Windows 7: MSE Update hängt + Funde Malewarebytes (zweiter PC)

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 15.07.2016
Suchlaufzeit: 18:59:18
Protokolldatei: mbam.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2016.07.15.05
Rootkit-Datenbank: v2016.05.27.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows Vista Service Pack 2
CPU: x64
Dateisystem: NTFS
Benutzer: Sophia

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 337651
Abgelaufene Zeit: 1 Std., 39 Min., 41 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 26
Adware.1ClickDownload, HKLM\SOFTWARE\CLASSES\APPID\{C007DADD-132A-624C-088E-59EE6CF0711F}, In Quarantäne, [460be4400298e35354375443b44e867a], 
Adware.1ClickDownload, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{C007DADD-132A-624C-088E-59EE6CF0711F}, In Quarantäne, [460be4400298e35354375443b44e867a], 
Adware.1ClickDownload, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{C007DADD-132A-624C-088E-59EE6CF0711F}, In Quarantäne, [460be4400298e35354375443b44e867a], 
PUP.Optional.ASK, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKLM\SOFTWARE\CLASSES\TYPELIB\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKLM\SOFTWARE\CLASSES\INTERFACE\{6C434537-053E-486D-B62A-160059D9D456}, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKLM\SOFTWARE\CLASSES\INTERFACE\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKLM\SOFTWARE\CLASSES\INTERFACE\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{6C434537-053E-486D-B62A-160059D9D456}, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{6C434537-053E-486D-B62A-160059D9D456}, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKLM\SOFTWARE\CLASSES\GenericAskToolbar.ToolbarWnd.1, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKLM\SOFTWARE\CLASSES\GenericAskToolbar.ToolbarWnd, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKLM\SOFTWARE\WOW6432NODE\CLASSES\GenericAskToolbar.ToolbarWnd, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKLM\SOFTWARE\CLASSES\WOW6432NODE\GenericAskToolbar.ToolbarWnd, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{D4027C7F-154A-4066-A1AD-4243D8127440}, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKLM\SOFTWARE\WOW6432NODE\CLASSES\GenericAskToolbar.ToolbarWnd.1, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKLM\SOFTWARE\CLASSES\WOW6432NODE\GenericAskToolbar.ToolbarWnd.1, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKU\S-1-5-21-3595463166-1796683122-1627409653-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{D4027C7F-154A-4066-A1AD-4243D8127440}, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKU\S-1-5-21-3595463166-1796683122-1627409653-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{D4027C7F-154A-4066-A1AD-4243D8127440}, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 

Registrierungswerte: 4
PUP.Optional.ASK, HKU\S-1-5-21-3595463166-1796683122-1627409653-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{D4027C7F-154A-4066-A1AD-4243D8127440},  | ÔJ f@¡*BCØ t@, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d]
PUP.Optional.ASK, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{D4027C7F-154A-4066-A1AD-4243D8127440}, In Quarantäne, [8fc2aa7a6c2e7eb8b56bb8f4996bf30d], 
PUP.Optional.ASK, HKU\S-1-5-21-3595463166-1796683122-1627409653-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER\{D4027C7F-154A-4066-A1AD-4243D8127440}, In Quarantäne, [0948160e900a68ced44c1894e1231de3], 
PUP.Optional.ASK, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{D4027C7F-154A-4066-A1AD-4243D8127440}, In Quarantäne, [d37e061e4c4ea492d24e6c400df7c23e], 

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 33
PUP.Optional.ASK, C:\Users\Sophia\AppData\Local\Temp\APNLogs, In Quarantäne, [1938b86c158583b3065e696836cc7f81], 
PUP.Optional.ICQToolbar, C:\Program Files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}, Löschen bei Neustart, [56fb7ba99802999de4bd6d58df23c63a], 
PUP.Optional.ICQToolbar, C:\Program Files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome, In Quarantäne, [56fb7ba99802999de4bd6d58df23c63a], 
PUP.Optional.ICQToolbar, C:\Program Files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components, In Quarantäne, [56fb7ba99802999de4bd6d58df23c63a], 
PUP.Optional.ICQToolbar, C:\Program Files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults, Löschen bei Neustart, [56fb7ba99802999de4bd6d58df23c63a], 
PUP.Optional.ICQToolbar, C:\Program Files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences, In Quarantäne, [56fb7ba99802999de4bd6d58df23c63a], 
PUP.Optional.ICQToolbar, C:\Program Files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF, In Quarantäne, [56fb7ba99802999de4bd6d58df23c63a], 
PUP.Optional.ICQToolbar, C:\Program Files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine, In Quarantäne, [56fb7ba99802999de4bd6d58df23c63a], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245, Löschen bei Neustart, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs, Löschen bei Neustart, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorBubbleDialog, Löschen bei Neustart, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorBubbleDialog\images, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\AddedAppDialog, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\DefualtImages, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\DetectedAppDialog, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\EngineFirstTimeDialog, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\NewSearchProtectorDialog, Löschen bei Neustart, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\NewSearchProtectorDialog\images, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorDialog, Löschen bei Neustart, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorDialog\Images, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorRetakeoverDialog, Löschen bei Neustart, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorRetakeoverDialog\Images, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\ToolbarFirstTimeDialog, Löschen bei Neustart, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\ToolbarFirstTimeDialog\images, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\ToolbarUntrustedAppsApprovalDialog, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\UntrustedAddedAppDialog, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\UntrustedAppApprovalDialog, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\UntrustedAppPendingDialog, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.Conduit, C:\Users\Sophia\AppData\LocalLow\Conduit, Löschen bei Neustart, [afa28a9a178314224be5b413a2609967], 
PUP.Optional.Conduit, C:\Users\Sophia\AppData\LocalLow\Conduit\Community Alerts, Löschen bei Neustart, [afa28a9a178314224be5b413a2609967], 
PUP.Optional.Conduit, C:\Users\Sophia\AppData\LocalLow\Conduit\Community Alerts\Feeds, In Quarantäne, [afa28a9a178314224be5b413a2609967], 
PUP.Optional.Conduit, C:\Users\Sophia\AppData\LocalLow\Conduit\Community Alerts\LanguagePacks, In Quarantäne, [afa28a9a178314224be5b413a2609967], 
PUP.Optional.Conduit, C:\Users\Sophia\AppData\LocalLow\Conduit\Community Alerts\Log, In Quarantäne, [afa28a9a178314224be5b413a2609967], 

Dateien: 80
PUP.Optional.InstallCore, C:\Users\Sophia\Downloads\Bombay_Bicycle_Club_-_Open_House_downloader.exe, In Quarantäne, [361bfa2af1a9a19584a690f605fc926e], 
PUP.Optional.ASK, C:\Users\Sophia\AppData\Local\Temp\APNLogs\iw.log, In Quarantäne, [1938b86c158583b3065e696836cc7f81], 
PUP.Optional.ICQToolbar, C:\Program Files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome.manifest, In Quarantäne, [56fb7ba99802999de4bd6d58df23c63a], 
PUP.Optional.ICQToolbar, C:\Program Files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\install.rdf, In Quarantäne, [56fb7ba99802999de4bd6d58df23c63a], 
PUP.Optional.ICQToolbar, C:\Program Files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\icqtoolbar.jar, In Quarantäne, [56fb7ba99802999de4bd6d58df23c63a], 
PUP.Optional.ICQToolbar, C:\Program Files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components\ITB_History.js, In Quarantäne, [56fb7ba99802999de4bd6d58df23c63a], 
PUP.Optional.ICQToolbar, C:\Program Files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\prefs.js, In Quarantäne, [56fb7ba99802999de4bd6d58df23c63a], 
PUP.Optional.ICQToolbar, C:\Program Files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\user.js, In Quarantäne, [56fb7ba99802999de4bd6d58df23c63a], 
PUP.Optional.ICQToolbar, C:\Program Files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\manifest.mf, In Quarantäne, [56fb7ba99802999de4bd6d58df23c63a], 
PUP.Optional.ICQToolbar, C:\Program Files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.rsa, In Quarantäne, [56fb7ba99802999de4bd6d58df23c63a], 
PUP.Optional.ICQToolbar, C:\Program Files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.sf, In Quarantäne, [56fb7ba99802999de4bd6d58df23c63a], 
PUP.Optional.ICQToolbar, C:\Program Files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.gif, In Quarantäne, [56fb7ba99802999de4bd6d58df23c63a], 
PUP.Optional.ICQToolbar, C:\Program Files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.src, In Quarantäne, [56fb7ba99802999de4bd6d58df23c63a], 
PUP.Optional.ICQToolbar, C:\Program Files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.xml, In Quarantäne, [56fb7ba99802999de4bd6d58df23c63a], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\DialogsAPI.js, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\excanvas.js, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\generalDialogStyle.css, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\PIE.htc, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\RoundedCorners.css, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\RoundedCornersIE9.css, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\settings.js, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\version.txt, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorBubbleDialog\bubble.css, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorBubbleDialog\bubble.js, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorBubbleDialog\main.html, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorBubbleDialog\images\information.png, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorBubbleDialog\images\x-default-LTR.png, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorBubbleDialog\images\x-default-RTL.png, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorBubbleDialog\images\x-mouseover-LTR.png, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorBubbleDialog\images\x-mouseover-RTL.png, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\AddedAppDialog\app-added.js, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\AddedAppDialog\main.html, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\DefualtImages\icon.png, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\DetectedAppDialog\app-2go.js, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\DetectedAppDialog\main.html, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\EngineFirstTimeDialog\EngineFirstTimeDialog.js, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\EngineFirstTimeDialog\main.html, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\EngineFirstTimeDialog\right-click.gif, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\NewSearchProtectorDialog\main.html, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\NewSearchProtectorDialog\SearchProtector.css, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\NewSearchProtectorDialog\SearchProtector.js, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\NewSearchProtectorDialog\images\ok-button.png, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\NewSearchProtectorDialog\images\separation-line.png, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\NewSearchProtectorDialog\images\warning.png, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorDialog\main.html, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorDialog\SearchProtector.css, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorDialog\SearchProtector.js, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorDialog\Images\info.png, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorDialog\Images\ok-on.png, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorDialog\Images\ok.png, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorRetakeoverDialog\main.html, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorRetakeoverDialog\SearchProtectorRetakeover.css, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorRetakeoverDialog\SearchProtectorRetakeover.js, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorRetakeoverDialog\Images\Icon.png, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorRetakeoverDialog\Images\info.png, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorRetakeoverDialog\Images\ok-on.png, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\SearchProtectorRetakeoverDialog\Images\ok.png, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\ToolbarFirstTimeDialog\main.html, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\ToolbarFirstTimeDialog\ToolbarFirstTimeDialog.css, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\ToolbarFirstTimeDialog\ToolbarFirstTimeDialog.js, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\ToolbarFirstTimeDialog\images\app-store-icon.png, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\ToolbarFirstTimeDialog\images\arrow.png, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\ToolbarFirstTimeDialog\images\divider.png, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\ToolbarFirstTimeDialog\images\emailNotifier.gif, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\ToolbarFirstTimeDialog\images\facebook.png, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\ToolbarFirstTimeDialog\images\radio.GIF, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\ToolbarFirstTimeDialog\images\Thumbs.db, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\ToolbarFirstTimeDialog\images\truste_welcome.GIF, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\ToolbarFirstTimeDialog\images\weather.GIF, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\ToolbarUntrustedAppsApprovalDialog\main.html, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\ToolbarUntrustedAppsApprovalDialog\ToolbarUntrustedAppsApprovalDialog.js, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\UntrustedAddedAppDialog\main.html, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\UntrustedAddedAppDialog\UT-app-dialog-added.js, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\UntrustedAppApprovalDialog\main.html, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\UntrustedAppApprovalDialog\UT-app-dialog-needs-your-approval.js, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\UntrustedAppPendingDialog\main.html, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.ConduitTB.Gen, C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\aj1j2dp4.default\CT2431245\Dialogs\UntrustedAppPendingDialog\UT-app-dialog-is-waiting.js, In Quarantäne, [e56ca1839dfd082eefe102c316ec4db3], 
PUP.Optional.Conduit, C:\Users\Sophia\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_825452_821260_DE.xml, In Quarantäne, [afa28a9a178314224be5b413a2609967], 
PUP.Optional.Conduit, C:\Users\Sophia\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alert_services_conduit_com_Alerts_AlertServices_asmx_GetHostedFeedRss_alertID=825452&alertFeedId=821260.xml, In Quarantäne, [afa28a9a178314224be5b413a2609967], 
PUP.Optional.Conduit, C:\Users\Sophia\AppData\LocalLow\Conduit\Community Alerts\LanguagePacks\en.xml, In Quarantäne, [afa28a9a178314224be5b413a2609967], 

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
         

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 13-07-2016 02
durchgeführt von Sophia (Administrator) auf SOPHIA-PC (15-07-2016 21:15:08)
Gestartet von C:\Users\Sophia\Desktop
Geladene Profile: Sophia (Verfügbare Profile: Sophia)
Platform: Windows Vista (TM) Home Premium Service Pack 2 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 9 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\stacsv64.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
() C:\Windows\System32\WLTRYSVC.EXE
(Dell Inc.) C:\Windows\System32\BCMWLTRY.EXE
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\AESTSr64.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVerMedia) C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
() C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Tobit ClipInc\Server\ClipInc-Server.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\STService.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Flux Software LLC) C:\Users\Sophia\AppData\Local\FluxSoftware\Flux\flux.exe
(Dropbox, Inc.) C:\Users\Sophia\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Dropbox, Inc.) C:\Users\Sophia\AppData\Local\Dropbox\Update\DropboxUpdate.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1584184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169744 2015-09-12] (Apple Inc.)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1340192 2016-01-29] (Microsoft Corporation)
HKLM\...\Run: [SunJavaUpdateSched] => "C:\Program Files\Java\jre1.8.0_66\bin\jusched.exe"
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [462848 2009-03-19] (IDT, Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-08-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Microsoft Default Manager] => C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [250192 2009-04-24] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-12-22] (Oracle Corporation)
HKLM-x32\...\RunOnce: [Launcher] => C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\Launcher.exe [165184 2010-07-21] (Softthinks)
HKU\S-1-5-21-3595463166-1796683122-1627409653-1000\...\Run: [f.lux] => C:\Users\Sophia\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-24] (Flux Software LLC)
HKU\S-1-5-21-3595463166-1796683122-1627409653-1000\...\Run: [Dropbox Update] => C:\Users\Sophia\AppData\Local\Dropbox\Update\DropboxUpdate.exe [136048 2015-09-28] (Dropbox, Inc.)
HKU\S-1-5-21-3595463166-1796683122-1627409653-1000\...\MountPoints2: {d8327765-bbda-11de-b88f-0026b907cf2b} - F:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3595463166-1796683122-1627409653-1000\...\MountPoints2: {d832776d-bbda-11de-b88f-0026b907cf2b} - F:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3595463166-1796683122-1627409653-1000\...\MountPoints2: {e999ee64-1075-11e6-bb43-0026b907cf2b} - G:\LaunchU3.exe -a
HKU\S-1-5-21-3595463166-1796683122-1627409653-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\PhotoScreensaver.scr [840704 2009-04-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Sophia\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Sophia\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Sophia\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Sophia\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Sophia\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Sophia\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Sophia\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-07-05] (Dropbox, Inc.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk [2009-10-04]
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk [2009-10-04]
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Sophia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-07-13]
ShortcutTarget: Dropbox.lnk -> C:\Users\Sophia\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.179.1
Tcpip\..\Interfaces\{2641EED2-5F8E-4AC2-A38E-7655BB7C2B4A}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{EA085BBF-1A5F-492C-BE04-02E870D39C8D}: [DhcpNameServer] 192.168.179.1

Internet Explorer:
==================
HKU\S-1-5-21-3595463166-1796683122-1627409653-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3595463166-1796683122-1627409653-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/USCON/8
HKU\S-1-5-21-3595463166-1796683122-1627409653-1000\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://www.icq.com/search/results.php?q={searchTerms}&ch_id=skin
URLSearchHook: HKLM-x32 -> Standard = {855F3B16-6D32-4fe6-8A56-BBB695989046}
SearchScopes: HKLM-x32 -> DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = 
SearchScopes: HKU\S-1-5-21-3595463166-1796683122-1627409653-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=DLCDF7&pc=MDDC&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-3595463166-1796683122-1627409653-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=DLCDF7&pc=MDDC&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-3595463166-1796683122-1627409653-1000 -> {C9C99FA8-8F23-4A82-9A91-1B400495DB37} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&type=A010DE739&p={SearchTerms}
BHO: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Windows\system32\mscoree.dll [2009-11-08] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18] (Adobe Systems Incorporated)
BHO-x32: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08] (DivX, LLC)
BHO-x32: DivX HiQ -> {593DDEC6-7468-4cdd-90E1-42DADAA222E9} -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08] (DivX, LLC)
BHO-x32: Kein Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> Keine Datei
BHO-x32: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Windows\system32\mscoree.dll [2009-11-08] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\ssv.dll [2016-02-02] (Oracle Corporation)
BHO-x32: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17] (Microsoft Corporation)
BHO-x32: Kein Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> Keine Datei
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-01-17] (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\jp2ssv.dll [2016-02-02] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-3595463166-1796683122-1627409653-1000 -> Kein Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  Keine Datei
Toolbar: HKU\S-1-5-21-3595463166-1796683122-1627409653-1000 -> Kein Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Keine Datei
Toolbar: HKU\S-1-5-21-3595463166-1796683122-1627409653-1000 -> Kein Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  Keine Datei
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll [2008-12-03] (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll [2008-12-03] (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-01-17] (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-02-01] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\d64wkzvr.default-1415343792518
FF DefaultSearchEngine: Ecosia
FF SelectedSearchEngine: Ecosia
FF Homepage: hxxp://www.sueddeutsche.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-15] ()
FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-20] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-15] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-09-04] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2010-02-05] (CANON INC.)
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08] (DivX, LLC)
FF Plugin-x32: @divx.com/DivX OVS Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2010-11-20] (DivX, LLC.)
FF Plugin-x32: @java.com/DTPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\dtplugin\npDeployJava1.dll [2016-02-02] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\plugin2\npjp2.dll [2016-02-02] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2008-12-05] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-14] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-02-16] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2013-02-16] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\d64wkzvr.default-1415343792518\searchplugins\ecosia.xml [2015-10-21]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\avg-secure-search.xml [2015-07-18]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml [2014-03-06]
FF Extension: Ecosia — The search engine that plants trees! - C:\Users\Sophia\AppData\Roaming\Mozilla\Firefox\Profiles\d64wkzvr.default-1415343792518\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi [2015-10-21]
FF Extension: Yahoo! Toolbar - C:\Program Files (x86)\Mozilla Firefox\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [2016-02-13] [ist nicht signiert]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2016-02-13] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-10-10] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video
FF Extension: DivX Plus Web Player HTML5 &video& - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video [2011-01-03] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa
FF Extension: DivX HiQ - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa [2011-01-03] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2016-02-03]

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\wpa\wpa.crx [2010-12-08]
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\html5video\html5video.crx [2010-12-08]
CHR HKLM-x32\...\Chrome\Extension: [ohgndokldibnndfnjnagojmheejlengn] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-09-02] (Apple Inc.)
R2 AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [344064 2009-04-08] (AVerMedia) [Datei ist nicht signiert]
R2 AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [389120 2009-10-09] () [Datei ist nicht signiert]
R2 ClipInc001; C:\Program Files (x86)\Tobit ClipInc\Server\ClipInc-Server.exe [2230024 2009-05-27] ()
R2 DockLoginService; C:\Program Files\Dell\DellDock\DockLogin.exe [155648 2008-12-18] (Stardock Corporation) [Datei ist nicht signiert]
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2016-01-29] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [374344 2016-01-29] (Microsoft Corporation)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [383544 2008-01-21] (Microsoft Corporation)
R2 wltrysvc; C:\Windows\System32\bcmwltry.exe [3051520 2008-12-21] (Dell Inc.) [Datei ist nicht signiert]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 AVerAF35; C:\Windows\System32\Drivers\AVerAF35.sys [511232 2009-10-19] (AVerMedia TECHNOLOGIES, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-07-15] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [289120 2015-11-13] (Microsoft Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133816 2015-11-13] (Microsoft Corporation)
S3 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R3 OA008Ufd; C:\Windows\System32\DRIVERS\OA008Ufd.sys [159840 2009-03-06] (Creative Technology Ltd.)
R3 OA008Vid; C:\Windows\System32\DRIVERS\OA008Vid.sys [313696 2009-05-06] (Creative Technology Ltd.)
R1 SLEE_16_DRIVER; C:\Windows\Sleen1664.sys [85952 2008-10-01] (Softwareentwicklung Remus - ArchiCrypt )
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-08-16] (Apple, Inc.) [Datei ist nicht signiert]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 massfilter; system32\drivers\massfilter.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 PCDSRVC{1E208CE0-FB7451FF-06020101}_0; \??\c:\program files\dell support center\pcdsrvc_x64.pkms [X]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-07-15 21:15 - 2016-07-15 21:17 - 00021828 _____ C:\Users\Sophia\Desktop\FRST.txt
2016-07-15 21:14 - 2016-07-15 21:15 - 00000000 ____D C:\FRST
2016-07-15 20:46 - 2016-07-15 20:46 - 00028586 _____ C:\Users\Sophia\Desktop\mbam.txt
2016-07-15 18:54 - 2016-07-15 18:34 - 02390528 _____ (Farbar) C:\Users\Sophia\Desktop\FRST64.exe
2016-07-13 22:33 - 2016-07-13 22:33 - 00000000 ____D C:\Users\Sophia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-07-11 19:48 - 2016-07-11 19:48 - 00001758 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2016-07-11 19:48 - 2016-07-11 19:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-07-15 21:15 - 2015-09-28 16:10 - 00001228 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3595463166-1796683122-1627409653-1000UA.job
2016-07-15 21:15 - 2008-01-21 13:10 - 01566504 _____ C:\Windows\system32\PerfStringBackup.INI
2016-07-15 21:15 - 2008-01-21 13:09 - 00674032 _____ C:\Windows\system32\perfh007.dat
2016-07-15 21:15 - 2008-01-21 13:09 - 00146012 _____ C:\Windows\system32\perfc007.dat
2016-07-15 21:15 - 2006-11-02 15:33 - 00000000 ____D C:\Windows\inf
2016-07-15 21:14 - 2015-11-18 18:59 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-07-15 21:12 - 2012-11-07 22:09 - 00000000 ___RD C:\Users\Sophia\Dropbox
2016-07-15 21:10 - 2013-06-08 21:49 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job
2016-07-15 21:10 - 2013-05-31 22:35 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2016-07-15 21:10 - 2012-02-03 08:40 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cce23eac9f2b80.job
2016-07-15 21:10 - 2009-10-07 17:14 - 00000000 ____D C:\Users\Sophia\AppData\Local\SoftThinks
2016-07-15 21:07 - 2011-07-24 10:02 - 00000506 _____ C:\Windows\Tasks\SystemToolsDailyTest.job
2016-07-15 21:07 - 2006-11-02 17:42 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-07-15 21:07 - 2006-11-02 17:22 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2016-07-15 21:07 - 2006-11-02 17:22 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2016-07-15 21:05 - 2015-11-29 13:38 - 00000000 __HDC C:\Windows\$NtUninstallKB2845142_WM64$
2016-07-15 21:04 - 2006-11-02 17:42 - 00032582 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-07-15 20:49 - 2012-09-07 14:58 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-07-15 20:45 - 2011-09-12 14:35 - 00001142 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3595463166-1796683122-1627409653-1000UA.job
2016-07-15 20:45 - 2011-09-12 14:35 - 00001120 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3595463166-1796683122-1627409653-1000Core.job
2016-07-15 20:30 - 2010-02-22 22:24 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-07-15 19:51 - 2012-09-07 14:58 - 00003738 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-07-15 19:51 - 2012-04-15 09:34 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-07-15 19:51 - 2011-10-20 20:00 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-07-15 18:56 - 2015-11-18 18:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-07-15 18:56 - 2015-11-18 18:57 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-07-15 18:50 - 2011-10-09 16:55 - 00000000 ____D C:\Windows\system32\Macromed
2016-07-15 18:49 - 2009-10-04 03:50 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-07-15 18:26 - 2011-07-24 10:03 - 00003488 _____ C:\Windows\System32\Tasks\PCDEventLauncher
2016-07-15 18:24 - 2011-07-24 10:02 - 00003536 _____ C:\Windows\System32\Tasks\SystemToolsDailyTest
2016-07-15 18:23 - 2016-01-03 15:24 - 00003698 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{994638B0-3BDB-4090-9335-EB2F209502B8}
2016-07-13 22:33 - 2012-11-07 22:05 - 00000000 ____D C:\Users\Sophia\AppData\Roaming\Dropbox
2016-07-13 22:23 - 2016-01-10 23:37 - 00000000 ____D C:\Users\Sophia\Documents\Arbeit Norys
2016-07-11 19:48 - 2009-10-10 15:07 - 00000000 ____D C:\Program Files (x86)\QuickTime
2016-07-07 02:39 - 2011-01-03 12:29 - 00485032 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-07-04 16:15 - 2015-09-28 16:10 - 00001176 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3595463166-1796683122-1627409653-1000Core.job
2016-07-04 15:34 - 2011-07-24 10:03 - 00000564 _____ C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
2016-06-29 10:54 - 2011-07-24 10:03 - 00004272 _____ C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask
2016-06-15 18:23 - 2009-10-04 04:09 - 00000000 ____D C:\ProgramData\PCDr

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2013-06-26 14:39 - 2014-06-23 15:50 - 0003730 _____ () C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
2009-10-29 23:40 - 2011-01-02 13:49 - 0019513 _____ () C:\Users\Sophia\AppData\Roaming\UserTile.png
2009-10-07 20:56 - 2010-03-16 17:46 - 0000116 _____ () C:\Users\Sophia\AppData\Roaming\wklnhst.dat
2010-07-07 16:36 - 2015-03-11 18:32 - 0006836 _____ () C:\Users\Sophia\AppData\Local\d3d9caps.dat
2009-10-23 20:08 - 2016-01-27 04:02 - 0000732 _____ () C:\Users\Sophia\AppData\Local\d3d9caps64.dat
2009-10-07 19:32 - 2016-04-24 20:45 - 0113152 _____ () C:\Users\Sophia\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-02-02 19:00 - 2016-02-02 19:00 - 0350652 _____ () C:\Users\Sophia\AppData\Local\dd_vcredistMSI1974.txt
2011-01-02 15:23 - 2011-01-02 15:24 - 0422578 _____ () C:\Users\Sophia\AppData\Local\dd_vcredistMSI2F05.txt
2016-01-31 14:59 - 2016-01-31 14:59 - 0351580 _____ () C:\Users\Sophia\AppData\Local\dd_vcredistMSI452D.txt
2016-02-02 11:47 - 2016-02-02 11:47 - 0004198 _____ () C:\Users\Sophia\AppData\Local\dd_vcredistMSI4E6E.txt
2016-02-02 11:48 - 2016-02-02 11:48 - 0345682 _____ () C:\Users\Sophia\AppData\Local\dd_vcredistMSI4F18.txt
2010-02-10 14:05 - 2010-02-10 14:05 - 0423844 _____ () C:\Users\Sophia\AppData\Local\dd_vcredistMSI738C.txt
2010-02-17 21:55 - 2010-02-17 21:56 - 0402450 _____ () C:\Users\Sophia\AppData\Local\dd_vcredistMSI7E5E.txt
2016-02-02 19:00 - 2016-02-02 19:00 - 0011162 _____ () C:\Users\Sophia\AppData\Local\dd_vcredistUI1974.txt
2011-01-02 15:23 - 2011-01-02 15:24 - 0011714 _____ () C:\Users\Sophia\AppData\Local\dd_vcredistUI2F05.txt
2016-01-31 14:59 - 2016-01-31 14:59 - 0011146 _____ () C:\Users\Sophia\AppData\Local\dd_vcredistUI452D.txt
2016-02-02 11:47 - 2016-02-02 11:47 - 0011232 _____ () C:\Users\Sophia\AppData\Local\dd_vcredistUI4E6E.txt
2016-02-02 11:48 - 2016-02-02 11:48 - 0011162 _____ () C:\Users\Sophia\AppData\Local\dd_vcredistUI4F18.txt
2010-02-10 14:05 - 2010-02-10 14:05 - 0011370 _____ () C:\Users\Sophia\AppData\Local\dd_vcredistUI738C.txt
2010-02-17 21:55 - 2010-02-17 21:56 - 0011422 _____ () C:\Users\Sophia\AppData\Local\dd_vcredistUI7E5E.txt
2016-03-22 23:39 - 2016-03-22 23:39 - 0000000 _____ () C:\Users\Sophia\AppData\Local\{5E14A3ED-25ED-44F1-8908-F37B7570D7EA}
2009-10-09 19:00 - 2009-12-21 20:50 - 0000056 ____H () C:\ProgramData\ezsidmv.dat

Einige Dateien in TEMP:
====================
C:\Users\Sophia\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpwh1uui.dll
C:\Users\Sophia\AppData\Local\Temp\jre-8u66-windows-au.exe
C:\Users\Sophia\AppData\Local\Temp\jre-8u91-windows-au.exe
C:\Users\Sophia\AppData\Local\Temp\mpam-c8247271.exe
C:\Users\Sophia\AppData\Local\Temp\rarext.dll
C:\Users\Sophia\AppData\Local\Temp\Risweb32.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-07-15 21:26

==================== Ende von FRST.txt ============================