Hallo zusammen,

seit einiger Zeit ist mein Echtzeitscanner von McAfee standardmäßig beim Einschalten des Computers ausgestellt. Beim Versuch ihn anzustellen, springt er nach 3 Sekunden zurück in den deaktivierten Modus.
Wie in anderen Einträgen beschrieben, habe ich einen Scan mit Malwarebytes gemacht und alle möglichen Schadquellen (>300!) in Quarantäne geschoben. Die Log-Datei ist angehängt.
Leider hat sich am Problem nach dem Verschieben in Quarantäne nichts geändert

Kann mir jemand weiterhelfen bei meinem Problem?

Vielen Dank schon einmal

Viele Grüße
Jan

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 14.04.2017
Suchlaufzeit: 11:37
Protokolldatei: log.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2017.04.14.02
Rootkit-Datenbank: v2017.04.02.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: Jan

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 386308
Abgelaufene Zeit: 24 Min., 34 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 11
PUP.Optional.SearchManager, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pilplloabdedfmialnfchjomjmpjcoej, , [d1294ea298106bcbb9034d8e8b777090], 
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C46AB014-AC2D-4E36-8028-703D4BBD0C91}, , [f109945c3b6d9e985e2e001c6d95d12f], 
PUP.Optional.ByteFence, HKLM\SOFTWARE\MICROSOFT\TRACING\ByteFence_RASAPI32, , [e812cb2524843df91a2b0b9a53ae758b], 
PUP.Optional.ByteFence, HKLM\SOFTWARE\MICROSOFT\TRACING\ByteFence_RASMANCS, , [e218db154365a09654f1129327dafe02], 
PUP.Optional.SearchManager, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\pilplloabdedfmialnfchjomjmpjcoej, , [a159e10fdecaf6406953db00f0127d83], 
PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C46AB014-AC2D-4E36-8028-703D4BBD0C91}, , [d4268c64189021151874b666e41ec23e], 
PUP.Optional.InstallCore, HKU\S-1-5-21-265458620-2719425478-174326876-1002\SOFTWARE\csastats, , [51a95799ccdca78fceea1ebdea18e020], 
PUP.Optional.InstallCore, HKU\S-1-5-21-265458620-2719425478-174326876-1002\SOFTWARE\ICSW1.23, , [2ccec52b3c6cb97d23b5b3e701015ca4], 
PUP.Optional.SearchManager, HKU\S-1-5-21-265458620-2719425478-174326876-1002\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pilplloabdedfmialnfchjomjmpjcoej, , [38c2fdf3961271c54f04ec3208faf40c], 
PUP.Optional.WinYahoo, HKU\S-1-5-21-265458620-2719425478-174326876-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0CE02FFA-A6B0-46F6-BA2F-BD32C3630126}, , [a1596888f2b6d561e3a875a737cb54ac], 
PUP.Optional.ProductSetup, HKU\S-1-5-21-265458620-2719425478-174326876-1002\SOFTWARE\PRODUCTSETUP, , [56a4915f91179c9ad993d3d08d75639d], 

Registrierungswerte: 4
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C46AB014-AC2D-4E36-8028-703D4BBD0C91}|URL, https://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f[f109945c3b6d9e985e2e001c6d95d12f]D4%26b[f109945c3b6d9e985e2e001c6d95d12f]DIE%26cc[f109945c3b6d9e985e2e001c6d95d12f]Dde%26pa[f109945c3b6d9e985e2e001c6d95d12f]Dwinyahoo%26cd[f109945c3b6d9e985e2e001c6d95d12f]D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr[f109945c3b6d9e985e2e001c6d95d12f]D1685897049%26a[f109945c3b6d9e985e2e001c6d95d12f]Dwbf_fsvideosft_17_06%26os_ver[f109945c3b6d9e985e2e001c6d95d12f]D10.0%26os[f109945c3b6d9e985e2e001c6d95d12f]DWindowsB10BHome&p={searchTerms}, %4, %5
PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C46AB014-AC2D-4E36-8028-703D4BBD0C91}|URL, https://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f[d4268c64189021151874b666e41ec23e]D4%26b[d4268c64189021151874b666e41ec23e]DIE%26cc[d4268c64189021151874b666e41ec23e]Dde%26pa[d4268c64189021151874b666e41ec23e]Dwinyahoo%26cd[d4268c64189021151874b666e41ec23e]D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr[d4268c64189021151874b666e41ec23e]D1685897049%26a[d4268c64189021151874b666e41ec23e]Dwbf_fsvideosft_17_06%26os_ver[d4268c64189021151874b666e41ec23e]D10.0%26os[d4268c64189021151874b666e41ec23e]DWindowsB10BHome&p={searchTerms}, %4, %5
PUP.Optional.WinYahoo, HKU\S-1-5-21-265458620-2719425478-174326876-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0CE02FFA-A6B0-46F6-BA2F-BD32C3630126}|URL, https://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f[a1596888f2b6d561e3a875a737cb54ac]D4%26b[a1596888f2b6d561e3a875a737cb54ac]DIE%26cc[a1596888f2b6d561e3a875a737cb54ac]Dde%26pa[a1596888f2b6d561e3a875a737cb54ac]Dwinyahoo%26cd[a1596888f2b6d561e3a875a737cb54ac]D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr[a1596888f2b6d561e3a875a737cb54ac]D1685897049%26a[a1596888f2b6d561e3a875a737cb54ac]Dwbf_fsvideosft_17_06%26os_ver[a1596888f2b6d561e3a875a737cb54ac]D10.0%26os[a1596888f2b6d561e3a875a737cb54ac]DWindowsB10BHome&p={searchTerms}, %4, %5
PUP.Optional.ProductSetup, HKU\S-1-5-21-265458620-2719425478-174326876-1002\SOFTWARE\PRODUCTSETUP|tb, 0G2O2W1R0C1R1H, , [56a4915f91179c9ad993d3d08d75639d]

Registrierungsdaten: 4
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=fSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[f901da163672d5615586699d0af9e818]D1%26bSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[f901da163672d5615586699d0af9e818]DIE%26ccSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[f901da163672d5615586699d0af9e818]Dde%26paSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[f901da163672d5615586699d0af9e818]Dwinyahoo%26cdSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[f901da163672d5615586699d0af9e818]D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26crSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[f901da163672d5615586699d0af9e818]D1685897049%26aSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[f901da163672d5615586699d0af9e818]Dwbf_fsvideosft_17_06%26os_verSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[f901da163672d5615586699d0af9e818]D10.0%26osSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[f901da163672d5615586699d0af9e818]DWindowsGut: (www.google.com)B10Gut: (www.google.com)BHome, %4, %5
PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=fSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[1cded0205553c274617ad432699ad12f]D1%26bSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[1cded0205553c274617ad432699ad12f]DIE%26ccSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[1cded0205553c274617ad432699ad12f]Dde%26paSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[1cded0205553c274617ad432699ad12f]Dwinyahoo%26cdSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[1cded0205553c274617ad432699ad12f]D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26crSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[1cded0205553c274617ad432699ad12f]D1685897049%26aSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[1cded0205553c274617ad432699ad12f]Dwbf_fsvideosft_17_06%26os_verSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[1cded0205553c274617ad432699ad12f]D10.0%26osSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[1cded0205553c274617ad432699ad12f]DWindowsGut: (www.google.com)B10Gut: (www.google.com)BHome, %4, %5
PUP.Optional.WinYahoo, HKU\S-1-5-21-265458620-2719425478-174326876-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=fSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[b04abd33e8c0ce6816618c796e95f010]D1%26bSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[b04abd33e8c0ce6816618c796e95f010]DIE%26ccSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[b04abd33e8c0ce6816618c796e95f010]Dde%26paSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[b04abd33e8c0ce6816618c796e95f010]Dwinyahoo%26cdSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[b04abd33e8c0ce6816618c796e95f010]D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26crSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[b04abd33e8c0ce6816618c796e95f010]D1685897049%26aSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[b04abd33e8c0ce6816618c796e95f010]Dwbf_fsvideosft_17_06%26os_verSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[b04abd33e8c0ce6816618c796e95f010]D10.0%26osSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[b04abd33e8c0ce6816618c796e95f010]DWindowsGut: (hxxp://www.google.com)B10Gut: (hxxp://www.google.com)BHome, %4, %5
PUP.Optional.WinYahoo, HKU\S-1-5-21-265458620-2719425478-174326876-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=fSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[6e8cdd136642ed4903d6ba4cc3404eb2]D1%26bSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[6e8cdd136642ed4903d6ba4cc3404eb2]DIE%26ccSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[6e8cdd136642ed4903d6ba4cc3404eb2]Dde%26paSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[6e8cdd136642ed4903d6ba4cc3404eb2]Dwinyahoo%26cdSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[6e8cdd136642ed4903d6ba4cc3404eb2]D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26crSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[6e8cdd136642ed4903d6ba4cc3404eb2]D1685897049%26aSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[6e8cdd136642ed4903d6ba4cc3404eb2]Dwbf_fsvideosft_17_06%26os_verSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[6e8cdd136642ed4903d6ba4cc3404eb2]D10.0%26osSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),,[6e8cdd136642ed4903d6ba4cc3404eb2]DWindowsGut: (www.google.com)B10Gut: (www.google.com)BHome, %4, %5

Ordner: 86
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\adapter, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\abstractbutton, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\abstractbutton\background, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\alert, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\alert\background, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\embedhtml, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\embedhtml\background, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\embedhtml\html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\embedhtml\js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\embedscript, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\embedscript\background, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\embedscript\html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\embedscript\js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\flare, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\flare\background, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\flare\icons, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\generic, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\generic\background, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\link, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\link\background, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\menu, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\menu\background, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\menu\css, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\menu\html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\menu\images, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\menu\js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\rss, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\rss\background, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\thirdparty, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\thirdparty\background, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\uninstall, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\uninstall\background, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\weather, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\weather\background, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\common, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\radio, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\radio\css, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\radio\js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\rss, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\rss\js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\test, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\topapps, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\topapps\css, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\topapps\js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\weather, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\weather\css, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\weather\js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\api, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\api\background, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\api\window, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\defaultSearch, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\defaultSearch\background, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\defaultSearch\foreground, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\moviereviews, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\moviereviews\background, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\moviereviews\css, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\moviereviews\html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\moviereviews\js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\radio, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\radio\background, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\radio\css, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\radio\foreground, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\radio\radioWrapper, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\search, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\search\background, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\search\html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\supertab, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\supertab\css, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\supertab\html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\supertab\js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\_metadata, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\icons, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\images, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\native, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\native\libs, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\shared, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mallpejgeafdahhflmliiahjdpgbegpk, , [6397668a62462f07a4dc703829d832ce], 

Dateien: 245
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mallpejgeafdahhflmliiahjdpgbegpk_0.localstorage, , [34c606eacddbff37b306a26e35cb8d73], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mallpejgeafdahhflmliiahjdpgbegpk_0.localstorage-journal, , [2ad0d11fefb9cd692e8bff11679922de], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\spent2.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\bg.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\buildVars, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\buildVars.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\companionSW.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\config.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\contentScript.css, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\contentScript.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\debug.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\debug.jade, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\spentJ.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\spentK.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\spentK.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\startup.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\stub.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\stubby.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\superFrame.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\toolbar.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\toolbar.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\toolbarUI.css, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\toolbarUI.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\toolbarUI.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\url.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\urlFragmentActions.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\webtooltab.cs.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\extension_toolbar_api.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\initWidgetWindow.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\manifest.json, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\newTabContentScript.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\options.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\spent.css, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\spent.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\spent.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\spent2.css, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\adapter\adapterUtil.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\adapter\widget-adapter.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\abstractbutton\background\abstractButton.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\alert\background\alertButton.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\embedhtml\background\embedHtmlWidget.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\embedhtml\html\embedHtmlTemplate.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\embedhtml\js\embedHtmlUI.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\embedscript\background\embedScriptWidget.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\embedscript\html\embedScriptTemplate.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\embedscript\js\embedScriptUI.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\flare\background\FlareWidget.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\flare\icons\Icon_Flare_blue.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\flare\icons\Icon_Flare_pink.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\flare\icons\Thumbs.db, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\generic\background\GenericWidget.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\link\background\linkButton.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\menu\README.txt, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\menu\background\menuButton.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\menu\css\menuframe.css, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\menu\html\menuframe.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\menu\images\right_arrow.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\menu\images\right_arrow_white.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\menu\js\jquery-1.7.1.min.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\menu\js\menuframe.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\menu\js\query-string.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\menu\js\underscore-1.3.1.min.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\rss\background\RssWidget.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\thirdparty\background\thirdPartyWidget.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\uninstall\background\uninstallButton.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\components\weather\background\weatherButton.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\js\bs.30.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\js\common.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\js\dynamic.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\js\enableDetect.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\js\eventListening.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\js\global.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\js\jquery-1.7.1.min.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\js\list-interaction.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\js\messageEventListener.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\js\navRedirector.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\js\paramReplacer.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\js\PartnerId.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\js\set.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\js\underscore-1.3.1.min.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\js\underscore-1.5.2.min.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\js\unifiedLogging.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widget-context-1.0.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\common\common.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\common\eventListening.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\common\list-interaction.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\common\set.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\radio\radio-widget.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\radio\css\radio-widget.css, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\radio\js\radio-custom.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\radio\js\radio-parser.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\radio\js\radio-widget.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\rss\rssWidget.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\rss\js\rss-widget.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\test\invalid.json, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\test\jquery.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\test\qunit.css, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\test\qunit.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\test\resource.json, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\test\resource.xml, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\test\testWidget.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\test\testWidget.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\topapps\widget.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\topapps\css\widget.css, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\topapps\js\topapps-config.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\topapps\js\widget.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\weather\weatherButton.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\weather\css\weatherButton.css, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\common\widget-api\widgets\weather\js\weather.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\api\background\ApiBasedWidget.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\api\background\widget-api-impl.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\api\window\hiddenWidgetWindow.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\api\window\hiddenWidgetWindow.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\api\window\hiddenWidgetWindowInit.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\api\window\widgetWindow.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\api\window\widgetWindow.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\defaultSearch\background\updateSearch.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\defaultSearch\background\updateSearchPromptBg.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\defaultSearch\foreground\07_buttons2.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\defaultSearch\foreground\08_buttons2.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\defaultSearch\foreground\defaultSearchModal.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\defaultSearch\foreground\tvf_btn_ok.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\defaultSearch\foreground\tvf_btn_ok2.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\defaultSearch\foreground\tvf_restart_icon.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\defaultSearch\foreground\updateSearchPromptFg.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\moviereviews\background\MovieReviewsWidget.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\moviereviews\css\movieReviews.css, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\moviereviews\html\movieReviews.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\moviereviews\js\movieReviews.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\radio\background\RadioWidget.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\radio\css\toolbar-item.css, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\radio\foreground\button.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\radio\radioWrapper\radioWrapper.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\radio\radioWrapper\radioWrapper.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\search\background\searchBox.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\search\html\searchSuggestions.css, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\search\html\searchSuggestions.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\search\html\searchSuggestions.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\search\html\searchSuggestionsInit.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\supertab\css\supertab.css, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\supertab\html\supertab.html, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\supertab\js\newtabfork.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\supertab\js\reporting.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\supertab\js\srchsugg.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\supertab\js\supertab.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\supertab\js\unifiedLogging.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\components\supertab\js\__utm.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\_metadata\computed_hashes.json, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\_metadata\verified_contents.json, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\icons\arrowSprite.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\icons\icon128.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\icons\icon16.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\icons\icon19disabled.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\icons\icon19on.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\icons\icon48.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\icons\tb_icon_search_disappearing_ask.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\images\223754507.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\images\223754534.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\images\223754535.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\images\223754536.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\images\223754537.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\images\223754551.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\images\down_arrow.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\images\IDR_PRODUCT_LOGO_16.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\images\IDR_WEBSTORE_ICON.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\images\magnifying_glass.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\images\RadioPlayerSprite.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\images\search_button.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\images\tvf_icon_guide.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\images\tvf_logo.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\images\wrench.png, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\newTabInitialize.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\chromeStorage.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\chromeUtils.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\companionSWUtils.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\exeManager.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\exeManagerNMD.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\exePackageManager.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\focusManager.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\globalBlacklistManager.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\messaging.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\mutation_summary-min.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\mutation_summary.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\nativeMessagingDispatcher.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\newTabInfo.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\options.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\readLocalStorage.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\reservespacefortoolbar.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\reservespaceifenabled.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\scriptInjector.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\searchContext.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\settingsOverrides.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\toolbarCookieParser.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\toolbarPreinit.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\underscore-1.3.1.min.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\URILoaderContentScript.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\webTooltabAPI.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\Widget.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\widgetContentScriptInjectee.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\widgetFactory.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\js\widgetWindowManager.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\native\cache.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\native\ce.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\native\debug.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\native\ss.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\native\libs\jquery-1.7.1.min.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\native\libs\jquery-1.9.1.min.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\native\libs\underscore-1.5.2.min.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\shared\activePing.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\shared\buttonLogger.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\shared\competitorDnsList.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\shared\console.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\shared\FFPreferencesPersister.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\shared\httpTransport.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\shared\HttpURL.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\shared\internationalSearch.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\shared\LocalStoragePersister.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\shared\MindsparkGlobal.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\shared\MindsparkGlobal.unitTest.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\shared\MindsparkGlobalNotes.txt, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\shared\rsvp-latest.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\shared\searchSuggestLocale.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\shared\testHttpTransport.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\shared\unifiedLogger.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\shared\unifiedLogging.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\shared\universalConsole.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\12.600.11.23646_0\shared\utils.js, , [d52538b8a503181e2c94c456619f6f91], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mallpejgeafdahhflmliiahjdpgbegpk\000003.log, , [6397668a62462f07a4dc703829d832ce], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mallpejgeafdahhflmliiahjdpgbegpk\CURRENT, , [6397668a62462f07a4dc703829d832ce], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mallpejgeafdahhflmliiahjdpgbegpk\LOCK, , [6397668a62462f07a4dc703829d832ce], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mallpejgeafdahhflmliiahjdpgbegpk\LOG, , [6397668a62462f07a4dc703829d832ce], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mallpejgeafdahhflmliiahjdpgbegpk\LOG.old, , [6397668a62462f07a4dc703829d832ce], 
PUP.Optional.MindSpark, C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mallpejgeafdahhflmliiahjdpgbegpk\MANIFEST-000001, , [6397668a62462f07a4dc703829d832ce], 
PUP.Optional.WinYahoo, C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\ndcjg7qe.default\prefs.js, Gut: (user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Schlecht: (user_pref("browser.startup.homepage", "https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06&param1=1&param2=f%3D1%26b%3DFirefox%26cc%3Dde%26pa%3Dwinyahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CyCzzyDtDzz0CtCtAzzyBzytAyCzzyBtN0D0Tzu0StCzzyCzytN1L2XzutAtFtByDtFtCtFyDtBtN1L1Czu1ByCtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCtB0CyCzztAtGtAtDtDyDtGyD0EyByDtGyB0CzytCtG0FtDyEyDyCyE0FtBtD0ByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzytCzy0AtB0CzyyBtGtByEzytAtGyE0B0BtDtG0ByBtCzytG0FtA0E0F0EyEyBzzyBtB0E0A2QtN0A0LzuyE%26cr%3D1685897049%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows,[8a70955be6c2fa3ccdc2c31e788a718f]B10,[8a70955be6c2fa3ccdc2c31e788a718f]BHome");), %5

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
         

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Hallo cosinus,

vielen Dank für deine Unterstützung. Anbei die FRST.txt:


FRST Logfile:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 15-03-2017 (ACHTUNG: ====> FRSTVersion ist 31 Tage alt und könnte veraltet sein)
durchgeführt von Jan (Administrator) auf JAN (15-04-2017 16:08:14)
Gestartet von C:\Users\Jan\Downloads
Geladene Profile: UpdatusUser & Jan (Verfügbare Profile: UpdatusUser & Jan)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Edge)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(AVerMedia TECHNOLOGIES, Inc.) C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe
(Condusiv Technologies) C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe
(Infineon Technologies AG) C:\Program Files (x86)\Infineon\Security Platform Software\IFXSPMGT.exe
(AVerMedia) C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
() C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Infineon Technologies AG) C:\Program Files (x86)\Infineon\Security Platform Software\IFXTCS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Infineon Technologies AG) C:\Program Files (x86)\Infineon\Security Platform Software\IfxPsdSv.exe
(Intel Security, Inc.) C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\VSCore_15_6\mcapexe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\2.3.290.0\McCSPServiceHost.exe
(Intel Security) C:\Program Files\Common Files\McAfee\ClientAnalytics\Legacy\McClientAnalytics.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Infineon Technologies AG) C:\Program Files (x86)\Infineon\Security Platform Software\PSDrt.exe
(Infineon Technologies AG) C:\Program Files (x86)\Infineon\Security Platform Software\SpTNA.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\SW Update\SWMAgent.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Spotify Ltd) C:\Users\Jan\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Jan\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Jan\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP ENVY 7640 series\Bin\ScanToPCActivationApp.exe
(Spotify Ltd) C:\Users\Jan\AppData\Roaming\Spotify\Spotify.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Spotify Ltd) C:\Users\Jan\AppData\Roaming\Spotify\Spotify.exe
() C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(AVerMedia TECHNOLOGIES, Inc.) C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.1051_none_7f2bf7ea21d201b2\TiWorker.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\ielowutil.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3242200 2016-11-11] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040296 2015-08-29] (Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-13] (Intel Corporation)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-12] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [97392 2012-08-15] (CyberLink Corp.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [210432 2016-07-05] (Geek Software GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598040 2016-06-22] (Oracle Corporation)
HKU\S-1-5-21-265458620-2719425478-174326876-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2016-07-16] (Microsoft Corporation)
HKU\S-1-5-21-265458620-2719425478-174326876-1002\...\Run: [AnyDVD] => C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe [2173888 2008-08-22] (SlySoft, Inc.)
HKU\S-1-5-21-265458620-2719425478-174326876-1002\...\Run: [Spotify] => C:\Users\Jan\AppData\Roaming\Spotify\Spotify.exe [7089776 2017-03-24] (Spotify Ltd)
HKU\S-1-5-21-265458620-2719425478-174326876-1002\...\Run: [Spotify Web Helper] => C:\Users\Jan\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-03-24] (Spotify Ltd)
HKU\S-1-5-21-265458620-2719425478-174326876-1002\...\Run: [HP ENVY 7640 series (NET)] => C:\Program Files\HP\HP ENVY 7640 series\Bin\ScanToPCActivationApp.exe [3483656 2014-08-22] (Hewlett-Packard Development Company, LP)
HKU\S-1-5-21-265458620-2719425478-174326876-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27427808 2017-01-23] (Skype Technologies S.A.)
HKU\S-1-5-21-265458620-2719425478-174326876-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9288408 2016-12-06] (Piriform Ltd)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVer HID Receiver.lnk [2014-10-14]
ShortcutTarget: AVer HID Receiver.lnk -> C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVerQuick.lnk [2014-10-14]
ShortcutTarget: AVerQuick.lnk -> C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe (AVerMedia TECHNOLOGIES, Inc.)
GroupPolicy: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{23d3303b-de53-411e-b103-f4c14fd6023a}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{49c668ad-ba2f-442f-ae16-a3e86dd0d071}: [DhcpNameServer] 192.168.2.1 192.168.2.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKU\S-1-5-21-265458620-2719425478-174326876-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung13.msn.com
SearchScopes: HKLM -> DefaultScope {C46AB014-AC2D-4E36-8028-703D4BBD0C91} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {C46AB014-AC2D-4E36-8028-703D4BBD0C91} URL = 
SearchScopes: HKU\S-1-5-21-265458620-2719425478-174326876-1002 -> DefaultScope {C46AB014-AC2D-4E36-8028-703D4BBD0C91} URL = 
SearchScopes: HKU\S-1-5-21-265458620-2719425478-174326876-1002 -> {C46AB014-AC2D-4E36-8028-703D4BBD0C91} URL = 
BHO: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\WINDOWS\system32\mscoree.dll [2016-07-16] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_102\bin\ssv.dll [2016-08-06] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_102\bin\jp2ssv.dll [2016-08-06] (Oracle Corporation)
BHO-x32: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\WINDOWS\system32\mscoree.dll [2016-07-16] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\ssv.dll [2016-01-21] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\jp2ssv.dll [2016-01-21] (Oracle Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll [2016-12-21] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll [2016-12-21] (McAfee, Inc.)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF DefaultProfile: ndcjg7qe.default
FF ProfilePath: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\ndcjg7qe.default [2017-04-14]
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\ndcjg7qe.default -> Yahoo! Powered Search
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\ndcjg7qe.default -> Yahoo! Powered Search
FF NewTab: Mozilla\Firefox\Profiles\ndcjg7qe.default -> about:newtab
FF Keyword.URL: Mozilla\Firefox\Profiles\ndcjg7qe.default -> user_pref("keyword.URL", true);
FF Homepage: Mozilla\Firefox\Profiles\ndcjg7qe.default -> user_pref("browser.startup.homepage", "hxxps://www.malwarebytes.org/restorebrowser/
FF SearchPlugin: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\ndcjg7qe.default\searchplugins\yahoo! powered search.xml [2017-02-12]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: (McAfee Anti-Spam Thunderbird Extension) - C:\Program Files\McAfee\MSK [2017-02-18] [ist nicht signiert]
FF Plugin: @java.com/DTPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\dtplugin\npDeployJava1.dll [2016-08-06] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\plugin2\npjp2.dll [2016-08-06] (Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2016-12-21] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\dtplugin\npDeployJava1.dll [2016-01-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\plugin2\npjp2.dll [2016-01-21] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2016-12-21] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-07-27] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-14] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome: 
=======
CHR DefaultProfile: Default
CHR NewTab: Default ->  Active:"chrome-extension://mallpejgeafdahhflmliiahjdpgbegpk/stubby.html"
CHR DefaultSearchURL: Default -> hxxp://srch.bar/{searchTerms}
CHR DefaultSuggestURL: Default -> hxxp://srch.bar/?s={searchTerms}
CHR Profile: C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default [2017-04-15]
CHR Extension: (Google Präsentationen) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-04]
CHR Extension: (Google Docs) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]
CHR Extension: (Google Drive) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23]
CHR Extension: (YouTube) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Google-Suche) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Google Tabellen) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-04]
CHR Extension: (Google Docs Offline) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-19]
CHR Extension: (FromDocToPDF) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk [2017-04-14]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-12]
CHR Extension: (Citavi Picker) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohgndokldibnndfnjnagojmheejlengn [2017-03-04]
CHR Extension: (Google Mail) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR Extension: (Chrome Media Router) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-04-08]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ohgndokldibnndfnjnagojmheejlengn] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [368640 2013-06-26] (AVerMedia) [Datei ist nicht signiert]
R2 AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [403456 2011-04-01] () [Datei ist nicht signiert]
R2 AVerUpdateServer; C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe [167936 2011-10-31] (AVerMedia TECHNOLOGIES, Inc.) [Datei ist nicht signiert]
R3 ClientAnalyticsService; C:\Program Files\Common Files\McAfee\ClientAnalytics\Legacy\McClientAnalytics.exe [1701840 2016-12-08] (Intel Security)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2016-12-22] (Digital Wave Ltd.)
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1593976 2012-08-24] (Samsung Electronics CO., LTD.)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [129752 2016-11-11] (ELAN Microelectronics Corp.)
R2 ExpressCache; C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe [102224 2012-08-17] (Condusiv Technologies)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [641520 2016-12-09] (McAfee, Inc.)
R2 IFXSpMgtSrv; C:\Program Files (x86)\Infineon\Security Platform Software\ifxspmgt.exe [1141656 2012-08-05] (Infineon Technologies AG)
R2 IFXTCS; C:\Program Files (x86)\Infineon\Security Platform Software\ifxtcs.exe [994200 2012-08-05] (Infineon Technologies AG)
R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [328616 2015-10-28] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 McAPExe; C:\Program Files\Common Files\McAfee\VSCore_15_6\McApExe.exe [989632 2017-01-18] (McAfee, Inc.)
R2 McBootDelayStartSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [641520 2016-12-09] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\2.3.290.0\\McCSPServiceHost.exe [2054080 2017-02-04] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [641520 2016-12-09] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [641520 2016-12-09] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [1342904 2016-12-15] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [641520 2016-12-09] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [641520 2016-12-09] (McAfee, Inc.)
R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [241040 2016-11-14] (McAfee, Inc.)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [383032 2016-11-14] (McAfee, Inc.)
R2 mfevtp; C:\windows\system32\mfevtps.exe [342768 2016-11-14] (McAfee, Inc.)
R2 ModuleCoreService; C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe [1465840 2016-12-22] (McAfee, Inc.)
S3 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [641520 2016-12-09] (McAfee, Inc.)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)
R2 PEFService; C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe [1104304 2016-11-15] (Intel Security, Inc.)
R2 PersonalSecureDriveService; C:\Program Files (x86)\Infineon\Security Platform Software\IfxPsdSv.exe [212888 2012-08-05] (Infineon Technologies AG)
S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [56552 2016-03-22] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-03-04] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AnyDVD; C:\WINDOWS\System32\Drivers\AnyDVD.sys [113088 2008-08-21] (SlySoft, Inc.)
R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [113088 2008-08-21] (SlySoft, Inc.)
S3 AVerAF35; C:\WINDOWS\System32\Drivers\AVerAF35.sys [804992 2013-06-05] (AVerMedia TECHNOLOGIES, Inc.)
R3 cfwids; C:\WINDOWS\System32\drivers\cfwids.sys [88456 2016-11-18] (McAfee, Inc.)
R1 CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 ETDSMBus; C:\WINDOWS\system32\DRIVERS\ETDSMBus.sys [41024 2015-09-23] (ELAN Microelectronic Corp.)
R1 excfs; C:\WINDOWS\System32\DRIVERS\excfs.sys [23376 2012-08-17] (Condusiv Technologies)
R0 excsd; C:\WINDOWS\System32\DRIVERS\excsd.sys [103248 2012-08-17] (Condusiv Technologies)
S3 HipShieldK; C:\WINDOWS\System32\drivers\HipShieldK.sys [216704 2016-08-02] (McAfee, Inc.)
R3 mfeaack; C:\WINDOWS\System32\drivers\mfeaack.sys [484576 2016-11-18] (McAfee, Inc.)
R3 mfeavfk; C:\WINDOWS\System32\drivers\mfeavfk.sys [366320 2016-11-18] (McAfee, Inc.)
S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [85048 2016-11-18] (McAfee, Inc.)
R3 mfefirek; C:\WINDOWS\System32\drivers\mfefirek.sys [518184 2016-11-18] (McAfee, Inc.)
R0 mfehidk; C:\WINDOWS\System32\drivers\mfehidk.sys [916432 2016-11-18] (McAfee, Inc.)
R3 mfencbdc; C:\WINDOWS\System32\DRIVERS\mfencbdc.sys [527496 2016-09-09] (McAfee, Inc.)
S3 mfencrk; C:\WINDOWS\System32\DRIVERS\mfencrk.sys [109336 2016-10-24] (McAfee, Inc.)
R3 mfeplk; C:\WINDOWS\System32\drivers\mfeplk.sys [110248 2016-11-18] (McAfee, Inc.)
R0 mfewfpk; C:\WINDOWS\System32\drivers\mfewfpk.sys [254800 2016-11-18] (McAfee, Inc.)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3343872 2016-07-16] (Intel Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvsmwu.inf_amd64_40e2f893a8ddfad8\nvlddmkm.sys [14190520 2017-01-17] (NVIDIA Corporation)
R1 PersonalSecureDrive; C:\WINDOWS\System32\drivers\psd.sys [44576 2012-02-03] (Infineon Technologies AG)
R3 RadioHIDMini; C:\WINDOWS\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek                                            )
R3 SensorsAlsDriver; C:\WINDOWS\System32\drivers\WUDFRd.sys [216064 2016-07-16] (Microsoft Corporation)
R3 SensorsSimulatorDriver; C:\WINDOWS\System32\drivers\WUDFRd.sys [216064 2016-07-16] (Microsoft Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
U3 aswbdisk; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-04-15 16:10 - 2017-04-15 16:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2017-04-15 16:08 - 2017-04-15 16:09 - 00027514 _____ C:\Users\Jan\Downloads\FRST.txt
2017-04-15 16:07 - 2017-04-15 16:08 - 00000000 ____D C:\FRST
2017-04-15 16:07 - 2017-04-15 16:07 - 02424832 _____ (Farbar) C:\Users\Jan\Downloads\FRST64.exe
2017-04-14 11:36 - 2017-04-14 11:37 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-04-14 11:36 - 2017-04-14 11:36 - 00001171 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2017-04-14 11:36 - 2017-04-14 11:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2017-04-14 11:36 - 2017-04-14 11:36 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-04-14 11:36 - 2017-04-14 11:36 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2017-04-14 11:36 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2017-04-14 11:36 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2017-04-14 11:36 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-04-14 11:34 - 2017-04-14 11:35 - 22851472 _____ (Malwarebytes ) C:\Users\Jan\Downloads\mbam-setup-2.2.1.1043.exe
2017-04-14 10:32 - 2017-04-14 10:32 - 00000000 ___HD C:\OneDriveTemp
2017-04-14 09:31 - 2017-04-14 10:17 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2017-04-09 12:19 - 2017-04-09 12:19 - 00204537 _____ C:\Users\Jan\Downloads\kuendigung.pdf
2017-04-08 11:12 - 2017-04-08 11:12 - 00001852 _____ C:\Users\Jan\Downloads\global-x-lithium-and-battery-tech-etf_full-holdings_20170408.csv
2017-04-04 08:03 - 2017-04-04 08:03 - 00048877 _____ C:\Users\Jan\Desktop\Der Rundfunkbeitrag - Antworten.pdf
2017-04-02 21:13 - 2017-04-02 21:13 - 00365046 _____ C:\Users\Jan\Desktop\1&1.pdf
2017-04-02 21:07 - 2017-04-02 21:07 - 00365046 _____ C:\Users\Jan\Downloads\Scan0001.pdf
2017-03-30 21:57 - 2017-03-30 21:57 - 00080685 _____ C:\Users\Jan\Downloads\5490_1884_Vogel_Jan (2).PDF

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-04-15 16:10 - 2014-12-27 20:25 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Spotify
2017-04-15 16:06 - 2012-08-23 19:50 - 00000000 ____D C:\ProgramData\WinClon
2017-04-15 16:05 - 2016-06-14 18:15 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Skype
2017-04-15 16:05 - 2014-12-27 20:26 - 00000000 ____D C:\Users\Jan\AppData\Local\Spotify
2017-04-15 16:04 - 2015-01-31 01:18 - 00000040 ___SH C:\ProgramData\.zreglib
2017-04-15 16:04 - 2014-10-13 10:28 - 00000000 __SHD C:\Users\Jan\IntelGraphicsProfiles
2017-04-14 12:55 - 2016-10-04 15:57 - 00000000 ____D C:\Users\Jan
2017-04-14 12:16 - 2016-10-04 15:56 - 02858788 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-04-14 12:16 - 2016-07-17 00:51 - 01219444 _____ C:\WINDOWS\system32\perfh007.dat
2017-04-14 12:16 - 2016-07-17 00:51 - 00301954 _____ C:\WINDOWS\system32\perfc007.dat
2017-04-14 12:11 - 2016-10-04 16:40 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-04-14 12:11 - 2016-10-04 15:53 - 00000000 ____D C:\ProgramData\NVIDIA
2017-04-14 12:11 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\Offline Web Pages
2017-04-14 12:10 - 2016-07-16 08:04 - 00786432 _____ C:\WINDOWS\system32\config\BBI
2017-04-14 11:37 - 2016-07-16 13:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-04-14 11:23 - 2016-10-04 16:40 - 00004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-04-14 11:22 - 2015-04-09 11:28 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-04-14 11:13 - 2016-10-04 15:57 - 00000000 ____D C:\Users\UpdatusUser
2017-04-14 11:09 - 2016-10-04 15:50 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-04-14 10:32 - 2014-10-13 10:31 - 00000000 ___RD C:\Users\Jan\OneDrive
2017-04-14 09:15 - 2016-10-04 16:40 - 00003628 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-04-14 09:15 - 2016-10-04 16:40 - 00003504 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-04-14 09:15 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-04-13 08:15 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-04-13 08:09 - 2016-12-10 12:51 - 00003262 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-04-13 08:09 - 2015-11-29 17:09 - 00002410 _____ C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-04-08 17:04 - 2014-09-06 10:43 - 00000000 ____D C:\Program Files (x86)\McAfee
2017-04-08 17:04 - 2014-09-06 10:31 - 00000000 ____D C:\Program Files\Common Files\McAfee
2017-04-07 20:26 - 2014-09-08 21:32 - 00002266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-04-07 20:26 - 2014-09-08 21:32 - 00002254 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-03-28 18:41 - 2014-09-06 10:31 - 00000000 ____D C:\ProgramData\McAfee
2017-03-27 19:14 - 2015-08-17 11:47 - 00000000 ____D C:\Program Files\Common Files\AV
2017-03-25 20:43 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\rescache
2017-03-21 13:03 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\INF
2017-03-17 08:57 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-03-17 00:43 - 2012-11-27 00:50 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-03-17 00:36 - 2016-10-04 15:49 - 00237456 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-03-17 00:31 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-03-17 00:31 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
2017-03-17 00:30 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\F12
2017-03-17 00:30 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\setup
2017-03-17 00:30 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-03-17 00:29 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\PrintDialog
2017-03-17 00:29 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-03-17 00:29 - 2016-07-16 13:47 - 00000000 ___RD C:\Program Files\Windows Defender
2017-03-17 00:29 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-03-17 00:29 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\bcastdvr
2017-03-17 00:29 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-03-17 00:29 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-03-17 00:29 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-03-17 00:28 - 2016-04-09 20:00 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2017-03-17 00:28 - 2016-04-09 20:00 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2017-03-16 08:32 - 2014-08-31 18:08 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-03-16 08:27 - 2014-08-31 18:07 - 138634176 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-03-16 08:13 - 2016-04-09 20:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-08-29 04:54 - 2014-08-31 21:24 - 0001492 _____ () C:\Users\Jan\AppData\Roaming\AbsoluteReminder.xml
2016-03-17 18:16 - 2016-03-17 21:23 - 0007382 _____ () C:\Users\Jan\AppData\Roaming\posdesk.cfg
2016-03-17 17:07 - 2016-03-17 20:47 - 0000612 _____ () C:\Users\Jan\AppData\Roaming\poslay.cfg
2016-03-17 20:43 - 2016-03-17 20:43 - 0000356 _____ () C:\Users\Jan\AppData\Roaming\posplay.cfg
2015-01-31 01:18 - 2017-04-15 16:04 - 0000040 ___SH () C:\ProgramData\.zreglib
2016-04-04 18:35 - 2016-04-04 18:35 - 0000057 _____ () C:\ProgramData\Ament.ini
2016-10-04 15:52 - 2016-10-04 15:52 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2012-08-23 19:47 - 2012-08-06 10:23 - 0000031 _____ () C:\ProgramData\ECReset_Partition.bat
2012-08-23 19:47 - 2012-08-06 11:34 - 1782152 _____ (Samsung Electronics) C:\ProgramData\ExpressCacheRun.exe
2012-08-23 20:00 - 2012-08-08 06:07 - 2258432 _____ (Samsung Electronics) C:\ProgramData\MakeMarkerFile.exe
2012-08-23 20:00 - 2012-08-07 12:11 - 0003196 _____ () C:\ProgramData\MakeMarkerFile.xml

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\ECReset_Partition.bat
C:\ProgramData\ExpressCacheRun.exe


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-04-09 10:51

==================== Ende von FRST.txt ============================
         

--- --- ---

Und hier die Addition

Weiterhin noch schöne Ostern

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 15-03-2017
durchgeführt von Jan (15-04-2017 16:11:09)
Gestartet von C:\Users\Jan\Downloads
Windows 10 Home Version 1607 (X64) (2016-10-04 14:45:32)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-265458620-2719425478-174326876-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-265458620-2719425478-174326876-503 - Limited - Disabled)
Gast (S-1-5-21-265458620-2719425478-174326876-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-265458620-2719425478-174326876-1004 - Limited - Enabled)
Jan (S-1-5-21-265458620-2719425478-174326876-1002 - Administrator - Enabled) => C:\Users\Jan
UpdatusUser (S-1-5-21-265458620-2719425478-174326876-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee Anti-Virus und Anti-Spyware (Disabled - Up to date) {8BCDACFA-D264-3528-5EF8-E94FD0BC1FBC}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee Anti-Virus und Anti-Spyware (Disabled - Up to date) {30AC4D1E-F45E-3AA6-6448-D23DAB3B5501}
FW: McAfee Firewall (Enabled) {B3F62DDF-980B-3470-75A7-407A2E6F58C7}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Absolute Reminder (HKLM-x32\...\{40F4FF7A-B214-4453-B973-080B09CED019}) (Version: 2.1.0.8 - Absolute Software)
Active Directory Authentication Library für SQL Server (Version: 13.0.1100.286 - Microsoft Corporation) Hidden
Active Directory Authentication Library für SQL Server (x86) (x32 Version: 13.0.1100.286 - Microsoft Corporation) Hidden
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
Allshare Play Link (HKLM-x32\...\{91786428-D4AA-476D-8AF9-A63FFAC2901F}) (Version: 1.0.0 - Samsung)
AnyDVD (HKLM-x32\...\AnyDVD) (Version:  - SlySoft)
Application Insights Tools for Visual Studio 2015 (HKLM-x32\...\{981F324E-98F4-4784-B76F-04E92039F3F6}) (Version: 5.2.60328.3 - Microsoft Corporation)
AudibleManager (HKLM-x32\...\AudibleManager) (Version: 508.37491536.37487200.0 - Audible, Inc.)
AVerMedia A835 USB DVB-T 2.3.64.28 (HKLM-x32\...\AVerMedia A835 USB DVB-T) (Version: 2.3.64.28 - AVerMedia TECHNOLOGIES, Inc.)
AVerTV 3D (HKLM-x32\...\InstallShield_{5016185F-05AF-455F-AA70-6B6E5D6D4E70}) (Version: 6.5.2.26 - AVerMedia Technologies, Inc.)
AVerTV 3D (x32 Version: 6.5.2.26 - AVerMedia Technologies, Inc.) Hidden
Azure AD Authentication Connected Service (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
AzureTools.Notifications (x32 Version: 2.7.30611.1601 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.25 - Piriform)
Citavi 4 (HKLM-x32\...\{CC0A85B2-734A-45B3-B678-05F6A6499AC7}) (Version: 4.4.0.28 - Swiss Academic Software)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.1912 - CyberLink Corp.)
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4421.02 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Devenv-Ressourcen für Microsoft Visual Studio 2015 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
Dotfuscator and Analytics Community Edition 5.19.1 (x32 Version: 5.19.1.3091 - PreEmptive Solutions) Hidden
Dotfuscator and Analytics Community Edition Language Pack 5.19.1 de-DE (x32 Version: 5.19.1.3091 - PreEmptive Solutions) Hidden
ELAN Touchpad driver X64 15.7.9.2_WHQL (HKLM\...\Elantech) (Version: 15.7.9.2 - ELAN Microelectronic Corp.)
Entity Framework 6.1.3 Tools  for Visual Studio 2015 Update 1 (HKLM-x32\...\{2A56910C-69C8-495D-8ED8-9080F0A14E58}) (Version: 14.0.41103.0 - Microsoft Corporation)
E-POP (HKLM-x32\...\{F06DD8D9-9DC8-430C-835C-C9BF21E05CC1}) (Version: 1.0.1 - Samsung Electronics CO., LTD.)
Erforderliche Komponenten für SSDT  (HKLM-x32\...\{2466E484-9D86-416B-9C88-AA533F15AF1C}) (Version: 12.0.2000.8 - Microsoft Corporation)
Erforderliche Komponenten für SSDT RC0 (HKLM-x32\...\{837FF5F6-F0CB-4C80-B003-65B14F1490FE}) (Version: 13.0.1100.286 - Microsoft Corporation)
ExpressCache (HKLM\...\{3EA6AB5D-D434-4ACA-9609-48F1319518EF}) (Version: 1.0.94 - Condusiv Technologies)
Fotogalerie (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Free YouTube To MP3 Converter (HKLM-x32\...\Free YouTube To MP3 Converter_is1) (Version: 4.1.32.117 - Digital Wave Ltd)
Galerie de photos (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Gemeinsam genutzte Microsoft Azure-Komponenten für Visual Studio 2015 Sprachpaket (DEU) - v1.7 (x32 Version: 1.7.40113.5 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 57.0.2987.133 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.33.3 - Google Inc.) Hidden
Help Desk (HKLM\...\{C85A891D-7AB4-46AE-84F0-B0C3FAC82280}) (Version: 1.0.4 - Samsung Electronics CO., LTD.)
HP ENVY 7640 series - Grundlegende Software für das Gerät (HKLM\...\{1BA4A70C-4AD1-404B-BBB0-67AABB8A6171}) (Version: 34.2.117.50647 - Hewlett-Packard Co.)
HP ENVY 7640 series Hilfe (HKLM-x32\...\{C2C53D3E-CDEA-470D-817D-6CA0E2DEBAA3}) (Version: 34.0.0 - Hewlett Packard)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
IIS 10.0 Express (HKLM\...\{7A28A2B0-458B-4A58-84AC-C90D2D4B79FB}) (Version: 10.0.1735 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version:  - )
IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version:  - )
Infineon TPM Professional Package (HKLM\...\{D035AE8C-1161-4C90-908F-3380C1BE4B12}) (Version: 4.3.000.3137 - Infineon Technologies AG)
Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33070) (Version: 3.6.1.33070.11 - Intel)
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.36702 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4242 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{7854AA22-A2F0-4F29-A2E9-D0C5A2B685E7}) (Version: 2.5.0.0248 - Motorola Solutions, Inc)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.2.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{c9967fbd-e3c3-4ed0-992a-5b33260f2944}) (Version: 16.1.5 - Intel Corporation)
Java 8 Update 102 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180102F0}) (Version: 8.0.1020.14 - Oracle Corporation)
Java 8 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218071F0}) (Version: 8.0.710.15 - Oracle Corporation)
Java SE Development Kit 8 Update 102 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180102}) (Version: 8.0.1020.14 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
McAfee Internet Security Suite (HKLM-x32\...\MSC) (Version: 14.0.3061 - McAfee, Inc.)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (Deutsch) (HKLM-x32\...\{CBD7095F-7211-43FD-9FE7-FB08D753AF79}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{19E8AE59-4D4A-3534-B567-6CC08FA4102E}) (Version: 4.5.51651 - Microsoft Corporation)
Microsoft .NET Framework 4.6 SDK (Deutsch) (HKLM-x32\...\{EE8BD24B-75E1-4BBF-86B9-91FE16ADE71C}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 SDK (HKLM-x32\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 SDK (Deutsch) (HKLM-x32\...\{529EFF09-750D-48B9-A47A-34A3B6248C3F}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 SDK (HKLM-x32\...\{2F0ECC80-B9E4-4485-8083-CD32F22ABD92}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (ENU) (HKLM-x32\...\{8EEB28EE-5141-411C-9CF0-9952264FE4AF}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (HKLM-x32\...\{8BC3EEC9-090F-4C53-A8DA-1BEC913040F9}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Version Manager (x64) 1.0.0-beta5 (HKLM\...\{c5a4aba3-1aba-3ef8-b2d5-c3fa37f59738}) (Version: 1.0.10609.0 - Microsoft Corporation)
Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.25123 - Microsoft Corporation)
Microsoft Help Viewer 2.2 Sprachpaket - DEU (HKLM-x32\...\Microsoft Help Viewer 2.2 Sprachpaket - DEU) (Version: 2.2.25123 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-265458620-2719425478-174326876-1002\...\OneDriveSetup.exe) (Version: 17.3.6799.0327 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50905.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities  (HKLM\...\{F09DEB00-9F41-4BC9-BA81-9F131B12B3D5}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{8E4BA1E5-54E8-41F0-919B-CD875B83CFCE}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2016 LocalDB RC0 (HKLM\...\{BDEC3091-D84B-4F70-B1AB-6487354160F4}) (Version: 13.0.1100.286 - Microsoft Corporation)
Microsoft SQL Server 2016 Management Objects RC0 (x64) (HKLM\...\{8C76566F-6B51-43FD-A99E-AAA2E9A96918}) (Version: 13.0.1100.286 - Microsoft Corporation)
Microsoft SQL Server 2016 T-SQL ScriptDom RC0 (HKLM\...\{F5E316A6-F894-4DCF-9088-F07E06A1ABFA}) (Version: 13.0.1100.286 - Microsoft Corporation)
Microsoft SQL Server 2016 T-SQL-Sprachdienst RC0 (HKLM-x32\...\{F5AF6F7A-E0DC-480C-94E3-B5596C9A239F}) (Version: 13.0.12000.52 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 DEU  (HKLM\...\{98225B15-ECF5-4645-B5AC-F8C5E869A5D5}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - DEU (14.0.60311.1) (HKLM-x32\...\{FE4AF448-6FF2-4996-889F-8F07BA88DB59}) (Version: 14.0.60311.1 - Microsoft Corporation)
Microsoft SQL Server*2014 Management Objects  (HKLM-x32\...\{4F4CB3E2-9D2F-465A-854B-8276B02F4E7D}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server*2014 Management Objects (x64) (HKLM\...\{03CB711D-679E-46ED-851B-C568418CF914}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server*2014 Transact-SQL ScriptDom  (HKLM\...\{F2A2DB39-2C5A-4764-AA0F-5AB112663FFA}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server*2014 T-SQL Language Service  (HKLM-x32\...\{06BE8B71-46C6-434B-869E-85C58EF3120A}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server*2016 Management Objects RC0 (HKLM-x32\...\{029A7000-E652-4D44-88C2-483C9FD345A7}) (Version: 13.0.1100.286 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{FC3BB979-AA54-4B60-BBA3-2C4DA6E08D80}) (Version: 12.0.2402.29 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{091CE6AA-2753-4F6E-AD1C-0E875744EB54}) (Version: 12.0.2402.29 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{9634d50a-0c4d-4f52-8a9f-894a2baae370}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{307a22b8-8353-4c5e-b67b-2404c5734558}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual Studio Community 2015 mit Update 2 (HKLM-x32\...\{f2892dc5-7ac2-4ae4-a296-b5b159f61255}) (Version: 14.0.25123.0 - Microsoft Corporation)
Microsoft Web Deploy 3.6 (HKLM\...\{94E1227C-08A9-4962-B388-1F05D89AEA75}) (Version: 3.1238.1962 - Microsoft Corporation)
Microsoft-System-CLR-Typen für SQL Server*2016 RC0 (HKLM\...\{71F2875A-58DC-432F-B959-67B6D928E08F}) (Version: 13.0.1100.286 - Microsoft Corporation)
Microsoft-System-CLR-Typen für SQL Server*2016 RC0 (HKLM-x32\...\{D2C7A7B6-719A-4F6A-881A-555B999F82AC}) (Version: 13.0.1100.286 - Microsoft Corporation)
Mit C# erstellte geräteübergreifende Hybrid-Apps - Vorlagen - DEU (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Mozilla Firefox 50.1.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 50.1.0 (x86 de)) (Version: 50.1.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.1.0 - Mozilla)
MSBuild/NuGet Integration 14.0 (x86) (x32 Version: 14.0.25123 - Microsoft Corporation) Hidden
NVIDIA Grafiktreiber 376.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.54 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.12.0613 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0613 - NVIDIA Corporation)
NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM-x32\...\{D5409B11-EF28-37A1-AE7A-6051A5BAD923}) (Version: 4.5.50932 - Microsoft Corporation)
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.1 RC für Windows Store-Apps (Deutsch) (x32 Version: 4.5.21005 - Microsoft Corporation) Hidden
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.6 (Deutsch) (HKLM-x32\...\{FACF2669-E25A-428A-9167-5EEDE741F3B9}) (Version: 4.6.00127 - Microsoft Corporation)
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM-x32\...\{4860C1E5-CE58-4D32-89DE-37951333B4C9}) (Version: 4.6.01055 - Microsoft Corporation)
PDF24 Creator 7.9.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PreEmptive Analytics Client German Language Pack (x32 Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
Raccolta foto (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7543 - Realtek Semiconductor Corp.)
Recovery (HKLM-x32\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 6.0.5.0 - Samsung Electronics CO., LTD.)
Roslyn Language Services - x86 (x32 Version: 14.0.25123 - Microsoft Corporation) Hidden
Roslyn Language Services - x86 (x32 Version: 14.0.25125 - Microsoft Corporation) Hidden
Settings (HKLM-x32\...\{52E5DE60-C96B-42CC-9A37-FE04725940AE}) (Version: 2.0.0 - Samsung Electronics CO., LTD.)
Skype™ 7.32 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.32.103 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-265458620-2719425478-174326876-1002\...\Spotify) (Version: 1.0.51.693.g6ea1e7f6 - Spotify AB)
Studie zur Verbesserung von HP ENVY 7640 series (HKLM\...\{E5404FEB-0326-4EB0-BE85-7100393E0E57}) (Version: 34.2.117.50647 - Hewlett-Packard Co.)
Support Center (HKLM\...\{3D7275C7-8549-46AF-8B59-82A3EF301B31}) (Version: 2.0.8 - Samsung Electronics CO., LTD.)
SW Update (HKLM-x32\...\{49271148-3C6B-4F2B-B8C9-FFDE243B8FEA}) (Version: 2.0.15 - Samsung Electronics CO., LTD.)
Team Explorer for Microsoft Visual Studio 2015 Update 2 (x32 Version: 14.95.25118 - Microsoft) Hidden
Test Tools for Microsoft Visual Studio 2015 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
TypeScript Power Tool (x32 Version: 1.8.9.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2015 (x32 Version: 1.8.29.0 - Microsoft Corporation) Hidden
Update for  (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
User Guide (HKLM-x32\...\{5D4E117D-FC6A-4FB8-81E3-BEFFAE2F7BE6}) (Version: 1.1.00 - Samsung Electronics CO., LTD.)
Visual Studio 2015 Update 2 (KB3022398) (HKLM-x32\...\{78c1b501-a6eb-4f29-88c5-84189564827e}) (Version: 14.0.25123 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VS Update core components (x32 Version: 14.0.25123 - Microsoft Corporation) Hidden
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
WCF Data Services 5.6.4 DEU Language Pack (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services 5.6.4 Runtime (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2015 (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2015 DEU Language Pack (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
Windows Driver Package - Samsung Electronics Co. Ltd. (RadioHIDMini) HIDClass  (07/27/2012 20.57.1.735) (HKLM\...\9F04C462DAB591BDCCE784F77E4D4F1736010B92) (Version: 07/27/2012 20.57.1.735 - Samsung Electronics Co. Ltd.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)
yEd Graph Editor 3.15.0.1 (HKLM\...\3309-7404-0599-8908) (Version: 3.15.0.1 - yWorks GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-265458620-2719425478-174326876-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0317D226-B37E-401F-BFC0-C9DF3A69385D} - System32\Tasks\McAfee\McAfee Idle Detection Task
Task: {0B9D82B9-45F6-478B-B8D7-D0F81C0A3BC2} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-06-14] (Intel Corporation)
Task: {0D6E74C8-B036-48BC-99AC-707CFFB1E81C} - System32\Tasks\Settings => C:\Program Files (x86)\Samsung\Settings\sSettings.exe [2012-08-24] (Samsung Electronics CO., LTD.)
Task: {26FDE679-3F31-469E-8A79-3B6ABFB0BEC9} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {2CE10401-27F0-4AD4-855D-0603FA24F371} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {2F409DF2-C341-46D7-95C4-93771AD94081} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {30D8BEBE-368B-459F-B36A-5837851D8900} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => %SystemRoot%\System32\AutoWorkplace.exe 
Task: {45C11774-FF7F-4F2F-8E6E-7B2DDD8D6A5A} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {4CB63EDB-3898-4E4E-A4B9-959685D469C0} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {594B0DAE-18AE-45A9-A39B-95CC78A61823} - System32\Tasks\HPCustParticipation HP ENVY 7640 series => C:\Program Files\HP\HP ENVY 7640 series\Bin\HPCustPartic.exe [2014-08-22] (Hewlett-Packard Development Company, LP)
Task: {60C20C71-0276-4948-ADB7-83354BD1C8AA} - System32\Tasks\advRecovery => C:\Program Files\Samsung\Recovery\WCScheduler.exe [2012-08-23] (SEC)
Task: {69F9F280-3BDE-42E3-AA06-B68A609EBD02} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {6FA490E9-150E-4CFC-8F66-AC3C4F41AB11} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {7557CA47-2A7D-47E5-81CB-3E9E8D528C00} - System32\Tasks\McAfeeLogon => C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe [2016-12-09] (McAfee, Inc.)
Task: {836AE5BA-A16C-45D0-B688-6CF4A6E6A531} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {860784E7-5552-46AB-B305-D1FA7E4CC303} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Jan\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe 
Task: {87F93304-EFF3-475E-B284-880CFF1CD80F} - System32\Tasks\SWUpdateAgent => C:\Program Files (x86)\Samsung\SW Update\SWMAgent.exe [2012-08-24] (Samsung Electronics CO., LTD.)
Task: {8EB033E7-4FFC-4EDC-AC76-593F559A3A67} - \WPD\SqmUpload_S-1-5-21-265458620-2719425478-174326876-1002 -> Keine Datei <==== ACHTUNG
Task: {9DD39137-3D53-411B-8A3A-D32AAC914402} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2017-03-16] (Microsoft Corporation)
Task: {A5A96D78-56E7-4E64-9A6E-DC900DCED42F} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe 
Task: {AA1D4D8B-8773-4A77-8F15-AED9D24AB7BC} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe 
Task: {ABB2F8FE-0514-4F18-880F-F9A63887CF69} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-12-06] (Piriform Ltd)
Task: {AFE0BFCE-AC23-47D8-A7CA-DE84036686BE} - System32\Tasks\Microsoft\VisualStudio\VSIX Auto Update 14 => C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\VSIXAutoUpdate.exe [2016-03-22] (Microsoft Corporation)
Task: {B061922B-85C0-4D39-B88A-430EBAA2808E} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {C358FD46-9D86-47B3-B46D-6AD88D70D638} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {C5958EE2-0510-4AFE-9DD2-67D5AFF6DA1E} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-06-14] (Intel Corporation)
Task: {C78D7CD3-8250-44F1-916F-93267ED4C3EC} - System32\Tasks\{34DE2401-5E52-40A9-A2D6-25DB2BEEA809} => pcalua.exe -a "C:\BlueByte\Die Siedler IV\S4.exe" -d "C:\BlueByte\Die Siedler IV"
Task: {D7BD4F14-63CF-4AFB-92DC-8F96DDFDA361} - System32\Tasks\WLANStartup => %programfiles(x86)%\Samsung\Easy Settings\WLANStartup.exe 
Task: {E7AD0D5F-911D-44C2-8F57-CBA1D3280604} - System32\Tasks\SAgent => %ProgramFiles%\Samsung\S Agent\CommonAgent.exe 
Task: {EF0DE854-76A0-4AA7-9083-76ED1F7F45C2} - System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent
Task: {F9AF0F83-6C54-4406-8C22-0B85F0BDC4F4} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {FA4509E8-DF8E-45EA-A655-CBC2BC3DB53E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-02-02] (Adobe Systems Incorporated)
Task: {FECC3C51-A405-45E3-BB74-6CC8683DC81E} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2014-10-14 19:55 - 2011-04-01 14:52 - 00403456 _____ () C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-03-15 22:08 - 2017-03-04 09:19 - 02681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-10-04 15:53 - 2016-12-29 15:16 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-08-24 13:45 - 2012-08-24 13:45 - 00076920 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
2017-03-15 22:08 - 2017-03-04 09:19 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-03-15 22:08 - 2017-03-04 09:19 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-10-04 16:42 - 2016-10-04 16:42 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-15 22:07 - 2017-03-04 08:31 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-15 22:08 - 2017-03-04 08:12 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-15 22:08 - 2017-03-04 08:05 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-15 22:08 - 2017-03-04 08:05 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-03-15 22:08 - 2017-03-04 08:05 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-03-15 22:08 - 2017-03-04 08:05 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-03-15 22:09 - 2017-03-04 08:08 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2014-10-14 19:55 - 2013-01-09 16:05 - 00163840 _____ () C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
2016-12-06 16:09 - 2016-12-06 16:09 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2017-04-07 20:26 - 2017-03-29 10:47 - 02885464 _____ () C:\Program Files (x86)\Google\Chrome\Application\57.0.2987.133\libglesv2.dll
2017-04-07 20:26 - 2017-03-29 10:47 - 00099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\57.0.2987.133\libegl.dll
2017-01-07 22:24 - 2016-12-20 14:06 - 00114664 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll
2017-01-07 22:25 - 2017-01-09 14:10 - 00108008 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll
2017-01-07 22:25 - 2017-01-09 14:10 - 00024040 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll
2017-01-07 22:25 - 2017-01-09 14:10 - 00048104 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll
2012-08-23 19:39 - 2012-06-25 20:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2012-08-24 13:45 - 2012-08-24 13:45 - 00028280 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdWrapper.dll
2012-08-24 13:45 - 2012-08-24 13:45 - 01016440 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmd.dll
2012-08-24 13:45 - 2012-08-24 13:45 - 00110712 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsBase.dll
2012-08-24 13:45 - 2012-08-24 13:45 - 00056440 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\HookDllPS2.dll
2012-08-24 13:45 - 2012-08-24 13:45 - 00211064 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\WinCRT.dll
2012-08-24 13:45 - 2012-08-24 13:45 - 00026232 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsAPI.dll
2012-08-24 13:45 - 2012-08-24 13:45 - 00110712 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsBase.dll
2012-08-24 13:45 - 2012-08-24 13:45 - 00029816 _____ () C:\Program Files (x86)\Samsung\Settings\EasyMovieEnhancer.dll
2012-08-24 13:45 - 2012-08-24 13:45 - 00091768 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsCmdClient.dll
2015-03-12 12:00 - 2017-03-24 07:58 - 67725936 _____ () C:\Users\Jan\AppData\Roaming\Spotify\libcef.dll
2016-10-27 07:12 - 2017-03-24 07:58 - 00110192 _____ () C:\Users\Jan\AppData\Roaming\Spotify\SpotifyWinRT.dll
2015-03-12 12:00 - 2017-03-24 07:58 - 01929840 _____ () C:\Users\Jan\AppData\Roaming\Spotify\libglesv2.dll
2015-03-12 12:00 - 2017-03-24 07:58 - 00087152 _____ () C:\Users\Jan\AppData\Roaming\Spotify\libegl.dll
2012-08-23 19:54 - 2012-06-08 05:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2012-06-08 04:34 - 2012-06-08 04:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Windows:5091E3745A65E41E [0]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ModuleCoreService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcapexe => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McNaiAnn => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeplk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeplk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ModuleCoreService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 15:25 - 2017-02-18 18:32 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-265458620-2719425478-174326876-1001\Control Panel\Desktop\\Wallpaper -> 
HKU\S-1-5-21-265458620-2719425478-174326876-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Jan\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{68d13764-fcff-4962-8c14-b96f93f2d4f2}.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{6B845D84-B80E-4628-804A-B335AA77AE65}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [UDP Query User{0A0BAD1D-8238-4469-81C9-316E23132170}C:\users\jan\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jan\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{77D58A37-50AC-4595-8C8B-57530D684FE3}C:\users\jan\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jan\appdata\roaming\spotify\spotify.exe
FirewallRules: [{E2963BD2-2E12-49AE-9086-8FC4D6EF7622}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
FirewallRules: [{A84C2A3D-03A5-4D7F-94C1-CFF1B87EC95C}] => (Allow) C:\Program Files\HP\HP ENVY 7640 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{83FE27B3-AED8-4415-B3C5-56429562262E}] => (Allow) LPort=5357
FirewallRules: [{F258F227-E26C-45B0-979A-71BC113006BA}] => (Allow) C:\Program Files\HP\HP ENVY 7640 series\Bin\DeviceSetup.exe
FirewallRules: [{5DA83492-9F9D-40EF-AE54-54BE034CC17A}] => (Allow) C:\Program Files\HP\HP ENVY 7640 series\bin\SendAFax.exe
FirewallRules: [{CBD8EDA5-B3B6-493E-84A8-92106BB26FC4}] => (Allow) C:\Program Files\HP\HP ENVY 7640 series\bin\DigitalWizards.exe
FirewallRules: [{3CE1B2AE-66F4-4800-9BD5-102D23C809CA}] => (Allow) C:\Program Files\HP\HP ENVY 7640 series\bin\FaxApplications.exe
FirewallRules: [{E532D79C-863F-4BAA-9FAB-31DCBC05CE38}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{07324AA5-7E5D-4409-943C-FD5F656F016E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7812EB2A-9082-497F-83CB-8639D88C7580}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{DC57F5CB-3AE4-4E4F-998B-173524D1D45F}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{334CF420-3344-4FDD-B4E6-33F7CE1FB348}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{385C3B96-684B-48A2-B4A2-8AB9EF5B7220}] => (Allow) LPort=1900
FirewallRules: [{59FD3558-3F98-4B20-8EAF-BB669A5A5309}] => (Allow) LPort=2869
FirewallRules: [{F2B5E7CA-53B0-4630-840C-3A10E1E8249D}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{8A9C9062-B05B-4E9E-91F9-CB0C64394442}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{5DA6AA6C-AFF1-4A0D-8729-6B43A3777A53}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{957D9EEA-3302-47CA-B188-8E825F485966}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{53EB478A-38B8-4242-91EF-146DF49B625A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [TCP Query User{0C89E65D-B2F5-4E65-BC3C-9B8BCCEB4B88}C:\users\jan\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jan\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{638F486E-DCD9-411E-B902-5EA50CF9550C}C:\users\jan\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jan\appdata\roaming\spotify\spotify.exe
FirewallRules: [{E79A54DD-1EEA-4CF1-AABF-3311EEF93E9B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Wiederherstellungspunkte =========================

25-03-2017 20:22:52 Geplanter Prüfpunkt
09-04-2017 11:29:05 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (04/15/2017 04:10:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mcupdatemgr.exe, Version: 4.0.4017.0, Zeitstempel: 0x58ac5dc3
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.14393.479, Zeitstempel: 0x5825887f
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000f8283
ID des fehlerhaften Prozesses: 0x29dc
Startzeit der fehlerhaften Anwendung: 0x01d2b5f20fdd0f4f
Pfad der fehlerhaften Anwendung: C:\Program Files\Common Files\McAfee\UPDMGR\4.0.4017.4\mcupdatemgr.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll
Berichtskennung: 17ab436b-6c85-45ea-9bf8-00717d3a3732
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (04/14/2017 12:12:10 PM) (Source: AVLogEvent) (EventID: 5010) (User: NT-AUTORITÄT)
Description: McShield failed to start because it is not trusted.
Error Code:a7f40905

Error: (04/14/2017 12:12:10 PM) (Source: AVLogEvent) (EventID: 5007) (User: NT-AUTORITÄT)
Description: Failed to load a dependant module.
Error Code:a7f42003

Error: (04/14/2017 12:11:29 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0

Error: (04/14/2017 12:11:29 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0

Error: (04/14/2017 12:11:29 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0

Error: (04/14/2017 12:11:29 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0

Error: (04/14/2017 12:11:29 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0

Error: (04/14/2017 12:11:29 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0

Error: (04/14/2017 12:11:29 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0


Systemfehler:
=============
Error: (04/15/2017 04:10:04 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Erkennung interaktiver Dienste" wurde mit folgendem Fehler beendet: 
Unzulässige Funktion.

Error: (04/15/2017 04:04:36 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/15/2017 04:04:36 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/15/2017 04:04:35 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/14/2017 12:55:42 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 und der APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/14/2017 12:12:01 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/14/2017 12:12:01 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/14/2017 12:12:01 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/14/2017 12:10:45 PM) (Source: DCOM) (EventID: 10010) (User: JAN)
Description: Der Server "Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (04/14/2017 12:10:35 PM) (Source: DCOM) (EventID: 10010) (User: JAN)
Description: Der Server "{4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz
Prozentuale Nutzung des RAM: 38%
Installierter physikalischer RAM: 7893.53 MB
Verfügbarer physikalischer RAM: 4828.47 MB
Summe virtueller Speicher: 9173.53 MB
Verfügbarer virtueller Speicher: 6138.04 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:673.52 GB) (Free:607.53 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 698.6 GB) (Disk ID: C185C1F2)

Partition: GPT.

========================================================
Disk: 1 (Size: 14.9 GB) (Disk ID: 74F02DEA)
Partition 1: (Not Active) - (Size=14.9 GB) - (Type=73)

==================== Ende von Addition.txt ============================
         

Kannst du mir sagen, wo du das Problem vermutest?

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

• Starte bitte die mbar.exe.
• Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
• Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
• Klicke auf den CleanUp Button und erlaube den Neustart.
• Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
• Nach dem Neustart starte die mbar.exe erneut.
• Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Hallo cosinus,

es wurde nichts gefunden:

Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2017.04.16.02
  rootkit: v2017.04.02.01

Windows 10 x64 NTFS
Internet Explorer 11.953.14393.0
Jan :: JAN [administrator]

16.04.2017 08:31:59
mbar-log-2017-04-16 (08-31-59).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 403590
Time elapsed: 39 minute(s), 33 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
         

Habe jetzt McAfee deinstalliert und wieder neu installiert. Danach ist das Problem behoben, ich hoffe nicht nur überdeckt. Vielen Dank für deine Hilfe. Haben die Log-Dateien denn grundsätzlich ein Problem zu Tage gefördert?

Vielen Dank nochmal.

VG Jan

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Wir haben leider noch ne ältere Anleitung vom adwCleaner, bitte nochmal ausführen und so einstellen:






2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.