| |
| |||||||
Log-Analyse und Auswertung: Windows 10 - Werbefenster, langsameres System und 198 Funde mit MalewarebytesWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
09.02.2020, 19:20
| #1 |
| |  Windows 10 - Werbefenster, langsameres System und 198 Funde mit Malewarebytes Ich hatte meinen Laptop verliehen. Als ich ihn jetzt wieder bekommen habe, habe ich gemerkt, dass das System insgesamt langsamer wurde. Sehr oft gehen irgendwelche Werbefenster auf, bzw. es werden irgendwelche Antivierenprogramme geöffnet. Mit Malewarebytes gab es auch 198 Funde. Hier mal die Logs FRST Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 02-02-2020 02
durchgeführt von Juditha (Administrator) auf LAPTOP (Hewlett-Packard HP Pavilion g7 Notebook PC) (09-02-2020 16:38:13)
Gestartet von C:\Users\Juditha\Desktop
Geladene Profile: Juditha (Verfügbare Profile: Juditha)
Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: IE
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Advanced Micro Devices Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Advanced Micro Devices, Inc.) [Datei ist nicht signiert] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(ATI Technologies Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(CyberLink -> CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(CyberLink -> CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(CyberLink -> CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Google LLC -> Google LLC) C:\Users\Juditha\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Juditha\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Juditha\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Juditha\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Juditha\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Juditha\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Juditha\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Juditha\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Juditha\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Juditha\AppData\Local\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Hewlett-Packard Company -> Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(Hewlett-Packard Company -> Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Company -> Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(IDT, Inc.) [Datei ist nicht signiert] C:\Program Files\IDT\WDM\stacsv64.exe
(IDT, Inc.) [Datei ist nicht signiert] C:\Program Files\IDT\WDM\sttray64.exe
(INFOSOFT LOGICS -> ) C:\Program Files\Xtron ~Optimizer Pro_Juditha\rgcl.exe
(Ivaylo Beltchev -> IvoSoft) [Datei ist nicht signiert] C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\WirelessKB850NotificationService.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.22013_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.18384_none_fa1d93c39b41b41a\TiWorker.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(PC HelpSoft Labs Inc. -> PC Helpsoft) C:\Program Files (x86)\PC Cleaner\PCCNotifications.exe
(Realsil Microelectronics Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Slimware Utilities Holdings, Inc. -> SlimWare Utilities, Inc.) C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163800 2016-07-30] (Ivaylo Beltchev -> IvoSoft) [Datei ist nicht signiert]
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-24] (Synaptics Incorporated -> Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-07-21] (IDT, Inc.) [Datei ist nicht signiert]
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-08] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491320 2012-07-26] (CyberLink -> CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink -> CyberLink Corp.)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [580512 2012-07-09] (Hewlett-Packard Company -> Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HP CoolSense] => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [1342008 2011-08-26] (Hewlett-Packard Company -> Hewlett-Packard Development Company, L.P.)
HKU\S-1-5-21-2783141820-1385357570-881274621-1002\...\Run: [OpenOffice Updater] => C:\Users\Juditha\AppData\Roaming\OpenOffice Updater\Updater.exe [389176 2018-01-02] (Arne Koenig -> ) <==== ACHTUNG
HKU\S-1-5-21-2783141820-1385357570-881274621-1002\...\Run: [Google Update] => C:\Users\Juditha\AppData\Local\Google\Update\1.3.35.442\GoogleUpdateCore.exe [217544 2020-02-08] (Google LLC -> Google LLC)
HKU\S-1-5-21-2783141820-1385357570-881274621-1002\...\MountPoints2: {73d2e72e-4342-11e8-be99-38eaa7dca62a} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2783141820-1385357570-881274621-1002\...\MountPoints2: {b2e58877-f16a-11e8-be9e-38eaa7dca62a} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2783141820-1385357570-881274621-1002\...\MountPoints2: {bf199cea-3d36-11e9-bea1-38eaa7dca62a} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2783141820-1385357570-881274621-1002\...\MountPoints2: {c3804e57-53a5-11e7-8250-38eaa7dca62a} - "F:\HiSuiteDownLoader.exe"
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {094CD275-5C71-4753-B57E-5566CA859498} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {0A74D5AB-1CBD-4E53-BF35-92BFEAF952A7} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {0DC4FE76-E409-4AC3-BA7B-AA81D5834E4F} - System32\Tasks\Xtron ~Optimizer Pro_Logon => C:\Program Files\Xtron ~Optimizer Pro_Juditha\rgcl.exe [1943136 2019-08-20] (INFOSOFT LOGICS -> ) <==== ACHTUNG
Task: {0F6DBBD1-1FA5-490B-A482-1F43FCC689E6} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {249943E6-6F5C-4975-AB9A-AF8C24D1F584} - System32\Tasks\DriverUpdate Startup => C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe [31909048 2017-07-19] (Slimware Utilities Holdings, Inc. -> SlimWare Utilities, Inc.)
Task: {3693D26B-AD27-4267-8182-4FE018387F22} - System32\Tasks\DriverUpdate Scan => C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe [31909048 2017-07-19] (Slimware Utilities Holdings, Inc. -> SlimWare Utilities, Inc.)
Task: {3980EC67-B681-4E75-B4D4-CF3DB7460033} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Critical Actions Pending => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [524192 2012-08-10] (Hewlett-Packard Company -> Hewlett-Packard Company)
Task: {50D18852-95C2-481C-A68B-DFB8A091AF2F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [524192 2012-08-10] (Hewlett-Packard Company -> Hewlett-Packard Company)
Task: {55C0E488-792C-40E8-A061-7B09DB11E803} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [524192 2012-08-10] (Hewlett-Packard Company -> Hewlett-Packard Company)
Task: {5D169655-A530-4482-9FA9-BE4E4042A534} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [4630208 2016-11-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
Task: {6A9E90AE-59C6-4000-8A32-0CF659EEBF7B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1059184 2018-02-07] (HP Inc. -> HP Inc.)
Task: {6E704494-9703-4D0D-BFED-473AF8D821F0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [619656 2016-12-07] (Hewlett Packard -> HP Inc.)
Task: {747DFD6F-4FE9-476E-82A0-41121D2AD7C0} - \Microsoft\Windows\Setup\EOSNotify -> Keine Datei <==== ACHTUNG
Task: {77A61E39-FD0B-4B02-8168-F1D03F90A386} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [524192 2012-08-10] (Hewlett-Packard Company -> Hewlett-Packard Company)
Task: {7EA45F1E-4BF6-4B8C-873F-E8BD8CB9B569} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFReport.exe [88120 2016-02-18] (Hewlett-Packard Company -> Hewlett-Packard)
Task: {80258618-18EB-4D5E-8CDF-D64FD0BC1CF4} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488 2012-07-27] (CyberLink -> CyberLink)
Task: {8B6759EE-1C08-4B8F-955C-774AB5A6544E} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1}
Task: {9EB6C778-AB54-476C-B399-A803B73482F5} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink -> CyberLink)
Task: {A080D116-FF79-4123-ADF9-16B8F0389BA0} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2783141820-1385357570-881274621-1002UA => C:\Users\Juditha\AppData\Local\Google\Update\GoogleUpdate.exe [155432 2019-12-01] (Google Inc -> Google LLC)
Task: {B8FD3C4F-50D9-49FC-B2FF-2B8DA236C0A8} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2783141820-1385357570-881274621-1002Core => C:\Users\Juditha\AppData\Local\Google\Update\GoogleUpdate.exe [155432 2019-12-01] (Google Inc -> Google LLC)
Task: {C9DCF59E-6B97-4C0C-8641-B8261089C8CA} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E}
Task: {CE23AAAA-413B-4CEB-B315-E9C2A4F1689B} - System32\Tasks\PC Cleaner automatic scan and notifications => C:\Program Files (x86)\PC Cleaner\PCCNotifications.exe [3756424 2018-12-05] (PC HelpSoft Labs Inc. -> PC Helpsoft)
Task: {DB21EF32-6BA9-4118-BBC1-BC4FF48961E5} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61}
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\DriverUpdate Scan.job => C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe
Task: C:\WINDOWS\Tasks\DriverUpdate Startup.job => C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe
Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe-CheckUpdate(Tracker Software Products (Canada) Ltd.Kee
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{976B57E0-6211-4A75-AA0A-C13BC11AF847}: [DhcpNameServer] 192.168.178.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT13/4
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT13/4
HKU\S-1-5-21-2783141820-1385357570-881274621-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKU\S-1-5-21-2783141820-1385357570-881274621-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT13/4
SearchScopes: HKLM -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM -> {AD8ECAC0-C2C4-4067-90F1-6A0551262452} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM-x32 -> {AD8ECAC0-C2C4-4067-90F1-6A0551262452} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\S-1-5-21-2783141820-1385357570-881274621-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?pc=COSP&ptag=D020517-A6B219395BABB4E59ADF&form=CONBDF&conlogo=CT3332005&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2783141820-1385357570-881274621-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?pc=COSP&ptag=D020517-A6B219395BABB4E59ADF&form=CONBDF&conlogo=CT3332005&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2783141820-1385357570-881274621-1002 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKU\S-1-5-21-2783141820-1385357570-881274621-1002 -> {9043B703-E807-4A88-A03A-1A9ADEB98355} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2783141820-1385357570-881274621-1002 -> {AD8ECAC0-C2C4-4067-90F1-6A0551262452} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-2783141820-1385357570-881274621-1002 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKU\S-1-5-21-2783141820-1385357570-881274621-1002 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (Ivaylo Beltchev -> IvoSoft) [Datei ist nicht signiert]
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard Company -> Hewlett-Packard)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2016-07-30] (Ivaylo Beltchev -> IvoSoft) [Datei ist nicht signiert]
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (Ivaylo Beltchev -> IvoSoft) [Datei ist nicht signiert]
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard Company -> Hewlett-Packard)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2016-07-30] (Ivaylo Beltchev -> IvoSoft) [Datei ist nicht signiert]
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (Ivaylo Beltchev -> IvoSoft) [Datei ist nicht signiert]
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (Ivaylo Beltchev -> IvoSoft) [Datei ist nicht signiert]
FireFox:
========
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-11-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-11-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw.dll [2012-04-26] (Adobe Systems, Inc.) [Datei ist nicht signiert]
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-11-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-11-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-2783141820-1385357570-881274621-1002: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-11-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
Chrome:
=======
CHR Profile: C:\Users\Juditha\AppData\Local\Google\Chrome\User Data\Default [2020-02-09]
CHR Extension: (Präsentationen) - C:\Users\Juditha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-12-01]
CHR Extension: (Docs) - C:\Users\Juditha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-12-01]
CHR Extension: (Google Drive) - C:\Users\Juditha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-12-01]
CHR Extension: (YouTube) - C:\Users\Juditha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-12-01]
CHR Extension: (Tabellen) - C:\Users\Juditha\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-12-01]
CHR Extension: (Google Docs Offline) - C:\Users\Juditha\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-02-08]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Juditha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-12-01]
CHR Extension: (Google Mail) - C:\Users\Juditha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-12-01]
CHR Extension: (Chrome Media Router) - C:\Users\Juditha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-12-23]
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [239616 2012-10-11] (Microsoft Windows Hardware Compatibility Publisher -> AMD)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-08-08] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2451456 2012-07-14] (Realsil Microelectronics Inc.) [Datei ist nicht signiert]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6960640 2020-02-09] (Malwarebytes Inc -> Malwarebytes)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [321536 2012-07-21] (IDT, Inc.) [Datei ist nicht signiert]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-06-17] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-06-17] (Microsoft Corporation -> Microsoft Corporation)
R2 WirelessKB850NotificationService; C:\WINDOWS\system32\WirelessKB850NotificationService.exe [176632 2018-05-14] (Microsoft Corporation -> Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 Accelerometer; C:\WINDOWS\system32\DRIVERS\Accelerometer.sys [42400 2012-08-10] (Hewlett-Packard Company -> Hewlett-Packard Company)
R3 amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [10316800 2012-10-11] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [370688 2012-10-11] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
S0 amd_sata; C:\WINDOWS\System32\drivers\amd_sata.sys [79528 2012-07-24] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
S0 amd_xata; C:\WINDOWS\System32\drivers\amd_xata.sys [26280 2012-07-24] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
S2 APXACC; C:\WINDOWS\system32\DRIVERS\appexDrv.sys [199008 2012-06-23] (AppEx Networks Corporation -> AppEx Networks Corporation)
R3 athr; C:\WINDOWS\system32\DRIVERS\athw8x.sys [3680256 2013-06-18] (Microsoft Windows -> Qualcomm Atheros Communications, Inc.)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdW86.sys [98472 2012-07-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
S3 bcmfn2; C:\WINDOWS\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Broadcom Corporation -> Windows (R) Win 7 DDK provider)
R1 CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink -> CyberLink)
R0 hpdskflt; C:\WINDOWS\System32\DRIVERS\hpdskflt.sys [29600 2012-08-10] (Hewlett-Packard Company -> Hewlett-Packard Company)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [214496 2020-02-09] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-02-09] (Malwarebytes Inc -> Malwarebytes)
R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [269968 2012-07-03] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)
R3 RTL8168; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [591360 2013-06-18] (Microsoft Windows -> Realtek )
S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-24] (Synaptics Incorporated -> Synaptics Incorporated)
S3 SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [43832 2012-08-24] (Synaptics Incorporated -> Synaptics Incorporated)
R3 STHDA; C:\WINDOWS\system32\DRIVERS\stwrt64.sys [540160 2012-07-21] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
S3 SWDUMon; C:\WINDOWS\system32\DRIVERS\SWDUMon.sys [13920 2020-02-09] (SlimWare Utilities Inc. -> )
R3 usbfilter; C:\WINDOWS\system32\DRIVERS\usbfilter.sys [57000 2012-06-19] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [46600 2017-06-17] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [274776 2017-06-17] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [117592 2017-06-17] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [20288 2012-08-03] (Hewlett-Packard Company -> Hewlett-Packard Development Company, L.P.)
R3 WirelessKeyboardFilter; C:\WINDOWS\System32\drivers\WirelessKeyboardFilter.sys [49896 2016-07-21] (Microsoft Corporation -> Microsoft Corporation)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2020-02-09 16:38 - 2020-02-09 16:39 - 000027507 _____ C:\Users\Juditha\Desktop\FRST.txt
2020-02-09 16:37 - 2020-02-09 16:38 - 000000000 ____D C:\FRST
2020-02-09 16:36 - 2020-02-09 16:36 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-02-09 16:36 - 2020-02-09 16:36 - 000214496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2020-02-09 16:36 - 2020-02-09 16:36 - 000001964 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2020-02-09 16:36 - 2020-02-09 16:36 - 000001964 _____ C:\ProgramData\Desktop\Malwarebytes.lnk
2020-02-09 16:36 - 2020-02-09 16:36 - 000000000 ____D C:\Users\Juditha\AppData\Local\mbamtray
2020-02-09 16:36 - 2020-02-09 16:36 - 000000000 ____D C:\Users\Juditha\AppData\Local\mbam
2020-02-09 16:36 - 2020-02-09 16:36 - 000000000 ____D C:\Users\Juditha\AppData\Local\cache
2020-02-09 16:36 - 2020-02-09 16:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2020-02-09 16:35 - 2020-02-09 16:35 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2020-02-09 16:35 - 2020-02-09 16:35 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-02-09 16:33 - 2020-02-09 16:33 - 000000000 ____D C:\Program Files\Malwarebytes
2020-02-09 16:32 - 2020-02-09 16:32 - 001924728 _____ (Malwarebytes) C:\Users\Juditha\Desktop\MBSetup.exe
2020-02-09 16:24 - 2020-02-09 16:24 - 002279424 _____ (Farbar) C:\Users\Juditha\Desktop\FRST64.exe
2020-02-08 21:26 - 2020-02-08 21:26 - 000000000 ____D C:\Users\Juditha\AppData\Roaming\unpd
2020-02-08 21:26 - 2020-02-08 21:26 - 000000000 ____D C:\Users\Juditha\AppData\Roaming\errorlg
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2020-02-09 16:39 - 2012-07-26 08:59 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-02-09 16:32 - 2018-02-06 21:42 - 000000436 _____ C:\WINDOWS\Tasks\DriverUpdate Startup.job
2020-02-09 16:22 - 2017-06-17 23:02 - 000003930 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{9394B8C4-7E48-479A-93BC-5EDC75EA44CD}
2020-02-09 16:22 - 2017-02-04 19:53 - 000003596 _____ C:\WINDOWS\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2783141820-1385357570-881274621-1002
2020-02-09 16:20 - 2019-01-05 14:29 - 000003246 _____ C:\WINDOWS\system32\Tasks\PC Cleaner automatic scan and notifications
2020-02-09 16:19 - 2019-12-13 19:22 - 000003066 _____ C:\WINDOWS\system32\Tasks\Xtron ~Optimizer Pro_Logon
2020-02-09 16:19 - 2017-02-05 14:27 - 000000000 ____D C:\Users\Juditha\AppData\Roaming\OpenOffice Updater
2020-02-09 16:17 - 2018-02-06 21:42 - 000013920 _____ C:\WINDOWS\system32\Drivers\SWDUMon.sys
2020-02-09 16:17 - 2017-11-24 23:58 - 000000000 ___RD C:\Users\Juditha\OneDrive
2020-02-08 21:26 - 2017-02-05 12:58 - 000000000 ____D C:\Users\Juditha\AppData\Local\ClassicShell
2020-02-08 17:44 - 2013-08-22 14:36 - 000000000 ____D C:\WINDOWS\Inf
2020-02-08 17:32 - 2019-12-01 18:43 - 000002471 _____ C:\Users\Juditha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-02-08 17:32 - 2019-12-01 18:43 - 000002434 _____ C:\Users\Juditha\Desktop\Google Chrome.lnk
2020-02-08 17:26 - 2019-12-01 18:42 - 000003726 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-2783141820-1385357570-881274621-1002UA
2020-02-08 17:26 - 2019-12-01 18:42 - 000003454 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-2783141820-1385357570-881274621-1002Core
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2019-11-01 00:01 - 2019-11-01 00:01 - 000000002 _____ () C:\Users\Juditha\AppData\Roaming\acc.txt
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
LastRegBack: 2020-02-08 17:45
==================== Ende von FRST.txt ========================
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 02-02-2020 02
durchgeführt von Juditha (Administrator) auf LAPTOP (Hewlett-Packard HP Pavilion g7 Notebook PC) (09-02-2020 16:38:13)
Gestartet von C:\Users\Juditha\Desktop
Geladene Profile: Juditha (Verfügbare Profile: Juditha)
Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: IE
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Advanced Micro Devices Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Advanced Micro Devices, Inc.) [Datei ist nicht signiert] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(ATI Technologies Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(CyberLink -> CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(CyberLink -> CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(CyberLink -> CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Google LLC -> Google LLC) C:\Users\Juditha\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Juditha\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Juditha\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Juditha\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Juditha\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Juditha\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Juditha\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Juditha\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Juditha\AppData\Local\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Users\Juditha\AppData\Local\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Hewlett-Packard Company -> Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(Hewlett-Packard Company -> Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Company -> Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(IDT, Inc.) [Datei ist nicht signiert] C:\Program Files\IDT\WDM\stacsv64.exe
(IDT, Inc.) [Datei ist nicht signiert] C:\Program Files\IDT\WDM\sttray64.exe
(INFOSOFT LOGICS -> ) C:\Program Files\Xtron ~Optimizer Pro_Juditha\rgcl.exe
(Ivaylo Beltchev -> IvoSoft) [Datei ist nicht signiert] C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\WirelessKB850NotificationService.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.22013_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.18384_none_fa1d93c39b41b41a\TiWorker.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(PC HelpSoft Labs Inc. -> PC Helpsoft) C:\Program Files (x86)\PC Cleaner\PCCNotifications.exe
(Realsil Microelectronics Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Slimware Utilities Holdings, Inc. -> SlimWare Utilities, Inc.) C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163800 2016-07-30] (Ivaylo Beltchev -> IvoSoft) [Datei ist nicht signiert]
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-24] (Synaptics Incorporated -> Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-07-21] (IDT, Inc.) [Datei ist nicht signiert]
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-08] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491320 2012-07-26] (CyberLink -> CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink -> CyberLink Corp.)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [580512 2012-07-09] (Hewlett-Packard Company -> Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HP CoolSense] => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [1342008 2011-08-26] (Hewlett-Packard Company -> Hewlett-Packard Development Company, L.P.)
HKU\S-1-5-21-2783141820-1385357570-881274621-1002\...\Run: [OpenOffice Updater] => C:\Users\Juditha\AppData\Roaming\OpenOffice Updater\Updater.exe [389176 2018-01-02] (Arne Koenig -> ) <==== ACHTUNG
HKU\S-1-5-21-2783141820-1385357570-881274621-1002\...\Run: [Google Update] => C:\Users\Juditha\AppData\Local\Google\Update\1.3.35.442\GoogleUpdateCore.exe [217544 2020-02-08] (Google LLC -> Google LLC)
HKU\S-1-5-21-2783141820-1385357570-881274621-1002\...\MountPoints2: {73d2e72e-4342-11e8-be99-38eaa7dca62a} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2783141820-1385357570-881274621-1002\...\MountPoints2: {b2e58877-f16a-11e8-be9e-38eaa7dca62a} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2783141820-1385357570-881274621-1002\...\MountPoints2: {bf199cea-3d36-11e9-bea1-38eaa7dca62a} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2783141820-1385357570-881274621-1002\...\MountPoints2: {c3804e57-53a5-11e7-8250-38eaa7dca62a} - "F:\HiSuiteDownLoader.exe"
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {094CD275-5C71-4753-B57E-5566CA859498} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {0A74D5AB-1CBD-4E53-BF35-92BFEAF952A7} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {0DC4FE76-E409-4AC3-BA7B-AA81D5834E4F} - System32\Tasks\Xtron ~Optimizer Pro_Logon => C:\Program Files\Xtron ~Optimizer Pro_Juditha\rgcl.exe [1943136 2019-08-20] (INFOSOFT LOGICS -> ) <==== ACHTUNG
Task: {0F6DBBD1-1FA5-490B-A482-1F43FCC689E6} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {249943E6-6F5C-4975-AB9A-AF8C24D1F584} - System32\Tasks\DriverUpdate Startup => C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe [31909048 2017-07-19] (Slimware Utilities Holdings, Inc. -> SlimWare Utilities, Inc.)
Task: {3693D26B-AD27-4267-8182-4FE018387F22} - System32\Tasks\DriverUpdate Scan => C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe [31909048 2017-07-19] (Slimware Utilities Holdings, Inc. -> SlimWare Utilities, Inc.)
Task: {3980EC67-B681-4E75-B4D4-CF3DB7460033} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Critical Actions Pending => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [524192 2012-08-10] (Hewlett-Packard Company -> Hewlett-Packard Company)
Task: {50D18852-95C2-481C-A68B-DFB8A091AF2F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [524192 2012-08-10] (Hewlett-Packard Company -> Hewlett-Packard Company)
Task: {55C0E488-792C-40E8-A061-7B09DB11E803} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [524192 2012-08-10] (Hewlett-Packard Company -> Hewlett-Packard Company)
Task: {5D169655-A530-4482-9FA9-BE4E4042A534} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [4630208 2016-11-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
Task: {6A9E90AE-59C6-4000-8A32-0CF659EEBF7B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1059184 2018-02-07] (HP Inc. -> HP Inc.)
Task: {6E704494-9703-4D0D-BFED-473AF8D821F0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [619656 2016-12-07] (Hewlett Packard -> HP Inc.)
Task: {747DFD6F-4FE9-476E-82A0-41121D2AD7C0} - \Microsoft\Windows\Setup\EOSNotify -> Keine Datei <==== ACHTUNG
Task: {77A61E39-FD0B-4B02-8168-F1D03F90A386} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [524192 2012-08-10] (Hewlett-Packard Company -> Hewlett-Packard Company)
Task: {7EA45F1E-4BF6-4B8C-873F-E8BD8CB9B569} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFReport.exe [88120 2016-02-18] (Hewlett-Packard Company -> Hewlett-Packard)
Task: {80258618-18EB-4D5E-8CDF-D64FD0BC1CF4} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488 2012-07-27] (CyberLink -> CyberLink)
Task: {8B6759EE-1C08-4B8F-955C-774AB5A6544E} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1}
Task: {9EB6C778-AB54-476C-B399-A803B73482F5} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink -> CyberLink)
Task: {A080D116-FF79-4123-ADF9-16B8F0389BA0} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2783141820-1385357570-881274621-1002UA => C:\Users\Juditha\AppData\Local\Google\Update\GoogleUpdate.exe [155432 2019-12-01] (Google Inc -> Google LLC)
Task: {B8FD3C4F-50D9-49FC-B2FF-2B8DA236C0A8} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2783141820-1385357570-881274621-1002Core => C:\Users\Juditha\AppData\Local\Google\Update\GoogleUpdate.exe [155432 2019-12-01] (Google Inc -> Google LLC)
Task: {C9DCF59E-6B97-4C0C-8641-B8261089C8CA} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E}
Task: {CE23AAAA-413B-4CEB-B315-E9C2A4F1689B} - System32\Tasks\PC Cleaner automatic scan and notifications => C:\Program Files (x86)\PC Cleaner\PCCNotifications.exe [3756424 2018-12-05] (PC HelpSoft Labs Inc. -> PC Helpsoft)
Task: {DB21EF32-6BA9-4118-BBC1-BC4FF48961E5} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61}
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\DriverUpdate Scan.job => C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe
Task: C:\WINDOWS\Tasks\DriverUpdate Startup.job => C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe
Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe-CheckUpdate(Tracker Software Products (Canada) Ltd.Kee
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{976B57E0-6211-4A75-AA0A-C13BC11AF847}: [DhcpNameServer] 192.168.178.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT13/4
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT13/4
HKU\S-1-5-21-2783141820-1385357570-881274621-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKU\S-1-5-21-2783141820-1385357570-881274621-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT13/4
SearchScopes: HKLM -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM -> {AD8ECAC0-C2C4-4067-90F1-6A0551262452} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM-x32 -> {AD8ECAC0-C2C4-4067-90F1-6A0551262452} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\S-1-5-21-2783141820-1385357570-881274621-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?pc=COSP&ptag=D020517-A6B219395BABB4E59ADF&form=CONBDF&conlogo=CT3332005&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2783141820-1385357570-881274621-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?pc=COSP&ptag=D020517-A6B219395BABB4E59ADF&form=CONBDF&conlogo=CT3332005&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2783141820-1385357570-881274621-1002 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKU\S-1-5-21-2783141820-1385357570-881274621-1002 -> {9043B703-E807-4A88-A03A-1A9ADEB98355} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2783141820-1385357570-881274621-1002 -> {AD8ECAC0-C2C4-4067-90F1-6A0551262452} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-2783141820-1385357570-881274621-1002 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKU\S-1-5-21-2783141820-1385357570-881274621-1002 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (Ivaylo Beltchev -> IvoSoft) [Datei ist nicht signiert]
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard Company -> Hewlett-Packard)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2016-07-30] (Ivaylo Beltchev -> IvoSoft) [Datei ist nicht signiert]
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (Ivaylo Beltchev -> IvoSoft) [Datei ist nicht signiert]
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard Company -> Hewlett-Packard)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2016-07-30] (Ivaylo Beltchev -> IvoSoft) [Datei ist nicht signiert]
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (Ivaylo Beltchev -> IvoSoft) [Datei ist nicht signiert]
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (Ivaylo Beltchev -> IvoSoft) [Datei ist nicht signiert]
FireFox:
========
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-11-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-11-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw.dll [2012-04-26] (Adobe Systems, Inc.) [Datei ist nicht signiert]
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-11-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-11-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-2783141820-1385357570-881274621-1002: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-11-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
Chrome:
=======
CHR Profile: C:\Users\Juditha\AppData\Local\Google\Chrome\User Data\Default [2020-02-09]
CHR Extension: (Präsentationen) - C:\Users\Juditha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-12-01]
CHR Extension: (Docs) - C:\Users\Juditha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-12-01]
CHR Extension: (Google Drive) - C:\Users\Juditha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-12-01]
CHR Extension: (YouTube) - C:\Users\Juditha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-12-01]
CHR Extension: (Tabellen) - C:\Users\Juditha\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-12-01]
CHR Extension: (Google Docs Offline) - C:\Users\Juditha\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-02-08]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Juditha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-12-01]
CHR Extension: (Google Mail) - C:\Users\Juditha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-12-01]
CHR Extension: (Chrome Media Router) - C:\Users\Juditha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-12-23]
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [239616 2012-10-11] (Microsoft Windows Hardware Compatibility Publisher -> AMD)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-08-08] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2451456 2012-07-14] (Realsil Microelectronics Inc.) [Datei ist nicht signiert]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6960640 2020-02-09] (Malwarebytes Inc -> Malwarebytes)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [321536 2012-07-21] (IDT, Inc.) [Datei ist nicht signiert]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-06-17] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-06-17] (Microsoft Corporation -> Microsoft Corporation)
R2 WirelessKB850NotificationService; C:\WINDOWS\system32\WirelessKB850NotificationService.exe [176632 2018-05-14] (Microsoft Corporation -> Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 Accelerometer; C:\WINDOWS\system32\DRIVERS\Accelerometer.sys [42400 2012-08-10] (Hewlett-Packard Company -> Hewlett-Packard Company)
R3 amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [10316800 2012-10-11] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [370688 2012-10-11] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
S0 amd_sata; C:\WINDOWS\System32\drivers\amd_sata.sys [79528 2012-07-24] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
S0 amd_xata; C:\WINDOWS\System32\drivers\amd_xata.sys [26280 2012-07-24] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
S2 APXACC; C:\WINDOWS\system32\DRIVERS\appexDrv.sys [199008 2012-06-23] (AppEx Networks Corporation -> AppEx Networks Corporation)
R3 athr; C:\WINDOWS\system32\DRIVERS\athw8x.sys [3680256 2013-06-18] (Microsoft Windows -> Qualcomm Atheros Communications, Inc.)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdW86.sys [98472 2012-07-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
S3 bcmfn2; C:\WINDOWS\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Broadcom Corporation -> Windows (R) Win 7 DDK provider)
R1 CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink -> CyberLink)
R0 hpdskflt; C:\WINDOWS\System32\DRIVERS\hpdskflt.sys [29600 2012-08-10] (Hewlett-Packard Company -> Hewlett-Packard Company)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [214496 2020-02-09] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-02-09] (Malwarebytes Inc -> Malwarebytes)
R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [269968 2012-07-03] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)
R3 RTL8168; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [591360 2013-06-18] (Microsoft Windows -> Realtek )
S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-24] (Synaptics Incorporated -> Synaptics Incorporated)
S3 SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [43832 2012-08-24] (Synaptics Incorporated -> Synaptics Incorporated)
R3 STHDA; C:\WINDOWS\system32\DRIVERS\stwrt64.sys [540160 2012-07-21] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
S3 SWDUMon; C:\WINDOWS\system32\DRIVERS\SWDUMon.sys [13920 2020-02-09] (SlimWare Utilities Inc. -> )
R3 usbfilter; C:\WINDOWS\system32\DRIVERS\usbfilter.sys [57000 2012-06-19] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [46600 2017-06-17] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [274776 2017-06-17] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [117592 2017-06-17] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [20288 2012-08-03] (Hewlett-Packard Company -> Hewlett-Packard Development Company, L.P.)
R3 WirelessKeyboardFilter; C:\WINDOWS\System32\drivers\WirelessKeyboardFilter.sys [49896 2016-07-21] (Microsoft Corporation -> Microsoft Corporation)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2020-02-09 16:38 - 2020-02-09 16:39 - 000027507 _____ C:\Users\Juditha\Desktop\FRST.txt
2020-02-09 16:37 - 2020-02-09 16:38 - 000000000 ____D C:\FRST
2020-02-09 16:36 - 2020-02-09 16:36 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-02-09 16:36 - 2020-02-09 16:36 - 000214496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2020-02-09 16:36 - 2020-02-09 16:36 - 000001964 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2020-02-09 16:36 - 2020-02-09 16:36 - 000001964 _____ C:\ProgramData\Desktop\Malwarebytes.lnk
2020-02-09 16:36 - 2020-02-09 16:36 - 000000000 ____D C:\Users\Juditha\AppData\Local\mbamtray
2020-02-09 16:36 - 2020-02-09 16:36 - 000000000 ____D C:\Users\Juditha\AppData\Local\mbam
2020-02-09 16:36 - 2020-02-09 16:36 - 000000000 ____D C:\Users\Juditha\AppData\Local\cache
2020-02-09 16:36 - 2020-02-09 16:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2020-02-09 16:35 - 2020-02-09 16:35 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2020-02-09 16:35 - 2020-02-09 16:35 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-02-09 16:33 - 2020-02-09 16:33 - 000000000 ____D C:\Program Files\Malwarebytes
2020-02-09 16:32 - 2020-02-09 16:32 - 001924728 _____ (Malwarebytes) C:\Users\Juditha\Desktop\MBSetup.exe
2020-02-09 16:24 - 2020-02-09 16:24 - 002279424 _____ (Farbar) C:\Users\Juditha\Desktop\FRST64.exe
2020-02-08 21:26 - 2020-02-08 21:26 - 000000000 ____D C:\Users\Juditha\AppData\Roaming\unpd
2020-02-08 21:26 - 2020-02-08 21:26 - 000000000 ____D C:\Users\Juditha\AppData\Roaming\errorlg
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2020-02-09 16:39 - 2012-07-26 08:59 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-02-09 16:32 - 2018-02-06 21:42 - 000000436 _____ C:\WINDOWS\Tasks\DriverUpdate Startup.job
2020-02-09 16:22 - 2017-06-17 23:02 - 000003930 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{9394B8C4-7E48-479A-93BC-5EDC75EA44CD}
2020-02-09 16:22 - 2017-02-04 19:53 - 000003596 _____ C:\WINDOWS\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2783141820-1385357570-881274621-1002
2020-02-09 16:20 - 2019-01-05 14:29 - 000003246 _____ C:\WINDOWS\system32\Tasks\PC Cleaner automatic scan and notifications
2020-02-09 16:19 - 2019-12-13 19:22 - 000003066 _____ C:\WINDOWS\system32\Tasks\Xtron ~Optimizer Pro_Logon
2020-02-09 16:19 - 2017-02-05 14:27 - 000000000 ____D C:\Users\Juditha\AppData\Roaming\OpenOffice Updater
2020-02-09 16:17 - 2018-02-06 21:42 - 000013920 _____ C:\WINDOWS\system32\Drivers\SWDUMon.sys
2020-02-09 16:17 - 2017-11-24 23:58 - 000000000 ___RD C:\Users\Juditha\OneDrive
2020-02-08 21:26 - 2017-02-05 12:58 - 000000000 ____D C:\Users\Juditha\AppData\Local\ClassicShell
2020-02-08 17:44 - 2013-08-22 14:36 - 000000000 ____D C:\WINDOWS\Inf
2020-02-08 17:32 - 2019-12-01 18:43 - 000002471 _____ C:\Users\Juditha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-02-08 17:32 - 2019-12-01 18:43 - 000002434 _____ C:\Users\Juditha\Desktop\Google Chrome.lnk
2020-02-08 17:26 - 2019-12-01 18:42 - 000003726 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-2783141820-1385357570-881274621-1002UA
2020-02-08 17:26 - 2019-12-01 18:42 - 000003454 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-2783141820-1385357570-881274621-1002Core
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2019-11-01 00:01 - 2019-11-01 00:01 - 000000002 _____ () C:\Users\Juditha\AppData\Roaming\acc.txt
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
LastRegBack: 2020-02-08 17:45
==================== Ende von FRST.txt ========================
Code:
ATTFilter Malwarebytes
www.malwarebytes.com
-Protokolldetails-
Scan-Datum: 09.02.20
Scan-Zeit: 16:51
Protokolldatei: ffbbf69a-4b53-11ea-8851-38eaa7dca62a.json
-Softwaredaten-
Version: 4.0.4.49
Komponentenversion: 1.0.810
Version des Aktualisierungspakets: 1.0.18934
Lizenz: Kostenlos
-Systemdaten-
Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: LAPTOP\Juditha
-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 246795
Erkannte Bedrohungen: 198
In die Quarantäne verschobene Bedrohungen: 198
Abgelaufene Zeit: 4 Min., 46 Sek.
-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung
-Scan-Details-
Prozess: 3
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\rgcl.exe, In Quarantäne, 514, 717840, , , ,
PUP.Optional.DriverUpdate, C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe, In Quarantäne, 2972, 331449, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\PCCNotifications.exe, In Quarantäne, 1434, 739136, , , ,
Modul: 8
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\x64\SQLite.Interop.dll, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\Microsoft.Win32.TaskScheduler.dll, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\rgcl.exe, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\System.Data.SQLite.DLL, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\TAFactory.IconPack.dll, In Quarantäne, 514, 717840, , , ,
PUP.Optional.DriverUpdate, C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe, In Quarantäne, 2972, 331449, , , ,
PUP.Optional.DriverUpdate, C:\Program Files (x86)\DriverUpdate\UnifiedLogger.dll, In Quarantäne, 2972, 331449, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\PCCNotifications.exe, In Quarantäne, 1434, 739136, , , ,
Registrierungsschlüssel: 40
PUP.Optional.OpenOfficeDE, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\OpenOffice Updater, In Quarantäne, 6439, 628584, 1.0.18934, , ame,
PUP.Optional.PCCleaner, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\PC Cleaner, In Quarantäne, 1434, 739137, 1.0.18934, , ame,
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\DRIVERUPDATE SCAN, In Quarantäne, 2972, 331466, , , ,
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{3693D26B-AD27-4267-8182-4FE018387F22}, In Quarantäne, 2972, 331466, , , ,
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{3693D26B-AD27-4267-8182-4FE018387F22}, In Quarantäne, 2972, 331466, , , ,
PUP.Optional.MindSpark.Generic, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\AllInOneDocs, In Quarantäne, 1799, 769449, 1.0.18934, , ame,
PUP.Optional.MindSpark.Generic, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\MapsGalaxy, In Quarantäne, 1799, 769449, 1.0.18934, , ame,
PUP.Optional.MindSpark.Generic, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\MergeDocsOnline, In Quarantäne, 1799, 769449, 1.0.18934, , ame,
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\DRIVERUPDATE STARTUP, In Quarantäne, 2972, 335439, , , ,
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{249943E6-6F5C-4975-AB9A-AF8C24D1F584}, In Quarantäne, 2972, 335439, , , ,
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\LOGON\{249943E6-6F5C-4975-AB9A-AF8C24D1F584}, In Quarantäne, 2972, 335439, , , ,
PUP.Optional.MindSpark.Generic, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\SMSfromBrowser, In Quarantäne, 1799, 444113, 1.0.18934, , ame,
PUP.Optional.MindSpark, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\AllInOneDocsTooltab Uninstall Internet Explorer, In Quarantäne, 696, 352442, 1.0.18934, , ame,
PUP.Optional.MindSpark, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MapsGalaxyTooltab Uninstall Internet Explorer, In Quarantäne, 696, 352442, 1.0.18934, , ame,
PUP.Optional.MindSpark, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MergeDocsOnlineTooltab Uninstall Internet Explorer, In Quarantäne, 696, 352442, 1.0.18934, , ame,
PUP.Optional.MindSpark, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\OnlineMapFinderTooltab Uninstall Internet Explorer, In Quarantäne, 696, 352442, 1.0.18934, , ame,
PUP.Optional.MindSpark, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SMSfromBrowserTooltab Uninstall Internet Explorer, In Quarantäne, 696, 352442, 1.0.18934, , ame,
PUP.Optional.ASK, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2FA28606-DE77-4029-AF96-B231E3B8F827}, In Quarantäne, 1, 184156, , , ,
PUP.Optional.ASK, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2FA28606-DE77-4029-AF96-B231E3B8F827}, In Quarantäne, 1, 184156, , , ,
PUP.Optional.ASK, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2fa28606-de77-4029-af96-b231e3b8f827}, In Quarantäne, 1, 184156, 1.0.18934, , ame,
PUP.Optional.PCVARK, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\Xtron ~Optimizer Pro_Juditha, In Quarantäne, 514, 717841, 1.0.18934, , ame,
PUP.Optional.PCVARK, HKLM\SOFTWARE\WHRyb24gfk9wdGltaXplciBQcm8=, In Quarantäne, 514, 698859, 1.0.18934, , ame,
PUP.Optional.PCVARK, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Xtron ~Optimizer Pro_Logon, In Quarantäne, 514, 698852, , , ,
PUP.Optional.PCVARK, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{0DC4FE76-E409-4AC3-BA7B-AA81D5834E4F}, In Quarantäne, 514, 698852, , , ,
PUP.Optional.PCVARK, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\LOGON\{0DC4FE76-E409-4AC3-BA7B-AA81D5834E4F}, In Quarantäne, 514, 698852, , , ,
PUP.Optional.PCVARK, HKLM\SOFTWARE\ADB-PR, In Quarantäne, 514, 690397, 1.0.18934, , ame,
PUP.Optional.Conduit, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, In Quarantäne, 199, 236865, , , ,
PUP.Optional.Conduit, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, In Quarantäne, 199, 236865, , , ,
PUP.Optional.Conduit, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}, In Quarantäne, 199, 236865, 1.0.18934, , ame,
PUP.Optional.PCVARK, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{67AD45F0-1FD9-4125-83A6-4A0CD3ED8BC8}_is1, In Quarantäne, 514, 717840, , , ,
PUP.Optional.OpenOfficeDE, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\OpenOffice Updater, In Quarantäne, 6439, 531440, 1.0.18934, , ame,
PUP.Optional.PCVARK, HKLM\SOFTWARE\XSC-PR, In Quarantäne, 514, 698879, 1.0.18934, , ame,
PUP.Optional.PCVARK, HKLM\SOFTWARE\Xtron ~Optimizer Pro_Juditha, In Quarantäne, 514, 760888, 1.0.18934, , ame,
PUP.Optional.MindSpark, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\ONLINEMAPFINDER, In Quarantäne, 696, 348745, 1.0.18934, , ame,
PUP.Optional.PCCleaner, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\PC CLEANER_IS1, In Quarantäne, 1434, 612205, 1.0.18934, , ame,
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\WOW6432NODE\SlimWare Utilities, Inc.\DriverApp, In Quarantäne, 2972, 341522, 1.0.18934, , ame,
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\DriverUpdate, In Quarantäne, 2972, 331449, , , ,
PUP.Optional.PCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC Cleaner automatic scan and notifications, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{CE23AAAA-413B-4CEB-B315-E9C2A4F1689B}, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\LOGON\{CE23AAAA-413B-4CEB-B315-E9C2A4F1689B}, In Quarantäne, 1434, 739136, , , ,
Registrierungswert: 27
PUP.Optional.MindSpark.Generic, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\AllInOneDocs|UNINSTALLSURVEYURL, In Quarantäne, 1799, 769449, 1.0.18934, , ame,
PUP.Optional.MindSpark.Generic, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\MapsGalaxy|UNINSTALLSURVEYURL, In Quarantäne, 1799, 769449, 1.0.18934, , ame,
PUP.Optional.MindSpark.Generic, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\MergeDocsOnline|UNINSTALLSURVEYURL, In Quarantäne, 1799, 769449, 1.0.18934, , ame,
PUP.Optional.MindSpark.Generic, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\SMSfromBrowser|START PAGE, In Quarantäne, 1799, 444113, 1.0.18934, , ame,
PUP.Optional.MindSpark.Generic, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\SMSfromBrowser|UNINSTALLSURVEYURL, In Quarantäne, 1799, 769449, 1.0.18934, , ame,
PUP.Optional.MindSpark, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\AllInOneDocsTooltab Uninstall Internet Explorer|PUBLISHER, In Quarantäne, 696, 352442, 1.0.18934, , ame,
PUP.Optional.MindSpark, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MapsGalaxyTooltab Uninstall Internet Explorer|PUBLISHER, In Quarantäne, 696, 352442, 1.0.18934, , ame,
PUP.Optional.MindSpark, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MergeDocsOnlineTooltab Uninstall Internet Explorer|PUBLISHER, In Quarantäne, 696, 352442, 1.0.18934, , ame,
PUP.Optional.MindSpark, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\OnlineMapFinderTooltab Uninstall Internet Explorer|PUBLISHER, In Quarantäne, 696, 352442, 1.0.18934, , ame,
PUP.Optional.MindSpark, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SMSfromBrowserTooltab Uninstall Internet Explorer|PUBLISHER, In Quarantäne, 696, 352442, 1.0.18934, , ame,
PUP.Optional.ASK, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2fa28606-de77-4029-af96-b231e3b8f827}|URL, In Quarantäne, 1, 184156, 1.0.18934, , ame,
PUP.Optional.PCCleanerPro, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\PC CLEANER|STARTUPNOTIFIER, In Quarantäne, 724, 345344, 1.0.18934, , ame,
PUP.Optional.PCVARK, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\Xtron ~Optimizer Pro_Juditha|AFFILIATEID, In Quarantäne, 514, 717841, 1.0.18934, , ame,
PUP.Optional.PCVARK, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{0DC4FE76-E409-4AC3-BA7B-AA81D5834E4F}|PATH, In Quarantäne, 514, 698854, 1.0.18934, , ame,
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{249943E6-6F5C-4975-AB9A-AF8C24D1F584}|PATH, In Quarantäne, 2972, 335436, 1.0.18934, , ame,
PUP.Optional.StartPage.ShrtCln, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|OpenOffice Updater, In Quarantäne, 3953, 460759, , , ,
PUP.Optional.DriverUpdate, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{3693D26B-AD27-4267-8182-4FE018387F22}|PATH, In Quarantäne, 2972, 335435, 1.0.18934, , ame,
PUP.Optional.PCVARK, HKLM\SOFTWARE\ADB-PR|AFFILIATEID, In Quarantäne, 514, 690397, 1.0.18934, , ame,
PUP.Optional.Conduit, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, In Quarantäne, 199, 236865, 1.0.18934, , ame,
PUP.Optional.Conduit, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|TOPRESULTURL, In Quarantäne, 199, 236865, 1.0.18934, , ame,
PUP.Optional.PCVARK, HKLM\SOFTWARE\XSC-PR|UTM_CAMPAIGN, In Quarantäne, 514, 698879, 1.0.18934, , ame,
PUP.Optional.PCVARK, HKLM\SOFTWARE\Xtron ~Optimizer Pro_Juditha|TELNO, In Quarantäne, 514, 760888, 1.0.18934, , ame,
PUP.Optional.MindSpark, HKU\S-1-5-21-2783141820-1385357570-881274621-1002\SOFTWARE\ONLINEMAPFINDER|START PAGE, In Quarantäne, 696, 348745, 1.0.18934, , ame,
PUP.Optional.ASK, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2fa28606-de77-4029-af96-b231e3b8f827}|URL, In Quarantäne, 1, 184157, 1.0.18934, , ame,
PUP.Optional.PCCleaner, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\PC CLEANER_IS1|DISPLAYICON, In Quarantäne, 1434, 612205, 1.0.18934, , ame,
PUP.Optional.PCVARK, HKLM\SOFTWARE\Xtron ~Optimizer Pro_Juditha|AFFIRED, In Quarantäne, 514, 717842, 1.0.18934, , ame,
PUP.Optional.ASK, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2fa28606-de77-4029-af96-b231e3b8f827}|URL, In Quarantäne, 1, 184157, 1.0.18934, , ame,
Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)
Daten-Stream: 0
(keine bösartigen Elemente erkannt)
Ordner: 20
PUP.Optional.PCCleanerPro, C:\Users\Juditha\AppData\Roaming\PC Cleaner\Backup, In Quarantäne, 724, 345333, , , ,
PUP.Optional.PCCleanerPro, C:\Users\Juditha\AppData\Roaming\PC Cleaner\Undo, In Quarantäne, 724, 345333, , , ,
PUP.Optional.PCCleanerPro, C:\Users\Juditha\AppData\Roaming\PC Cleaner\Log, In Quarantäne, 724, 345333, , , ,
PUP.Optional.PCCleanerPro, C:\USERS\JUDITHA\APPDATA\ROAMING\PC CLEANER, In Quarantäne, 724, 345333, 1.0.18934, , ame,
PUP.Optional.MindSpark.Generic, C:\USERS\JUDITHA\APPDATA\LOCAL\AllInOneDocsTooltab, In Quarantäne, 1799, 356944, 1.0.18934, , ame,
PUP.Optional.MindSpark.Generic, C:\USERS\JUDITHA\APPDATA\LOCAL\MapsGalaxyTooltab, In Quarantäne, 1799, 356944, 1.0.18934, , ame,
PUP.Optional.MindSpark.Generic, C:\USERS\JUDITHA\APPDATA\LOCAL\MergeDocsOnlineTooltab, In Quarantäne, 1799, 356944, 1.0.18934, , ame,
PUP.Optional.MindSpark.Generic, C:\USERS\JUDITHA\APPDATA\LOCAL\OnlineMapFinderTooltab, In Quarantäne, 1799, 356944, 1.0.18934, , ame,
PUP.Optional.MindSpark.Generic, C:\USERS\JUDITHA\APPDATA\LOCAL\SMSfromBrowserTooltab, In Quarantäne, 1799, 356944, 1.0.18934, , ame,
PUP.Optional.PCVARK, C:\Users\Juditha\AppData\Roaming\Xtron ~Optimizer Pro_Juditha\smico, In Quarantäne, 514, 749429, , , ,
PUP.Optional.PCVARK, C:\USERS\JUDITHA\APPDATA\ROAMING\Xtron ~Optimizer Pro_Juditha, In Quarantäne, 514, 749429, 1.0.18934, , ame,
PUP.Optional.PCVARK, C:\ProgramData\Xtron ~Optimizer Pro_Juditha\offers, In Quarantäne, 514, 749428, , , ,
PUP.Optional.PCVARK, C:\PROGRAMDATA\Xtron ~Optimizer Pro_Juditha, In Quarantäne, 514, 749428, 1.0.18934, , ame,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\x64, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\x86, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\PROGRAM FILES\Xtron ~Optimizer Pro_Juditha, In Quarantäne, 514, 717840, 1.0.18934, , ame,
PUP.Optional.DriverUpdate, C:\PROGRAM FILES (X86)\DRIVERUPDATE, In Quarantäne, 2972, 331449, 1.0.18934, , ame,
PUP.Optional.DriverUpdate, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\DRIVERUPDATE, In Quarantäne, 2972, 331462, 1.0.18934, , ame,
PUP.Optional.PCCleaner, C:\PROGRAMDATA\PC CLEANER, In Quarantäne, 1434, 739135, 1.0.18934, , ame,
PUP.Optional.PCCleaner, C:\PROGRAM FILES (X86)\PC CLEANER, In Quarantäne, 1434, 739136, 1.0.18934, , ame,
Datei: 100
PUP.Optional.DriverUpdate, C:\WINDOWS\TASKS\DRIVERUPDATE SCAN.JOB, In Quarantäne, 2972, 331457, 1.0.18934, , ame,
PUP.Optional.DriverUpdate, C:\WINDOWS\TASKS\DRIVERUPDATE STARTUP.JOB, In Quarantäne, 2972, 335441, 1.0.18934, , ame,
PUP.Optional.DriverUpdate, C:\WINDOWS\SYSTEM32\TASKS\DRIVERUPDATE SCAN, In Quarantäne, 2972, 331466, 1.0.18934, , ame,
PUP.Optional.PCCleanerPro, C:\USERS\JUDITHA\APPDATA\ROAMING\PC CLEANER\LOG\MONITOR.LOG, In Quarantäne, 724, 345333, 1.0.18934, , ame,
PUP.Optional.PCCleanerPro, C:\Users\Juditha\AppData\Roaming\PC Cleaner\Backup\img2.png, In Quarantäne, 724, 345333, , , ,
PUP.Optional.PCCleanerPro, C:\Users\Juditha\AppData\Roaming\PC Cleaner\Log\Log 19-11-02-01.log, In Quarantäne, 724, 345333, , , ,
PUP.Optional.PCCleanerPro, C:\Users\Juditha\AppData\Roaming\PC Cleaner\Undo\Undo 19-11-02-01.reg, In Quarantäne, 724, 345333, , , ,
PUP.Optional.DriverUpdate, C:\WINDOWS\SYSTEM32\TASKS\DRIVERUPDATE STARTUP, In Quarantäne, 2972, 335439, 1.0.18934, , ame,
PUP.Optional.PCVARK.Generic, C:\USERS\JUDITHA\APPDATA\ROAMING\ACC.TXT, In Quarantäne, 808, 421587, 1.0.18934, , ame,
PUP.Optional.MindSpark.Generic, C:\USERS\JUDITHA\APPDATA\LOCAL\AllInOneDocsTooltab\TooltabExtension.dll, In Quarantäne, 1799, 356944, 1.0.18934, , ame,
PUP.Optional.MindSpark.Generic, C:\USERS\JUDITHA\APPDATA\LOCAL\MapsGalaxyTooltab\TooltabExtension.dll, In Quarantäne, 1799, 356944, 1.0.18934, , ame,
PUP.Optional.MindSpark.Generic, C:\USERS\JUDITHA\APPDATA\LOCAL\MergeDocsOnlineTooltab\TooltabExtension.dll, In Quarantäne, 1799, 356944, 1.0.18934, , ame,
PUP.Optional.MindSpark.Generic, C:\USERS\JUDITHA\APPDATA\LOCAL\OnlineMapFinderTooltab\TooltabExtension.dll, In Quarantäne, 1799, 356944, 1.0.18934, , ame,
PUP.Optional.MindSpark.Generic, C:\USERS\JUDITHA\APPDATA\LOCAL\SMSfromBrowserTooltab\TooltabExtension.dll, In Quarantäne, 1799, 356944, 1.0.18934, , ame,
PUP.Optional.StartPage.ShrtCln, C:\USERS\JUDITHA\APPDATA\ROAMING\OPENOFFICE UPDATER\UPDATER.EXE, In Quarantäne, 3953, 460759, 1.0.18934, , ame,
PUP.Optional.PCVARK, C:\WINDOWS\SYSTEM32\TASKS\Xtron ~Optimizer Pro_Logon, In Quarantäne, 514, 698852, 1.0.18934, , ame,
PUP.Optional.PCVARK, C:\USERS\PUBLIC\DESKTOP\Xtron ~Optimizer Pro.lnk, In Quarantäne, 514, 717833, 1.0.18934, , ame,
PUP.Optional.PCVARK, C:\USERS\JUDITHA\APPDATA\ROAMING\Xtron ~Optimizer Pro_Juditha\Errorlog.txt, In Quarantäne, 514, 749429, 1.0.18934, , ame,
PUP.Optional.PCVARK, C:\Users\Juditha\AppData\Roaming\Xtron ~Optimizer Pro_Juditha\aptnotfr.xml, In Quarantäne, 514, 749429, , , ,
PUP.Optional.PCVARK, C:\Users\Juditha\AppData\Roaming\Xtron ~Optimizer Pro_Juditha\a_d_b.xml, In Quarantäne, 514, 749429, , , ,
PUP.Optional.PCVARK, C:\Users\Juditha\AppData\Roaming\Xtron ~Optimizer Pro_Juditha\exlist.bin, In Quarantäne, 514, 749429, , , ,
PUP.Optional.PCVARK, C:\Users\Juditha\AppData\Roaming\Xtron ~Optimizer Pro_Juditha\param.ini, In Quarantäne, 514, 749429, , , ,
PUP.Optional.PCVARK, C:\Users\Juditha\AppData\Roaming\Xtron ~Optimizer Pro_Juditha\res.xml, In Quarantäne, 514, 749429, , , ,
PUP.Optional.PCVARK, C:\Users\Juditha\AppData\Roaming\Xtron ~Optimizer Pro_Juditha\upt.xml, In Quarantäne, 514, 749429, , , ,
PUP.Optional.PCVARK, C:\PROGRAMDATA\Xtron ~Optimizer Pro_Juditha\mdb.db, In Quarantäne, 514, 749428, 1.0.18934, , ame,
PUP.Optional.PCVARK, C:\ProgramData\Xtron ~Optimizer Pro_Juditha\offers\adb.exe, In Quarantäne, 514, 749428, , , ,
PUP.Optional.PCVARK, C:\ProgramData\Xtron ~Optimizer Pro_Juditha\offers\unsetup.exe, In Quarantäne, 514, 749428, , , ,
PUP.Optional.PCVARK, C:\PROGRAM FILES\Xtron ~Optimizer Pro_Juditha\unins000.dat, In Quarantäne, 514, 717840, 1.0.18934, , ame,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\x64\SQLite.Interop.dll, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\x86\SQLite.Interop.dll, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\application.ico, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\danish_iss.ini, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\Dutch_iss.ini, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\english_iss.ini, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\finish_iss.ini, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\French_iss.ini, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\german_iss.ini, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\HtmlRenderer.dll, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\HtmlRenderer.WinForms.dll, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\Interop.IWshRuntimeLibrary.dll, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\Interop.SHDocVw.dll, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\italian_iss.ini, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\japanese_iss.ini, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\kimg.dll, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\langs.db, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\Microsoft.Win32.TaskScheduler.dll, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\NAudio.dll, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\Newtonsoft.Json.dll, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\norwegian_iss.ini, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\portuguese_iss.ini, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\rgcl.exe, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\rgcl.exe.config, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\russian_iss.ini, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\spanish_iss.ini, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\swedish_iss.ini, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\System.Data.SQLite.DLL, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\TAFactory.IconPack.dll, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\unins000.exe, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\Program Files\Xtron ~Optimizer Pro_Juditha\unins000.msg, In Quarantäne, 514, 717840, , , ,
PUP.Optional.PCVARK, C:\DOCUMENTS AND SETTINGS\PUBLIC\Desktop\Xtron ~Optimizer Pro.lnk, In Quarantäne, 514, 717840, , , ,
Generic.Malware/Suspicious, C:\USERS\JUDITHA\APPDATA\ROAMING\UNPD\USTLR.EXE, In Quarantäne, 0, 392686, 1.0.18934, , shuriken,
PUP.Optional.DriverUpdate, C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe, In Quarantäne, 2972, 331449, , , ,
PUP.Optional.DriverUpdate, C:\Program Files (x86)\DriverUpdate\Open-Source Licenses.txt, In Quarantäne, 2972, 331449, , , ,
PUP.Optional.DriverUpdate, C:\Program Files (x86)\DriverUpdate\UnifiedLogger.dll, In Quarantäne, 2972, 331449, , , ,
PUP.Optional.DriverUpdate, C:\Program Files (x86)\DriverUpdate\UninstallStub.exe, In Quarantäne, 2972, 331449, , , ,
PUP.Optional.DriverUpdate, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverUpdate\DriverUpdate Help.lnk, In Quarantäne, 2972, 331462, , , ,
PUP.Optional.DriverUpdate, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverUpdate\DriverUpdate.lnk, In Quarantäne, 2972, 331462, , , ,
PUP.Optional.PCCleaner, C:\ProgramData\PC Cleaner\CookieExclusions.txt, In Quarantäne, 1434, 739135, , , ,
PUP.Optional.PCCleaner, C:\ProgramData\PC Cleaner\Cookies.txt, In Quarantäne, 1434, 739135, , , ,
PUP.Optional.PCCleaner, C:\ProgramData\PC Cleaner\PendingExclusionsR.txt, In Quarantäne, 1434, 739135, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\Animation.gif, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\Brazilian.ini, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\Cookies.txt, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\Danish.ini, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\Dutch.ini, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\English.ini, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\Finnish.ini, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\French.ini, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\German.ini, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\HomePage.url, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\Italian.ini, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\Japanese.ini, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\Norwegian.ini, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\PCCleaner.chm, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\PCCleaner.exe, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\PCCNotifications.exe, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\Portuguese.ini, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\SchedTasks.txt, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\Services1.txt, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\Services2.txt, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\SList.db, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\SList.txt, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\Spanish.ini, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\sqlite3.dll, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\Swedish.ini, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\unins000.dat, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\unins000.exe, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\Program Files (x86)\PC Cleaner\unins000.msg, In Quarantäne, 1434, 739136, , , ,
PUP.Optional.PCCleaner, C:\WINDOWS\SYSTEM32\TASKS\PC Cleaner automatic scan and notifications, In Quarantäne, 1434, 739136, , , ,
Generic.Malware/Suspicious, C:\USERS\JUDITHA\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\M0NCT9DT\ONESAFE_TOTAL_PC_CARE.EXE, In Quarantäne, 0, 392686, 1.0.18934, , shuriken,
Physischer Sektor: 0
(keine bösartigen Elemente erkannt)
WMI: 0
(keine bösartigen Elemente erkannt)
(end)
|
| Themen zu Windows 10 - Werbefenster, langsameres System und 198 Funde mit Malewarebytes |
| .dll, administrator, dateien, defender, explorer, google, internet, malwarebytes, micro, microsoft, msascuil.exe, notebook, ordner, programme, prozesse, realtek, registry, router, scan, sigcheck, software, system, system32, treiber, update, werbefenster, windows, windowsapps |
Baum-Darstellung