Viele Funde bei Scan mit MBAM

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 05.11.18
Scan-Zeit: 11:50
Protokolldatei: 8ca4c8d5-e0e8-11e8-bd9e-b8975a268c4e.json

-Softwaredaten-
Version: 3.1.2.1733
Komponentenversion: 1.0.141
Version des Aktualisierungspakets: 1.0.7697
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: User-PC\User

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 402377
Erkannte Bedrohungen: 60
In die Quarantäne verschobene Bedrohungen: 60
Abgelaufene Zeit: 20 Min., 10 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 13
PUP.Optional.InstallCore, HKU\S-1-5-21-2260964575-2753946872-1401531445-1001\SOFTWARE\CSASTATS\ic, In Quarantäne, [403], [586068],1.0.7697
PUP.Optional.SearchManager, HKU\S-1-5-21-2260964575-2753946872-1401531445-1001\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\nahhmpbckpgdidfnmfkfgiflpjijilce, In Quarantäne, [253], [440037],1.0.7697
PUP.Optional.SearchManager, HKU\S-1-5-21-2260964575-2753946872-1401531445-1001\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pilplloabdedfmialnfchjomjmpjcoej, In Quarantäne, [253], [183362],1.0.7697
PUP.Optional.SearchManager, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\nahhmpbckpgdidfnmfkfgiflpjijilce, In Quarantäne, [253], [476595],1.0.7697
PUP.Optional.SearchManager, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pilplloabdedfmialnfchjomjmpjcoej, In Quarantäne, [253], [260991],1.0.7697
PUP.Optional.InstallCore, HKU\S-1-5-21-2260964575-2753946872-1401531445-1001\SOFTWARE\PRODUCTSETUP, In Quarantäne, [403], [481004],1.0.7697
PUP.Optional.WinYahoo, HKU\S-1-5-21-2260964575-2753946872-1401531445-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, In Quarantäne, [232], [182758],1.0.7697
PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, In Quarantäne, [232], [182758],1.0.7697
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}, In Quarantäne, [232], [182758],1.0.7697
PUP.Optional.Uniblue, HKCR\\pc-mechanic, Löschen bei Neustart, [1340], [327238],1.0.7697
PUP.Optional.OffersOlymp, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\bbiilhoacmmppcmcogfmaailncbelbgn, In Quarantäne, [1951], [344163],1.0.7697
PUP.Optional.SearchManager, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\nahhmpbckpgdidfnmfkfgiflpjijilce, In Quarantäne, [253], [476595],1.0.7697
PUP.Optional.SearchManager, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\pilplloabdedfmialnfchjomjmpjcoej, In Quarantäne, [253], [260991],1.0.7697

Registrierungswert: 3
PUP.Optional.InstallCore, HKU\S-1-5-21-2260964575-2753946872-1401531445-1001\SOFTWARE\PRODUCTSETUP|TB, In Quarantäne, [403], [481004],1.0.7697
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, In Quarantäne, [232], [182758],1.0.7697
PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, In Quarantäne, [232], [182758],1.0.7697

Registrierungsdaten: 2
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Ersetzt, [232], [293461],1.0.7697
PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Ersetzt, [232], [293461],1.0.7697

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 10
PUP.Optional.BundleInstaller, C:\Users\User\AppData\Roaming\0V1L2Z2Z1T1I1L1T\World Tour Fishing open Beta Packages, In Quarantäne, [417], [175946],1.0.7697
PUP.Optional.BundleInstaller, C:\USERS\USER\APPDATA\ROAMING\0V1L2Z2Z1T1I1L1T, In Quarantäne, [417], [175946],1.0.7697
PUP.Optional.OffersOlymp, C:\PROGRAM FILES (X86)\Offers Olymp, In Quarantäne, [1951], [344140],1.0.7697
PUP.Optional.FileViewPro, C:\Users\User\AppData\Local\FileViewPro\FileViewPro.exe_Url_jn4xqozlzppxcht2yt2wvho2bxkp31wm\1.1.0.0, In Quarantäne, [2090], [319819],1.0.7697
PUP.Optional.FileViewPro, C:\Users\User\AppData\Local\FileViewPro\FileViewPro.exe_Url_jn4xqozlzppxcht2yt2wvho2bxkp31wm, In Quarantäne, [2090], [319819],1.0.7697
PUP.Optional.FileViewPro, C:\USERS\USER\APPDATA\LOCAL\FileViewPro, In Quarantäne, [2090], [319819],1.0.7697
PUP.Optional.OffersOlymp, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\la68ozdi.Nenni\jetpack\@offersolymp\simple-storage, In Quarantäne, [1951], [344143],1.0.7697
PUP.Optional.OffersOlymp, C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\LA68OZDI.NENNI\JETPACK\@OFFERSOLYMP, In Quarantäne, [1951], [344143],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\HowToRemove, In Quarantäne, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\USERS\USER\APPDATA\LOCAL\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}, In Quarantäne, [701], [542290],1.0.7697

Datei: 32
PUP.Optional.BundleInstaller, C:\Users\User\AppData\Roaming\0V1L2Z2Z1T1I1L1T\World Tour Fishing open Beta Packages\uninstaller.exe, In Quarantäne, [417], [175946],1.0.7697
PUP.Optional.OffersOlymp, C:\Program Files (x86)\Offers Olymp\bbiilhoacmmppcmcogfmaailncbelbgn.crx, In Quarantäne, [1951], [344140],1.0.7697
PUP.Optional.FileViewPro, C:\Users\User\AppData\Local\FileViewPro\FileViewPro.exe_Url_jn4xqozlzppxcht2yt2wvho2bxkp31wm\1.1.0.0\user.config, In Quarantäne, [2090], [319819],1.0.7697
PUP.Optional.OffersOlymp, C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\la68ozdi.Nenni\jetpack\@offersolymp\simple-storage\store.json, In Quarantäne, [1951], [344143],1.0.7697
PUP.Optional.WinYahoo, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\HOWTOREMOVE.HTML.LNK, In Quarantäne, [232], [254335],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\USERS\USER\APPDATA\LOCAL\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\HOWTOREMOVE\HOWTOREMOVE.HTML, In Quarantäne, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\HowToRemove\chromium-min.jpg, In Quarantäne, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\HowToRemove\control panel-min-min.JPG, In Quarantäne, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\HowToRemove\down.png, In Quarantäne, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\HowToRemove\ff menu.JPG, In Quarantäne, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\HowToRemove\ff search engine-min.png, In Quarantäne, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\HowToRemove\hp-min ff.png, In Quarantäne, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\HowToRemove\hp-min ie.png, Löschen bei Neustart, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\HowToRemove\search engine.gif, In Quarantäne, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\HowToRemove\setup pages.gif, In Quarantäne, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\HowToRemove\sp-min.png, In Quarantäne, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\HowToRemove\start-min.jpg, In Quarantäne, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\HowToRemove\up.png, In Quarantäne, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\cesodadet, In Quarantäne, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\dariri.dat, Löschen bei Neustart, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\minirecot, In Quarantäne, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\nadafese.dat, In Quarantäne, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\nasisar.dat, In Quarantäne, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\niriremo, In Quarantäne, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\sadonino, In Quarantäne, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\Sqlite3.dll, Löschen bei Neustart, [701], [542290],1.0.7697
PUP.Optional.WinYahoo.TskLnk, C:\Users\User\AppData\Local\{C9B7FFEB-ED1F-9353-8087-B6BBA4EF4A23}\uninst.exe, In Quarantäne, [701], [542290],1.0.7697
PUP.Optional.SearchManager, C:\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\LOCAL STORAGE\chrome-extension_pilplloabdedfmialnfchjomjmpjcoej_0.localstorage, Löschen bei Neustart, [253], [453138],1.0.7697
PUP.Optional.SearchManager, C:\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Profile 1\LOCAL STORAGE\chrome-extension_pilplloabdedfmialnfchjomjmpjcoej_0.localstorage, In Quarantäne, [253], [453138],1.0.7697
PUP.Optional.SearchManager, C:\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Profile 2\LOCAL STORAGE\chrome-extension_pilplloabdedfmialnfchjomjmpjcoej_0.localstorage, In Quarantäne, [253], [453138],1.0.7697
PUP.Optional.SearchModule, C:\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\LOCAL STORAGE\chrome-extension_nahhmpbckpgdidfnmfkfgiflpjijilce_0.localstorage, In Quarantäne, [259], [453492],1.0.7697
PUP.Optional.SearchModule, C:\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Profile 1\LOCAL STORAGE\chrome-extension_nahhmpbckpgdidfnmfkfgiflpjijilce_0.localstorage, In Quarantäne, [259], [453492],1.0.7697

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)

WMI: 0
(keine bösartigen Elemente erkannt)

(end)