Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Windows10, 64bit-System - Firefox öffnet viele Pop-Ups

Windows10, 64bit-System - Firefox öffnet viele Pop-Ups


Log-Analyse und Auswertung: Windows10, 64bit-System - Firefox öffnet viele Pop-Ups

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Vorheriger Beitrag Vorheriger Beitrag   Nächster Beitrag Nächster Beitrag
Alt 07.04.2016, 11:13   #1
FraukeVre
 
Windows10, 64bit-System - Firefox öffnet viele Pop-Ups - Standard

Windows10, 64bit-System - Firefox öffnet viele Pop-Ups


Hallo,

Ich habe auf meinem Laptop wohl einen Trojaner. Wenn ich im Firefox surfe öffnen sich viele Pop-Ups auf den Internetseiten. Ich habe hier im Forum schon einiges gestöbert und hoffe, es kann mir hier jemand helfen.

Malwarebytes hat 640 Funde ausgespuckt. Da steht dann bei Hersteller PUP.Optional.Elex oder .FakeFFProfile oder .DNSUnlocker.ACMB2 (ich kenn mich nicht ganz aus, welche Informationen ihr da braucht).
Anti-Vir hat auch ziemlich oft "Malware gefunden" angezeigt.

Außerdem wollte ich "Farbar's Recovery Scan Tool" installieren, aber das geht nicht, da das JavaScript "nicht aktiviert" ist, obwohl es das in about:config auf true steht. Zudem wollte ich gestern noch AdwCleaner downloaden, aber die File war immer beschädigt.

Leider kann ich die LogFile nicht vollständig posten, ich sende sende nun mal einen Teil davon und warte sehnsüchtigst auf Anweisungen :-)

Code:
ATTFilter
Suchlaufdatum: 06.04.2016
Suchlaufzeit: 19:40
Protokolldatei: Malwarebytes_06042016.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2016.04.06.04
Rootkit-Datenbank: v2016.04.03.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: Frauke

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 407132
Abgelaufene Zeit: 32 Min., 29 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 1
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\winzipersvc.exe, 1520, , [6438c0ebb7e280b671a5debb27dd5aa6]

Module: 7
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\curlpp.dll, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\libcurl.dll, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\libeay32.dll, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\msvcp110.dll, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\msvcr110.dll, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\ssleay32.dll, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\zlib1.dll, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 

Registrierungsschlüssel: 11
PUP.Optional.DNSUnlocker.ACMB2, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{74B37F8F-5E0C-4770-9F84-1F7678CF61B5}, , [89139a112f6a6ec8462d1983857f9868], 
PUP.Optional.WinTaske, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{BE03FE22-1647-4BD7-AC76-1DB2ECD4FE8C}, , [73295655cdcc20166ddde2b3788c3ac6], 
PUP.Optional.DNSUnlocker.ACMB2, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\DNSWALTERS, , [316b54573a5f84b281f31d7f56ae7a86], 
PUP.Optional.WinTaske, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\WinTaske, , [c2da0ba0a2f7340238d71e72798bdc24], 
PUP.Optional.YesSearches, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}, , [b5e75d4ec3d6d5610a18dd4e3ec5c43c], 
PUP.Optional.YesSearches, HKLM\SOFTWARE\WOW6432NODE\yessearchesSoftware, , [0c90bbf06534d0668098aae1d82c15eb], 
PUP.Optional.YesSearches, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}, , [019bedbe8415fe384fd397949f648878], 
PUP.Optional.Elex, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WINZIPERSVC, , [6438c0ebb7e280b671a5debb27dd5aa6], 
PUP.Optional.YesSearches, HKU\S-1-5-21-1706322740-1677219426-1887159757-1001\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}, , [c5d7e3c80f8a88ae48c830602ed6728e], 
PUP.Optional.Elex, HKLM\SOFTWARE\CLASSES\CLSID\{DC638EEA-2BA2-4459-9C46-85A2F0BE6040}, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WinZip, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 

Registrierungswerte: 21
PUP.Optional.DNSUnlocker.ACMB2, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{74B37F8F-5E0C-4770-9F84-1F7678CF61B5}|Path, \DNSWALTERS, , [89139a112f6a6ec8462d1983857f9868]
PUP.Optional.WinTaske, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{BE03FE22-1647-4BD7-AC76-1DB2ECD4FE8C}|Path, \WinTaske, , [73295655cdcc20166ddde2b3788c3ac6]
PUP.Optional.YesSearches, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|hp, hxxp://www.yessearches.com/?ts=AHEpBXEtAX4sB0..&v=20160202&uid=CD872ED09BB28FD568758B4F5DAE8816&ptid=cos1&mode=ffsengext, , [b5e75d4ec3d6d5610a18dd4e3ec5c43c]
PUP.Optional.YesSearches, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|tab, hxxp://www.yessearches.com/?ts=AHEpBXEtAX4sB0..&v=20160202&uid=CD872ED09BB28FD568758B4F5DAE8816&ptid=cos1&mode=ffsengext, , [6a329e0d5643b87ee04274b7c83b4eb2]
PUP.Optional.YesSearches, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|sp, hxxp://www.yessearches.com/chrome.php?uid=CD872ED09BB28FD568758B4F5DAE8816&ptid=cos1&q={searchTerms}&ts=AHEpBXEtAX4sB0..&v=20160202&mode=ffsengext, , [4656a8036a2fdb5bf52dc66535cea957]
PUP.Optional.YesSearches, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|surl, hxxp://www.yessearches.com/chrome.php?uid=CD872ED09BB28FD568758B4F5DAE8816&ptid=cos1&ts=AHEpBXEtAX4sB0..&v=20160202&mode=ffexttoolbar&q=, , [65378625d0c91f17af73b8738083f40c]
PUP.Optional.xRocketToolbar, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|arthurj8283@gmail.com, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\k5ncnqpq.default\extensions\arthurj8283@gmail.com, , [1e7e3d6e435600368cecb3794cb78878]
PUP.Optional.YesSearches, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|hp, hxxp://www.yessearches.com/?ts=AHEpBXEtAX4sB0..&v=20160202&uid=CD872ED09BB28FD568758B4F5DAE8816&ptid=cos1&mode=ffsengext, , [019bedbe8415fe384fd397949f648878]
PUP.Optional.YesSearches, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|tab, hxxp://www.yessearches.com/?ts=AHEpBXEtAX4sB0..&v=20160202&uid=CD872ED09BB28FD568758B4F5DAE8816&ptid=cos1&mode=ffsengext, , [0c90b2f9b8e155e1ca58ac7f30d324dc]
PUP.Optional.YesSearches, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|sp, hxxp://www.yessearches.com/chrome.php?uid=CD872ED09BB28FD568758B4F5DAE8816&ptid=cos1&q={searchTerms}&ts=AHEpBXEtAX4sB0..&v=20160202&mode=ffsengext, , [efad4269a2f79a9cfa28fe2d56ad669a]
PUP.Optional.YesSearches, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|surl, hxxp://www.yessearches.com/chrome.php?uid=CD872ED09BB28FD568758B4F5DAE8816&ptid=cos1&ts=AHEpBXEtAX4sB0..&v=20160202&mode=ffexttoolbar&q=, , [24782487128764d259c9a68538cbdb25]
Trojan.DNSChanger.ACMB2, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\INTERFACES\{8a259c45-9ae0-49a2-99c7-35fbb7b52928}|NameServer, 82.163.143.171,82.163.142.173, , [188406a59efb48ee9dbf14886e96da26]
Trojan.DNSChanger.ACMB2, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\INTERFACES\{be43f8c5-eec4-44b3-9409-1d34f3ebf7ea}|NameServer, 82.163.142.7 95.211.158.134, , [d3c999125049d85e84d7247800048878]
Trojan.DNSChanger.ACMB2, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\INTERFACES\{ef6c49e5-7529-4670-bdaf-0873a38e0f7a}|NameServer, 82.163.142.7 95.211.158.134, , [7b212d7e4158ff37a6b56a32eb19f60a]
PUP.Optional.Elex, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WINZIPERSVC|ImagePath, C:\Program Files (x86)\WinZipper\winzipersvc.exe, , [6438c0ebb7e280b671a5debb27dd5aa6]
PUP.Optional.WebBar, HKU\S-1-5-21-1706322740-1677219426-1887159757-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_BROWSER_EMULATION|wb.exe, 11000, , [910bf2b9d5c4e84ed778483e5da706fa]
PUP.Optional.YesSearches, HKU\S-1-5-21-1706322740-1677219426-1887159757-1001\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|hp, hxxp://www.yessearches.com/?ts=AHEpBXEtAX4sB0..&v=20160202&uid=CD872ED09BB28FD568758B4F5DAE8816&ptid=cos1&mode=ffsengext, , [c5d7e3c80f8a88ae48c830602ed6728e]
PUP.Optional.YesSearches, HKU\S-1-5-21-1706322740-1677219426-1887159757-1001\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|tab, hxxp://www.yessearches.com/?ts=AHEpBXEtAX4sB0..&v=20160202&uid=CD872ED09BB28FD568758B4F5DAE8816&ptid=cos1&mode=ffsengext, , [801c6942ecaddd599c74850b11f30df3]
PUP.Optional.YesSearches, HKU\S-1-5-21-1706322740-1677219426-1887159757-1001\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|sp, hxxp://www.yessearches.com/chrome.php?uid=CD872ED09BB28FD568758B4F5DAE8816&ptid=cos1&q={searchTerms}&ts=AHEpBXEtAX4sB0..&v=20160202&mode=ffsengext, , [f7a55358980155e149c720704bb96f91]
PUP.Optional.YesSearches, HKU\S-1-5-21-1706322740-1677219426-1887159757-1001\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|surl, hxxp://www.yessearches.com/chrome.php?uid=CD872ED09BB28FD568758B4F5DAE8816&ptid=cos1&ts=AHEpBXEtAX4sB0..&v=20160202&mode=ffexttoolbar&q=, , [c0dce1ca4f4a999d1ef2a1ef31d315eb]
PUP.Optional.Elex, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED|{DC638EEA-2BA2-4459-9C46-85A2F0BE6040}, WinZipper Shell Extension, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6]

Registrierungsdaten: 1
Trojan.DNSChanger.ACMB2, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS|NameServer, 82.163.142.7 95.211.158.134, Gut: (8.8.8.8), Schlecht: (82.163.142.7 95.211.158.134),,[ddbff5b6c1d843f340783df18481fb05]

Ordner: 143
PUP.Optional.APNToolBar.Gen, C:\ProgramData\APN\APN-Stub, , [6c30515af4a5f24477d9c53619e9d729], 
PUP.Optional.xRocketToolbar, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\k5ncnqpq.default\extensions\arthurj8283@gmail.com, , [5b41d1daaaeff3435ef7cf4e22e1fe02], 
PUP.Optional.xRocketToolbar, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\k5ncnqpq.default\extensions\arthurj8283@gmail.com\chrome, , [5b41d1daaaeff3435ef7cf4e22e1fe02], 
PUP.Optional.xRocketToolbar, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\k5ncnqpq.default\extensions\arthurj8283@gmail.com\chrome\content, , [5b41d1daaaeff3435ef7cf4e22e1fe02], 
PUP.Optional.xRocketToolbar, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\k5ncnqpq.default\extensions\arthurj8283@gmail.com\chrome\skin, , [5b41d1daaaeff3435ef7cf4e22e1fe02], 
PUP.Optional.YesSearches, C:\Program Files (x86)\SearchesToYesbnd, , [603c27840d8c0a2c05e403216e950cf4], 
PUP.Optional.YesSearches, C:\Program Files (x86)\SearchesToYesbnd\dmp, , [603c27840d8c0a2c05e403216e950cf4], 
PUP.Optional.YesSearches, C:\Program Files (x86)\SearchesToYesbnd\dmp\bugreport.exe, , [603c27840d8c0a2c05e403216e950cf4], 
PUP.Optional.YesSearches, C:\Program Files (x86)\SearchesToYesbnd\dmp\ccuter.exe, , [603c27840d8c0a2c05e403216e950cf4], 
PUP.Optional.YesSearches, C:\Program Files (x86)\SearchesToYesbnd\dmp\shortboost.exe, , [603c27840d8c0a2c05e403216e950cf4], 
PUP.Optional.YesSearches, C:\Program Files (x86)\SearchesToYesbnd\dmp\Winsere.exe, , [603c27840d8c0a2c05e403216e950cf4], 
PUP.Optional.YesSearches, C:\Program Files (x86)\SearchesToYesbnd\dmp\WinTaske.exe, , [603c27840d8c0a2c05e403216e950cf4], 
PUP.Optional.YesSearches, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\YourGSearchFinder_br, , [e6b66447009944f2c73861c307fcce32], 
PUP.Optional.Winsere, C:\Program Files (x86)\Winsere, , [445816955049ae88661856cf62a1df21], 
PUP.Optional.Winsere, C:\Program Files (x86)\Winsere\Winsere, , [445816955049ae88661856cf62a1df21], 
PUP.Optional.DNSUnlocker.ACMB2, C:\ProgramData\0c1c9b79-0331-0, , [f7a59c0fdebbac8a263e2ff7739043bd], 
PUP.Optional.DNSUnlocker.ACMB2, C:\ProgramData\0c1c9b79-0b81-1, , [108cecbfdabf50e63d2784a2dd2645bb], 
PUP.Optional.DNSUnlocker.ACMB2, C:\ProgramData\0c1c9b79-1253-0, , [d3c9adfe415840f6ef7583a3b1527888], 
PUP.Optional.DNSUnlocker.ACMB2, C:\ProgramData\0c1c9b79-21b1-1, , [c1db22892871bb7ba7bdaa7ce61d8b75], 
PUP.Optional.DNSUnlocker.ACMB2, C:\ProgramData\0c1c9b79-2f33-0, , [9903e6c5e2b773c331335dc9976c18e8], 
PUP.Optional.DNSUnlocker.ACMB2, C:\ProgramData\0c1c9b79-3c27-0, , [43593e6dbcdd76c0fe669393de257888], 
PUP.Optional.DNSUnlocker.ACMB2, C:\ProgramData\0c1c9b79-42f3-0, , [7d1fa60507923bfbb1b31b0b37cc9070], 
PUP.Optional.DNSUnlocker.ACMB2, C:\ProgramData\0c1c9b79-4567-1, , [f3a99c0f4356ed49c89c82a48a7944bc], 
PUP.Optional.DNSUnlocker.ACMB2, C:\ProgramData\0c1c9b79-4761-1, , [099383280396d5616202949225de21df], 
PUP.Optional.DNSUnlocker.ACMB2, C:\ProgramData\0c1c9b79-4fb5-1, , [3c60c1eae7b2a096a1c374b2da2930d0], 
PUP.Optional.DNSUnlocker.ACMB2, C:\ProgramData\0c1c9b79-7315-0, , [bbe10f9c2e6bbe78451f4dd99d66d42c], 
PUP.Optional.DNSUnlocker.ACMB2, C:\ProgramData\0c1c9b79-7bb5-0, , [38645655e8b170c665ff32f46c97e11f], 
PUP.Optional.DNSUnlocker.ACMB2, C:\ProgramData\0c1c9b79-7f63-0, , [53497a312475c274204493935ba8d62a], 
PUP.Optional.DNSUnlocker.ACMB2, C:\ProgramData\cdcfa5f1-2fd3-0, , [3e5ebdee1d7c47ef86de3ee85ba8fd03], 
PUP.Optional.DNSUnlocker.ACMB2, C:\ProgramData\cdcfa5f1-7363-1, , [7e1e7b304d4c64d2ed77b571030001ff], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\language, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\language\en_us, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\language\es_es, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\language\pt_br, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\language\tr_tr, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\language\zh_cn, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\language\zh_tw, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\layout, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\layout\default, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\log, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\style, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\uninstaller, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\adblockplus, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\bookmarkbackups, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\crashes, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\crashes\events, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\datareporting, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\datareporting\archived, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\datareporting\archived\2015-11, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\datareporting\archived\2015-12, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\datareporting\archived\2016-01, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\datareporting\archived\2016-02, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\es.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\ro.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\ar.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\ca.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\cs.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\da.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\de.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\el.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\en.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\en_AU.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\en_GB.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\es_MX.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\fi.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\fr.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\fr_CA.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\he.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\hi.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\hr.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\hu.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\id.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\it.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\ja.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\ko.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\ms.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\nb.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\nl.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\pl.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\pt.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\pt_PT.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\ru.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\sk.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\sv.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\th.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\tr.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\uk.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\vi.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\zh_CN.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\zh_HK.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\components\AppleBMDAV.resources\zh_TW.lproj, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\META-INF, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\modules, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\firefoxdav@icloud.com\skin, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp\WINNT_x86-msvc, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-eme-adobe, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-eme-adobe\15, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-gmpopenh264, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-gmpopenh264\1.1, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-gmpopenh264\1.5.3, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\healthreport, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\jetpack, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\jetpack\jid1-4P0kohSJxU1qGg@jetpack, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\jetpack\jid1-4P0kohSJxU1qGg@jetpack\simple-storage, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\jetpack\{7CA9CF31-1C73-46CD-8377-85AB71EA771F}, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\jetpack\{7CA9CF31-1C73-46CD-8377-85AB71EA771F}\simple-storage, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\minidumps, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\saved-telemetry-pings, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\searchplugins, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\sessionstore-backups, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\default, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\default\http+++www.amazon.de, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\default\http+++www.amazon.de\idb, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\default\http+++www.amazon.de\idb\2153786202SecrroitpSt.files, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\default\http+++www.gmx.net, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\default\http+++www.gmx.net\idb, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\default\http+++www.gmx.net\idb\301792106ttes.files, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\default\https+++docs.google.com, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\default\https+++docs.google.com\idb, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\chrome, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\chrome\idb, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\chrome\idb\2918063365piupsah.files, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\moz-safe-about+home, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\moz-safe-about+home\idb, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.files, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\temporary, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\temporary\https+++www.facebook.com, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\temporary\https+++www.facebook.com\asmjs, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\weave, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\weave\logs, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\webapps, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\Yahoo Inc, , [eeae9b1023766ec8cf0498c1996c1be5], 

Dateien: 496
PUP.Optional.YesSearches, C:\Program Files (x86)\SearchesToYesbnd\ffuter.exe, , [009c0f9cbedb9f9761ffa750cf32d62a], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\winziper.exe, , [6c30d1da9306092dcd8a94d598680ef2], 
PUP.Optional.CrossAd.Gen, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924.xpi, , [b6e63873a4f5fe38d89aa58491729967], 
PUP.Optional.DNSUnlocker.ACMB2, C:\Windows\System32\Tasks\DNSWALTERS, , [7428cae181183df9c4aa03999a6a14ec], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\winzipersvc.exe, , [6438c0ebb7e280b671a5debb27dd5aa6], 
PUP.Optional.xRocketToolbar, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\k5ncnqpq.default\extensions\arthurj8283@gmail.com\chrome.manifest, , [5b41d1daaaeff3435ef7cf4e22e1fe02], 
PUP.Optional.xRocketToolbar, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\k5ncnqpq.default\extensions\arthurj8283@gmail.com\install.rdf, , [5b41d1daaaeff3435ef7cf4e22e1fe02], 
PUP.Optional.xRocketToolbar, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\k5ncnqpq.default\extensions\arthurj8283@gmail.com\chrome\content\toolbar.js, , [5b41d1daaaeff3435ef7cf4e22e1fe02], 
PUP.Optional.xRocketToolbar, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\k5ncnqpq.default\extensions\arthurj8283@gmail.com\chrome\content\toolbar.xul, , [5b41d1daaaeff3435ef7cf4e22e1fe02], 
PUP.Optional.xRocketToolbar, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\k5ncnqpq.default\extensions\arthurj8283@gmail.com\chrome\skin\icon.png, , [5b41d1daaaeff3435ef7cf4e22e1fe02], 
PUP.Optional.YesSearches, C:\Program Files (x86)\SearchesToYesbnd\@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924.xpi, , [603c27840d8c0a2c05e403216e950cf4], 
PUP.Optional.YesSearches, C:\Program Files (x86)\SearchesToYesbnd\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}, , [603c27840d8c0a2c05e403216e950cf4], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\language\protocol.txt, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\language\en_us\eCompress_lang.ini, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\language\en_us\install_lang.ini, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\language\es_es\eCompress_lang.ini, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\language\es_es\install_lang.ini, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\language\pt_br\eCompress_lang.ini, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\language\pt_br\install_lang.ini, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\language\tr_tr\eCompress_lang.ini, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\language\tr_tr\install_lang.ini, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\7z.dll, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\curlpp.dll, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\libcurl.dll, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\libeay32.dll, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\main, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\msvcp110.dll, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\msvcr110.dll, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\segoeui.ttf, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\segoeuib.ttf, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\ssleay32.dll, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\wzdl.exe, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\wzShellctx64.dll, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\wzUninstall.exe, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\wzUpg.exe, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\wz_settings.ini, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\zlib1.dll, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\install_logo.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\onekeyextract.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\additem.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\app_icon.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\back.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\Background_Main.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\Background_Small_2.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\browse_button.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\checkbox_blank.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\checkbox_select.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\combo.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\combo_skin.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\deleteitem.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\deskbtnbk.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\edit_skin.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\extractto.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\folder.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\footerbg.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\install_back.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\install_button_skin.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\install_check_checked.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\install_check_intermediate.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\install_check_uncheck.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\install_new_button_skin.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\install_resource.xml, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\listctrl_header_bk.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\listview_report.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\listview_thumb.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\menubg.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\menu_bkg.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\menu_item_over.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\patch_file_icon.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\pic-error.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\pic-info.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\pic-question.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\pic-warning.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\popup_dialog_bk.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\progressbar_bk.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\progressbar_image.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\progress_bk.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\progress_meter.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\pwd_lock.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\pwd_unlock.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\radio_normal.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\radio_selected.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\resource.xml, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\settingbkg.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\settingtab.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\sys_button_close.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\sys_button_max.PNG, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\sys_button_min.PNG, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\sys_button_restore.PNG, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\sys_close.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\tobutton1.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\image\default\vscroll.png, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\layout\default\about.xml, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\layout\default\brower.xml, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\layout\default\compresspath.xml, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\layout\default\compresspwd.xml, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\layout\default\error.xml, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\layout\default\extractpath.xml, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\layout\default\install_msgbox.xml, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\layout\default\languageSelect.xml, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\layout\default\msgbox.xml, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\layout\default\OmigaZipInstall.xml, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\layout\default\overwrite.xml, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\layout\default\password.xml, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\layout\default\progress.xml, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\layout\default\rename.xml, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\layout\default\setting.xml, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\layout\default\uninstOmigaZip.xml, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\log\winzipersvc.log, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\style\install_style.xml, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\style\style.xml, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.Elex, C:\Program Files (x86)\WinZipper\uninstaller\OmigaZip.inst, , [2478b8f3fe9b6bcbc6ef8dcc8e771ae6], 
PUP.Optional.YesSearches, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Gut: (), Schlecht: (user_pref("browser.search.searchengine.hp", "hxxp://www.yessearches.com/?ts=AHEpBXEtAX4sB0..&v=20160202&uid=CD872ED09BB28FD568758B4F5DAE8816&ptid=cos1&mode=ffsengext");), ,[9a0215968f0a2214d02077e271946997]
PUP.Optional.YesSearches, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Gut: (), Schlecht: (ility.blockautorefresh", true);
user_pref("accessibility.lastLoadDate", 1459964062);
user_pref("accessibility.loadedInLastSession", true);
user_pref("accessibility.typeaheadfind.flashBar", 0)), ,[0a928a21ebae290d1bd52a2f8382bf41]
PUP.Optional.YesSearches, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Gut: (), Schlecht: (x\\\\Profiles\\\\41A66E7E5EE1\\\\extensions\\\\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi\",\"multiprocessCompatible\":false,\"runInSafeMode\":false},\"loop@mozilla.org\":{\"version\":\"1.1.14\",\"type\":\), ,[e1bb9615f4a5f24421cf98c1f312fb05]
PUP.Optional.YesSearches, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Gut: (), Schlecht: (pref("browser.search.searchengine.type", "");
user_pref("browser.search.searchengine.uid", "st320lt012-9ws14c_w0vdzr6bxxxxw0vdzr6b");
user_pref("browser.search.sea), ,[8c10a10a41585adcd61a92c70bfa8779]
PUP.Optional.YesSearches, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js, Gut: (), Schlecht: (user_pref("browser.newtab.url", "hxxp://www.yessearches.com/?ts=AHEpBXEtAX4sB0..&v=20160202&uid=CD872ED09BB28FD568758B4F5DAE8816&ptid=cos1&mode=ffseng");), ,[b2ea05a6d1c840f67b7579e051b4da26]
PUP.Optional.YesSearches, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js, Gut: (), Schlecht: (efault", "bookmarks");
user_pref("browser.bookmarks.restore_default_bookmarks", false);
user_pref("browser.cache.disk.capacity", 358400);
user_pref("browser.cache.di), ,[faa2ccdfd3c645f1f5fb4c0d9b6add23]
PUP.Optional.YesSearches, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js, Gut: (), Schlecht: (ile the application is running,
 * the changes will be overwritten when the application exits.
 *
 * To make a manual change to preferences, you can visit the URL about:config
 */

user_pr), ,[7527406b4158d75f3fb1b6a3808560a0]
PUP.Optional.YesSearches, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js, Gut: (), Schlecht: (ning,
 * the changes will be overwritten when the application exits.
 *
 * To make a manual change to preferences, you can visit the URL about:config
 */

user_pref("accessibility.typeahead), ,[0f8d9417782169cdfdf3c7923fc644bc]
PUP.Optional.YesSearches, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js, Gut: (), Schlecht: (rue);
user_pref("browser.audioFeeds.handler.default", "bookmarks");
user_pref("browser.bookmarks.restore_default_bookmarks", false);
user_pref("browser.cach), ,[712b2388d9c05ed8eb05bf9aae5758a8]
PUP.Optional.YesSearches, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js, Gut: (user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Schlecht: (user_pref("browser.startup.homepage", "hxxp://www.yessearches.com), ,[b2ea73387920b87e34d36af0c2433ac6]
PUP.Optional.YesSearches, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\searchplugins\DD1B66D4.xml, , [6339f5b65a3fd95dfb09c3969f662ed2], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\addons.json, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\blocklist.xml, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cert8.db, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cert_override.txt, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\compatibility.ini, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile, C:\Users\Frauke\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\content-prefs.sqlite, , [eeae9b1023766ec8cf0498c1996c1be5], 
PUP.Optional.FakeFFProfile,
Ich hab da einen ziemlichen Vogel abgeschossen, ich hoffe es kann mir jemand helfen :-)

Grüße,
Frauke

 

Themen zu Windows10, 64bit-System - Firefox öffnet viele Pop-Ups
.fakeffprofile, aktiviert, dnsunlocker.acmb2, downloaden, install.exe, installieren, internetseite, javascript, pup.optional.apntoolbar.gen, pup.optional.crossad.gen, pup.optional.dnsunlocker.acmb2, pup.optional.elex, pup.optional.fakeffprofile, pup.optional.webbar, pup.optional.winsere, pup.optional.wintaske, pup.optional.xrockettoolbar, pup.optional.yessearches, recovery, trojan.dnschanger.acmb2


« Windows 10/64bit: Windows Defender meldet trojandownloader:win32/esaprof!rfn | searchinterneat-a-akamaihd-net lässt sich nicht vollständig entfernen »


Ähnliche Themen: Windows10, 64bit-System - Firefox öffnet viele Pop-Ups


  1. Windows10: Unzählige WerbePopUps im Firefox
    Log-Analyse und Auswertung - 30.03.2016 (9)
  2. Firefox öffnet viele Werbebanner
    Plagegeister aller Art und deren Bekämpfung - 19.04.2015 (9)
  3. Win 8 64bit Laptop öffnet 3-4 Fenster im FireFox und der Mauszeiger bewegt sich von allein.
    Log-Analyse und Auswertung - 20.11.2014 (10)
  4. Virenbefall - IExplorer öffnet viele Fenster
    Log-Analyse und Auswertung - 24.12.2013 (11)
  5. Windows 7 - Internet Explorer bzw. Firefox öffnet selbständig viele leere Fenster
    Log-Analyse und Auswertung - 14.12.2013 (9)
  6. IE 10 öffnet bei allen Rechner im Netzwerk viele Tabs
    Log-Analyse und Auswertung - 11.10.2013 (3)
  7. dass Internetexplorer, Crome und Firefox auf Qv06 umgeleitet - PC System W7 – 64BIT
    Alles rund um Windows - 09.10.2013 (2)
  8. Firefox öffnet hin und wieder extrem viele Fenster! Maleware?
    Plagegeister aller Art und deren Bekämpfung - 30.05.2012 (1)
  9. IE9 64bit und Firefox starten nicht / Firefox lässt sich nicht neu installieren
    Log-Analyse und Auswertung - 14.03.2012 (17)
  10. System Fix, Windows 7, 64Bit
    Plagegeister aller Art und deren Bekämpfung - 24.11.2011 (14)
  11. Firefox öffnet willkührlich fenster und system fährt runter!
    Plagegeister aller Art und deren Bekämpfung - 03.06.2011 (3)
  12. System langsam, zu viele Prozesse
    Log-Analyse und Auswertung - 24.01.2011 (28)
  13. Firefox öffnet falsche Internetseite/ System startet sehr langsam
    Log-Analyse und Auswertung - 04.11.2010 (12)
  14. System Langsam,Firefox öffnet falsche seiten,incredimail ruft gelöschte mails ab
    Plagegeister aller Art und deren Bekämpfung - 11.10.2010 (16)
  15. IE 8 öffnet sich mit ad.globe7.com Win7 64bit
    Plagegeister aller Art und deren Bekämpfung - 05.05.2010 (3)
  16. IE öffnet sich mit Ads; viele Trojaner von Avast gefunden
    Mülltonne - 09.12.2008 (0)
  17. Mozilla Firefox öffnet viele Seiten nicht mehr! Trojaner Schuld?!
    Log-Analyse und Auswertung - 12.08.2008 (18)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Windows10, 64bit-System - Firefox öffnet viele Pop-Ups - Hallo, Ich habe auf meinem Laptop wohl einen Trojaner. Wenn ich im Firefox surfe öffnen sich viele Pop-Ups auf den Internetseiten. Ich habe hier im Forum schon einiges gestöbert und - Windows10, 64bit-System - Firefox öffnet viele Pop-Ups...
Archiv
Du betrachtest: Windows10, 64bit-System - Firefox öffnet viele Pop-Ups auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131