup.exe, In Quarantäne, [3bcbc76f3c5d87af122d0a4c659f5ca4], 
PUP.Optional.DriverUpdate, C:\Users\oli\Downloads\DriverUpdate-setup.exe, In Quarantäne, [0df9f244cacfbd797ae739f7689905fb], 
PUP.Optional.SoftPulse, C:\Users\oli\Downloads\Setup(6).exe, In Quarantäne, [1ee8f3438118043270a74e08af52da26], 
PUP.Optional.SoftPulse, C:\Users\oli\Downloads\Setup.exe, In Quarantäne, [9d69b38394051224b1e534d2bc446c94], 
PUP.Optional.SearchProtect.AppFlsh, C:\Windows\AppPatch\AppPatch64\SPVCLdr64.dll, In Quarantäne, [fd09e056346573c356108429748d728e], 
PUP.Optional.Amonetize, C:\Users\oli\AppData\Local\4933\status.cfg, In Quarantäne, [2fd749ed9affb086d60b1aa9ea18a25e], 
PUP.Optional.Amonetize, C:\Users\oli\AppData\Local\4933\Updater.xml, In Quarantäne, [2fd749ed9affb086d60b1aa9ea18a25e], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\OK, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\Qt5MultimediaWidgets.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\cookies.ini, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\icudt51.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\icuin51.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\icuuc51.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\lib.exe, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\libgcc_s_dw2-1.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\libstdc++-6.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\libwinpthread-1.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\OMG.exe, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\Qt5Core.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\Qt5Gui.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\Qt5Multimedia.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\Qt5Network.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\Qt5OpenGL.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\Qt5Positioning.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\Qt5PrintSupport.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\Qt5Qml.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\Qt5Quick.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\Qt5Sensors.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\Qt5Sql.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\Qt5WebKit.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\Qt5WebKitWidgets.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\Qt5Widgets.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\unins.exe, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\imageformats\qgif.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\imageformats\qico.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\imageformats\qjpeg.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\imageformats\qsvg.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.OneMoreGame, C:\Users\oli\AppData\Roaming\OneMoreGame\platforms\qwindows.dll, In Quarantäne, [49bdf541b9e063d3cdeddae52fd410f0], 
PUP.Optional.Snoozer, C:\Windows\System32\Tasks\Seventh, In Quarantäne, [a561a98d4059c175955d5f832bd82bd5], 
PUP.Optional.Snoozer, C:\Windows\System32\Tasks\Sixth, In Quarantäne, [fe0884b26534dc5a728151917c8713ed], 
PUP.Optional.VBates, C:\Users\oli\AppData\LocalLow\Company\Product\1.0\localStorageIE.txt, In Quarantäne, [b94daa8c7128e0561df7c123a85b16ea], 
PUP.Optional.VBates, C:\Users\oli\AppData\LocalLow\Company\Product\1.0\localStorageIE_backup.txt, In Quarantäne, [b94daa8c7128e0561df7c123a85b16ea], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\settings.txt, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf.log, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\nss\certutil.exe, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\nss\mozcrt19.dll, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\nss\nspr4.dll, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\nss\nss3.dll, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\nss\plc4.dll, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\nss\plds4.dll, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\nss\smime3.dll, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\nss\softokn3.dll, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs1A44.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs1D39.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs1E15.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs20C5.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs2205.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs250B.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs255C.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs2581.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs25AA.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs2629.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs2754.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs279B.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs289F.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs2957.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs29BC.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs2C58.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs2D68.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs2F87.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs2FA7.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs2FB8.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs31F6.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs35B7.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs3709.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs3A68.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs3B.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs7B02.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs7BEA.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs7F1E.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs7F7F.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs816C.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs8425.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs848D.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs849C.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs8671.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs89D5.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs8B65.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs8C1D.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs8DB3.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs8DE2.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs8F8E.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs9221.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs9232.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs9233.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs93EA.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs588F.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs58BA.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs5A2A.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs5AAB.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs5B12.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs5BF7.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs5C61.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs5E5.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs6157.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs634.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs635.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs63BC.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs65B.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs65D5.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs669A.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs67E4.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs68A.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs69B1.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs6B1.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsB532.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsB69E.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsB6F0.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsB6F6.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsB90A.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsB975.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsB9FC.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsBBF0.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsBF1C.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsBF70.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsBF91.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsC01.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsC410.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsC4EB.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsCC89.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsD1FC.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsD33.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsD3F9.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsD616.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsD7EB.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsDAFD.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsDC46.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsDCDF.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsDD24.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsDDA2.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs3C2E.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs3C7D.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs3C8E.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs3CA7.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs3DA8.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs3E12.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs3FF0.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs4095.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs42E3.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs4396.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs4453.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs44F4.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs4563.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs474B.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs4B13.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs4D54.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs4DBD.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs4FAA.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs4FE.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs501.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs50DC.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs539.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs53B9.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs554.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs5634.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs3BD6.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs56FB.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs6BBD.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs7AF1.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs9461.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsB527.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsDDA3.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsDE4.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsDEEC.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsDF01.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsE411.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsE4E.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsE829.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsEA2.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsEC1C.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsEDE1.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsEEA7.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsF016.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsF08C.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsF0D7.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsF956.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsFA3A.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsFB06.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsFB16.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsFC5.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs6FA.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs6FC9.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs7126.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs723E.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs732A.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs732E.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs7338.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs7497.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs7679.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs76E.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs782D.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs7926.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs7A7F.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs7A90.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs7A91.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs95D8.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs96DC.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs96F5.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs97E1.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs9957.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs9B4F.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs9BD0.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs9BFD.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs9D5.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs9F4F.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfs9FD.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsA4BD.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsA4DF.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsA62D.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsA99C.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsA9BC.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsAA50.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsAA71.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsB1F6.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\mfsB2C2.tmp, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-googleads4.g.doubleclick.net-3960b987301ac671471225d18c8904f046e18748#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-www.facebook.com-81abb5703a0a39ea1a6cbb1fb68e09ae16cbb251#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-www.facebook.com-81abb5703a0a39ea1a6cbb1fb68e09ae16cbb251#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-www.fastnfreedownload.com-14c427445c0ad343fcfa919b5bed9672b2f43765#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-www.fastnfreedownload.com-14c427445c0ad343fcfa919b5bed9672b2f43765#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-www.google.com-41d0e22cf82f121d2a98f1d550267e2cd14001ef#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-www.google.com-41d0e22cf82f121d2a98f1d550267e2cd14001ef#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-www.google.com-c97c2538f1cdb9e8f4d7aa87668fef935bc2fe5e#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-www.google.com-c97c2538f1cdb9e8f4d7aa87668fef935bc2fe5e#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-www.gstatic.com-1219337d219d1684f785bbabe688cea429ac6ee1#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-www.gstatic.com-1219337d219d1684f785bbabe688cea429ac6ee1#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-www.superfish.com-379922b07aba0722dffe21bac8045a54dc01c757#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-www.superfish.com-379922b07aba0722dffe21bac8045a54dc01c757#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-www.youtube.com-5e7826eee824ea6f0c84a5be839804f1acf9be53#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-www.youtube.com-5e7826eee824ea6f0c84a5be839804f1acf9be53#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-oauth.googleusercontent.com-eb6302691c32cc69f5b5b1147ac4f41e52094719#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-oauth.googleusercontent.com-eb6302691c32cc69f5b5b1147ac4f41e52094719#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-p.adpdx.com-ef90a9f894c699390883b81f5d12d1a16aadc9fe#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-p.adpdx.com-ef90a9f894c699390883b81f5d12d1a16aadc9fe#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-pagead2.googlesyndication.com-68896d71b19103f2a5540b547ca5558acc743332#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-pagead2.googlesyndication.com-68896d71b19103f2a5540b547ca5558acc743332#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-pijoto.net-d29ff667093c996d6c3b7dc3b312dc734cac3495#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-pijoto.net-d29ff667093c996d6c3b7dc3b312dc734cac3495#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-android.clients.google.com-da4d2ab5b46128a2e0315c1d1866356bdeb86762#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-apis.google.com-1219337d219d1684f785bbabe688cea429ac6ee1#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-apis.google.com-1219337d219d1684f785bbabe688cea429ac6ee1#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-app.eshopcomp.com-a40bec501da2b59ca97e4c73ce77a2d0a8f82c3e#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-app.eshopcomp.com-a40bec501da2b59ca97e4c73ce77a2d0a8f82c3e#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-cdnjs.cloudflare.com-c6b4fc146a472873561d14724164580785a6a23d#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-cdnjs.cloudflare.com-c6b4fc146a472873561d14724164580785a6a23d#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-clients1.google.com-1219337d219d1684f785bbabe688cea429ac6ee1#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-clients1.google.com-1219337d219d1684f785bbabe688cea429ac6ee1#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-clients2.google.com-1219337d219d1684f785bbabe688cea429ac6ee1#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-7366920935362d668b958336abdc8d50.adk2.co-4bfc3da8c4d6274f4ca3d0b835a582e04ec99997#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-android.clients.google.com-da4d2ab5b46128a2e0315c1d1866356bdeb86762#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-clients2.google.com-1219337d219d1684f785bbabe688cea429ac6ee1#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-csync.flickr.com-b7dc45cae297a5f854a397c0cb32d87480da89a6#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-delivery.media-tractor.com-67d65d1b69aab973969655253708329899e106aa#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-fonts.googleapis.com-5bfec83d6a9f3d6ce81fbc08a4b67a808010908b#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-csync.yahooapis.com-ddcc9def1e7e75aea19f36fc7a2179e36ad5d057#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-csync.yahooapis.com-ddcc9def1e7e75aea19f36fc7a2179e36ad5d057#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-d2nq0f8d9ofdwv.cloudfront.net-f34def817618df3f2894a48ed03caeb1b1661cbe#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-d2nq0f8d9ofdwv.cloudfront.net-f34def817618df3f2894a48ed03caeb1b1661cbe#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-de.ioam.de-284f48779017638dc3285326ed37b7a06b834459#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-de.ioam.de-284f48779017638dc3285326ed37b7a06b834459#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-de.search.yahoo.com-021a1c9e8a04d4a2e2a5014a87a30c2c87eac329#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-de.search.yahoo.com-021a1c9e8a04d4a2e2a5014a87a30c2c87eac329#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-secure.adnxs.com-4cf8aeb8ce2af6f0b67f36b22b517071e7d1e5e4#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-ssl.gstatic.com-1219337d219d1684f785bbabe688cea429ac6ee1#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-ssl.gstatic.com-1219337d219d1684f785bbabe688cea429ac6ee1#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-staticwajam-wajam.netdna-ssl.com-10726add0bccfe0c6afd1161e2a510aed3aabed2#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-staticwajam-wajam.netdna-ssl.com-10726add0bccfe0c6afd1161e2a510aed3aabed2#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-t.mookie1.com-8edb831c150fae3277bb93a09ff8cc831438b33d#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-t.mookie1.com-8edb831c150fae3277bb93a09ff8cc831438b33d#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-tools.google.com-1219337d219d1684f785bbabe688cea429ac6ee1#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-tools.google.com-1219337d219d1684f785bbabe688cea429ac6ee1#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-tpc.googlesyndication.com-ed8723214cb000bdfba16b51f979859dc1b3c080#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-tpc.googlesyndication.com-ed8723214cb000bdfba16b51f979859dc1b3c080#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-translate.googleapis.com-a8a0ce0e7222568afadb09f07454ce9a4147e985#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-translate.googleapis.com-a8a0ce0e7222568afadb09f07454ce9a4147e985#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-www.best-deals-products.com-1c2e0a43fbfd01beae270d2b616a8b3a7e79872c#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-yt3.ggpht.com-68896d71b19103f2a5540b547ca5558acc743332#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-googleads4.g.doubleclick.net-3960b987301ac671471225d18c8904f046e18748#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-i.ytimg.com-1219337d219d1684f785bbabe688cea429ac6ee1#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-i.ytimg.com-1219337d219d1684f785bbabe688cea429ac6ee1#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-images.thumbshots.com-fe43f750013a3c0c8c2dfabdfa4c1ce902c435a7#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-images.thumbshots.com-fe43f750013a3c0c8c2dfabdfa4c1ce902c435a7#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-imedia.adk2.co-4bfc3da8c4d6274f4ca3d0b835a582e04ec99997#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-imedia.adk2.co-4bfc3da8c4d6274f4ca3d0b835a582e04ec99997#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-imedia.adk2x.com-7b12b3fdb2f6f64837647a497bf58daaa4cc6fdc#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-imedia.adk2x.com-7b12b3fdb2f6f64837647a497bf58daaa4cc6fdc#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-intext.nav-links.com-2ececc9702c9967b1be1161d605769ef5f229dcf#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-intext.nav-links.com-2ececc9702c9967b1be1161d605769ef5f229dcf#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-istatic.eshopcomp.com-a40bec501da2b59ca97e4c73ce77a2d0a8f82c3e#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-istatic.eshopcomp.com-a40bec501da2b59ca97e4c73ce77a2d0a8f82c3e#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-jsgnr.eshopcomp.com-a40bec501da2b59ca97e4c73ce77a2d0a8f82c3e#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-jsgnr.eshopcomp.com-a40bec501da2b59ca97e4c73ce77a2d0a8f82c3e#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-mtalk.google.com-e6317041b4dcca579cc61bc8369df90e02495702#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-s.ytimg.com-1219337d219d1684f785bbabe688cea429ac6ee1#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-s0.2mdn.net-4051ca72d50952195d35825afede4b337bdee561#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-s0.2mdn.net-4051ca72d50952195d35825afede4b337bdee561#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-safebrowsing-cache.google.com-e6317041b4dcca579cc61bc8369df90e02495702#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-safebrowsing-cache.google.com-e6317041b4dcca579cc61bc8369df90e02495702#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-safebrowsing.google.com-1219337d219d1684f785bbabe688cea429ac6ee1#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-safebrowsing.google.com-1219337d219d1684f785bbabe688cea429ac6ee1#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-sb-ssl.google.com-e6317041b4dcca579cc61bc8369df90e02495702#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-sb-ssl.google.com-e6317041b4dcca579cc61bc8369df90e02495702#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-delivery.media-tractor.com-67d65d1b69aab973969655253708329899e106aa#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-dl.google.com-e6317041b4dcca579cc61bc8369df90e02495702#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-dl.google.com-e6317041b4dcca579cc61bc8369df90e02495702#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-e0c8a237dc02264dcf1d3df6c7c0cfa6.adk2.co-4bfc3da8c4d6274f4ca3d0b835a582e04ec99997#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-e0c8a237dc02264dcf1d3df6c7c0cfa6.adk2.co-4bfc3da8c4d6274f4ca3d0b835a582e04ec99997#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-ee8f928b71ed0dc6033231fa0943d9f5.adk2.co-4bfc3da8c4d6274f4ca3d0b835a582e04ec99997#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-ee8f928b71ed0dc6033231fa0943d9f5.adk2.co-4bfc3da8c4d6274f4ca3d0b835a582e04ec99997#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-fastnfreedownload.com-69ac5b4b883745439b4ee9dcd9ec7c7ddfad0d28#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-fastnfreedownload.com-69ac5b4b883745439b4ee9dcd9ec7c7ddfad0d28#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-clients4.google.com-1219337d219d1684f785bbabe688cea429ac6ee1#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-clients4.google.com-1219337d219d1684f785bbabe688cea429ac6ee1#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-content.googleapis.com-a8a0ce0e7222568afadb09f07454ce9a4147e985#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-content.googleapis.com-a8a0ce0e7222568afadb09f07454ce9a4147e985#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-csc.beap.bc.yahoo.com-cb002dff40dd8c399224b421c72d6add789f3621#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-csc.beap.bc.yahoo.com-cb002dff40dd8c399224b421c72d6add789f3621#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-csync.flickr.com-b7dc45cae297a5f854a397c0cb32d87480da89a6#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-pstatic.eshopcomp.com-a40bec501da2b59ca97e4c73ce77a2d0a8f82c3e#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-pubads.g.doubleclick.net-3960b987301ac671471225d18c8904f046e18748#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-pubads.g.doubleclick.net-3960b987301ac671471225d18c8904f046e18748#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r1---sn-4g57knzz.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r1---sn-4g57knzz.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r1---sn-p5qlsnsz.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r1---sn-p5qlsnsz.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r10---sn-h0j7snee.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r10---sn-h0j7snee.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r11---sn-4g57kne6.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r11---sn-4g57kne6.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r11---sn-aigllm7e.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r11---sn-aigllm7e.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-7366920935362d668b958336abdc8d50.adk2.co-4bfc3da8c4d6274f4ca3d0b835a582e04ec99997#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-accounts.google.com-f41983004a36b1286fa2174a80cb4811ba738413#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-accounts.google.com-f41983004a36b1286fa2174a80cb4811ba738413#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-ad.doubleclick.net-1b479d28a18fa788c45fc39f5c5c31eea896d7a7#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-ad.doubleclick.net-1b479d28a18fa788c45fc39f5c5c31eea896d7a7#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-ajax.googleapis.com-5bfec83d6a9f3d6ce81fbc08a4b67a808010908b#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-ajax.googleapis.com-5bfec83d6a9f3d6ce81fbc08a4b67a808010908b#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r4---sn-4g57kndk.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r4---sn-4g57knkl.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r4---sn-4g57knkl.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r5---sn-ab5e6m7d.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r5---sn-ab5e6m7d.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r7---sn-5hn7su7l.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r7---sn-5hn7su7l.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r8---sn-vgqsem7k.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r8---sn-vgqsem7k.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r12---sn-4g57knld.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r19---sn-4g57kn7s.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r19---sn-4g57kn7s.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r19---sn-4g57knkz.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r19---sn-4g57knkz.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r19---sn-p5qlsm7l.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r19---sn-p5qlsm7l.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-mtalk.google.com-e6317041b4dcca579cc61bc8369df90e02495702#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-pstatic.eshopcomp.com-a40bec501da2b59ca97e4c73ce77a2d0a8f82c3e#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r12---sn-4g57knld.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r2---sn-ab5e6m7r.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r4---sn-4g57kndk.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r9---sn-4g57kn76.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-s.ytimg.com-1219337d219d1684f785bbabe688cea429ac6ee1#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-secure.adnxs.com-4cf8aeb8ce2af6f0b67f36b22b517071e7d1e5e4#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-www.best-deals-products.com-1c2e0a43fbfd01beae270d2b616a8b3a7e79872c#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-yt3.ggpht.com-68896d71b19103f2a5540b547ca5558acc743332#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-fonts.googleapis.com-5bfec83d6a9f3d6ce81fbc08a4b67a808010908b#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-fonts.gstatic.com-e6317041b4dcca579cc61bc8369df90e02495702#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-fonts.gstatic.com-e6317041b4dcca579cc61bc8369df90e02495702#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-gg.google.com-e6317041b4dcca579cc61bc8369df90e02495702#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-gg.google.com-e6317041b4dcca579cc61bc8369df90e02495702#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-googleads.g.doubleclick.net-3960b987301ac671471225d18c8904f046e18748#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-googleads.g.doubleclick.net-3960b987301ac671471225d18c8904f046e18748#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r9---sn-4g57kn76.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r9---sn-4g57kn7z.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r9---sn-4g57kn7z.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r9---sn-ab5e6m7l.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r9---sn-ab5e6m7l.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-s.yimg.com-927385df9579c9d9130942f4f38ac3cf80a2017b#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-s.yimg.com-927385df9579c9d9130942f4f38ac3cf80a2017b#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-s.youtube.com-71fca6b8015e7ea81c8ef37a7c12409ab5343ad3#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-s.youtube.com-71fca6b8015e7ea81c8ef37a7c12409ab5343ad3#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\test.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\test.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r2---sn-ab5e6m7r.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r20---sn-4g57knz7.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r20---sn-4g57knz7.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r3---sn-4g57knzl.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r3---sn-4g57knzl.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r3---sn-o097zuez.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.cer, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf\SSL\Hades CA-r3---sn-o097zuez.googlevideo.com-6a2795c0e3d64f110145a07da140807ee3d00cb9#child.pvk, In Quarantäne, [b3534beb3069d264eaacbad213efd828], 
PUP.Optional.1ClickMovieDownload, C:\Program Files (x86)\ClickMovie1-Downloaderv10\1293297481.mxaddon, In Quarantäne, [b0569b9b801985b1b444830bf50d4db3], 
PUP.Optional.1ClickMovieDownload, C:\Program Files (x86)\ClickMovie1-Downloaderv10\1ac4e309-b0d9-4e7a-827e-fc60eab83b96.crx, In Quarantäne, [b0569b9b801985b1b444830bf50d4db3], 
PUP.Optional.1ClickMovieDownload, C:\Program Files (x86)\ClickMovie1-Downloaderv10\49c51acf-15a8-4cfa-9475-d66516f8ce3e.crx, In Quarantäne, [b0569b9b801985b1b444830bf50d4db3], 
PUP.Optional.1ClickMovieDownload, C:\Program Files (x86)\ClickMovie1-Downloaderv10\a36cfb56-9617-43f8-8549-4249948493a3.crx, In Quarantäne, [b0569b9b801985b1b444830bf50d4db3], 
PUP.Optional.1ClickMovieDownload, C:\Program Files (x86)\ClickMovie1-Downloaderv10\a36cfb56-9617-43f8-8549-4249948493a3.xpi, In Quarantäne, [b0569b9b801985b1b444830bf50d4db3], 
PUP.Optional.1ClickMovieDownload, C:\Program Files (x86)\ClickMovie1-Downloaderv10\background.html, In Quarantäne, [b0569b9b801985b1b444830bf50d4db3], 
PUP.Optional.1ClickMovieDownload, C:\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-buttonutil.dll, In Quarantäne, [b0569b9b801985b1b444830bf50d4db3], 
PUP.Optional.1ClickMovieDownload, C:\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-buttonutil64.dll, In Quarantäne, [b0569b9b801985b1b444830bf50d4db3], 
PUP.Optional.1ClickMovieDownload, C:\Program Files (x86)\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10.ico, In Quarantäne, [b0569b9b801985b1b444830bf50d4db3], 
PUP.Optional.1ClickMovieDownload, C:\Program Files (x86)\ClickMovie1-Downloaderv10\Interop.IWshRuntimeLibrary.dll, In Quarantäne, [b0569b9b801985b1b444830bf50d4db3], 
PUP.Optional.1ClickMovieDownload, C:\Program Files (x86)\ClickMovie1-Downloaderv10\Newtonsoft.Json.dll, In Quarantäne, [b0569b9b801985b1b444830bf50d4db3], 
PUP.Optional.1ClickMovieDownload, C:\Program Files (x86)\ClickMovie1-Downloaderv10\SuperSocket.ClientEngine.Core.dll, In Quarantäne, [b0569b9b801985b1b444830bf50d4db3], 
PUP.Optional.1ClickMovieDownload, C:\Program Files (x86)\ClickMovie1-Downloaderv10\SuperSocket.ClientEngine.Protocol.dll, In Quarantäne, [b0569b9b801985b1b444830bf50d4db3], 
PUP.Optional.1ClickMovieDownload, C:\Program Files (x86)\ClickMovie1-Downloaderv10\WebSocket4Net.dll, In Quarantäne, [b0569b9b801985b1b444830bf50d4db3], 
PUP.Optional.1ClickMovieDownload, C:\Users\oli\AppData\LocalLow\ClickMovie1-Downloaderv10\DTFProxyToServerSect_b81228900052e013242230f6cdde3bdb00063317_p10340.dat, In Quarantäne, [9e6887af0198dc5a46b4038ba55d28d8], 
PUP.Optional.1ClickMovieDownload, C:\Users\oli\AppData\LocalLow\ClickMovie1-Downloaderv10\DTFProxyToServerSect_b81228900052e013242230f6cdde3bdb00063317_p11028.dat, In Quarantäne, [9e6887af0198dc5a46b4038ba55d28d8], 
PUP.Optional.1ClickMovieDownload, C:\Users\oli\AppData\LocalLow\ClickMovie1-Downloaderv10\DTFProxyToServerSect_b81228900052e013242230f6cdde3bdb00063317_p2124.dat, In Quarantäne, [9e6887af0198dc5a46b4038ba55d28d8], 
PUP.Optional.1ClickMovieDownload, C:\Users\oli\AppData\LocalLow\ClickMovie1-Downloaderv10\DTFProxyToServerSect_b81228900052e013242230f6cdde3bdb00063317_p2996.dat, In Quarantäne, [9e6887af0198dc5a46b4038ba55d28d8], 
PUP.Optional.1ClickMovieDownload, C:\Users\oli\AppData\LocalLow\ClickMovie1-Downloaderv10\DTFProxyToServerSect_b81228900052e013242230f6cdde3bdb00063317_p3396.dat, In Quarantäne, [9e6887af0198dc5a46b4038ba55d28d8], 
PUP.Optional.1ClickMovieDownload, C:\Users\oli\AppData\LocalLow\ClickMovie1-Downloaderv10\DTFProxyToServerSect_b81228900052e013242230f6cdde3bdb00063317_p6448.dat, In Quarantäne, [9e6887af0198dc5a46b4038ba55d28d8], 
PUP.Optional.1ClickMovieDownload, C:\Users\oli\AppData\LocalLow\ClickMovie1-Downloaderv10\DTFProxyToServerSect_b81228900052e013242230f6cdde3bdb00063317_p7064.dat, In Quarantäne, [9e6887af0198dc5a46b4038ba55d28d8], 
PUP.Optional.1ClickMovieDownload, C:\Users\oli\AppData\LocalLow\ClickMovie1-Downloaderv10\DTFProxyToServerSect_b81228900052e013242230f6cdde3bdb00063317_p7108.dat, In Quarantäne, [9e6887af0198dc5a46b4038ba55d28d8], 
PUP.Optional.1ClickMovieDownload, C:\Users\oli\AppData\LocalLow\ClickMovie1-Downloaderv10\DTFProxyToServerSect_b81228900052e013242230f6cdde3bdb00063317_p7532.dat, In Quarantäne, [9e6887af0198dc5a46b4038ba55d28d8], 
PUP.Optional.CrossRider, C:\Program Files (x86)\TotalPlus01-3.1V20.09\1293297481.mxaddon, In Quarantäne, [55b1a690dcbde0561a7f584459a94fb1], 
PUP.Optional.CrossRider, C:\Program Files (x86)\TotalPlus01-3.1V20.09\18d54d62-78b1-4d01-bfaa-3ead8928c55e.crx, In Quarantäne, [55b1a690dcbde0561a7f584459a94fb1], 
PUP.Optional.CrossRider, C:\Program Files (x86)\TotalPlus01-3.1V20.09\8f9ed4af-5111-4f71-812c-1b094e27d2ce.crx, In Quarantäne, [55b1a690dcbde0561a7f584459a94fb1], 
PUP.Optional.CrossRider, C:\Program Files (x86)\TotalPlus01-3.1V20.09\8f9ed4af-5111-4f71-812c-1b094e27d2ce.xpi, In Quarantäne, [55b1a690dcbde0561a7f584459a94fb1], 
PUP.Optional.CrossRider, C:\Program Files (x86)\TotalPlus01-3.1V20.09\background.html, In Quarantäne, [55b1a690dcbde0561a7f584459a94fb1], 
PUP.Optional.CrossRider, C:\Program Files (x86)\TotalPlus01-3.1V20.09\bcbd0554-fc63-44ef-8481-71e3061263ac.crx, In Quarantäne, [55b1a690dcbde0561a7f584459a94fb1], 
PUP.Optional.CrossRider, C:\Program Files (x86)\TotalPlus01-3.1V20.09\TotalPlus01-3.1V20.09.ico, In Quarantäne, [55b1a690dcbde0561a7f584459a94fb1], 
PUP.Optional.FastPlayer, C:\Users\oli\AppData\Local\com\FastPlayer.exe_Url_ypw5ldaz5xtubzl3ykl5vaw3nmhswq1q\1.0.0.2\user.config, In Quarantäne, [5da9de58a9f00c2a0c713768f111ac54], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav-groups, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\favs##04da3890b9d276285aa5b8ac575c6ac7, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\favs##6503c77937287e890444349770f595ca, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\redirects, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\c77bc0990ddbf6010ae780c932473a7b, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\1657abd23d0799d22ac9e80db3741bdf, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\23057cd78661d8a0b73de2e1ffd68c96, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\25ef92ffa1eb400850849e42a49deed2, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\2d302c649ec94bb8b99702c5ebc806e6, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\37f15a06f1d5b0c87b834da06766d72d, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\3ffb05b02cc06bbcfe40c5a6d3cf136f, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\4006885bceba31e18aac06e5ebbbccde, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\59f74e375a39e59b1b134626e9de68ff, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\5d0030e39ea9b4dae8bd9a426cdb5b45, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\5e2ed6f71b748596d1e3ac203b0157ed, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\6177688048690334215167f321e59414, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\678843f5919f9844c32b3492f7ae5374, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\6a2b5f6797e6971cad72f3802797ad15, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\738c6fb312ca9a73d10dc090cbebb1ad, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\7414b8a0afbdb052deabffa3e82f79fc, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\81ece715a8cb1d232e536c82256277a9, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\845f37d129bb1378d0942ef1cfe10fc4, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\895e5a570581217197002a4d6bd89b0d, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\9d079842923a5d61f86227987cc06665, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\9d5383fa4bc210295fac0d1e19a34513, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\9dc47206d29b2949983f801df57baf6f, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\aa936fe352c582a275d27a064135ddfd, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\b026747f0f000335a616d3ca4e465d93, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\bba0c1f4c91dc79a2b591d7896de5f2c, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\cdf5e2f6f93eebc9eaea021c7f2edb71, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\d0aedbe82780105a23549d245f25dd10, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\d6f3ccbcf4481af271d134ad155f72a0, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\e08f2a94e1eefe39dee9905bfb713336, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\e0aa731ff56d70613c492094ee3a9a0e, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\f395885f466ddd2944a0a851df1028d3, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 
PUP.Optional.Groovorio, C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\nspdlgrvrio\fav_thumbs\fa926aa5a3b41044b589c46917678e88, In Quarantäne, [42c487afd4c52a0c33c58b16d72b27d9], 

(end)

Kespa · 05.01.2016, 12:02

War immernoch zu groß:

Code:

ATTFilter

PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\b78a217fa0b29a0b558a326d67076e3b.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\0562a792f37e9f3545c1066d0bf3ef01.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\main.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\api\5ebda61d4120204965802b9c162ebf92.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\api\9ffcf6d0558425c8fcbbd54f52d3f397.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\api\b5d65641695bdf26770e72b4ba431c04.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\api\c8e4dc83902861cfda6b86efebadb278.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\api\d22d3cdf3eb0ed77b485e29ec8d38d40.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\api\pageAction.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\lib\02e6a178dfd03c724717f883a25e0a27.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\lib\16cd0444222bead100e183fef8dea099.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\lib\183dfcd6cbd8222826be5845459182fb.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\lib\383cd1505b37422acc1d4865daee9586.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\lib\4702be2cd1b84a95a02e8e19fa3d72a4.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\lib\477cd810590ae74f22ce011746c344a6.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\lib\73fe44b8442074718720b002e0eaec7e.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\lib\9dd152ec082553b9b118af23bd172149.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\lib\a813115d039cdff1a92c652387543ca8.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\lib\app_api.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\lib\b5faaff2f3c7ac94d5ca9a63d6014ef6.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\lib\cc0f0d72836ab9104701a003fe5570a3.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\lib\dd48ddbe06799ba7724f00f50fc93f20.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\lib\e788d745bbbc091a788f21070e0faee5.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\lib\feadeda587200e62316a468ffc5770c9.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\lib\installer.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\lib\popupResource\newPopup.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\js\lib\popupResource\popup.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\background.html, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\chromeCoreFilesIndex.txt, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\manifest.json, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\popup.html, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\Settings.json, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\manifest.xml, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins.json, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\223.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\1.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\1000020.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\1000025.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\1000030.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\102.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\104.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\123.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\13.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\14.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\17.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\177.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\178.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\179.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\180.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\182.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\183.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\19.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\207.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\21.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\22.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\220.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\221.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\226.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\246.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\262.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\263.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\267.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\273.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\275.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\28.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\281.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\4.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\47.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\64.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\7.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\72.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\78.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\80.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\9.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\91.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\93.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\plugins\97.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\userCode\background.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\extensionData\userCode\extension.js, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\icons\icon128.png, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\icons\icon16.png, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\icons\icon48.png, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\gkookgoofbomddkomagahpnpdcnebnad\1.26.50_0\icons\actions\1.png, In Quarantäne, [0006fb3b8019c86e14cc2f9953b147b9], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\320122b1af67cbeccd9020f4caaf69e8.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\6d3e5c7723e6e788625db0749ffe11f9.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\main.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\api\4d34248daac3eee6317711530d500877.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\api\5e6529b2405e4cb2742f87f0c28e6deb.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\api\63a2d4ba1778c0f878d4e8927533661a.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\api\6d34003328cda98349ddd6d7d0d900d7.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\api\7865b37f1854dd85580a4d5f448badab.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\api\pageAction.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\lib\0bbdbc58da85e9286000db400695a6c3.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\lib\1799d0163486d548e95e11c20a58d4b0.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\lib\2d44597651015ab2a0180aadd217e8ea.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\lib\4726c4e7bfde4f6af422d32b435c0fe9.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\lib\4e312d549dfa6cd9694982b89c6de43b.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\lib\62f6dcbdf3a9c0a3e0857e1fc578b781.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\lib\684c3f059b51fb6bfe460311a370dd16.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\lib\7d22ccd5bece467418eff2544be9fc41.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\lib\88f7d0dbd5344bda80a53a1f22a2108e.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\lib\97646b642dc5ad829843b3f43da0e48b.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\lib\af0a7dc403c2071df57ff220747c9453.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\lib\app_api.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\lib\c54f780abe62217a496f0697fdf63ceb.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\lib\d088de71a4ab60808f8a39b34d41dee5.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\lib\d3f6edf23b9d585fc4ab599805ab5e46.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\lib\installer.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\lib\popupResource\newPopup.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\js\lib\popupResource\popup.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\background.html, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\chromeCoreFilesIndex.txt, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\manifest.json, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\popup.html, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\Settings.json, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\manifest.xml, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins.json, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\260.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\102.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\104.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\119.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\123.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\13.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\14.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\17.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\178.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\179.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\180.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\184.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\19.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\191.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\195.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\220.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\221.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\223.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\231.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\232.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\242.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\246.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\262.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\263.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\267.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\273.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\275.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\281.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\286.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\289.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\300.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\302.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\4.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\47.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\64.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\7.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\78.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\80.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\9.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\91.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\93.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\plugins\97.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\userCode\background.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\extensionData\userCode\extension.js, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\icons\icon128.png, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\icons\icon16.png, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\icons\icon48.png, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 
PUP.Optional.CrossRider, C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\extensions\ljefoakgfhcoeobgicjgejglnpfpemgb\1.26.42_0\icons\actions\1.png, In Quarantäne, [e91d31056a2ff93dfce4d4f428dc2bd5], 

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)

Kespa · 05.01.2016, 12:04

FRST:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:31-12-2015
durchgeführt von oli (Administrator) auf OLI-PC (05-01-2016 10:48:55)
Gestartet von C:\Users\oli\Desktop
Geladene Profile: oli (Verfügbare Profile: oli)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: IE)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2011-02-04] (Intel(R) Corporation)
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-18\...\Run: [AviraSpeedup] => "C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup.exe" -autorun
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-09-09] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei
CHR HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{555AEA56-8BDF-4D13-913C-1F8EAFB2D65B}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130962973552149474&GUID=00000000-0000-0000-0000-000000000000
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130962973552305474&GUID=00000000-0000-0000-0000-000000000000
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130962973558389485&GUID=00000000-0000-0000-0000-000000000000
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130962973558389485&GUID=00000000-0000-0000-0000-000000000000
HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130962973557453484&GUID=00000000-0000-0000-0000-000000000000
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {CC865B26-C31D-4D23-B17B-96548EEF03F6} URL = 
SearchScopes: HKLM-x32 -> DefaultScope Wert fehlt
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = 
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {02E47D68-8EA7-4F7A-AB03-257EE8CF60E3} URL = hxxp://suche.t-online.de/fast-cgi/tsc?sr=twiki&q={searchTerms}&dia=tie8
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {07455994-2258-4AE5-8744-00DDBE0B51AA} URL = hxxp://dict.leo.org/esde?lp=esde&search={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {07A34A13-F379-4FED-A1C2-C42359281989} URL = hxxp://suche.t-online.de/fast-cgi/tsc?sr=tportal&q={searchTerms}&dia=tie8
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {3C3B4442-076C-4A08-A3E4-933BBB6B11FE} URL = hxxp://dict.leo.org/ende?lp=ende&search={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://suche.t-online.de/fast-cgi/tsc?sr=tweb&q={searchTerms}&dia=tie8
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {84B78CBA-5069-454F-89A4-3F9EEA8FAB1E} URL = hxxp://dict.leo.org/frde?lp=frde&search={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {A1C6D67B-F5C4-403C-A865-DD6EB6CB7AC7} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag=tonline-browser_toolbar3_search-21&index=blended&linkCode=ur2
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {A4B7EB37-C169-4EFE-8A3C-3A7B7349BB12} URL = hxxp://rover.ebay.com/rover/1/707-1403-42072-3/4?satitle={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {EA80AACC-A779-42C0-9BA8-4FD379D50185} URL = hxxp://preisvergleich.t-online.de/angebote/{searchTerms}?soid=42534758
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-01-14] (Microsoft Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Bing Bar BHO -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll [2010-04-27] (Microsoft Corporation)
Toolbar: HKLM-x32 - @C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll [2010-04-27] (Microsoft Corporation)
Toolbar: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> Kein Name - {2015C8D4-8534-48DB-B5FB-5C76291F080C} -  Keine Datei
IE Session Restore: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> ist aktiviert.

FireFox:
========
FF ProfilePath: C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2016-01-03] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2016-01-03] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\4.0.60129.0\npctrl.dll [2011-01-28] ( Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpWinExt,version=5.0 -> C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll [2010-04-27] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-23] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-23] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\oli\AppData\Roaming\mozilla\plugins\np-mswmp.dll [2009-09-25] (Microsoft Corporation)
FF Extension: Avira Browser Safety - C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\abs@avira.com [2016-01-03]
FF HKLM-x32\...\Firefox\Extensions: [msntoolbar@msn.com] - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\Firefox
FF Extension: Bing Bar - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\Firefox [2014-10-07] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{27182e60-b5f3-411c-b545-b44205977502}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension
FF Extension: Search Helper Extension - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension [2014-10-07] [ist nicht signiert]

Chrome: 
=======
CHR Profile: C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-27]
CHR Extension: (Google Drive) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-03]
CHR Extension: (YouTube) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-03]
CHR Extension: (Google-Suche) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-03]
CHR Extension: (Avira Browserschutz) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-01-03]
CHR Extension: (Google Docs Offline) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-03]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-03]
CHR Extension: (Google Mail) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-21]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

Opera: 
=======
OPR Extension: (ClickMovie1-Downloaderv10) - C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\Extensions\gkookgoofbomddkomagahpnpdcnebnad [2016-01-05]
OPR Extension: (TotalPlus01-3.1V20.09) - C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\Extensions\ljefoakgfhcoeobgicjgejglnpfpemgb [2016-01-05]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-02-04] ()
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG) [Datei ist nicht signiert]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
S3 cpuz134; \??\C:\Users\oli\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S1 zgjmm2f2oxm1bdf; system32\drivers\zgjmm2f2oxm1bdf.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-01-05 10:48 - 2016-01-05 10:49 - 00013851 _____ C:\Users\oli\Desktop\FRST.txt
2016-01-05 10:39 - 2016-01-05 10:47 - 00313557 _____ C:\Users\oli\Desktop\mbam.txt
2016-01-05 09:40 - 2016-01-05 10:43 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-01-05 09:40 - 2016-01-05 10:41 - 00001100 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-01-05 09:40 - 2016-01-05 09:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-01-05 09:40 - 2016-01-05 09:40 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-01-05 09:40 - 2016-01-05 09:40 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-01-05 09:40 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-01-05 09:40 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-01-05 09:40 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-01-05 09:37 - 2016-01-05 09:37 - 00001016 _____ C:\Users\oli\Desktop\AdwCleaner[C2].txt
2016-01-05 09:29 - 2016-01-05 09:30 - 22908888 _____ (Malwarebytes ) C:\Users\oli\Downloads\mbam-setup-2.2.0.1024.exe
2016-01-05 09:24 - 2016-01-05 09:24 - 00033265 _____ C:\Users\oli\Desktop\AdwCleaner[C1].txt
2016-01-05 08:59 - 2016-01-05 09:00 - 01749504 _____ C:\Users\oli\Downloads\adwcleaner_5.028.exe
2016-01-05 08:59 - 2016-01-05 08:59 - 01749504 _____ C:\Users\oli\Downloads\adwcleaner_5.028 (1).exe
2016-01-04 12:45 - 2016-01-04 12:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-01-04 12:13 - 2016-01-04 12:13 - 00028833 _____ C:\Users\oli\Desktop\0104 -Addition.txt
2016-01-04 12:10 - 2016-01-04 12:13 - 00071908 _____ C:\Users\oli\Desktop\0104 - FRST.txt
2016-01-03 14:18 - 2016-01-05 09:35 - 00000000 ____D C:\AdwCleaner
2016-01-03 13:58 - 2016-01-03 13:58 - 00000000 ____D C:\Users\oli\Desktop\RevoUninstallerPortable
2016-01-03 13:56 - 2016-01-03 13:57 - 02785665 _____ (PortableApps.com) C:\Users\oli\Desktop\RevoUninstallerPortable_1.95_Rev_2.paf.exe
2016-01-03 13:51 - 2016-01-03 14:22 - 00000000 ____D C:\Users\oli\AppData\Roaming\Common
2016-01-03 11:25 - 2016-01-03 11:25 - 00040180 _____ C:\Users\oli\Desktop\_Addition.txt
2016-01-03 11:24 - 2016-01-03 14:10 - 00085840 _____ C:\Users\oli\Desktop\_FRST.txt
2016-01-03 11:24 - 2016-01-03 11:24 - 00000000 ____D C:\Users\oli\Desktop\FRST-OlderVersion
2016-01-03 11:23 - 2016-01-05 10:48 - 00000000 ____D C:\FRST
2016-01-03 11:22 - 2016-01-03 11:24 - 02370560 _____ (Farbar) C:\Users\oli\Desktop\FRST64.exe
2016-01-03 11:07 - 2016-01-03 11:07 - 00000000 ____D C:\Users\oli\Desktop\Aktuell
2016-01-03 10:56 - 2015-11-05 20:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-01-03 10:56 - 2015-11-05 20:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-01-03 10:56 - 2015-08-05 18:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-01-03 10:56 - 2015-06-15 22:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-01-03 10:56 - 2015-06-15 22:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-01-03 10:56 - 2015-06-15 22:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-01-03 10:56 - 2015-06-15 22:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-01-03 10:56 - 2015-06-15 22:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2016-01-03 10:56 - 2015-06-15 22:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-01-03 10:56 - 2015-06-15 22:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-01-03 10:56 - 2015-06-15 22:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2016-01-03 10:56 - 2015-06-02 01:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2016-01-03 10:56 - 2015-06-02 00:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2016-01-03 10:56 - 2015-04-29 19:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-01-03 10:56 - 2015-04-29 19:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-01-03 10:56 - 2015-04-29 19:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-01-03 10:56 - 2015-04-29 19:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-01-03 10:56 - 2015-04-29 19:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-01-03 10:56 - 2015-04-29 19:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-01-03 10:56 - 2015-04-29 19:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-01-03 10:56 - 2015-04-29 19:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-01-03 10:56 - 2015-04-29 19:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-01-03 10:56 - 2015-04-29 19:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-01-03 10:55 - 2015-11-03 20:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2016-01-03 10:55 - 2015-11-03 19:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2016-01-03 10:55 - 2015-08-06 19:04 - 14176768 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-01-03 10:55 - 2015-08-06 19:03 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-01-03 10:55 - 2015-08-06 18:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-01-03 10:55 - 2015-08-06 18:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-01-03 10:55 - 2015-07-15 19:15 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-01-03 10:55 - 2015-07-15 19:10 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2016-01-03 10:55 - 2015-07-15 19:10 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2016-01-03 10:55 - 2015-07-10 18:51 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-01-03 10:55 - 2015-07-10 18:51 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2016-01-03 10:55 - 2015-07-10 18:51 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2016-01-03 10:55 - 2015-07-10 18:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-01-03 10:55 - 2015-07-10 18:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2016-01-03 10:55 - 2015-07-10 18:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2016-01-03 10:55 - 2015-05-25 19:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2016-01-03 10:55 - 2015-05-25 19:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2016-01-03 10:55 - 2015-05-25 19:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2016-01-03 10:55 - 2015-05-25 19:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2016-01-03 10:55 - 2015-05-25 19:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2016-01-03 10:55 - 2015-05-25 19:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2016-01-03 10:55 - 2015-05-25 19:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2016-01-03 10:55 - 2015-05-25 19:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2016-01-03 10:55 - 2015-05-25 19:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2016-01-03 10:55 - 2015-05-25 19:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2016-01-03 10:55 - 2015-05-25 19:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2016-01-03 10:55 - 2015-05-25 19:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2016-01-03 10:54 - 2015-11-20 19:54 - 03170304 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 02609152 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 00709632 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-01-03 10:54 - 2015-11-20 19:54 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-01-03 10:54 - 2015-11-20 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-01-03 10:54 - 2015-11-20 19:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-01-03 10:54 - 2015-11-20 19:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-01-03 10:54 - 2015-11-20 19:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-01-03 10:54 - 2015-11-20 19:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-01-03 10:54 - 2015-11-20 19:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-01-03 10:54 - 2015-11-10 19:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-01-03 10:54 - 2015-11-10 19:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-01-03 10:54 - 2015-11-10 19:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-01-03 10:54 - 2015-11-10 19:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2016-01-03 10:54 - 2015-11-10 19:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-01-03 10:54 - 2015-11-10 18:47 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-01-03 10:54 - 2015-07-15 04:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-01-03 10:54 - 2015-07-09 18:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-01-03 10:54 - 2015-07-09 18:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-01-03 10:54 - 2015-07-09 18:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-01-03 10:54 - 2015-07-09 18:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2016-01-03 10:54 - 2015-07-01 21:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2016-01-03 10:54 - 2015-07-01 21:48 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-01-03 10:54 - 2015-07-01 21:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2016-01-03 10:54 - 2015-07-01 21:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2016-01-03 10:54 - 2015-06-17 18:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-01-03 10:54 - 2015-06-17 18:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-01-03 10:53 - 2015-11-05 20:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2016-01-03 10:53 - 2015-11-05 20:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll
2016-01-03 10:53 - 2015-11-05 10:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2016-01-03 10:53 - 2015-10-01 19:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-01-03 10:53 - 2015-10-01 19:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-01-03 10:53 - 2015-10-01 19:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-01-03 10:53 - 2015-10-01 19:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-01-03 10:53 - 2015-10-01 19:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-01-03 10:53 - 2015-10-01 19:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-01-03 10:53 - 2015-10-01 19:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-01-03 10:53 - 2015-10-01 18:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-01-03 10:53 - 2015-10-01 18:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-01-03 10:53 - 2015-09-18 20:22 - 00025432 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-01-03 10:53 - 2015-09-18 20:19 - 01291264 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-01-03 10:53 - 2015-09-18 20:19 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-01-03 10:53 - 2015-09-18 20:19 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-01-03 10:53 - 2015-09-18 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-01-03 10:53 - 2015-09-18 20:19 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-01-03 10:53 - 2015-09-18 20:09 - 01163776 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-01-03 10:53 - 2015-07-04 19:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-01-03 10:53 - 2015-07-04 18:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-01-03 10:53 - 2015-06-03 21:16 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-01-03 10:53 - 2015-04-27 20:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-01-03 10:53 - 2015-04-27 20:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-01-03 10:53 - 2015-04-27 20:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-01-03 10:53 - 2015-04-27 20:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-01-03 10:53 - 2015-04-27 20:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-01-03 10:53 - 2015-04-27 20:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-01-03 10:53 - 2015-04-27 20:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2016-01-03 10:53 - 2015-04-27 20:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2016-01-03 10:53 - 2015-04-24 19:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2016-01-03 10:53 - 2015-04-24 18:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2016-01-03 10:52 - 2015-11-11 19:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-01-03 10:52 - 2015-11-11 19:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2016-01-03 10:52 - 2015-11-11 19:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2016-01-03 10:52 - 2015-11-11 19:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2016-01-03 10:52 - 2015-10-29 18:50 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2016-01-03 10:52 - 2015-10-29 18:50 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2016-01-03 10:52 - 2015-10-29 18:50 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2016-01-03 10:52 - 2015-10-29 18:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2016-01-03 10:52 - 2015-10-29 18:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2016-01-03 10:52 - 2015-10-29 18:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2016-01-03 10:52 - 2015-10-29 18:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2016-01-03 10:52 - 2015-10-20 02:12 - 05570496 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-01-03 10:52 - 2015-10-20 02:12 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-01-03 10:52 - 2015-10-20 02:12 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-01-03 10:52 - 2015-10-20 02:09 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-01-03 10:52 - 2015-10-20 02:06 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-01-03 10:52 - 2015-10-20 02:06 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-01-03 10:52 - 2015-10-20 02:06 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-01-03 10:52 - 2015-10-20 02:06 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-01-03 10:52 - 2015-10-20 02:05 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-01-03 10:52 - 2015-10-20 02:05 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-01-03 10:52 - 2015-10-20 02:04 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-01-03 10:52 - 2015-10-20 02:04 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-01-03 10:52 - 2015-10-20 02:04 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-01-03 10:52 - 2015-10-20 02:00 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-01-03 10:52 - 2015-10-20 01:59 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:52 - 03991488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-01-03 10:52 - 2015-10-20 01:52 - 03935680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-01-03 10:52 - 2015-10-20 01:48 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-01-03 10:52 - 2015-10-20 01:45 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-01-03 10:52 - 2015-10-20 01:44 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-01-03 10:52 - 2015-10-20 01:44 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-01-03 10:52 - 2015-10-20 01:44 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-01-03 10:52 - 2015-10-20 01:44 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-01-03 10:52 - 2015-10-20 01:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-01-03 10:52 - 2015-10-20 01:44 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-01-03 10:52 - 2015-10-20 01:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-01-03 10:52 - 2015-10-20 01:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 00:41 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-01-03 10:52 - 2015-10-20 00:40 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-01-03 10:52 - 2015-10-20 00:40 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-01-03 10:52 - 2015-10-20 00:29 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-01-03 10:52 - 2015-10-20 00:29 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-01-03 10:52 - 2015-10-20 00:27 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 00:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 00:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 00:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-01-03 10:52 - 2015-10-13 17:41 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-01-03 10:52 - 2015-10-13 17:40 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2016-01-03 10:52 - 2015-09-23 14:15 - 00460776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-01-03 10:52 - 2015-09-23 14:15 - 00299632 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-01-03 10:52 - 2015-09-23 14:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-01-03 10:52 - 2015-07-30 19:06 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-01-03 10:52 - 2015-07-30 18:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-01-03 10:51 - 2015-11-11 22:12 - 00387792 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-01-03 10:51 - 2015-11-11 21:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-01-03 10:51 - 2015-11-11 17:21 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-01-03 10:51 - 2015-11-11 17:00 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-01-03 10:51 - 2015-11-11 16:44 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-01-03 10:51 - 2015-11-11 16:44 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-01-03 10:51 - 2015-11-11 16:41 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-01-03 10:51 - 2015-11-11 16:12 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-01-03 10:51 - 2015-11-11 15:57 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-01-03 10:51 - 2015-11-10 01:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-01-03 10:51 - 2015-11-10 01:13 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-01-03 10:51 - 2015-11-10 01:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-01-03 10:51 - 2015-11-10 01:12 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-01-03 10:51 - 2015-11-10 01:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-01-03 10:51 - 2015-11-10 01:11 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-01-03 10:51 - 2015-11-10 01:08 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-01-03 10:51 - 2015-11-10 01:06 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-01-03 10:51 - 2015-11-10 01:06 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-01-03 10:51 - 2015-11-10 01:04 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-01-03 10:51 - 2015-11-10 01:03 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-01-03 10:51 - 2015-11-10 01:02 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-01-03 10:51 - 2015-11-10 01:02 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-01-03 10:51 - 2015-11-10 00:50 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-01-03 10:51 - 2015-11-10 00:47 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-01-03 10:51 - 2015-11-10 00:46 - 04514816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-01-03 10:51 - 2015-11-10 00:44 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-01-03 10:51 - 2015-11-10 00:37 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-01-03 10:51 - 2015-11-10 00:36 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-01-03 10:51 - 2015-11-10 00:36 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-01-03 10:51 - 2015-11-10 00:35 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-01-03 10:51 - 2015-11-10 00:17 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-01-03 10:51 - 2015-11-10 00:14 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-01-03 10:51 - 2015-11-10 00:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-01-03 10:51 - 2015-11-08 23:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-01-03 10:51 - 2015-11-08 23:32 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-01-03 10:51 - 2015-11-08 23:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-01-03 10:51 - 2015-11-08 23:15 - 02887168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-01-03 10:51 - 2015-11-08 23:15 - 00571392 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-01-03 10:51 - 2015-11-08 23:15 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-01-03 10:51 - 2015-11-08 23:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-01-03 10:51 - 2015-11-08 23:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-01-03 10:51 - 2015-11-08 23:07 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-01-03 10:51 - 2015-11-08 23:06 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-01-03 10:51 - 2015-11-08 23:04 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-01-03 10:51 - 2015-11-08 23:02 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-01-03 10:51 - 2015-11-08 23:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-01-03 10:51 - 2015-11-08 23:01 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-01-03 10:51 - 2015-11-08 23:01 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-01-03 10:51 - 2015-11-08 23:01 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-01-03 10:51 - 2015-11-08 22:52 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-01-03 10:51 - 2015-11-08 22:48 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-01-03 10:51 - 2015-11-08 22:40 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-01-03 10:51 - 2015-11-08 22:35 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-01-03 10:51 - 2015-11-08 22:32 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-01-03 10:51 - 2015-11-08 22:29 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-01-03 10:51 - 2015-11-08 22:18 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-01-03 10:51 - 2015-11-08 22:15 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-01-03 10:51 - 2015-11-08 22:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-01-03 10:51 - 2015-11-08 22:14 - 14456832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-01-03 10:51 - 2015-11-08 22:14 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-01-03 10:51 - 2015-11-08 22:13 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-01-03 10:51 - 2015-11-08 21:53 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-01-03 10:51 - 2015-11-08 21:41 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-01-03 10:51 - 2015-11-08 21:30 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-01-03 10:51 - 2015-08-27 19:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-01-03 10:51 - 2015-08-27 19:18 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-01-03 10:51 - 2015-08-27 19:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2016-01-03 10:51 - 2015-08-27 19:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2016-01-03 10:51 - 2015-08-27 18:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2016-01-03 10:51 - 2015-08-27 18:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-01-03 10:51 - 2015-08-27 18:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2016-01-03 10:51 - 2015-08-27 18:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2016-01-03 10:51 - 2015-07-23 01:02 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-01-03 10:51 - 2015-07-23 01:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-01-03 10:51 - 2015-07-23 01:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-01-03 10:51 - 2015-07-22 18:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-01-03 10:51 - 2015-07-22 18:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2016-01-03 10:51 - 2015-07-22 17:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2016-01-03 10:51 - 2015-07-09 18:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2016-01-03 10:51 - 2015-07-09 18:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2016-01-03 10:51 - 2015-07-09 18:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2016-01-03 10:51 - 2015-06-25 11:06 - 00115136 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-01-03 10:51 - 2015-06-25 11:01 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-01-03 10:51 - 2015-06-25 11:01 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-01-03 10:51 - 2015-06-25 10:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-01-03 10:51 - 2015-04-11 04:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2016-01-03 10:49 - 2015-11-03 20:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2016-01-03 10:49 - 2015-11-03 19:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll
2016-01-03 10:49 - 2015-10-13 05:57 - 00950720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-01-03 10:49 - 2015-10-01 19:00 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-01-03 10:49 - 2015-10-01 19:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-01-03 10:49 - 2015-10-01 18:50 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-01-03 10:49 - 2015-09-02 04:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-01-03 10:49 - 2015-09-02 04:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-01-03 10:49 - 2015-09-02 04:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-01-03 10:49 - 2015-09-02 04:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-01-03 10:49 - 2015-09-02 03:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-01-03 10:49 - 2015-09-02 03:48 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-01-03 10:49 - 2015-09-02 03:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-01-03 10:49 - 2015-09-02 03:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-01-03 10:49 - 2015-09-02 02:47 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-01-03 10:49 - 2015-09-02 02:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-12-24 11:44 - 2015-12-24 11:44 - 00000000 ____D C:\Users\oli\AppData\Local\GWX
2015-12-23 18:10 - 2015-12-23 18:10 - 00000000 ____D C:\Windows\pss

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-01-05 10:48 - 2009-07-14 05:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-01-05 10:48 - 2009-07-14 05:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-01-05 10:46 - 2009-07-14 18:58 - 00699666 _____ C:\Windows\system32\perfh007.dat
2016-01-05 10:46 - 2009-07-14 18:58 - 00149774 _____ C:\Windows\system32\perfc007.dat
2016-01-05 10:46 - 2009-07-14 06:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI
2016-01-05 10:46 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-01-05 10:41 - 2014-11-18 12:02 - 00002169 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-01-05 10:41 - 2014-10-07 20:15 - 00001348 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Default Manager.lnk
2016-01-05 10:41 - 2014-10-07 20:15 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk
2016-01-05 10:41 - 2014-09-15 15:08 - 00000997 _____ C:\Users\Public\Desktop\Netzmanager.lnk
2016-01-05 10:41 - 2014-09-08 11:05 - 00001145 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-01-05 10:41 - 2014-09-08 11:05 - 00001053 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-01-05 10:41 - 2014-09-07 19:47 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-01-05 10:41 - 2014-09-07 19:46 - 00001333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-01-05 10:41 - 2009-07-14 05:57 - 00001511 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-01-05 10:41 - 2009-07-14 05:57 - 00001340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
2016-01-05 10:41 - 2009-07-14 05:57 - 00001292 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2016-01-05 10:41 - 2009-07-14 05:57 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2016-01-05 10:41 - 2009-07-14 05:54 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2016-01-05 10:40 - 2014-11-18 12:02 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-05 10:40 - 2014-09-20 17:01 - 00001478 _____ C:\Windows\Tasks\8acd8cfe-0d49-4c23-96a4-cb0ff6208028.job
2016-01-05 10:40 - 2014-09-20 17:00 - 00000644 _____ C:\Windows\Tasks\5ca3d7ee-b3a9-4616-8d61-5908263d6ef2.job
2016-01-05 10:40 - 2014-09-20 16:57 - 00001428 _____ C:\Windows\Tasks\0b2adad4-80dd-4db6-9974-ea67098cfd80.job
2016-01-05 10:40 - 2014-09-20 16:56 - 00000594 _____ C:\Windows\Tasks\c5ae52c4-0626-4df0-b05a-24ca24de9f8a.job
2016-01-05 10:40 - 2014-09-15 15:08 - 00001009 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Netzmanager.lnk
2016-01-05 10:40 - 2014-09-08 11:11 - 00001083 _____ C:\Users\oli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2016-01-05 10:40 - 2014-09-08 11:11 - 00000601 _____ C:\Users\oli\Desktop\Search.lnk
2016-01-05 10:40 - 2014-09-07 20:04 - 00001178 _____ C:\Users\oli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-01-05 10:40 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-01-05 10:40 - 2009-07-14 06:01 - 00001218 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2016-01-05 10:40 - 2009-07-14 05:49 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2016-01-05 10:40 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-01-05 10:38 - 2014-09-13 01:28 - 00000000 ____D C:\Users\oli\AppData\Local\com
2016-01-05 10:38 - 2014-09-08 21:58 - 00000000 ____D C:\Users\oli\AppData\LocalLow\Company
2016-01-05 10:15 - 2014-11-18 12:02 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-05 10:01 - 2014-11-15 13:50 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-01-05 09:23 - 2014-09-08 11:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-01-05 08:40 - 2014-09-08 08:07 - 00003914 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{F24EC260-0E3D-4DA9-9732-FAFB9C26E3E3}
2016-01-05 08:37 - 2014-09-13 06:57 - 00000362 _____ C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - oli).job
2016-01-04 12:14 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2016-01-04 12:13 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2016-01-03 14:22 - 2015-05-21 22:33 - 00000000 ____D C:\Windows\system32\log
2016-01-03 14:22 - 2014-11-18 12:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2016-01-03 13:52 - 2014-11-22 10:51 - 00000000 __SHD C:\Users\oli\AppData\Local\EmieBrowserModeList
2016-01-03 13:52 - 2014-09-13 15:57 - 00000000 __SHD C:\Users\oli\AppData\Local\EmieUserList
2016-01-03 13:52 - 2014-09-13 15:57 - 00000000 __SHD C:\Users\oli\AppData\Local\EmieSiteList
2016-01-03 13:44 - 2009-07-14 05:45 - 00267816 _____ C:\Windows\system32\FNTCACHE.DAT
2016-01-03 13:41 - 2014-12-10 15:16 - 00000000 ____D C:\Windows\system32\appraiser
2016-01-03 13:41 - 2014-09-09 00:15 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-01-03 13:40 - 2015-05-24 15:22 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-01-03 13:40 - 2015-05-24 15:22 - 00000000 ___SD C:\Windows\system32\GWX
2016-01-03 13:40 - 2009-07-14 19:18 - 00000000 ____D C:\Program Files\Windows Journal
2016-01-03 13:23 - 2014-09-08 11:34 - 01594892 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-01-03 13:11 - 2014-09-13 11:19 - 00000000 ____D C:\Windows\system32\MRT
2016-01-03 12:07 - 2014-12-11 16:11 - 00000000 ____D C:\Users\oli\AppData\Local\ElevatedDiagnostics
2016-01-03 11:01 - 2014-11-15 13:50 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-01-03 11:01 - 2014-09-08 09:24 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-01-03 11:01 - 2014-09-08 09:24 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-23 18:08 - 2014-09-08 07:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\T-Online
2015-12-23 18:08 - 2014-09-08 07:51 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-12-23 18:08 - 2014-02-27 13:16 - 00000162 _____ C:\TO_InstallLog.txt
2015-12-23 17:04 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-12-23 17:01 - 2014-10-07 20:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-12-23 17:00 - 2014-10-07 20:14 - 00000000 ____D C:\Program Files (x86)\HP
2015-12-23 17:00 - 2014-10-07 20:12 - 00000000 ____D C:\Users\oli\AppData\Local\HP
2015-12-23 16:10 - 2014-11-18 12:02 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-23 16:10 - 2014-11-18 12:02 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-09-01 09:18 - 2014-09-01 09:18 - 0001248 _____ () C:\Users\oli\AppData\Roaming\BRNIADFR
2014-09-13 07:36 - 2014-09-13 07:36 - 0000046 _____ () C:\Users\oli\AppData\Roaming\WB.CFG
2014-09-01 09:18 - 2014-09-01 09:18 - 0002086 _____ () C:\Users\oli\AppData\Roaming\WN
2014-09-08 11:16 - 2014-09-08 11:16 - 0616240 _____ (ClickMeIn Limited) C:\Users\oli\AppData\Local\nseFDB.tmp
2014-09-08 11:34 - 2014-09-08 11:34 - 0617277 _____ (ClickMeIn Limited) C:\Users\oli\AppData\Local\nsfD3C.tmp
2014-10-02 06:46 - 2014-10-02 06:46 - 0612096 _____ (ClickMeIn Limited) C:\Users\oli\AppData\Local\nsj57B3.tmp
2014-09-14 00:39 - 2014-09-14 00:39 - 0617369 _____ (ClickMeIn Limited) C:\Users\oli\AppData\Local\nswC4D5.tmp

Einige Dateien in TEMP:
====================
C:\Users\oli\AppData\Local\Temp\scp7B5A.tmp.exe
C:\Users\oli\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-01-03 12:00

==================== Ende von FRST.txt ============================

Additions.txt:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:31-12-2015
durchgeführt von oli (2016-01-05 10:49:39)
Gestartet von C:\Users\oli\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2014-09-07 19:03:45)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1335512877-2763367150-1506735299-500 - Administrator - Disabled)
Gast (S-1-5-21-1335512877-2763367150-1506735299-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1335512877-2763367150-1506735299-1002 - Limited - Enabled)
oli (S-1-5-21-1335512877-2763367150-1506735299-1000 - Administrator - Enabled) => C:\Users\oli

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.270 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated)
Bing Bar (HKLM-x32\...\{08234a0d-cf39-4dca-99f0-0c5cb496da81}) (Version: 5.0.1449.0 - Microsoft Corporation)
Bing Bar Platform (x32 Version: 5.0.1449.0 - Microsoft Corporation) Hidden
ClickMovie1-Downloaderv10 (HKLM-x32\...\ClickMovie1-Downloaderv10) (Version: 1.35.9.16 - end)
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
DriverUpdate (HKLM-x32\...\{8AE269B5-4133-4FFC-9896-D718886D7D8F}) (Version: 2.2.43335 - SlimWare Utilities, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
HP Update (HKLM-x32\...\{787D1A33-A97B-4245-87C0-7174609A540C}) (Version: 5.002.005.003 - Hewlett-Packard)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{794E5C90-96E5-4413-B3F5-C803205AE30C}) (Version: 14.0.3000 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.0.1008 - Intel Corporation)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.60129.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 43.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 43.0.1 (x86 de)) (Version: 43.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.1.5828 - Mozilla)
Netzmanager (HKLM-x32\...\Netzmanager) (Version: 1.081 - Deutsche Telekom AG)
Netzmanager (Version: 1.081 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden
Telekom Fotoservice (HKLM-x32\...\Telekom Fotoservice) (Version:  - )
T-Online WLAN-Access Finder (HKLM-x32\...\{295C31E5-3F91-498E-9623-DA24D2FA2B6A}) (Version:  - )
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {1DC36DAC-F5CE-4A27-BB2D-58F023E5F8E9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-03] (Adobe Systems Incorporated)
Task: {2B3EA91F-3627-4829-B1FD-0D07E91D8E82} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {386A60D9-48CA-4BA1-9402-1B54668303EE} - \Sixth -> Keine Datei <==== ACHTUNG
Task: {571D0839-2366-4E6E-82DB-2F5D8A1B0CFC} - \Seventh -> Keine Datei <==== ACHTUNG
Task: {5A40E926-9E86-4B89-9CFD-B12311724371} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {5E614B70-A4A9-4B34-A6FA-66DF8189F1D8} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {7D27A6EF-4194-4940-A6E5-96DC1D949797} - System32\Tasks\5ca3d7ee-b3a9-4616-8d61-5908263d6ef2 => C:\Program Files (x86)\TotalPlus01-3.1V20.09\5ca3d7ee-b3a9-4616-8d61-5908263d6ef2.exe <==== ACHTUNG
Task: {7F1E84D8-1D81-47CD-86E0-3F5A19995112} - System32\Tasks\SlimCleaner Plus (Scheduled Scan - oli) => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe
Task: {938786C3-B2FD-465A-9E80-3FC6E5614821} - System32\Tasks\c5ae52c4-0626-4df0-b05a-24ca24de9f8a => C:\Program Files (x86)\ClickMovie1-Downloaderv10\c5ae52c4-0626-4df0-b05a-24ca24de9f8a.exe <==== ACHTUNG
Task: {975D67BC-5167-4489-B723-2E938C5CCD70} - System32\Tasks\0b2adad4-80dd-4db6-9974-ea67098cfd80 => C:\Program Files (x86)\ClickMovie1-Downloaderv10\0b2adad4-80dd-4db6-9974-ea67098cfd80.exe <==== ACHTUNG
Task: {BAB99CCE-EAAE-43CA-B7E5-5F9EE16A3B10} - System32\Tasks\8acd8cfe-0d49-4c23-96a4-cb0ff6208028 => C:\Program Files (x86)\TotalPlus01-3.1V20.09\8acd8cfe-0d49-4c23-96a4-cb0ff6208028.exe <==== ACHTUNG
Task: {C463872F-8E4C-4EF6-BF6D-9F836C3E690C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-23] (Google Inc.)
Task: {DD9F510C-95F4-499A-90C8-BAC5BC372FF4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask => start sppsvc
Task: {E3DB9353-33AF-45D1-B772-D5162CDC6E6C} - System32\Tasks\{B5148E8A-823B-4075-BBA3-F2737C38A502} => pcalua.exe -a C:\Users\oli\AppData\Roaming\webssearches\UninstallManager.exe -c  -ptid=adks <==== ACHTUNG
Task: {F2E6EB96-5306-4A77-B97C-E4D9AFB9D2B9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-23] (Google Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\0b2adad4-80dd-4db6-9974-ea67098cfd80.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\0b2adad4-80dd-4db6-9974-ea67098cfd80.exeȍ/agentregpath='ClickMovie1-Downloaderv10' /appid=63317 /srcid='001820' /subid='0' /zdata='0' /bic=6EFD957EC0F049FB976A4D50297E1981IE /verifier=2ac813b287711ea764815532be57a214 /installerversion=1_35_09_16 /installationtime=1411228548 /statsdomain=hxxp:/stats.newclientonlinestorage.com /errorsdomain=hxxp:/errors.newclientonlinestorage.com /extensionname='Information' /torpedoiesleeps=1000 /torpedoieplugins=93-0,102-0,104-0,184-0 /monetizationdomain=hxxp:/logs.newclientonlinestorage.com <==== ACHTUNG
Task: C:\Windows\Tasks\5ca3d7ee-b3a9-4616-8d61-5908263d6ef2.job => C:\Program Files (x86)\TotalPlus01-3.1V20.09\5ca3d7ee-b3a9-4616-8d61-5908263d6ef2.exe <==== ACHTUNG
Task: C:\Windows\Tasks\8acd8cfe-0d49-4c23-96a4-cb0ff6208028.job => C:\Program Files (x86)\TotalPlus01-3.1V20.09\8acd8cfe-0d49-4c23-96a4-cb0ff6208028.exeȪ/agentregpath='TotalPlus01-3.1V20.09' /appid=63285 /srcid='002174' /subid='0' /zdata='0' /bic=6EFD957EC0F049FB976A4D50297E1981IE /verifier=2ac813b287711ea764815532be57a214 /installerversion=1_35_09_16 /installationtime=1411228791 /statsdomain=hxxp:/stats.newclientonlinestorage.com /errorsdomain=hxxp:/errors.newclientonlinestorage.com /extensionname='Information' /torpedoiesleeps=1000 /torpedoieplugins=93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 /monetizationdomain=hxxp:/logs.newclientonlinestorage.com <==== ACHTUNG
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\c5ae52c4-0626-4df0-b05a-24ca24de9f8a.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\c5ae52c4-0626-4df0-b05a-24ca24de9f8a.exe <==== ACHTUNG
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - oli).job => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2011-02-04 14:42 - 2011-02-04 14:42 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2011-02-04 14:42 - 2011-02-04 14:42 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2014-01-29 22:02 - 2014-01-29 22:02 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-11-12 21:25 - 2014-11-12 21:25 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\93182e9779b8be0f688fd0784df6d7fb\IsdiInterop.ni.dll
2014-11-12 21:25 - 2010-11-05 23:50 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\oli\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\startupfolder: C:^Users^oli^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^BoostUpdater.lnk => C:\Windows\pss\BoostUpdater.lnk.Startup
MSCONFIG\startupfolder: C:^Users^oli^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Netzmanager.lnk => C:\Windows\pss\Netzmanager.lnk.Startup
MSCONFIG\startupreg: Bing Bar => "C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\mswinext.exe"
MSCONFIG\startupreg: CrashMon => "C:\Program Files (x86)\Universal Updater\CrashMon.exe" "UniversalUpdater" "hxxp://log.data-url.com/crash/"
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
MSCONFIG\startupreg: Microsoft Default Manager => "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
MSCONFIG\startupreg: mwyyntm1ndi1zdz => C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf.exe
MSCONFIG\startupreg: OneMoreGame => C:\Users\oli\AppData\Roaming\OneMoreGame\OMG.exe
MSCONFIG\startupreg: Only-search => C:\Users\oli\AppData\Local\onlysearch\onlysearch\1.3.12.9\onlysearch.exe
MSCONFIG\startupreg: Salus CrashMon => "C:\Program Files (x86)\f552dd4c52e3\a7d12b5975b4.exe" "b786bdb3c67d.exe" "hxxp://log.data-url.com/salus/crash"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{ED8C0EF7-4EBD-48A7-BE9E-CAFFDAF6F337}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [TCP Query User{1B6DF512-096F-4DE8-BBF1-7CB6763EC952}C:\program files\hp\hp deskjet 3050 j610 series\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp deskjet 3050 j610 series\bin\hpnetworkcommunicator.exe
FirewallRules: [UDP Query User{93DC7369-D643-499B-B588-12FF16F9D2CA}C:\program files\hp\hp deskjet 3050 j610 series\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp deskjet 3050 j610 series\bin\hpnetworkcommunicator.exe
FirewallRules: [{C77C91DA-F219-4B61-848C-B47691AC54DD}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{8930BEC1-6FF3-4BFF-B5E1-0EBA834E80E3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{51C30DCA-8B5A-432F-A7AD-6270EC6B1863}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Wiederherstellungspunkte =========================

30-12-2014 21:55:26 Windows Update
21-05-2015 21:43:01 Windows Update
22-05-2015 00:10:56 Windows Update
29-05-2015 12:38:02 Windows Update
23-12-2015 16:59:17 Removed HP Deskjet 3050 J610 series - Grundlegende Software für das Gerät
23-12-2015 17:00:09 Removed HP Deskjet 3050 J610 series - Grundlegende Software für das Gerät
23-12-2015 17:01:01 Removed HP Deskjet 3050 J610 series Hilfe
23-12-2015 17:16:37 Windows Update
23-12-2015 18:06:32 Entfernt T-Online 6.0
23-12-2015 18:08:00 Entfernt T-Online Router Web-IF Management
23-12-2015 18:08:22 Entfernt Marmiko Infrastruktur Informationssystem
03-01-2016 10:22:28 Windows Update
03-01-2016 12:57:11 Windows Update
03-01-2016 14:02:00 Revo Uninstaller's restore point - LPT System Updater Service
03-01-2016 14:03:44 Revo Uninstaller's restore point - Salus
03-01-2016 14:04:32 Revo Uninstaller's restore point - SafeFinder Smartbar

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: USB2.0-CRW
Description: USB2.0-CRW
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: zgjmm2f2oxm1bdf
Description: zgjmm2f2oxm1bdf
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: zgjmm2f2oxm1bdf
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/04/2016 12:25:47 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (01/04/2016 12:13:59 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (01/03/2016 01:51:58 PM) (Source: MsiInstaller) (EventID: 11311) (User: oli-PC)
Description: Produkt: Microsoft Visual C++ 2005 Redistributable -- Error 1311.Die Quelldatei wurde nicht gefunden (CAB-Datei): C:\Users\oli\AppData\Local\Temp\nsi42BC.tmp\vcredis1.cab. Stellen Sie sicher, dass die Datei vorhanden ist, und Sie darauf zugreifen können.

Error: (01/03/2016 01:46:56 PM) (Source: ESENT) (EventID: 215) (User: )
Description: WinMail (4016) WindowsMail0: Die Sicherung wurde abgebrochen, weil sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen wurde.

Error: (01/03/2016 12:06:35 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Volume "(C:)" wurde aufgrund eines Fehlers nicht defragmentiert: Die Startoptimierung konnte aufgrund fehlenden Speicherplatzes nicht abgeschlossen werden. (0x89000019)

Error: (01/03/2016 12:01:35 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (12/23/2015 06:01:37 PM) (Source: NMInfraIS2Svc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. Der Dienstprozess konnte keine Verbindung mit dem Dienstcontroller herstellen

Error: (12/23/2015 05:13:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: msi.dll, Version: 5.0.7601.18637, Zeitstempel: 0x543c864f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000001f1046
ID des fehlerhaften Prozesses: 0x620
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3

Error: (12/23/2015 04:13:30 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (05/27/2015 04:51:19 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.


Systemfehler:
=============
Error: (01/05/2016 10:40:34 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
zgjmm2f2oxm1bdf

Error: (01/05/2016 09:36:47 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
b786bdb3c67d
mwiynzm4ndy1yjz
{9f93bd66-d3d2-427d-b37f-743603e2388d}Gw64
{e6ca9971-30ed-444a-9489-82fca50b2062}Gw64

Error: (01/05/2016 09:35:43 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\Windows\System32\IWMSSvc.dll

Error: (01/05/2016 09:35:43 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\Windows\System32\IWMSSvc.dll

Error: (01/05/2016 09:35:43 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\Windows\System32\IWMSSvc.dll

Error: (01/05/2016 09:35:41 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\Windows\System32\IWMSSvc.dll

Error: (01/05/2016 09:35:22 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/05/2016 09:35:22 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/05/2016 09:35:22 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (01/05/2016 09:35:21 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.


CodeIntegrity:
===================================
  Date: 2015-05-29 13:45:02.399
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-27 17:48:39.309
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-11 04:44:39.271
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-15 07:28:09.250
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-15 07:28:09.079
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-15 07:27:25.406
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-14 04:34:17.568
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-14 04:34:17.444
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-14 04:32:46.894
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-14 04:31:10.676
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i3-2310M CPU @ 2.10GHz
Prozentuale Nutzung des RAM: 51%
Installierter physikalischer RAM: 4003.07 MB
Verfügbarer physikalischer RAM: 1947.58 MB
Summe virtueller Speicher: 8004.35 MB
Verfügbarer virtueller Speicher: 6247.33 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:657.54 GB) (Free:615.67 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: D3AF660C)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=657.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=40 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== Ende von Addition.txt ============================

deeprybka · 05.01.2016, 12:36

Schritt 1

Lade Dir bitte von hier

Emsisoft Emergency Kit herunter.

Bitte installiere das Programm in den vorgegebenen Pfad.
Starte das Programm durch Doppelklick der Desktopverknüpfung.
Das EEK ist nach dem Laden der Malwaresignaturen für den Scan bereit.
Folge nun bitte der bebilderten Bildanleitung zu Emergency Kit, entferne alle Funde und poste am Ende des Scans bzw. der Bereinigung das Log.

Dann bitte Suchscan durchführen:

Schritt 2

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Kespa · 05.01.2016, 14:00

EEK

Code:

ATTFilter

Emsisoft Emergency Kit - Version 10.0
Letztes Update: 05.01.2016 13:15:11
Benutzerkonto: oli-PC\oli

Scan-Einstellungen:

Scan-Methode: Malware-Scan
Objekte: Rootkits, Speicher, Traces, Dateien

PUPs-Erkennung: An
Archiv-Scan: Aus
ADS Scan: An
Dateitypen-Filter: Aus
Erweitertes Caching: An
Direkter Festplattenzugriff: Aus

Scan-Beginn:	05.01.2016 13:16:04
Key: HKEY_USERS\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\SYSTWEAK 	Gefunden: Application.InstallAd (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\SYSTWEAK 	Gefunden: Application.InstallAd (A)
C:\Program Files (x86)\Reimageplus.com\ReimageRepair.exe 	Gefunden: Application.Win32.AdImage (A)
C:\Users\oli\Downloads\Setup(2).exe 	Gefunden: Gen:Variant.Adware.MPlug.6 (B)
C:\Users\oli\Downloads\Setup(3).exe 	Gefunden: Gen:Variant.Adware.MPlug.6 (B)
C:\Windows\TEMP\64CA.tmp 	Gefunden: Adware.Salus.E (B)

Gescannt:	75814
Gefunden	6

Scan-Ende:	05.01.2016 13:20:59
Scan-Zeit:	0:04:55

C:\Windows\TEMP\64CA.tmp	Quarantäne Adware.Salus.E (B)
C:\Users\oli\Downloads\Setup(3).exe	Quarantäne Gen:Variant.Adware.MPlug.6 (B)
C:\Users\oli\Downloads\Setup(2).exe	Quarantäne Gen:Variant.Adware.MPlug.6 (B)
C:\Program Files (x86)\Reimageplus.com\ReimageRepair.exe	Quarantäne Application.Win32.AdImage (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\SYSTWEAK	Quarantäne Application.InstallAd (A)
Key: HKEY_USERS\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\SYSTWEAK	Quarantäne Application.InstallAd (A)

Quarantäne	6

ESET

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=a9fabc66d235a54191960adf6c210cdc
# end=init
# utc_time=2016-01-05 12:24:13
# local_time=2016-01-05 01:24:13 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 27498
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=a9fabc66d235a54191960adf6c210cdc
# end=updated
# utc_time=2016-01-05 12:30:03
# local_time=2016-01-05 01:30:03 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=a9fabc66d235a54191960adf6c210cdc
# engine=27498
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-01-05 12:55:49
# local_time=2016-01-05 01:55:49 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 9719 203628399 0 0
# scanned=58061
# found=241
# cleaned=0
# scan_time=1545
sh=7F565E75F767D9396B51B3C31980A3DD6417EADA ft=1 fh=32eff618aa934b27 vn="Win32/Bundlore.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\84ad2f64-0af1-4858-aed2-0197de84f192\InstallerHelper.dll"
sh=2225C3CC341DAC8EF611500BB83CE1FF4E004606 ft=0 fh=0000000000000000 vn="Win32/Toolbar.Perion.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\V-bates\Firefox\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.xpi.vir"
sh=45760277E0015ED76F91F3CE08E10E9E6E37777F ft=0 fh=0000000000000000 vn="Win32/Toolbar.Perion.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\V-bates\Firefox\chrome\content\main.js.vir"
sh=47270D297631320F4AD6232371DDB238F233CA14 ft=1 fh=35478c342751157c vn="Win32/Adware.PricePeep.C Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Boost\Boost.dll.vir"
sh=5BC816F6746772550442DF5EF61AEBF65462EAE2 ft=1 fh=c71c0011342b22c0 vn="Win32/Verti.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Boost\BoostUpdater.exe.vir"
sh=FDDD9609CCEA97458D45A7AA537D45086E9FECE8 ft=1 fh=259c844864940078 vn="Variante von Win32/Adware.PricePeep.D Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Boost\unutil.exe.vir"
sh=02E1E58BE25BC656589C5DC5AF311B9F2E5EA6E2 ft=1 fh=a94b1d23b6435b2a vn="Win32/Toolbar.Iminent.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\IMGUpdater\IMGUpdater.exe.vir"
sh=BFDCAB806E715797BDD645F00137F2CC4A79D2DA ft=1 fh=a99a530d6a085ec3 vn="Variante von Win32/Toolbar.Iminent.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\Umbrella\Umbrella186.exe.vir"
sh=EF9324ABE9787A69256CBD1ADFBE7226F502826E ft=1 fh=c71c001135290155 vn="Variante von Win32/AdWare.EoRezo.AU Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\gmsd_de_002020193\gamesdesktop_widget.exe.vir"
sh=379F7072B4952838C49AAB60293AE94534549C9A ft=1 fh=77788cdf773596d6 vn="Variante von Win32/AdWare.EoRezo.AU Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\gmsd_de_002020193\gmsd_de_002020193.exe.vir"
sh=4AFEA95DCA122E625FBE660B29C52F14EA1355F1 ft=1 fh=2dada1fe2fa96d5d vn="Variante von Win32/Adware.EoRezo.BG Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\gmsd_de_002020193\predm.exe.vir"
sh=7273E36A86F5307149F15F49CC34ABA844352C09 ft=1 fh=4f2611e7a6ea53b1 vn="Variante von Win32/Solimba.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\GUPlayer\GUPlayerUninstaller.exe.vir"
sh=D9F26FCBBBA055E4374EDF64F6C7BCD4942F581F ft=1 fh=8b668a84318495f3 vn="Variante von Win32/TrojanDropper.Addrop.J Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Hades\HadesUninstaller.exe.vir"
sh=099AD47C0CB4A1631F82DDDFDD2FA0748583EA3C ft=1 fh=655a69e65c515ff9 vn="Variante von MSIL/Toolbar.Linkury.X evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\ProxySettings.dll.vir"
sh=4DCDB12CAA8B25F6170F5D10522B700D9DF75CBE ft=1 fh=114f266a992ff31a vn="Variante von MSIL/Toolbar.Linkury.W evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\Smartbar.Communication.NamedPipe.dll.vir"
sh=97B6D947E35B423985AFD32FE89DDC072E2AC311 ft=1 fh=3c2440d3bd4ab053 vn="Variante von MSIL/Toolbar.Linkury.T evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\Smartbar.Infrastructure.Utilities.dll.vir"
sh=7F55F0BDF9198C07107A5C331DAF1FD0B2D68BDB ft=1 fh=40df201e40390e46 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\Smartbar.Resources.HistoryAndStatsWrapper.dll.vir"
sh=E68DCB63009C34ED0CD18C27BB75ACC6F874D5F1 ft=1 fh=2b77b74c14af1e74 vn="Variante von MSIL/Toolbar.Linkury.M.gen evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\smia.exe.vir"
sh=8FD2056DB5BF4A94D99EA6DD4CD3D2AB6CD4072E ft=1 fh=10853221854d359e vn="Variante von MSIL/Toolbar.Linkury.M.gen evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\smia64.exe.vir"
sh=AD1BF4CF62786788C0440C060BCFBCA0A06A3188 ft=1 fh=a16c06f51dd861fe vn="Variante von MSIL/Toolbar.Linkury.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\sppsm.dll.vir"
sh=DDE17349886FC1A7D13E8D0F41D6A4CE5A394D01 ft=1 fh=c9bce873ebed2a5f vn="Variante von MSIL/Toolbar.Linkury.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\spusm.dll.vir"
sh=C7ACB89F4541A3F65D5CFE90B9004C6BFEC2C8FA ft=1 fh=9e66ceb26218c551 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\srbs.dll.vir"
sh=365C989B6D16813485BF98A9FC23F385FABEBE6F ft=1 fh=f5cd7bde99e36769 vn="Variante von MSIL/Toolbar.Linkury.V evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\sreu.dll.vir"
sh=542C70B56113D6CB5A2FD51DAFA02FB3FDEE1917 ft=1 fh=9bb68e157a308082 vn="Variante von MSIL/Toolbar.Linkury.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\srptc.dll.vir"
sh=CAC81BC6D405B3ED430BC84EF4B4EA80FFF71011 ft=1 fh=c45ae4f8cd472c10 vn="Variante von MSIL/Toolbar.Linkury.U evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\srptm.exe.vir"
sh=542BFF23509A0078717DA1C3533BB01D2A50ADF4 ft=1 fh=bcc46a7eca536e19 vn="Variante von MSIL/Toolbar.Linkury.M.gen evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\srut.dll.vir"
sh=EAA7FBD7E32FB503CC9464F030951587EF704877 ft=1 fh=7e474c56fa83f5bb vn="Variante von Win32/Toolbar.Linkury.P evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\Resources\crdli.dll.vir"
sh=B7540634C6C8B40269F0E597C30A693A332C74D9 ft=1 fh=867f7b8e3f241a66 vn="Variante von Win64/Toolbar.Linkury.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\Resources\crdli64.dll.vir"
sh=01FDD6337015D3FFF6A88EFB560169238172A572 ft=1 fh=6a5bf868087548ad vn="Variante von Win32/Toolbar.Linkury.O evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\Resources\crdliL.dll.vir"
sh=827BABFD4DD95A1E2B20F6C04B221CBFC25D49D6 ft=1 fh=e52d10822f527b5e vn="Variante von Win32/Toolbar.Linkury.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\Resources\ntdis_32.dll.vir"
sh=10A12FA897B32ECE8962A4BE61D61FAE9F0528B9 ft=1 fh=a5fd307b2a7d5c6f vn="Variante von Win64/Toolbar.Linkury.A.gen evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\Resources\ntdis_64.dll.vir"
sh=D911EB5507070609F9FC2392B495B9B20A3BB30F ft=1 fh=4c0bdf77751f2704 vn="Win32/Adware.Loadshop.C Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\PCTRunner\MyOSProtect.dll.vir"
sh=F91AADF2E65A4AE53F5002BB4A8E933ACAEF7B31 ft=1 fh=e17135eee6cb0126 vn="Win32/Adware.Loadshop.D Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\PCTRunner\MyOSProtect.exe.vir"
sh=85BA05E45279215B6BFD53A3E5C3830692D64845 ft=1 fh=a53a27a527ff292c vn="Win64/Adware.Loadshop.C Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\PCTRunner\MyOSProtect64.dll.vir"
sh=C2E1C31E2E1FFCA5AA4EB341F50353EBC39F728D ft=1 fh=dbb833ddf89b2378 vn="Win64/Adware.Loadshop.D Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\PCTRunner\pcwtc64f.sys.vir"
sh=1862E7F50BF013ACB2CE17E71E3D76E81A93CB00 ft=1 fh=98786c141e62063a vn="Win64/Adware.Loadshop.E Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\PCTRunner\pcwtc64r.sys.vir"
sh=A8A25383F8F16E2337D1664E0055BD2B9DDA687D ft=1 fh=295c78733579e7ab vn="Win32/AdWare.Loadshop.G Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\PCTRunner\postcollect.exe.vir"
sh=EAFFBE73877C256957F085F048A5F26015B4F44D ft=1 fh=486104c11900e37c vn="Win32/AdWare.Loadshop.G Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\PCTRunner\precollect.exe.vir"
sh=A9E2E3401E2A6FD5B09535EE83FE2D70AC48C2A9 ft=1 fh=77c22f362384d262 vn="Win32/Adware.Loadshop.F Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\PCTRunner\WDCertInstaller.dll.vir"
sh=B96F413ECF27F83CDDC947BF506716F8EFFEDEDA ft=1 fh=af8a8b02d94ff9fc vn="Variante von MSIL/Solimba.AI evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\PCTRunner\WPUninstall.exe.vir"
sh=53F226B3D1D3828304E40C6C7A50667ADF23B42A ft=1 fh=e1ea10a5e9416a5c vn="Win32/Thinknice.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterface32.dll.vir"
sh=0CB68F399D491465198E3E86F1D2923A211614E7 ft=1 fh=021f675753f993f2 vn="Win64/Thinknice.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterface64.dll.vir"
sh=86EA851108D635D9ED47C01E86899845DFDA3EC7 ft=1 fh=90733a3b10b3e858 vn="Variante von Win32/Thinknice.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\HpUI.exe.vir"
sh=12EBF6FC8AD543662053CA101C2D5DA175137EB2 ft=1 fh=c71c00119e5c1a87 vn="Win32/Thinknice.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\Loader32.exe.vir"
sh=8F0ABE23DDA3F9DC04497B1A4F455AF8CE9D45B8 ft=1 fh=787e176d56997de7 vn="Win64/Thinknice.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\Loader64.exe.vir"
sh=30E2FB1C671B2808D2E80518D793575965AF2416 ft=1 fh=d06e6f3f3f60e357 vn="Variante von Win32/Thinknice.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SearchProtect32.dll.vir"
sh=AC11914CC02E023E2EF06A80DEE1701419A5473A ft=1 fh=4cb2d0bd10147652 vn="Win64/Thinknice.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SearchProtect64.dll.vir"
sh=D037F58CF4B36F3B437FAA0D9500720445B27D65 ft=1 fh=b07c7921935b766c vn="Win32/Thinknice.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SupTab.dll.vir"
sh=79C9BD304C93AB8FD0544108656A899993DB14EF ft=1 fh=e6f80544d6e8089f vn="Win32/Thinknice.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\WindowsSupportDll32.dll.vir"
sh=96B85214CD9E4FF85AC6144E7EF3DDF9E0F215E6 ft=1 fh=098a6735f96a550a vn="Win64/Thinknice.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\WindowsSupportDll64.dll.vir"
sh=AB03071F22A96D4C3A12B18C89A78C3714C9DB1C ft=1 fh=c71c00110fe042ba vn="Variante von Win32/Adware.Salus.B Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Universal Updater\CrashMon.exe.vir"
sh=E7ED6F563D6DAE7FC5977C9BB7AFAD4D021FC114 ft=1 fh=5d690bccd3a9e886 vn="Variante von Win32/Adware.Salus.B Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Universal Updater\UpdaterService.exe.vir"
sh=339D50038B81803A3F445A60C3A9E0E02204C6E9 ft=1 fh=6807eb825de49320 vn="Variante von Win64/Adware.AddLyrics.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\ver4BlockAndSurf\x64\TandemRunner.exe.vir"
sh=246DDBC3A2C223A6B9072637D93DC2A2832D097A ft=1 fh=c71c0011b04f613a vn="Win32/Toolbar.Babylon.Y evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\DSearchLink\DSearchLink.exe.vir"
sh=85557FC754151A1371EB741DF87EC79FE350061B ft=1 fh=35589fbcfb02c71e vn="Variante von Win32/Adware.EoRezo.AJ Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\gmsd_de_002020193\upgmsd_de_002020193.exe.vir"
sh=A410C842C32A36AF967572C50DA55ADA87C91C6D ft=1 fh=6ed76e754a026e1a vn="Mehrere Bedrohungen" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\gmsd_de_002020193\Download\myoffergroup_de.exe.vir"
sh=27F3722103AE0B59E452584BAC372AF8753ACD00 ft=1 fh=1e0c2baa3d38a164 vn="Variante von Win32/Toolbar.SearchSuite.U evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Linkey\IEExtension\iedll64.dll.vir"
sh=099AD47C0CB4A1631F82DDDFDD2FA0748583EA3C ft=1 fh=655a69e65c515ff9 vn="Variante von MSIL/Toolbar.Linkury.X evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\LPT\ProxySettings.dll.vir"
sh=4DCDB12CAA8B25F6170F5D10522B700D9DF75CBE ft=1 fh=114f266a992ff31a vn="Variante von MSIL/Toolbar.Linkury.W evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\LPT\Smartbar.Communication.NamedPipe.dll.vir"
sh=97B6D947E35B423985AFD32FE89DDC072E2AC311 ft=1 fh=3c2440d3bd4ab053 vn="Variante von MSIL/Toolbar.Linkury.T evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\LPT\Smartbar.Infrastructure.Utilities.dll.vir"
sh=7F55F0BDF9198C07107A5C331DAF1FD0B2D68BDB ft=1 fh=40df201e40390e46 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\LPT\Smartbar.Resources.HistoryAndStatsWrapper.dll.vir"
sh=E68DCB63009C34ED0CD18C27BB75ACC6F874D5F1 ft=1 fh=2b77b74c14af1e74 vn="Variante von MSIL/Toolbar.Linkury.M.gen evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\LPT\smia.exe.vir"
sh=8FD2056DB5BF4A94D99EA6DD4CD3D2AB6CD4072E ft=1 fh=10853221854d359e vn="Variante von MSIL/Toolbar.Linkury.M.gen evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\LPT\smia64.exe.vir"
sh=AD1BF4CF62786788C0440C060BCFBCA0A06A3188 ft=1 fh=a16c06f51dd861fe vn="Variante von MSIL/Toolbar.Linkury.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\LPT\sppsm.dll.vir"
sh=DDE17349886FC1A7D13E8D0F41D6A4CE5A394D01 ft=1 fh=c9bce873ebed2a5f vn="Variante von MSIL/Toolbar.Linkury.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\LPT\spusm.dll.vir"
sh=C7ACB89F4541A3F65D5CFE90B9004C6BFEC2C8FA ft=1 fh=9e66ceb26218c551 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\LPT\srbs.dll.vir"
sh=365C989B6D16813485BF98A9FC23F385FABEBE6F ft=1 fh=f5cd7bde99e36769 vn="Variante von MSIL/Toolbar.Linkury.V evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\LPT\sreu.dll.vir"
sh=542C70B56113D6CB5A2FD51DAFA02FB3FDEE1917 ft=1 fh=9bb68e157a308082 vn="Variante von MSIL/Toolbar.Linkury.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\LPT\srptc.dll.vir"
sh=CAC81BC6D405B3ED430BC84EF4B4EA80FFF71011 ft=1 fh=c45ae4f8cd472c10 vn="Variante von MSIL/Toolbar.Linkury.U evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\LPT\srptm.exe.vir"
sh=542BFF23509A0078717DA1C3533BB01D2A50ADF4 ft=1 fh=bcc46a7eca536e19 vn="Variante von MSIL/Toolbar.Linkury.M.gen evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\LPT\srut.dll.vir"
sh=EAA7FBD7E32FB503CC9464F030951587EF704877 ft=1 fh=7e474c56fa83f5bb vn="Variante von Win32/Toolbar.Linkury.P evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\LPT\Resources\crdli.dll.vir"
sh=B7540634C6C8B40269F0E597C30A693A332C74D9 ft=1 fh=867f7b8e3f241a66 vn="Variante von Win64/Toolbar.Linkury.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\LPT\Resources\crdli64.dll.vir"
sh=01FDD6337015D3FFF6A88EFB560169238172A572 ft=1 fh=6a5bf868087548ad vn="Variante von Win32/Toolbar.Linkury.O evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\LPT\Resources\crdlil.dll.vir"
sh=827BABFD4DD95A1E2B20F6C04B221CBFC25D49D6 ft=1 fh=e52d10822f527b5e vn="Variante von Win32/Toolbar.Linkury.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\LPT\Resources\ntdis_32.dll.vir"
sh=10A12FA897B32ECE8962A4BE61D61FAE9F0528B9 ft=1 fh=a5fd307b2a7d5c6f vn="Variante von Win64/Toolbar.Linkury.A.gen evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\LPT\Resources\ntdis_64.dll.vir"
sh=D69DCE3EFFC917E840B820D140B9AAA35DC877F3 ft=1 fh=63f4745b2e16658e vn="Variante von Win32/Toolbar.Montiera.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\onlysearch\onlysearch\1.3.12.9\onlysearch.exe.vir"
sh=B259A9B9B4BE9F714DF89106D353513B4EDB0D78 ft=1 fh=f8ef9f638f298490 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\Lrcnta.exe.vir"
sh=099AD47C0CB4A1631F82DDDFDD2FA0748583EA3C ft=1 fh=655a69e65c515ff9 vn="Variante von MSIL/Toolbar.Linkury.X evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\ProxySettings.dll.vir"
sh=97F243A9C02155043C23EB9E293F28AEDDCED127 ft=1 fh=7266b663a9222398 vn="Variante von MSIL/Toolbar.Linkury.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\SafeFinder.exe.unused.vir"
sh=4DCDB12CAA8B25F6170F5D10522B700D9DF75CBE ft=1 fh=114f266a992ff31a vn="Variante von MSIL/Toolbar.Linkury.W evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\Smartbar.Communication.NamedPipe.dll.vir"
sh=523424D24873E554CC99425A0609253D04FBDB69 ft=1 fh=d3aa5d56d6e88a20 vn="Variante von MSIL/Toolbar.Linkury.AC evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll.vir"
sh=76339CB4808A6710D8F3C27F9464A12C747D8CE6 ft=1 fh=6d4ff84f4f55cb2a vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll.unused.vir"
sh=9818852155BE1FBA2A79872E288E48BD5B5D7723 ft=1 fh=11c5a62bdc4db8c3 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll.vir"
sh=F880295AD6F6E90581D5825AED0928996F5F0BA0 ft=1 fh=1365f8f7ecc23391 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.ChromeLocalPlugin.dll.vir"
sh=582C48D29D09295762D1C1B049297950B135FA5A ft=1 fh=11b4d20cba3fe116 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.FireFoxLocalPlugin.dll.vir"
sh=59E1FE7C101FBDF3923628E22853AA35C04C26D1 ft=1 fh=6bb8a9007483b828 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll.vir"
sh=97B6D947E35B423985AFD32FE89DDC072E2AC311 ft=1 fh=3c2440d3bd4ab053 vn="Variante von MSIL/Toolbar.Linkury.T evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll.vir"
sh=7F55F0BDF9198C07107A5C331DAF1FD0B2D68BDB ft=1 fh=40df201e40390e46 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll.vir"
sh=B0312E8AF5F085D4D7C4AC12A6C902CD3ACB799E ft=1 fh=1042727feb7509bb vn="Variante von MSIL/Toolbar.Linkury.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\SmartbarInternetExplorerExtension.dll.vir"
sh=B0312E8AF5F085D4D7C4AC12A6C902CD3ACB799E ft=1 fh=1042727feb7509bb vn="Variante von MSIL/Toolbar.Linkury.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\SmartbarInternetExplorerExtension2.dll.vir"
sh=8FD2056DB5BF4A94D99EA6DD4CD3D2AB6CD4072E ft=1 fh=10853221854d359e vn="Variante von MSIL/Toolbar.Linkury.M.gen evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\smia64.exe.vir"
sh=33224B3D1BBA5C2CE24A4E34DDC2C790D8E9A31C ft=1 fh=ead666245e64cdff vn="Variante von MSIL/Toolbar.Linkury.M.gen evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\smsp.dll.vir"
sh=BEDFB3D29E373B74434F03C20C729E573298437C ft=1 fh=38e22b291e012044 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\smta.dll.vir"
sh=445CE2C35CFA3E69223C6FBC4977BB71EA44C1B6 ft=1 fh=50756c2b03e83e74 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\smtu.dll.vir"
sh=6F2CF5D559C132552216BBAB4A7EAD039B3C354B ft=1 fh=d33429d7807f71d3 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\spbe.dll.vir"
sh=C5C79E290675D5661CCA2EAB9EE78EC7D2796046 ft=1 fh=810b3e2dfb050ba2 vn="Variante von MSIL/Toolbar.Linkury.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\spbl.dll.vir"
sh=AD1BF4CF62786788C0440C060BCFBCA0A06A3188 ft=1 fh=a16c06f51dd861fe vn="Variante von MSIL/Toolbar.Linkury.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\sppsm.dll.vir"
sh=DDE17349886FC1A7D13E8D0F41D6A4CE5A394D01 ft=1 fh=c9bce873ebed2a5f vn="Variante von MSIL/Toolbar.Linkury.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\spusm.dll.vir"
sh=C7ACB89F4541A3F65D5CFE90B9004C6BFEC2C8FA ft=1 fh=9e66ceb26218c551 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\srbs.dll.vir"
sh=365C989B6D16813485BF98A9FC23F385FABEBE6F ft=1 fh=f5cd7bde99e36769 vn="Variante von MSIL/Toolbar.Linkury.V evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\sreu.dll.vir"
sh=1A08E05B5A128B54699B0F9E01F1555C73723657 ft=1 fh=ea33e6a58b6d597e vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\srpu.dll.vir"
sh=542BFF23509A0078717DA1C3533BB01D2A50ADF4 ft=1 fh=bcc46a7eca536e19 vn="Variante von MSIL/Toolbar.Linkury.M.gen evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\srut.dll.vir"
sh=70511E1DC237B11EB2DA47764E2F58D66884A8D4 ft=1 fh=8926dceffb73a01c vn="Win32/Toolbar.Linkury.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\GoogleChromeRemotePlugin.dll.vir"
sh=857CC3345A3822AF53B1929B8A2BBCF72BB1391E ft=1 fh=acc9f12da781c207 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_26.dll.vir"
sh=0414957AE0D2B342AB58CA7C0DEB191EB252F689 ft=1 fh=513fca58ac50a90d vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_27.dll.vir"
sh=2A78FC37034AA9C58B1B2D47929D23620D62C657 ft=1 fh=3d7c65ead160cf01 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_28.dll.vir"
sh=D0E111B46081B7F29F5F97BBD27826BE7FF2D100 ft=1 fh=8fb3d533241ad012 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_29.dll.vir"
sh=DA8A32C2FC62802F155C7B8DC2B3DFBB58672098 ft=1 fh=6e51ce951b902f0d vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_30.dll.vir"
sh=FA63E2B986E0D6F5312E74B7AFFF49030529B199 ft=1 fh=5eb8c17bce0f839a vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_31.dll.vir"
sh=EAA7FBD7E32FB503CC9464F030951587EF704877 ft=1 fh=7e474c56fa83f5bb vn="Variante von Win32/Toolbar.Linkury.P evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\Resources\crdli.dll.tmp.vir"
sh=352FEEF409CBE5A1E9E141FF3ED10973FDDE0BEF ft=1 fh=e46e9e7fffe02575 vn="Variante von Win32/Toolbar.Linkury.P evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\Resources\crdli.dll.vir"
sh=B7540634C6C8B40269F0E597C30A693A332C74D9 ft=1 fh=867f7b8e3f241a66 vn="Variante von Win64/Toolbar.Linkury.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\Resources\crdli64.dll.tmp.vir"
sh=20BEA6C3838A6722DD77645E7F7078E7FFDFC87B ft=1 fh=f7550168cf5bb87a vn="Variante von Win64/Toolbar.Linkury.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\Resources\crdli64.dll.vir"
sh=01FDD6337015D3FFF6A88EFB560169238172A572 ft=1 fh=6a5bf868087548ad vn="Variante von Win32/Toolbar.Linkury.O evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\Resources\crdlil.dll.tmp.vir"
sh=D5F1695D5B190DC9C3349A2A7659B9E0780849A1 ft=1 fh=79fe5bc84778d475 vn="Variante von Win32/Toolbar.Linkury.O evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Application\Resources\crdlil.dll.vir"
sh=C513E316EE88ED66F7EA1A44BD889C89B1860E0D ft=1 fh=001996f75051ad99 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.SafeMode.dll.vir"
sh=012C3673A031A6A8B0E235F85FF5C291AB0A3C07 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\chrome\content\core\624f7957195428316ffccbafdd3ce0d5.js.vir"
sh=FA14CDEDC3BCBCB1C8B8487D47BE1E628A930503 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\102.js.vir"
sh=5870A2008A4D2AA3E9D79945311CD6F59D37CD45 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\119.js.vir"
sh=F4868E75E21D37FCBC9A5871B6B120EB3E4600DF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.O evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\14.js.vir"
sh=C10E64DC01896B43B0C89F53376D4164453BC74E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\178.js.vir"
sh=9CB942D538CEA821683BC9D832014E8EC5FDE2EC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\179.js.vir"
sh=4198553BD16F5172607C3E1B68BD3B8E16FDF018 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\180.js.vir"
sh=0987FB3F0C956A9578B1C3D050189BB99A017FC2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\184.js.vir"
sh=73BB348077DE54C373977A1CCE42FD9735E85D29 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\195.js.vir"
sh=4BCC541E7A14BF89B1633A1BC794E6848B831E80 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\200.js.vir"
sh=81093FDBF2F59E6D00BA4DACA51E6D37F185678F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\220.js.vir"
sh=4A456E8397DFF5CBB4FF25D8B9710C41A42AFCC3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\223.js.vir"
sh=877349BAD187BE3A07174EA0A6F16A375474C639 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\231.js.vir"
sh=776290247C80F20D24E4BA8F99F13F2D5578ECC8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\232.js.vir"
sh=BEB05642C41381F387B0C8BE3BD0E336A89DB84E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\246.js.vir"
sh=3CA5653E6B858F15992AC689F06C8456A94B0CC7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\253.js.vir"
sh=C7CDE1253534F30E65119C426D5345ED57905D37 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\262.js.vir"
sh=F07F02D132DE7A3F89F9CEE7284820DB1DD63331 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\263.js.vir"
sh=C7574CAC8611C5FBBE4AE2127C4CA0E2FB58DB69 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\273.js.vir"
sh=5443843013D026E8A114EDEC837671DAC84F4AEA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\281.js.vir"
sh=397EC598B400D3A2111C9C0EEA7D85464774BBD7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\288.js.vir"
sh=35E8D6275113D6714473490A116CF414F6AA6368 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\311.js.vir"
sh=F830C45582EA30AA81037DD511D6657BAC6D3470 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\335.js.vir"
sh=DAFE26CC2D17C59CC7CA0B0563A50C6215781167 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\339.js.vir"
sh=C00E9E37985FB8EEA7FAC9D9DBB4EACC33326771 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\356.js.vir"
sh=F8801F7B5F1A2C68EEE91424D184B91646441A66 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\376.js.vir"
sh=81A6DC2B3E4EB2A7B58E592A3E86C0C858936E87 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\380.js.vir"
sh=46785AF9F3FDFD7BA7E68C918CA9B2BFD5FE81CE ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\385.js.vir"
sh=8C03AF269B9B3748482016ABD7F8FDF2BE562177 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\390.js.vir"
sh=B11A64AE212C15C25C435BCE4C67235DDECCE883 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\391.js.vir"
sh=E09BDEE66594192511CE81A0841BB11D294BFCBD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.M evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\47.js.vir"
sh=BDCFA8379825B1BC17A13BDF73B7384DE46E7C3B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.P evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\64.js.vir"
sh=150239E3DECF8DCACAE3E6113265D65B89C975E4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com\extensionData\plugins\91.js.vir"
sh=1E380A2D4B4138B280EE3063C0F9B0558C131271 ft=0 fh=0000000000000000 vn="JS/Trackware.Agent.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\detgdp@gmail.com\chrome\content\js\epurls.js.vir"
sh=8B414057414E369B9B99B5DE95F198A1DA5E182C ft=0 fh=0000000000000000 vn="JS/Trackware.Agent.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\detgdp@gmail.com\chrome\content\js\inject.js.vir"
sh=E03313D9745E13EB9EB3D7083BC2AF578DD21C8A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\chrome\content\core\92bceed7b609b7293a0e14228015ec3d.js.vir"
sh=FA14CDEDC3BCBCB1C8B8487D47BE1E628A930503 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\102.js.vir"
sh=F4868E75E21D37FCBC9A5871B6B120EB3E4600DF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.O evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\14.js.vir"
sh=C10E64DC01896B43B0C89F53376D4164453BC74E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\178.js.vir"
sh=03FAFFAEC2C19510609FD6AC54708695526684BD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\180.js.vir"
sh=D32F1ACB798069165CC6A76227F4B6D068932895 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\193.js.vir"
sh=73BB348077DE54C373977A1CCE42FD9735E85D29 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\195.js.vir"
sh=81093FDBF2F59E6D00BA4DACA51E6D37F185678F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\220.js.vir"
sh=4A456E8397DFF5CBB4FF25D8B9710C41A42AFCC3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\223.js.vir"
sh=ECFA5CA5F49B77A8A30BFEF14AF08218E56431D8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\226.js.vir"
sh=F3C19FB08E08EEDA6008DFA8175DEDEA51DE1BFA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\234.js.vir"
sh=BEB05642C41381F387B0C8BE3BD0E336A89DB84E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\246.js.vir"
sh=3CA5653E6B858F15992AC689F06C8456A94B0CC7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\253.js.vir"
sh=C7574CAC8611C5FBBE4AE2127C4CA0E2FB58DB69 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\273.js.vir"
sh=5443843013D026E8A114EDEC837671DAC84F4AEA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\281.js.vir"
sh=397EC598B400D3A2111C9C0EEA7D85464774BBD7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\288.js.vir"
sh=4DD920343E943C18C7E0E2C7740F04A16B893E6B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\376.js.vir"
sh=46785AF9F3FDFD7BA7E68C918CA9B2BFD5FE81CE ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\385.js.vir"
sh=8C03AF269B9B3748482016ABD7F8FDF2BE562177 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\390.js.vir"
sh=B11A64AE212C15C25C435BCE4C67235DDECCE883 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\391.js.vir"
sh=E09BDEE66594192511CE81A0841BB11D294BFCBD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.M evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\47.js.vir"
sh=BDCFA8379825B1BC17A13BDF73B7384DE46E7C3B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.P evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\64.js.vir"
sh=150239E3DECF8DCACAE3E6113265D65B89C975E4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins\91.js.vir"
sh=4526D2E07820E49046044C25B80181095374411D ft=1 fh=95c1e49a3c3afa53 vn="Variante von Win32/Adware.Snoozer.H Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Seventh\Seventh.exe.vir"
sh=AEC5CEEA1E3BAFFF40A3DF707E13C27545206B15 ft=1 fh=253fcbd38c96410e vn="Mehrere Bedrohungen" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Sixth\Sixth.exe.vir"
sh=1A278C9611A807BB4319B4DBC0CC28D5B61139E2 ft=1 fh=dc9029d19ecf454f vn="Win32/Systweak.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\oli\AppData\Roaming\Systweak\ssd\SSDPTstub.exe.vir"
sh=85BA05E45279215B6BFD53A3E5C3830692D64845 ft=1 fh=a53a27a527ff292c vn="Win64/Adware.Loadshop.C Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\SysNative\MyOSProtect64.dll.vir"
sh=169A8414194C6FA02C871275B7AA987C031EC89A ft=1 fh=962d78ee385e317a vn="Variante von Win64/Systweak.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\SysNative\roboot64.exe.vir"
sh=81DE1EA0B225AB32DBB486CCE709F0B4AC0EE303 ft=1 fh=7f428a0351cd4637 vn="Variante von Win64/BrowseFox.BW evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\SysNative\drivers\{9f93bd66-d3d2-427d-b37f-743603e2388d}Gw64.sys.vir"
sh=4ADE980B3CFEB2A6B873E80CCCFD5F51BAA4940B ft=1 fh=9778d4a5f345eb40 vn="Variante von Win64/BrowseFox.BN evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\SysNative\drivers\{e6ca9971-30ed-444a-9489-82fca50b2062}Gw64.sys.vir"
sh=D911EB5507070609F9FC2392B495B9B20A3BB30F ft=1 fh=4c0bdf77751f2704 vn="Win32/Adware.Loadshop.C Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\SysWOW64\MyOSProtect.dll.vir"
sh=5EF7173E18406A01541703C64860FC4408CAEA37 ft=1 fh=ef56464ad28f9db3 vn="Win32/VOPackage.BC evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\nseFDB.tmp"
sh=8F667E4BC84FCBF0AC3ED22CFB7A69C660E7CC43 ft=1 fh=52851530cf4d2746 vn="Win32/VOPackage.BC evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\nsfD3C.tmp"
sh=554E4AF7A7651EDD4874D77E3AD8DF12055C87ED ft=1 fh=5717880fec7bff93 vn="Win32/VOPackage.BC evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\nsj57B3.tmp"
sh=FAACEA5E04C2482C5AC74F78443A869B735B3E4A ft=1 fh=d350ef7e01424d49 vn="Win32/VOPackage.BC evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\nswC4D5.tmp"
sh=604985C1C7443134E74C8755F8F4C1BA4812D1E6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\09C0104E376ED9FF3DD8B10F396C0D345A28DB8D"
sh=1A318DB32882A38B81D4F4275C277C040BA5CFF8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\0A51141EE05BF6E3C66DBBC70336167D820456EA"
sh=2F815349929E48373AF0FDD7CD9AE6CB48089F04 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\0EEDA791C0D92ABF5D60645DBADA9D24BF5AC089"
sh=9BB091D53A30D6BAD3A5CEFDD2FE2B0F65B4F895 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\138BCA9D5AF22B5EE5D3AE0694A8233A6782990C"
sh=7DF5A12FA587E2F1198D56B4B9B93E2CF0C9DC6A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\19DC87886778297F5A8C48305B419AAD25BA3FC7"
sh=18278CB6E6BB45FAFB0AB22C208CB2B04E746BA3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\233E34504C5DE1255EAF1DA9A73274D3494EB133"
sh=295CA13317658A9ADCAA21B257F8DCD0F9D324EC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\2723AD5C68EDEACC86DCEE5475368AAEE6441A01"
sh=E7AB84AE9D84B41F4B8DF65C2FE666ED0ED74224 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\2D67A63E57417061CF077710555418C63DBC0716"
sh=818A644504C7BB308D00673CB8D571986C73DED6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\3774B39D0FB56C4C23D60CE8248DEA7B6676C330"
sh=F0913F53D1F9E0830B83B62751A792C79BB4A5DF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\3F2615C7160B1512C7C408438B0D7F149932BC67"
sh=FA9C65447F22BF6369E2ECAC1B09442BD8927E6D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\40935D18A0FE2E1DD0E029EC5FDCBC655AC3D9F0"
sh=610D44043BF2230CF10594A95D753DC59D6339BD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\466455400912D18D91807C5433D91BD9BE6EFD9A"
sh=7B6AE899370832BDDC7151D209BB0890E9A8C913 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\4897A8EF4D086A81B9FA962BD1003305B5EF7BD1"
sh=AC004F0CDF5D0F186D01C7C8700A76E87E12E791 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\497C0EF22A97685F9424D9EBF047F895846E5BF0"
sh=83B2DE24DECEE15159911415E3056E473A125E7E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\4C89F79737BF3651E155C1F0540EB26431A13C41"
sh=8B42989DD848980F63F54E442109D4C70C4F2387 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\5173E21F534208AF3550BDD9ED165401BC2C9EEC"
sh=84BC9D4B6BDD6CD91658308EA415377E273313D9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\5DCAEC5BDBE98C27238A7D83B59B8BAE65B4993B"
sh=186E82DA894666A15CD6992D108A4FB3A899A5AA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\5EE009643452B74D40A2DEE7CE9A87216C76F090"
sh=75C4C6272CDDFF13DC50E85C913C7FCC7387E1D3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\6B2BF6CDCFE2F59B27170450D532553638C8D594"
sh=BB5F117EC2D83626FEB752629DD37B27E665F26C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\797C59DDFB8EC4D9CCD7574F9D6BC0F0BAFBEBF4"
sh=99E8D32A7301FECC2911A2A2BE471267C3405796 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\84D33115032628342E641503F2C1AD7EDC3419CE"
sh=FB520DADD7EF656175D83D3C16C55FC03A7720B8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\9FAA796B9AA79C7152C295A7EF0317B607A1F30A"
sh=7E4A04D081CF8877C8C29ADE1436DBD8DB12B94E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\AA364157C0EF331497770A2D4BFA927247C53BBC"
sh=4881B77C611DACACEE24EE22FC09D261876B2CC7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\AA8DC832D9AA2B72DC49EE4F2E723E6B081898A4"
sh=8BD3F16ABE27F003EF1FD7015D1222C00B533696 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\B32C4C825BE69B8310CF77717067EE8EEECDF44A"
sh=C135C2A3E4169DC6B336DDA2BD08BB221099BA47 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\B336873D194BA542ADE28064173D451BAAB8174C"
sh=62D03C312238307ABCA6BE304B2CA23B93C7572D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\B8D2CF960FB93E6256E341BD5961CD3D794A0DBD"
sh=5C9AEFCA6FB8352C868EAD788AE61E1673F3949B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\BE20564E9B581FA46B216E12D90A87D19AE56761"
sh=84AF160B7D8BF23B812E5C64A94A08842B43EFB1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\C209BC4E8A81095F8E334BDE2A49162050F33DDA"
sh=9302BE7F3CB815F64E2C8CCE3CBD5CA9F557046F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\C4D5A5797768336BEEA292A58574B545D89E47F1"
sh=CC8C9FAB1623DA1F87D67DF7D2A19D2034199BAF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\CE512546A2D893B3F128E10D9AAFD1A349EA9C4D"
sh=3623C5B146AAC9E902F780A5C2122199A7522AF5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\D1942EE25CDD27A69A552FF7202328B91E716BD2"
sh=DD090E8411FDFE0F6C8F1269BEBA75CFDDA9735A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\D5795A85849723B4B191BCF4AAA835B178582B72"
sh=6DDD97C2A8C91086D67CAEEC35CF9C7E01147B47 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\DC6F5BCE40E341956A9BF53E4A21596AA78EF75D"
sh=EFE130F9422AEEB021A84C591608ED972FC9DF12 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\DDFBCD91AD34DD1A5441B418398018F6014B7DEB"
sh=2C465FC4674E41CD2FAE0A7B092EA659C73C2F22 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\E3351720D475CBC23C704151C0890791BB0E5958"
sh=C392F3D1AA7CC39F75BB90434E610429612A0652 ft=0 fh=0000000000000000 vn="JS/Trackware.Agent.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\E36A497F7D6382B6299E95FE29E4FE27AD29B188"
sh=D52F7A16353C5C24C9869011A39972A8C0F9D9CE ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\EC3A74F08A3408E1491205B30DEF1F4B776C6238"
sh=BD884237AB5C3738BB5E7F79ED6D3B5BC9A9CE70 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\ED7ABAD0782A62D6C3DEACBD8DE0A274E4545D14"
sh=56E7FF8A1EA6B456985B1D12EB54DEDE759BB458 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\EF0B92444FE23007ED0C6FB1BEB031B3952305C0"
sh=C9E72F326242E8A46A66F176285CACDEE1A5F380 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\F31F8D23D60F96EF13C00B63A0C641AD7985EEBD"
sh=660ADE11CDB1512E20289AC225CA453BC6A98AD1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\F3883E3AC87E375E4CA4218F62042EA746625385"
sh=B9123162DFBA5AD9A2186BC3D72899E51CF1F93D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\F48E56FF1A261B5079C38BCC567536E1B8A4CE73"
sh=AAB676CEEED513CB7BC5FE3B44A4F6DA06B4B510 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\F6FD747CDDBD57DF81FF4D6ED38BDC6B02B5C8AA"
sh=3B32E1AF866460428F981C2C8E963AB16899E5F3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\F7F0C072D837C21B7378AEFD3D30BE58698D17E8"
sh=B1B784E965464273B5A9495FD7E36FEE10C3FF2C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\FBA7BDF4D2CD1D17420CEF4AF9C866ED1BE133B1"
sh=F758F3094E6FB43F18ACBFD8FDDD0FF333E03E37 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Mozilla\Firefox\Profiles\lacjp1kp.default\cache2\entries\FE3B6EFABE7FC665BAE20D676867620197350850"
sh=7270314BABE9CDD95C2D66464F570585CF38AD56 ft=1 fh=fd26318bda2fe5d5 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\oli\AppData\Local\Temp\is-Q6JHS.tmp\gentlemjmp_ieu.exe"
sh=007200F5C438B9B4554E3439F80E710CC4E5D0D2 ft=1 fh=097e2cd8366093e9 vn="Variante von Win32/ELEX.BU evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Temp\st5B59.tmp\st6559.tmp\eUpgrade\eupgrade.exe"
sh=709AB7FFAA2FB9679DC6414D4B624C1B8C1BA223 ft=1 fh=806f3166a97ab50f vn="Win32/ELEX.FP evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Temp\st5B59.tmp\st6559.tmp\OmigaZip_patch\dup.exe"
sh=55A61FBF8A70A2BD9AF09FA2135F116B9004B4A0 ft=1 fh=d88cd852aa366f9c vn="Variante von Win32/ELEX.BU evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Temp\st5B59.tmp\st6559.tmp\OmigaZip_patch\eUninstall.exe"
sh=6B87415E46F39FAB92FE8B9277C14FA46600A756 ft=1 fh=3ffa91700ce54de0 vn="Variante von Win32/ELEX.BR evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Temp\st5B59.tmp\st6559.tmp\OmigaZip_patch\TrayDownloader.exe"
sh=078B1093C02B3E7E325A033A59527E72DF057898 ft=1 fh=74589f1191474bd8 vn="Variante von Win32/ELEX.CK evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Local\Temp\st5B59.tmp\st6559.tmp\OmigaZip_patch\winzipersvc.exe"
sh=DDD7E789E67132CF6C5D8169B2F46E3498FCA60F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Roaming\BRNIADFR"
sh=9413821E4285C46DAF48156B472065FC2D763FE8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\oli\AppData\Roaming\WN"
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=a9fabc66d235a54191960adf6c210cdc
# end=init
# utc_time=2016-01-05 12:57:50
# local_time=2016-01-05 01:57:50 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1

deeprybka · 05.01.2016, 21:34

Gibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?

Kespa · 08.01.2016, 15:53

Der Rechner läuft seit 3 Tagen ohne Probleme

Vielen Dank schonmal Jürgen!

Ich hoffe das war es!

deeprybka · 08.01.2016, 17:52

OK, poste bitte nochmal frische Logs, dnámit wir fertig werden...

Schritt 1

Bitte starte FRST erneut, markiere auch die checkbox

und drücke auf Untersuchen.
Bitte poste mir den Inhalt der beiden Logs die erstellt werden.

Kespa · 08.01.2016, 18:39

FRST:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:31-12-2015
durchgeführt von oli (Administrator) auf OLI-PC (08-01-2016 18:26:00)
Gestartet von C:\Users\oli\Desktop
Geladene Profile: oli (Verfügbare Profile: oli)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: IE)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_20_0_0_267.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_20_0_0_267.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2011-02-04] (Intel(R) Corporation)
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-18\...\Run: [AviraSpeedup] => "C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup.exe" -autorun
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-09-09] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei
CHR HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{555AEA56-8BDF-4D13-913C-1F8EAFB2D65B}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130962973552149474&GUID=00000000-0000-0000-0000-000000000000
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130962973552305474&GUID=00000000-0000-0000-0000-000000000000
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130962973558389485&GUID=00000000-0000-0000-0000-000000000000
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130962973558389485&GUID=00000000-0000-0000-0000-000000000000
HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130962973557453484&GUID=00000000-0000-0000-0000-000000000000
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {CC865B26-C31D-4D23-B17B-96548EEF03F6} URL = 
SearchScopes: HKLM-x32 -> DefaultScope Wert fehlt
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2498} URL = 
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {02E47D68-8EA7-4F7A-AB03-257EE8CF60E3} URL = hxxp://suche.t-online.de/fast-cgi/tsc?sr=twiki&q={searchTerms}&dia=tie8
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {07455994-2258-4AE5-8744-00DDBE0B51AA} URL = hxxp://dict.leo.org/esde?lp=esde&search={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {07A34A13-F379-4FED-A1C2-C42359281989} URL = hxxp://suche.t-online.de/fast-cgi/tsc?sr=tportal&q={searchTerms}&dia=tie8
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {3C3B4442-076C-4A08-A3E4-933BBB6B11FE} URL = hxxp://dict.leo.org/ende?lp=ende&search={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://suche.t-online.de/fast-cgi/tsc?sr=tweb&q={searchTerms}&dia=tie8
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {84B78CBA-5069-454F-89A4-3F9EEA8FAB1E} URL = hxxp://dict.leo.org/frde?lp=frde&search={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {A1C6D67B-F5C4-403C-A865-DD6EB6CB7AC7} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag=tonline-browser_toolbar3_search-21&index=blended&linkCode=ur2
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {A4B7EB37-C169-4EFE-8A3C-3A7B7349BB12} URL = hxxp://rover.ebay.com/rover/1/707-1403-42072-3/4?satitle={searchTerms}
SearchScopes: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> {EA80AACC-A779-42C0-9BA8-4FD379D50185} URL = hxxp://preisvergleich.t-online.de/angebote/{searchTerms}?soid=42534758
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-01-14] (Microsoft Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Bing Bar BHO -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll [2010-04-27] (Microsoft Corporation)
Toolbar: HKLM-x32 - @C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll [2010-04-27] (Microsoft Corporation)
Toolbar: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> Kein Name - {2015C8D4-8534-48DB-B5FB-5C76291F080C} -  Keine Datei
IE Session Restore: HKU\S-1-5-21-1335512877-2763367150-1506735299-1000 -> ist aktiviert.

FireFox:
========
FF ProfilePath: C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2016-01-03] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2016-01-03] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\4.0.60129.0\npctrl.dll [2011-01-28] ( Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpWinExt,version=5.0 -> C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll [2010-04-27] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-23] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-23] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\oli\AppData\Roaming\mozilla\plugins\np-mswmp.dll [2009-09-25] (Microsoft Corporation)
FF Extension: Avira Browser Safety - C:\Users\oli\AppData\Roaming\Mozilla\Firefox\Profiles\lacjp1kp.default\Extensions\abs@avira.com [2016-01-03]
FF HKLM-x32\...\Firefox\Extensions: [msntoolbar@msn.com] - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\Firefox
FF Extension: Bing Bar - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\Firefox [2014-10-07] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{27182e60-b5f3-411c-b545-b44205977502}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension
FF Extension: Search Helper Extension - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension [2014-10-07] [ist nicht signiert]

Chrome: 
=======
CHR Profile: C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-27]
CHR Extension: (Google Drive) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-03]
CHR Extension: (YouTube) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-03]
CHR Extension: (Google-Suche) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-03]
CHR Extension: (Avira Browserschutz) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-01-03]
CHR Extension: (Google Docs Offline) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-03]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-03]
CHR Extension: (Google Mail) - C:\Users\oli\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-21]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

Opera: 
=======
OPR Extension: (ClickMovie1-Downloaderv10) - C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\Extensions\gkookgoofbomddkomagahpnpdcnebnad [2016-01-05]
OPR Extension: (TotalPlus01-3.1V20.09) - C:\Users\oli\AppData\Roaming\Opera Software\Opera Stable\Extensions\ljefoakgfhcoeobgicjgejglnpfpemgb [2016-01-05]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-02-04] ()
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG) [Datei ist nicht signiert]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R4 epp64; C:\EEK\bin\epp64.sys [136456 2016-01-05] (Emsisoft GmbH)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
S3 cpuz134; \??\C:\Users\oli\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S1 zgjmm2f2oxm1bdf; system32\drivers\zgjmm2f2oxm1bdf.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-01-05 13:13 - 2016-01-05 13:13 - 00000718 _____ C:\Users\oli\Desktop\Start Emsisoft Emergency Kit.lnk
2016-01-05 13:12 - 2016-01-05 13:13 - 00000000 ____D C:\EEK
2016-01-05 12:42 - 2016-01-05 12:51 - 273332680 _____ C:\Users\oli\Downloads\EmsisoftEmergencyKit.exe
2016-01-05 12:42 - 2016-01-05 12:42 - 02870984 _____ (ESET) C:\Users\oli\Downloads\esetsmartinstaller_deu.exe
2016-01-05 10:48 - 2016-01-08 18:26 - 00014158 _____ C:\Users\oli\Desktop\FRST.txt
2016-01-05 09:40 - 2016-01-05 10:43 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-01-05 09:40 - 2016-01-05 10:41 - 00001100 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-01-05 09:40 - 2016-01-05 09:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-01-05 09:40 - 2016-01-05 09:40 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-01-05 09:40 - 2016-01-05 09:40 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-01-05 09:40 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-01-05 09:40 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-01-05 09:40 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-01-05 09:29 - 2016-01-05 09:30 - 22908888 _____ (Malwarebytes ) C:\Users\oli\Downloads\mbam-setup-2.2.0.1024.exe
2016-01-05 08:59 - 2016-01-05 09:00 - 01749504 _____ C:\Users\oli\Downloads\adwcleaner_5.028.exe
2016-01-05 08:59 - 2016-01-05 08:59 - 01749504 _____ C:\Users\oli\Downloads\adwcleaner_5.028 (1).exe
2016-01-04 12:45 - 2016-01-08 15:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-01-03 14:18 - 2016-01-05 09:35 - 00000000 ____D C:\AdwCleaner
2016-01-03 13:58 - 2016-01-03 13:58 - 00000000 ____D C:\Users\oli\Desktop\RevoUninstallerPortable
2016-01-03 13:56 - 2016-01-03 13:57 - 02785665 _____ (PortableApps.com) C:\Users\oli\Desktop\RevoUninstallerPortable_1.95_Rev_2.paf.exe
2016-01-03 13:51 - 2016-01-03 14:22 - 00000000 ____D C:\Users\oli\AppData\Roaming\Common
2016-01-03 11:24 - 2016-01-03 11:24 - 00000000 ____D C:\Users\oli\Desktop\FRST-OlderVersion
2016-01-03 11:23 - 2016-01-08 18:26 - 00000000 ____D C:\FRST
2016-01-03 11:22 - 2016-01-03 11:24 - 02370560 _____ (Farbar) C:\Users\oli\Desktop\FRST64.exe
2016-01-03 11:07 - 2016-01-08 18:25 - 00000000 ____D C:\Users\oli\Desktop\Aktuell
2016-01-03 10:56 - 2015-11-05 20:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-01-03 10:56 - 2015-11-05 20:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-01-03 10:56 - 2015-08-05 18:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-01-03 10:56 - 2015-06-15 22:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-01-03 10:56 - 2015-06-15 22:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-01-03 10:56 - 2015-06-15 22:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-01-03 10:56 - 2015-06-15 22:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-01-03 10:56 - 2015-06-15 22:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2016-01-03 10:56 - 2015-06-15 22:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-01-03 10:56 - 2015-06-15 22:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-01-03 10:56 - 2015-06-15 22:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2016-01-03 10:56 - 2015-06-02 01:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2016-01-03 10:56 - 2015-06-02 00:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2016-01-03 10:56 - 2015-04-29 19:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-01-03 10:56 - 2015-04-29 19:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-01-03 10:56 - 2015-04-29 19:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-01-03 10:56 - 2015-04-29 19:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-01-03 10:56 - 2015-04-29 19:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-01-03 10:56 - 2015-04-29 19:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-01-03 10:56 - 2015-04-29 19:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-01-03 10:56 - 2015-04-29 19:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-01-03 10:56 - 2015-04-29 19:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-01-03 10:56 - 2015-04-29 19:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-01-03 10:55 - 2015-11-03 20:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2016-01-03 10:55 - 2015-11-03 19:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2016-01-03 10:55 - 2015-08-06 19:04 - 14176768 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-01-03 10:55 - 2015-08-06 19:03 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-01-03 10:55 - 2015-08-06 18:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-01-03 10:55 - 2015-08-06 18:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-01-03 10:55 - 2015-07-15 19:15 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-01-03 10:55 - 2015-07-15 19:10 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2016-01-03 10:55 - 2015-07-15 19:10 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2016-01-03 10:55 - 2015-07-10 18:51 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-01-03 10:55 - 2015-07-10 18:51 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2016-01-03 10:55 - 2015-07-10 18:51 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2016-01-03 10:55 - 2015-07-10 18:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-01-03 10:55 - 2015-07-10 18:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2016-01-03 10:55 - 2015-07-10 18:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2016-01-03 10:55 - 2015-05-25 19:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2016-01-03 10:55 - 2015-05-25 19:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2016-01-03 10:55 - 2015-05-25 19:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2016-01-03 10:55 - 2015-05-25 19:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2016-01-03 10:55 - 2015-05-25 19:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2016-01-03 10:55 - 2015-05-25 19:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2016-01-03 10:55 - 2015-05-25 19:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2016-01-03 10:55 - 2015-05-25 19:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2016-01-03 10:55 - 2015-05-25 19:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2016-01-03 10:55 - 2015-05-25 19:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2016-01-03 10:55 - 2015-05-25 19:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2016-01-03 10:55 - 2015-05-25 19:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2016-01-03 10:54 - 2015-11-20 19:54 - 03170304 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 02609152 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 00709632 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-01-03 10:54 - 2015-11-20 19:54 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-01-03 10:54 - 2015-11-20 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-01-03 10:54 - 2015-11-20 19:54 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-01-03 10:54 - 2015-11-20 19:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-01-03 10:54 - 2015-11-20 19:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-01-03 10:54 - 2015-11-20 19:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-01-03 10:54 - 2015-11-20 19:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-01-03 10:54 - 2015-11-20 19:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-01-03 10:54 - 2015-11-10 19:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-01-03 10:54 - 2015-11-10 19:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-01-03 10:54 - 2015-11-10 19:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-01-03 10:54 - 2015-11-10 19:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2016-01-03 10:54 - 2015-11-10 19:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-01-03 10:54 - 2015-11-10 18:47 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-01-03 10:54 - 2015-07-15 04:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-01-03 10:54 - 2015-07-09 18:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-01-03 10:54 - 2015-07-09 18:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-01-03 10:54 - 2015-07-09 18:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-01-03 10:54 - 2015-07-09 18:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2016-01-03 10:54 - 2015-07-01 21:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2016-01-03 10:54 - 2015-07-01 21:48 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-01-03 10:54 - 2015-07-01 21:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2016-01-03 10:54 - 2015-07-01 21:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2016-01-03 10:54 - 2015-06-17 18:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-01-03 10:54 - 2015-06-17 18:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-01-03 10:53 - 2015-11-05 20:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2016-01-03 10:53 - 2015-11-05 20:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll
2016-01-03 10:53 - 2015-11-05 10:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2016-01-03 10:53 - 2015-10-01 19:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-01-03 10:53 - 2015-10-01 19:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-01-03 10:53 - 2015-10-01 19:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-01-03 10:53 - 2015-10-01 19:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-01-03 10:53 - 2015-10-01 19:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-01-03 10:53 - 2015-10-01 19:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-01-03 10:53 - 2015-10-01 19:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-01-03 10:53 - 2015-10-01 18:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-01-03 10:53 - 2015-10-01 18:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-01-03 10:53 - 2015-09-18 20:22 - 00025432 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-01-03 10:53 - 2015-09-18 20:19 - 01291264 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-01-03 10:53 - 2015-09-18 20:19 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-01-03 10:53 - 2015-09-18 20:19 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-01-03 10:53 - 2015-09-18 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-01-03 10:53 - 2015-09-18 20:19 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-01-03 10:53 - 2015-09-18 20:09 - 01163776 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-01-03 10:53 - 2015-07-04 19:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-01-03 10:53 - 2015-07-04 18:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-01-03 10:53 - 2015-06-03 21:16 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-01-03 10:53 - 2015-04-27 20:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-01-03 10:53 - 2015-04-27 20:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-01-03 10:53 - 2015-04-27 20:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-01-03 10:53 - 2015-04-27 20:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-01-03 10:53 - 2015-04-27 20:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-01-03 10:53 - 2015-04-27 20:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-01-03 10:53 - 2015-04-27 20:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2016-01-03 10:53 - 2015-04-27 20:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2016-01-03 10:53 - 2015-04-24 19:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2016-01-03 10:53 - 2015-04-24 18:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2016-01-03 10:52 - 2015-11-11 19:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-01-03 10:52 - 2015-11-11 19:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2016-01-03 10:52 - 2015-11-11 19:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2016-01-03 10:52 - 2015-11-11 19:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2016-01-03 10:52 - 2015-10-29 18:50 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2016-01-03 10:52 - 2015-10-29 18:50 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2016-01-03 10:52 - 2015-10-29 18:50 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2016-01-03 10:52 - 2015-10-29 18:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2016-01-03 10:52 - 2015-10-29 18:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2016-01-03 10:52 - 2015-10-29 18:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2016-01-03 10:52 - 2015-10-29 18:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2016-01-03 10:52 - 2015-10-20 02:12 - 05570496 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-01-03 10:52 - 2015-10-20 02:12 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-01-03 10:52 - 2015-10-20 02:12 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-01-03 10:52 - 2015-10-20 02:09 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-01-03 10:52 - 2015-10-20 02:06 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-01-03 10:52 - 2015-10-20 02:06 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-01-03 10:52 - 2015-10-20 02:06 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-01-03 10:52 - 2015-10-20 02:06 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-01-03 10:52 - 2015-10-20 02:05 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-01-03 10:52 - 2015-10-20 02:05 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-01-03 10:52 - 2015-10-20 02:05 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-01-03 10:52 - 2015-10-20 02:04 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-01-03 10:52 - 2015-10-20 02:04 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-01-03 10:52 - 2015-10-20 02:04 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-01-03 10:52 - 2015-10-20 02:00 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-01-03 10:52 - 2015-10-20 01:59 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:52 - 03991488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-01-03 10:52 - 2015-10-20 01:52 - 03935680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-01-03 10:52 - 2015-10-20 01:48 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-01-03 10:52 - 2015-10-20 01:45 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-01-03 10:52 - 2015-10-20 01:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-01-03 10:52 - 2015-10-20 01:44 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-01-03 10:52 - 2015-10-20 01:44 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-01-03 10:52 - 2015-10-20 01:44 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-01-03 10:52 - 2015-10-20 01:44 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-01-03 10:52 - 2015-10-20 01:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-01-03 10:52 - 2015-10-20 01:44 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-01-03 10:52 - 2015-10-20 01:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-01-03 10:52 - 2015-10-20 01:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 00:41 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-01-03 10:52 - 2015-10-20 00:40 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-01-03 10:52 - 2015-10-20 00:40 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-01-03 10:52 - 2015-10-20 00:29 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-01-03 10:52 - 2015-10-20 00:29 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-01-03 10:52 - 2015-10-20 00:27 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 00:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 00:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-01-03 10:52 - 2015-10-20 00:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-01-03 10:52 - 2015-10-13 17:41 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-01-03 10:52 - 2015-10-13 17:40 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2016-01-03 10:52 - 2015-09-23 14:15 - 00460776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-01-03 10:52 - 2015-09-23 14:15 - 00299632 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-01-03 10:52 - 2015-09-23 14:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-01-03 10:52 - 2015-07-30 19:06 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-01-03 10:52 - 2015-07-30 18:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-01-03 10:52 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-01-03 10:51 - 2015-11-11 22:12 - 00387792 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-01-03 10:51 - 2015-11-11 21:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-01-03 10:51 - 2015-11-11 17:21 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-01-03 10:51 - 2015-11-11 17:00 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-01-03 10:51 - 2015-11-11 16:44 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-01-03 10:51 - 2015-11-11 16:44 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-01-03 10:51 - 2015-11-11 16:41 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-01-03 10:51 - 2015-11-11 16:12 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-01-03 10:51 - 2015-11-11 15:57 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-01-03 10:51 - 2015-11-10 01:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-01-03 10:51 - 2015-11-10 01:13 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-01-03 10:51 - 2015-11-10 01:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-01-03 10:51 - 2015-11-10 01:12 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-01-03 10:51 - 2015-11-10 01:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-01-03 10:51 - 2015-11-10 01:11 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-01-03 10:51 - 2015-11-10 01:08 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-01-03 10:51 - 2015-11-10 01:06 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-01-03 10:51 - 2015-11-10 01:06 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-01-03 10:51 - 2015-11-10 01:04 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-01-03 10:51 - 2015-11-10 01:03 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-01-03 10:51 - 2015-11-10 01:02 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-01-03 10:51 - 2015-11-10 01:02 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-01-03 10:51 - 2015-11-10 00:50 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-01-03 10:51 - 2015-11-10 00:47 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-01-03 10:51 - 2015-11-10 00:46 - 04514816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-01-03 10:51 - 2015-11-10 00:44 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-01-03 10:51 - 2015-11-10 00:37 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-01-03 10:51 - 2015-11-10 00:36 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-01-03 10:51 - 2015-11-10 00:36 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-01-03 10:51 - 2015-11-10 00:35 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-01-03 10:51 - 2015-11-10 00:17 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-01-03 10:51 - 2015-11-10 00:14 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-01-03 10:51 - 2015-11-10 00:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-01-03 10:51 - 2015-11-08 23:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-01-03 10:51 - 2015-11-08 23:32 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-01-03 10:51 - 2015-11-08 23:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-01-03 10:51 - 2015-11-08 23:15 - 02887168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-01-03 10:51 - 2015-11-08 23:15 - 00571392 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-01-03 10:51 - 2015-11-08 23:15 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-01-03 10:51 - 2015-11-08 23:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-01-03 10:51 - 2015-11-08 23:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-01-03 10:51 - 2015-11-08 23:07 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-01-03 10:51 - 2015-11-08 23:06 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-01-03 10:51 - 2015-11-08 23:04 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-01-03 10:51 - 2015-11-08 23:02 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-01-03 10:51 - 2015-11-08 23:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-01-03 10:51 - 2015-11-08 23:01 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-01-03 10:51 - 2015-11-08 23:01 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-01-03 10:51 - 2015-11-08 23:01 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-01-03 10:51 - 2015-11-08 22:52 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-01-03 10:51 - 2015-11-08 22:48 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-01-03 10:51 - 2015-11-08 22:40 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-01-03 10:51 - 2015-11-08 22:35 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-01-03 10:51 - 2015-11-08 22:32 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-01-03 10:51 - 2015-11-08 22:29 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-01-03 10:51 - 2015-11-08 22:18 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-01-03 10:51 - 2015-11-08 22:15 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-01-03 10:51 - 2015-11-08 22:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-01-03 10:51 - 2015-11-08 22:14 - 14456832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-01-03 10:51 - 2015-11-08 22:14 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-01-03 10:51 - 2015-11-08 22:13 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-01-03 10:51 - 2015-11-08 21:53 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-01-03 10:51 - 2015-11-08 21:41 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-01-03 10:51 - 2015-11-08 21:30 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-01-03 10:51 - 2015-08-27 19:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-01-03 10:51 - 2015-08-27 19:18 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-01-03 10:51 - 2015-08-27 19:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2016-01-03 10:51 - 2015-08-27 19:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2016-01-03 10:51 - 2015-08-27 18:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2016-01-03 10:51 - 2015-08-27 18:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-01-03 10:51 - 2015-08-27 18:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2016-01-03 10:51 - 2015-08-27 18:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2016-01-03 10:51 - 2015-07-23 01:02 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-01-03 10:51 - 2015-07-23 01:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-01-03 10:51 - 2015-07-23 01:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-01-03 10:51 - 2015-07-22 18:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-01-03 10:51 - 2015-07-22 18:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2016-01-03 10:51 - 2015-07-22 17:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2016-01-03 10:51 - 2015-07-09 18:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2016-01-03 10:51 - 2015-07-09 18:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2016-01-03 10:51 - 2015-07-09 18:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2016-01-03 10:51 - 2015-06-25 11:06 - 00115136 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-01-03 10:51 - 2015-06-25 11:01 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-01-03 10:51 - 2015-06-25 11:01 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-01-03 10:51 - 2015-06-25 10:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-01-03 10:51 - 2015-04-11 04:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2016-01-03 10:49 - 2015-11-03 20:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2016-01-03 10:49 - 2015-11-03 19:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll
2016-01-03 10:49 - 2015-10-13 05:57 - 00950720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-01-03 10:49 - 2015-10-01 19:00 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-01-03 10:49 - 2015-10-01 19:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-01-03 10:49 - 2015-10-01 18:50 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-01-03 10:49 - 2015-09-02 04:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-01-03 10:49 - 2015-09-02 04:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-01-03 10:49 - 2015-09-02 04:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-01-03 10:49 - 2015-09-02 04:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-01-03 10:49 - 2015-09-02 03:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-01-03 10:49 - 2015-09-02 03:48 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-01-03 10:49 - 2015-09-02 03:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-01-03 10:49 - 2015-09-02 03:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-01-03 10:49 - 2015-09-02 02:47 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-01-03 10:49 - 2015-09-02 02:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-12-24 11:44 - 2015-12-24 11:44 - 00000000 ____D C:\Users\oli\AppData\Local\GWX
2015-12-23 18:10 - 2015-12-23 18:10 - 00000000 ____D C:\Windows\pss

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-01-08 18:24 - 2014-11-18 12:02 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-08 18:24 - 2014-11-15 13:50 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-01-08 18:24 - 2014-09-20 17:01 - 00001478 _____ C:\Windows\Tasks\8acd8cfe-0d49-4c23-96a4-cb0ff6208028.job
2016-01-08 18:24 - 2014-09-20 17:00 - 00000644 _____ C:\Windows\Tasks\5ca3d7ee-b3a9-4616-8d61-5908263d6ef2.job
2016-01-08 18:24 - 2014-09-20 16:57 - 00001428 _____ C:\Windows\Tasks\0b2adad4-80dd-4db6-9974-ea67098cfd80.job
2016-01-08 18:24 - 2014-09-20 16:56 - 00000594 _____ C:\Windows\Tasks\c5ae52c4-0626-4df0-b05a-24ca24de9f8a.job
2016-01-08 16:15 - 2014-11-18 12:02 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-08 15:47 - 2009-07-14 05:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-01-08 15:47 - 2009-07-14 05:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-01-08 15:42 - 2014-09-08 08:07 - 00003914 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{F24EC260-0E3D-4DA9-9732-FAFB9C26E3E3}
2016-01-08 15:41 - 2014-09-13 06:57 - 00000362 _____ C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - oli).job
2016-01-06 09:26 - 2014-09-13 01:35 - 00000000 ____D C:\84ad2f64-0af1-4858-aed2-0197de84f192
2016-01-05 13:22 - 2014-09-20 16:54 - 00000000 ____D C:\Program Files (x86)\Reimageplus.com
2016-01-05 10:49 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2016-01-05 10:46 - 2009-07-14 18:58 - 00699666 _____ C:\Windows\system32\perfh007.dat
2016-01-05 10:46 - 2009-07-14 18:58 - 00149774 _____ C:\Windows\system32\perfc007.dat
2016-01-05 10:46 - 2009-07-14 06:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI
2016-01-05 10:46 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-01-05 10:41 - 2014-11-18 12:02 - 00002169 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-01-05 10:41 - 2014-10-07 20:15 - 00001348 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Default Manager.lnk
2016-01-05 10:41 - 2014-10-07 20:15 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk
2016-01-05 10:41 - 2014-09-15 15:08 - 00000997 _____ C:\Users\Public\Desktop\Netzmanager.lnk
2016-01-05 10:41 - 2014-09-08 11:05 - 00001145 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-01-05 10:41 - 2014-09-08 11:05 - 00001053 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-01-05 10:41 - 2014-09-07 19:47 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-01-05 10:41 - 2014-09-07 19:46 - 00001333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-01-05 10:41 - 2009-07-14 05:57 - 00001511 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-01-05 10:41 - 2009-07-14 05:57 - 00001340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
2016-01-05 10:41 - 2009-07-14 05:57 - 00001292 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2016-01-05 10:41 - 2009-07-14 05:57 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2016-01-05 10:41 - 2009-07-14 05:54 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2016-01-05 10:40 - 2014-09-15 15:08 - 00001009 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Netzmanager.lnk
2016-01-05 10:40 - 2014-09-08 11:11 - 00001083 _____ C:\Users\oli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2016-01-05 10:40 - 2014-09-08 11:11 - 00000601 _____ C:\Users\oli\Desktop\Search.lnk
2016-01-05 10:40 - 2014-09-07 20:04 - 00001178 _____ C:\Users\oli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-01-05 10:40 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-01-05 10:40 - 2009-07-14 06:01 - 00001218 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2016-01-05 10:40 - 2009-07-14 05:49 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2016-01-05 10:40 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-01-05 10:38 - 2014-09-13 01:28 - 00000000 ____D C:\Users\oli\AppData\Local\com
2016-01-05 10:38 - 2014-09-08 21:58 - 00000000 ____D C:\Users\oli\AppData\LocalLow\Company
2016-01-05 09:23 - 2014-09-08 11:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-01-04 12:14 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2016-01-03 14:22 - 2015-05-21 22:33 - 00000000 ____D C:\Windows\system32\log
2016-01-03 14:22 - 2014-11-18 12:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2016-01-03 13:52 - 2014-11-22 10:51 - 00000000 __SHD C:\Users\oli\AppData\Local\EmieBrowserModeList
2016-01-03 13:52 - 2014-09-13 15:57 - 00000000 __SHD C:\Users\oli\AppData\Local\EmieUserList
2016-01-03 13:52 - 2014-09-13 15:57 - 00000000 __SHD C:\Users\oli\AppData\Local\EmieSiteList
2016-01-03 13:44 - 2009-07-14 05:45 - 00267816 _____ C:\Windows\system32\FNTCACHE.DAT
2016-01-03 13:41 - 2014-12-10 15:16 - 00000000 ____D C:\Windows\system32\appraiser
2016-01-03 13:41 - 2014-09-09 00:15 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-01-03 13:40 - 2015-05-24 15:22 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-01-03 13:40 - 2015-05-24 15:22 - 00000000 ___SD C:\Windows\system32\GWX
2016-01-03 13:40 - 2009-07-14 19:18 - 00000000 ____D C:\Program Files\Windows Journal
2016-01-03 13:23 - 2014-09-08 11:34 - 01594892 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-01-03 13:11 - 2014-09-13 11:19 - 00000000 ____D C:\Windows\system32\MRT
2016-01-03 12:07 - 2014-12-11 16:11 - 00000000 ____D C:\Users\oli\AppData\Local\ElevatedDiagnostics
2016-01-03 11:01 - 2014-11-15 13:50 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-01-03 11:01 - 2014-09-08 09:24 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-01-03 11:01 - 2014-09-08 09:24 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-23 18:08 - 2014-09-08 07:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\T-Online
2015-12-23 18:08 - 2014-09-08 07:51 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-12-23 18:08 - 2014-02-27 13:16 - 00000162 _____ C:\TO_InstallLog.txt
2015-12-23 17:04 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-12-23 17:01 - 2014-10-07 20:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-12-23 17:00 - 2014-10-07 20:14 - 00000000 ____D C:\Program Files (x86)\HP
2015-12-23 17:00 - 2014-10-07 20:12 - 00000000 ____D C:\Users\oli\AppData\Local\HP
2015-12-23 16:10 - 2014-11-18 12:02 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-23 16:10 - 2014-11-18 12:02 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-09-01 09:18 - 2014-09-01 09:18 - 0001248 _____ () C:\Users\oli\AppData\Roaming\BRNIADFR
2014-09-13 07:36 - 2014-09-13 07:36 - 0000046 _____ () C:\Users\oli\AppData\Roaming\WB.CFG
2014-09-01 09:18 - 2014-09-01 09:18 - 0002086 _____ () C:\Users\oli\AppData\Roaming\WN

Einige Dateien in TEMP:
====================
C:\Users\oli\AppData\Local\Temp\scp7B5A.tmp.exe
C:\Users\oli\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-01-03 12:00

==================== Ende von FRST.txt ============================

Additions:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:31-12-2015
durchgeführt von oli (2016-01-08 18:26:40)
Gestartet von C:\Users\oli\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2014-09-07 19:03:45)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1335512877-2763367150-1506735299-500 - Administrator - Disabled)
Gast (S-1-5-21-1335512877-2763367150-1506735299-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1335512877-2763367150-1506735299-1002 - Limited - Enabled)
oli (S-1-5-21-1335512877-2763367150-1506735299-1000 - Administrator - Enabled) => C:\Users\oli

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.270 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated)
Bing Bar (HKLM-x32\...\{08234a0d-cf39-4dca-99f0-0c5cb496da81}) (Version: 5.0.1449.0 - Microsoft Corporation)
Bing Bar Platform (x32 Version: 5.0.1449.0 - Microsoft Corporation) Hidden
ClickMovie1-Downloaderv10 (HKLM-x32\...\ClickMovie1-Downloaderv10) (Version: 1.35.9.16 - end)
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
DriverUpdate (HKLM-x32\...\{8AE269B5-4133-4FFC-9896-D718886D7D8F}) (Version: 2.2.43335 - SlimWare Utilities, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
HP Update (HKLM-x32\...\{787D1A33-A97B-4245-87C0-7174609A540C}) (Version: 5.002.005.003 - Hewlett-Packard)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{794E5C90-96E5-4413-B3F5-C803205AE30C}) (Version: 14.0.3000 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.0.1008 - Intel Corporation)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.60129.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 43.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 43.0.1 (x86 de)) (Version: 43.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.1.5828 - Mozilla)
Netzmanager (HKLM-x32\...\Netzmanager) (Version: 1.081 - Deutsche Telekom AG)
Netzmanager (Version: 1.081 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden
Telekom Fotoservice (HKLM-x32\...\Telekom Fotoservice) (Version:  - )
T-Online WLAN-Access Finder (HKLM-x32\...\{295C31E5-3F91-498E-9623-DA24D2FA2B6A}) (Version:  - )
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {1DC36DAC-F5CE-4A27-BB2D-58F023E5F8E9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-03] (Adobe Systems Incorporated)
Task: {386A60D9-48CA-4BA1-9402-1B54668303EE} - \Sixth -> Keine Datei <==== ACHTUNG
Task: {571D0839-2366-4E6E-82DB-2F5D8A1B0CFC} - \Seventh -> Keine Datei <==== ACHTUNG
Task: {5A40E926-9E86-4B89-9CFD-B12311724371} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {7D27A6EF-4194-4940-A6E5-96DC1D949797} - System32\Tasks\5ca3d7ee-b3a9-4616-8d61-5908263d6ef2 => C:\Program Files (x86)\TotalPlus01-3.1V20.09\5ca3d7ee-b3a9-4616-8d61-5908263d6ef2.exe <==== ACHTUNG
Task: {7F1E84D8-1D81-47CD-86E0-3F5A19995112} - System32\Tasks\SlimCleaner Plus (Scheduled Scan - oli) => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe
Task: {938786C3-B2FD-465A-9E80-3FC6E5614821} - System32\Tasks\c5ae52c4-0626-4df0-b05a-24ca24de9f8a => C:\Program Files (x86)\ClickMovie1-Downloaderv10\c5ae52c4-0626-4df0-b05a-24ca24de9f8a.exe <==== ACHTUNG
Task: {975D67BC-5167-4489-B723-2E938C5CCD70} - System32\Tasks\0b2adad4-80dd-4db6-9974-ea67098cfd80 => C:\Program Files (x86)\ClickMovie1-Downloaderv10\0b2adad4-80dd-4db6-9974-ea67098cfd80.exe <==== ACHTUNG
Task: {A5ECE5A0-DD6D-4DE9-9488-4911BAAA84BC} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {BAB99CCE-EAAE-43CA-B7E5-5F9EE16A3B10} - System32\Tasks\8acd8cfe-0d49-4c23-96a4-cb0ff6208028 => C:\Program Files (x86)\TotalPlus01-3.1V20.09\8acd8cfe-0d49-4c23-96a4-cb0ff6208028.exe <==== ACHTUNG
Task: {BFE683A4-1715-4206-9693-47CD011D2C5B} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {C463872F-8E4C-4EF6-BF6D-9F836C3E690C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-23] (Google Inc.)
Task: {DD9F510C-95F4-499A-90C8-BAC5BC372FF4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask => start sppsvc
Task: {E3DB9353-33AF-45D1-B772-D5162CDC6E6C} - System32\Tasks\{B5148E8A-823B-4075-BBA3-F2737C38A502} => pcalua.exe -a C:\Users\oli\AppData\Roaming\webssearches\UninstallManager.exe -c  -ptid=adks <==== ACHTUNG
Task: {F2E6EB96-5306-4A77-B97C-E4D9AFB9D2B9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-23] (Google Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\0b2adad4-80dd-4db6-9974-ea67098cfd80.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\0b2adad4-80dd-4db6-9974-ea67098cfd80.exeȍ/agentregpath='ClickMovie1-Downloaderv10' /appid=63317 /srcid='001820' /subid='0' /zdata='0' /bic=6EFD957EC0F049FB976A4D50297E1981IE /verifier=2ac813b287711ea764815532be57a214 /installerversion=1_35_09_16 /installationtime=1411228548 /statsdomain=hxxp:/stats.newclientonlinestorage.com /errorsdomain=hxxp:/errors.newclientonlinestorage.com /extensionname='Information' /torpedoiesleeps=1000 /torpedoieplugins=93-0,102-0,104-0,184-0 /monetizationdomain=hxxp:/logs.newclientonlinestorage.com <==== ACHTUNG
Task: C:\Windows\Tasks\5ca3d7ee-b3a9-4616-8d61-5908263d6ef2.job => C:\Program Files (x86)\TotalPlus01-3.1V20.09\5ca3d7ee-b3a9-4616-8d61-5908263d6ef2.exe <==== ACHTUNG
Task: C:\Windows\Tasks\8acd8cfe-0d49-4c23-96a4-cb0ff6208028.job => C:\Program Files (x86)\TotalPlus01-3.1V20.09\8acd8cfe-0d49-4c23-96a4-cb0ff6208028.exeȪ/agentregpath='TotalPlus01-3.1V20.09' /appid=63285 /srcid='002174' /subid='0' /zdata='0' /bic=6EFD957EC0F049FB976A4D50297E1981IE /verifier=2ac813b287711ea764815532be57a214 /installerversion=1_35_09_16 /installationtime=1411228791 /statsdomain=hxxp:/stats.newclientonlinestorage.com /errorsdomain=hxxp:/errors.newclientonlinestorage.com /extensionname='Information' /torpedoiesleeps=1000 /torpedoieplugins=93-0,102-0,104-0,178-288,179-288,180-288,223-288,263-24 /monetizationdomain=hxxp:/logs.newclientonlinestorage.com <==== ACHTUNG
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\c5ae52c4-0626-4df0-b05a-24ca24de9f8a.job => C:\Program Files (x86)\ClickMovie1-Downloaderv10\c5ae52c4-0626-4df0-b05a-24ca24de9f8a.exe <==== ACHTUNG
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - oli).job => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2011-02-04 14:42 - 2011-02-04 14:42 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2011-02-04 14:42 - 2011-02-04 14:42 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2014-01-29 22:02 - 2014-01-29 22:02 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-11-12 21:25 - 2014-11-12 21:25 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\93182e9779b8be0f688fd0784df6d7fb\IsdiInterop.ni.dll
2014-11-12 21:25 - 2010-11-05 23:50 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2016-01-03 11:01 - 2016-01-03 11:01 - 17882304 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1335512877-2763367150-1506735299-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\oli\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\startupfolder: C:^Users^oli^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^BoostUpdater.lnk => C:\Windows\pss\BoostUpdater.lnk.Startup
MSCONFIG\startupfolder: C:^Users^oli^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Netzmanager.lnk => C:\Windows\pss\Netzmanager.lnk.Startup
MSCONFIG\startupreg: Bing Bar => "C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\mswinext.exe"
MSCONFIG\startupreg: CrashMon => "C:\Program Files (x86)\Universal Updater\CrashMon.exe" "UniversalUpdater" "hxxp://log.data-url.com/crash/"
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
MSCONFIG\startupreg: Microsoft Default Manager => "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
MSCONFIG\startupreg: mwyyntm1ndi1zdz => C:\Program Files (x86)\Smwyyntm1ndi1zdz\zgjmm2f2oxm1bdf.exe
MSCONFIG\startupreg: OneMoreGame => C:\Users\oli\AppData\Roaming\OneMoreGame\OMG.exe
MSCONFIG\startupreg: Only-search => C:\Users\oli\AppData\Local\onlysearch\onlysearch\1.3.12.9\onlysearch.exe
MSCONFIG\startupreg: Salus CrashMon => "C:\Program Files (x86)\f552dd4c52e3\a7d12b5975b4.exe" "b786bdb3c67d.exe" "hxxp://log.data-url.com/salus/crash"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{ED8C0EF7-4EBD-48A7-BE9E-CAFFDAF6F337}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [TCP Query User{1B6DF512-096F-4DE8-BBF1-7CB6763EC952}C:\program files\hp\hp deskjet 3050 j610 series\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp deskjet 3050 j610 series\bin\hpnetworkcommunicator.exe
FirewallRules: [UDP Query User{93DC7369-D643-499B-B588-12FF16F9D2CA}C:\program files\hp\hp deskjet 3050 j610 series\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp deskjet 3050 j610 series\bin\hpnetworkcommunicator.exe
FirewallRules: [{C77C91DA-F219-4B61-848C-B47691AC54DD}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{8930BEC1-6FF3-4BFF-B5E1-0EBA834E80E3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{51C30DCA-8B5A-432F-A7AD-6270EC6B1863}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Wiederherstellungspunkte =========================

21-05-2015 21:43:01 Windows Update
22-05-2015 00:10:56 Windows Update
29-05-2015 12:38:02 Windows Update
23-12-2015 16:59:17 Removed HP Deskjet 3050 J610 series - Grundlegende Software für das Gerät
23-12-2015 17:00:09 Removed HP Deskjet 3050 J610 series - Grundlegende Software für das Gerät
23-12-2015 17:01:01 Removed HP Deskjet 3050 J610 series Hilfe
23-12-2015 17:16:37 Windows Update
23-12-2015 18:06:32 Entfernt T-Online 6.0
23-12-2015 18:08:00 Entfernt T-Online Router Web-IF Management
23-12-2015 18:08:22 Entfernt Marmiko Infrastruktur Informationssystem
03-01-2016 10:22:28 Windows Update
03-01-2016 12:57:11 Windows Update
03-01-2016 14:02:00 Revo Uninstaller's restore point - LPT System Updater Service
03-01-2016 14:03:44 Revo Uninstaller's restore point - Salus
03-01-2016 14:04:32 Revo Uninstaller's restore point - SafeFinder Smartbar

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: USB2.0-CRW
Description: USB2.0-CRW
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: zgjmm2f2oxm1bdf
Description: zgjmm2f2oxm1bdf
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: zgjmm2f2oxm1bdf
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/06/2016 10:34:08 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Volume "(C:)" wurde aufgrund eines Fehlers nicht defragmentiert: Die Startoptimierung konnte aufgrund fehlenden Speicherplatzes nicht abgeschlossen werden. (0x89000019)

Error: (01/05/2016 01:57:59 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (01/05/2016 01:57:17 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (01/05/2016 01:57:11 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (01/05/2016 01:56:35 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (01/05/2016 01:23:58 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (01/05/2016 01:23:45 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (01/04/2016 12:25:47 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (01/04/2016 12:13:59 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (01/03/2016 01:51:58 PM) (Source: MsiInstaller) (EventID: 11311) (User: oli-PC)
Description: Produkt: Microsoft Visual C++ 2005 Redistributable -- Error 1311.Die Quelldatei wurde nicht gefunden (CAB-Datei): C:\Users\oli\AppData\Local\Temp\nsi42BC.tmp\vcredis1.cab. Stellen Sie sicher, dass die Datei vorhanden ist, und Sie darauf zugreifen können.


Systemfehler:
=============
Error: (01/06/2016 08:09:06 PM) (Source: BTHUSB) (EventID: 17) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (01/06/2016 12:12:02 PM) (Source: BTHUSB) (EventID: 17) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (01/06/2016 09:42:45 AM) (Source: BTHUSB) (EventID: 17) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (01/06/2016 09:34:02 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (01/06/2016 09:34:02 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\oli\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (01/06/2016 09:34:01 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (01/06/2016 09:34:01 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\oli\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (01/06/2016 09:34:01 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (01/06/2016 09:34:01 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\oli\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (01/06/2016 09:34:01 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275


CodeIntegrity:
===================================
  Date: 2015-05-29 13:45:02.399
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-27 17:48:39.309
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-11 04:44:39.271
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-15 07:28:09.250
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-15 07:28:09.079
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-15 07:27:25.406
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-14 04:34:17.568
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-14 04:34:17.444
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-14 04:32:46.894
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-14 04:31:10.676
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\PCTRunner\pcwtc64f.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i3-2310M CPU @ 2.10GHz
Prozentuale Nutzung des RAM: 45%
Installierter physikalischer RAM: 4003.07 MB
Verfügbarer physikalischer RAM: 2186.58 MB
Summe virtueller Speicher: 8004.35 MB
Verfügbarer virtueller Speicher: 5939.24 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:657.54 GB) (Free:616.11 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: D3AF660C)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=657.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=40 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== Ende von Addition.txt ============================

04.01.2016, 22:43	#4
deeprybka /// TB-Ausbilder /// Anleitungs-Guru	Windows 7 Home: Ungewollte Tabs mit Werbung im Firefox Und wo sind die Logs von Schritt 2 und 3? __________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

05.01.2016, 21:34	#12
deeprybka /// TB-Ausbilder /// Anleitungs-Guru	Windows 7 Home: Ungewollte Tabs mit Werbung im Firefox Gibt es jetzt noch Probleme mit dem PC? Wenn ja, welche? __________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

Windows 7 Home: Ungewollte Tabs mit Werbung im Firefox

Log-Analyse und Auswertung: Windows 7 Home: Ungewollte Tabs mit Werbung im Firefox