Wie werde ich WORM/Autorun.UI.126.15 [worm] wieder los?

titania79

Hallo. (Win8) War im Internet unterwegs (Fb und Video auf Webseite eines TV Senders), habe gleichzeitig meinen Ipod aufgeladen und dann hat mir Avir plötzlich folgende Meldung angezeigt:

Muster 'WORM/Autorun.UI.126.15 [worm]'
in Datei 'C:\Users\Benutzername\AppData\Local\Mozilla\Firefox\Profiles\zdapoljn.default-1447890261049\cache2\entries\29CA27197BAEDD39D9B0E63452CCAB146037C2D8 gefunden.
Durchgeführte Aktion: Übergeben an Scanner

Konnte die infizierte Datei nicht in der Quarantäne finden und habe sie daher in dem oben genannten Ordner gelöscht. Wie kann ich sicher sein, dass der Wurm weg ist und nicht andere Dateien, Ordner, etc befallen hat?

Habe mal Malwarebytes drüber laufen lassen und das ist das Ergebnis: (Anschließend wurden die gefundenen Dateien in die Quarantäne verschoben)

Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlaufdatum: 18.04.2016
Suchlaufzeit: 00:33
Protokolldatei: malwarebytes.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2016.04.17.06
Rootkit-Datenbank: v2016.04.17.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 8
CPU: x64
Dateisystem: NTFS
Benutzer: ******

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 364147
Abgelaufene Zeit: 27 Min., 42 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Warnen
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 29
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21499F59-910D-44DD-A56C-D289C5E0DF3D}, , [84664768653448ee7831d24ecb3929d7],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{48A05237-7318-4394-A381-2A94324E13A2}, , [e703288758419c9a68413fe1c63ef60a],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5B8D7E5B-2E07-433B-A704-05549CC489FF}, , [6486842b32671d197536f22e966e01ff],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9D2A3774-17DD-44CE-9202-06D0E9193233}, , [8a60f2bd0d8ccb6b23866fb1956fa060],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ADC51D6C-1DCC-4082-AA10-131A24688059}, , [38b2bbf44d4c092d4962120e689c51af],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AEFD71ED-1481-4409-AC73-B7C7C8456E3A}, , [5c8e3f704356fc3a65466fb15ba949b7],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E59648D0-8035-46F4-A868-6078822AB0E1}, , [effbe9c62079191d9f0b38e8699b857b],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F10C90F2-F073-452B-B76A-4CB7E038388E}, , [ae3c2a851f7a082ea406da4619eb6799],
PUP.Optional.DefaultSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}, , [e00a8728f2a777bf181c3d4cc73d53ad],
PUP.Optional.PriceFountain, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{E1EA663B-8C6F-493A-9A3C-E285DF6635F0}, , [b03ae5cac8d168ce0ed1d2cd6f958c74],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21499F59-910D-44DD-A56C-D289C5E0DF3D}, , [26c41a953d5c063084257ca426deca36],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{48A05237-7318-4394-A381-2A94324E13A2}, , [7d6dac03cdcc6bcb9e0b5cc48e762fd1],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5B8D7E5B-2E07-433B-A704-05549CC489FF}, , [3fab36790693ee4803a8899706feb749],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9D2A3774-17DD-44CE-9202-06D0E9193233}, , [9357f0bf83160a2cccddfb25fe06bc44],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ADC51D6C-1DCC-4082-AA10-131A24688059}, , [6585743b207933036d3ed7499b69c23e],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AEFD71ED-1481-4409-AC73-B7C7C8456E3A}, , [0ae01e9126732e08d6d537e9ee16e21e],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E59648D0-8035-46F4-A868-6078822AB0E1}, , [39b10fa03f5a191d585258c8eb196997],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F10C90F2-F073-452B-B76A-4CB7E038388E}, , [11d94867f1a8c86ea90156ca996bbf41],
PUP.Optional.DefaultSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}, , [1ecc723d8712e650b77d6920e61ee61a],
PUP.Optional.CrossRider, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21499F59-910D-44DD-A56C-D289C5E0DF3D}, , [a04af7b8435664d26c20e739dd2729d7],
PUP.Optional.CrossRider, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{48A05237-7318-4394-A381-2A94324E13A2}, , [7476b7f8c2d7102624689888a75d0ef2],
PUP.Optional.CrossRider, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5B8D7E5B-2E07-433B-A704-05549CC489FF}, , [6f7bfcb36a2f3501afdf77a9867efc04],
PUP.Optional.CrossRider, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9D2A3774-17DD-44CE-9202-06D0E9193233}, , [cb1f0ca39504e74f5a327ba5e81cb749],
PUP.Optional.CrossRider, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ADC51D6C-1DCC-4082-AA10-131A24688059}, , [ad3d06a9badfd75f4f3fed33ed177090],
PUP.Optional.CrossRider, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AEFD71ED-1481-4409-AC73-B7C7C8456E3A}, , [7c6e921d1c7de84eb1dd9c84ba4aa858],
PUP.Optional.CrossRider, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E59648D0-8035-46F4-A868-6078822AB0E1}, , [ea006f4003960e28cfbefd23ed178779],
PUP.Optional.CrossRider, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F10C90F2-F073-452B-B76A-4CB7E038388E}, , [c921109ff9a0ce68147967b984806d93],
PUP.Optional.CrossRider, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F202DFCC-63AA-4A7D-B5EB-22B3A47D281D}, , [e9019c13475263d38ffe38e8d13301ff],
PUP.Optional.DefaultSearch.ShrtCln, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}, , [d416852ad4c586b0dc579fea50b4b749],

Registrierungswerte: 41
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21499f59-910d-44dd-a56c-d289c5e0df3d}|AppName, TotalPlusHD-3.1V01.11-bg.exe, , [84664768653448ee7831d24ecb3929d7]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{48a05237-7318-4394-a381-2a94324e13a2}|AppName, TheHDvid-Codec V10-bg.exe, , [e703288758419c9a68413fe1c63ef60a]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5b8d7e5b-2e07-433b-a704-05549cc489ff}|AppName, Plus-HD-4.8-codedownloader.exe, , [6486842b32671d197536f22e966e01ff]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9d2a3774-17dd-44ce-9202-06d0e9193233}|AppName, Plus-HD-4.8-bg.exe, , [8a60f2bd0d8ccb6b23866fb1956fa060]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{adc51d6c-1dcc-4082-aa10-131a24688059}|AppName, TotalPlusHD-3.1V01.11-codedownloader.exe, , [38b2bbf44d4c092d4962120e689c51af]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{aefd71ed-1481-4409-ac73-b7c7c8456e3a}|AppName, TheHDvid-Codec V10-codedownloader.exe, , [5c8e3f704356fc3a65466fb15ba949b7]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{e59648d0-8035-46f4-a868-6078822ab0e1}|AppName, Plus-HD-4.8-buttonutil.exe, , [effbe9c62079191d9f0b38e8699b857b]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{f10c90f2-f073-452b-b76a-4cb7e038388e}|AppName, TheHDvid-Codec V10-buttonutil.exe, , [ae3c2a851f7a082ea406da4619eb6799]
PUP.Optional.DefaultSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}|URL, hxxp://www.default-search.net/search?sid=476&aid=122&itype=a&ver=15005&tm=593&src=ds&p={searchTerms}, , [e00a8728f2a777bf181c3d4cc73d53ad]
PUP.Optional.DefaultSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}|DisplayName, default-search.net, , [5298e1ce9aff93a3cc02150cb15317e9]
PUP.Optional.DefaultSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}|SuggestionsURL_JSON, hxxp://www.default-search.net?sid=476&aid=122&itype=a&ver=15005&tm=593&src=ds&p={searchTerms}&ft=json, , [99518e218811ce68715d9190ec18ec14]
PUP.Optional.Bandoo.AppFlsh, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}|FaviconPath, C:\Program Files (x86)\Settings Manager\smdmf\favicon.ico, , [08e26f40aced4de99ad5eaa3c440bb45]
PUP.Optional.PriceFountain, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{E1EA663B-8C6F-493A-9A3C-E285DF6635F0}|Path, \Microsoft\Windows\Setup\8.1 auto install v2, , [b03ae5cac8d168ce0ed1d2cd6f958c74]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21499f59-910d-44dd-a56c-d289c5e0df3d}|AppName, TotalPlusHD-3.1V01.11-bg.exe, , [26c41a953d5c063084257ca426deca36]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{48a05237-7318-4394-a381-2a94324e13a2}|AppName, TheHDvid-Codec V10-bg.exe, , [7d6dac03cdcc6bcb9e0b5cc48e762fd1]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5b8d7e5b-2e07-433b-a704-05549cc489ff}|AppName, Plus-HD-4.8-codedownloader.exe, , [3fab36790693ee4803a8899706feb749]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9d2a3774-17dd-44ce-9202-06d0e9193233}|AppName, Plus-HD-4.8-bg.exe, , [9357f0bf83160a2cccddfb25fe06bc44]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{adc51d6c-1dcc-4082-aa10-131a24688059}|AppName, TotalPlusHD-3.1V01.11-codedownloader.exe, , [6585743b207933036d3ed7499b69c23e]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{aefd71ed-1481-4409-ac73-b7c7c8456e3a}|AppName, TheHDvid-Codec V10-codedownloader.exe, , [0ae01e9126732e08d6d537e9ee16e21e]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{e59648d0-8035-46f4-a868-6078822ab0e1}|AppName, Plus-HD-4.8-buttonutil.exe, , [39b10fa03f5a191d585258c8eb196997]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{f10c90f2-f073-452b-b76a-4cb7e038388e}|AppName, TheHDvid-Codec V10-buttonutil.exe, , [11d94867f1a8c86ea90156ca996bbf41]
PUP.Optional.CrossRider.Generic, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_BROWSER_EMULATION|Plus-HD-4.8-bg.exe, 8000, , [32b8703f8b0e05314916416621e3f709]
PUP.Optional.CrossRider.Generic, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_BROWSER_EMULATION|TheHDvid-Codec V10-bg.exe, 8000, , [8d5d3778e5b42e0860ffccdbf60e46ba]
PUP.Optional.CrossRider.Generic, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_BROWSER_EMULATION|TotalPlusHD-3.1V01.11-bg.exe, 8000, , [99517936dbbefa3ce877adfaf50f857b]
PUP.Optional.DefaultSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}|URL, hxxp://www.default-search.net/search?sid=476&aid=122&itype=a&ver=15005&tm=593&src=ds&p={searchTerms}, , [1ecc723d8712e650b77d6920e61ee61a]
PUP.Optional.DefaultSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}|DisplayName, default-search.net, , [bc2e28879702ce68874745dc937114ec]
PUP.Optional.DefaultSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}|SuggestionsURL_JSON, hxxp://www.default-search.net?sid=476&aid=122&itype=a&ver=15005&tm=593&src=ds&p={searchTerms}&ft=json, , [21c9406f78217cba2f9fa57ca06453ad]
PUP.Optional.Bandoo.AppFlsh, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}|FaviconPath, C:\Program Files (x86)\Settings Manager\smdmf\favicon.ico, , [ffeba807fb9e9e98fc73b5d85ca8738d]
PUP.Optional.CrossRider, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21499f59-910d-44dd-a56c-d289c5e0df3d}|AppName, TotalPlusHD-3.1V01.11-bg.exe, , [a04af7b8435664d26c20e739dd2729d7]
PUP.Optional.CrossRider, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{48a05237-7318-4394-a381-2a94324e13a2}|AppName, TheHDvid-Codec V10-bg.exe, , [7476b7f8c2d7102624689888a75d0ef2]
PUP.Optional.CrossRider, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5b8d7e5b-2e07-433b-a704-05549cc489ff}|AppName, Plus-HD-4.8-codedownloader.exe, , [6f7bfcb36a2f3501afdf77a9867efc04]
PUP.Optional.CrossRider, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9d2a3774-17dd-44ce-9202-06d0e9193233}|AppName, Plus-HD-4.8-bg.exe, , [cb1f0ca39504e74f5a327ba5e81cb749]
PUP.Optional.CrossRider, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{adc51d6c-1dcc-4082-aa10-131a24688059}|AppName, TotalPlusHD-3.1V01.11-codedownloader.exe, , [ad3d06a9badfd75f4f3fed33ed177090]
PUP.Optional.CrossRider, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{aefd71ed-1481-4409-ac73-b7c7c8456e3a}|AppName, TheHDvid-Codec V10-codedownloader.exe, , [7c6e921d1c7de84eb1dd9c84ba4aa858]
PUP.Optional.CrossRider, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{e59648d0-8035-46f4-a868-6078822ab0e1}|AppName, Plus-HD-4.8-buttonutil.exe, , [ea006f4003960e28cfbefd23ed178779]
PUP.Optional.CrossRider, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{f10c90f2-f073-452b-b76a-4cb7e038388e}|AppName, TheHDvid-Codec V10-buttonutil.exe, , [c921109ff9a0ce68147967b984806d93]
PUP.Optional.CrossRider, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F202DFCC-63AA-4A7D-B5EB-22B3A47D281D}|AppName, 41a8996a-f79f-4db1-9214-be3c28ff708e-2.exe-buttonutil.exe, , [e9019c13475263d38ffe38e8d13301ff]
PUP.Optional.DefaultSearch.ShrtCln, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}|URL, hxxp://www.default-search.net/search?sid=476&aid=122&itype=a&ver=15005&tm=593&src=ds&p={searchTerms}, , [d416852ad4c586b0dc579fea50b4b749]
PUP.Optional.DefaultSearch.ShrtCln, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}|DisplayName, default-search.net, , [99514e61bcdd2c0adeee1c059b69ef11]
PUP.Optional.DefaultSearch.ShrtCln, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}|SuggestionsURL_JSON, hxxp://www.default-search.net?sid=476&aid=122&itype=a&ver=15005&tm=593&src=ds&p={searchTerms}&ft=json, , [e505654a58412d0949837ba62cd857a9]
PUP.Optional.Bandoo.AppFlsh, HKU\S-1-5-21-1180511552-3395178981-381098957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}|FaviconPath, C:\Program Files (x86)\Settings Manager\smdmf\favicon.ico, , [4d9d1b94d9c08da91c47602d29dbe31d]

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 2
PUP.Optional.PullUpdate, C:\ProgramData\KAesqSAgL\dat, , [e208149bbbde7abc0acb5c0995703ac6],
PUP.Optional.PullUpdate, C:\ProgramData\KAesqSAgL, , [e208149bbbde7abc0acb5c0995703ac6],

Dateien: 6
PUP.Optional.Yontoo, C:\Users\Benutzername\Downloads\HDvid-codec-FF.exe, , [bb2f307f8712b284175d55864bb67c84],
PUP.Optional.PullUpdate, C:\ProgramData\KAesqSAgL\dat\QcfEbwfd.exe.config, , [e208149bbbde7abc0acb5c0995703ac6],
PUP.Optional.PullUpdate, C:\ProgramData\KAesqSAgL\dat\SHlGwhhLWL.exe.config, , [e208149bbbde7abc0acb5c0995703ac6],
PUP.Optional.PullUpdate, C:\ProgramData\KAesqSAgL\info.dat, , [e208149bbbde7abc0acb5c0995703ac6],
PUP.Optional.PullUpdate, C:\ProgramData\KAesqSAgL\UhfGOKfaNq.dat, , [e208149bbbde7abc0acb5c0995703ac6],
PUP.Optional.PullUpdate, C:\ProgramData\KAesqSAgL\UhfGOKfaNq.exe.config, , [e208149bbbde7abc0acb5c0995703ac6],

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)