| DasKnuffel | 15.04.2014 22:25 |
Überreste von AV's sowie Adware.
Hallo ihr lieben,
ich habe in letzter Zeit einige kostenpflichtige AV's ausprobiert und es könnte sein das Reste da geblieben sind da nicht jeder einen uninstaller besitzte, könnt ihr da mal nachschauen?
Außerdem habe ich beim Versuch jDownloader runterzuladen festgestellt das trotz das alles abgewählt wurde MySearchDial installiert wurde und ein Trojan.Heur gemeldet wurde. Habe schon ein bisschen was laufen lassen, die Logs hänge ich an. Habe bisher immer gedacht so ein simpler DL-Manager wird schon sauber sein, da sie mir meine Arbeit mit einer 2000er Leitung sehr erleichtern falls mal die Verbindung wegbricht. Könnt ihr da was empfehlen?
Würde mich über Hilfe freuen. Code:
*** Prozess ***
Prozess: 280
Dateiname: mysearchdialupdate.exe
Pfad: c:\program files (x86)\mysearchdial\1.8.29.0\mysearchdialupdate.exe
Herausgeber: Unbekannter Herausgeber
Erstelldatum: 04/15/14 21:01:18
Änderungsdatum: 04/15/14 21:01:17
Gestartet von: mysearchdial.exe
Herausgeber: Unbekannter Herausgeber
*** Aktionen ***
Das Programm versucht zu erreichen, dass ein Programm beim Systemstart automatisch gestartet wird.
Es wurde auf einen fremden Prozess zugegriffen.
Das Programm hat eine ausführbare Datei angelegt oder manipuliert.
Das Programm kann genutzt werden um beliebigen Programmcode auszuführen.
Das Programm hat eine Kopie von sich selbst angelegt.
*** Quarantäne ***
Folgende Dateien wurden in Quarantäne verschoben:
C:\Program Files (x86)\Mysearchdial\1.8.29.0\MysearchdialUpdate.exe
C:\Program Files (x86)\Mysearchdial\1.8.29.0\Sqlite3.dll
C:\Program Files (x86)\is24344671.log
C:\Users\DenisFlorian\AppData\Local\Temp\01730D90.log
C:\Users\DenisFlorian\AppData\Local\Temp\017383AA.log
C:\Users\DenisFlorian\AppData\Local\Temp\24347515.xml
C:\Users\DenisFlorian\AppData\Local\Temp\MySearchDial.exe
C:\Users\DenisFlorian\AppData\Local\Temp\is24317343\KnownBrowsers.txt
C:\Users\DenisFlorian\AppData\Local\Temp\is24317343\MySearchDialUpdate.exe
C:\Users\DenisFlorian\AppData\Local\Temp\is24317343\Sqlite3.dll
C:\Users\DenisFlorian\AppData\Local\Temp\is24317343\mysearchdial.dll
C:\Users\DenisFlorian\AppData\Local\Temp\is24317343\mysearchdialApp.dll
C:\Users\DenisFlorian\AppData\Local\Temp\is24317343\mysearchdialEng.dll
C:\Users\DenisFlorian\AppData\Local\Temp\is24317343\mysearchdialTlbr.dll
C:\Users\DenisFlorian\AppData\Local\Temp\is24317343\mysearchdialsrv.exe
C:\Users\DenisFlorian\AppData\Local\Temp\is24317343\payload.cis
C:\Users\DenisFlorian\AppData\Local\Temp\is24317343\payloadflat.cis
C:\Users\DenisFlorian\AppData\Local\Temp\is24347562\KnownBrowsers.txt
C:\Users\DenisFlorian\AppData\Local\Temp\is24347562\Sqlite3.dll
C:\Users\DenisFlorian\AppData\Local\Temp\is24347562\payload.cis
C:\Users\DenisFlorian\AppData\Local\Temp\is24347562\payloadflat.cis
C:\Users\DenisFlorian\AppData\Local\Temp\sb140.dat
C:\Users\DenisFlorian\AppData\Roaming\mysearchdial\UpdateProc\UpdateTask.exe
C:\Users\DenisFlorian\AppData\Roaming\mysearchdial\UpdateProc\config.dat
c:\users\denisflorian\appdata\local\temp\01730d90.log
c:\users\denisflorian\appdata\local\temp\017381a6.log
c:\users\denisflorian\appdata\local\temp\017383aa.log
c:\users\denisflorian\appdata\local\temp\24347515.xml
c:\users\denisflorian\appdata\local\temp\gb.q0
c:\users\denisflorian\appdata\local\temp\is24317343\knownbrowsers.txt
c:\users\denisflorian\appdata\local\temp\is24317343\mysearchdial.dll
c:\users\denisflorian\appdata\local\temp\is24317343\mysearchdialapp.dll
c:\users\denisflorian\appdata\local\temp\is24317343\mysearchdialeng.dll
c:\users\denisflorian\appdata\local\temp\is24317343\mysearchdialsrv.exe
c:\users\denisflorian\appdata\local\temp\is24317343\mysearchdialtlbr.dll
c:\users\denisflorian\appdata\local\temp\is24317343\mysearchdialupdate.exe
c:\users\denisflorian\appdata\local\temp\is24317343\payload.cis
c:\users\denisflorian\appdata\local\temp\is24317343\payloadflat.cis
c:\users\denisflorian\appdata\local\temp\is24317343\sqlite3.dll
c:\users\denisflorian\appdata\local\temp\is24317343\uninstall.exe
c:\users\denisflorian\appdata\local\temp\is24347562\knownbrowsers.txt
c:\users\denisflorian\appdata\local\temp\is24347562\payload.cis
c:\users\denisflorian\appdata\local\temp\is24347562\payloadflat.cis
c:\users\denisflorian\appdata\local\temp\is24347562\sqlite3.dll
c:\users\denisflorian\appdata\local\temp\sb140.dat
c:\users\denisflorian\appdata\roaming\mysearchdial\updateproc\config.dat
c:\users\denisflorian\appdata\roaming\mysearchdial\updateproc\updatetask.exe
Folgende Registry Einträge wurden gelöscht:
\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}
\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} ||
\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} || NoExplorer
\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce || Del24347500
\REGISTRY\USER\S-1-5-21-1995749372-3879991825-3176489354-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce || Del24347484
YGLRLHrAcoJygmJi0HKScpJiYuByoisniXJyCadCJyd0cmJicCsnJycnJga5YtEs95AtJwjpcsJiYnLCoCwnLCYmJwzbcnJycmJiwConJycnJgb8cnJycmJi0CYnJycnJgaNcsJiYnLC0C4nKSYmJwnPcnJycmJi8C8nJyYmJweHKycnJycmBqcqJygnKCYGpysXtjVmKyoXtjVmKycXtjVmKwm3LScnJycmBscuJykmJicJxy8nLSYmJw3XKScnJycmBucoJ/dwn3KCcoJiYgAA
Version der Regeln: 4.4.9
OS: Windows 6.2 Service Pack 0.0 Build: 9200 - Workstation 64bit OS
Version der dll: 40166
"C:\Program Files (x86)\Mysearchdial\1.8.29.0\MysearchdialUpdate.exe" /install /noun
MD5: 6611F0E57AA3223FA798BE3F6D1DF458
"C:\Users\DENISF~1\AppData\Local\Temp\MySearchDial.exe" /prod /aflt=ir_14_16_ie /instlRef=140305_a /sc=dt
MD5:
Code:
# AdwCleaner v3.023 - Bericht erstellt am 15/04/2014 um 23:20:55
# Aktualisiert 01/04/2014 von Xplode
# Betriebssystem : Windows 8.1 (64 bits)
# Benutzername : DenisFlorian - DENIS-WIN8-PC
# Gestartet von : C:\Users\DenisFlorian\Desktop\Programme\adwcleaner3023.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Datei Gelöscht : C:\Windows\Tasks\MySearchDial.job
Datei Gelöscht : C:\Windows\System32\Tasks\MySearchDial
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\Software\InstallCore
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17037
*************************
AdwCleaner[R2].txt - [678 octets] - [15/04/2014 22:56:09]
AdwCleaner[R3].txt - [1835 octets] - [15/04/2014 23:20:19]
AdwCleaner[S1].txt - [1756 octets] - [15/04/2014 23:20:55]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1816 octets] ##########
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Suchlauf Datum: 15.04.2014
Suchlauf-Zeit: 23:13:46
Logdatei: MBAM.txt
Administrator: Nein
Version: 2.00.1.1004
Malware Datenbank: v2014.04.15.11
Rootkit Datenbank: v2014.03.27.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Chameleon: Deaktiviert
Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: DenisFlorian
Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 246698
Verstrichene Zeit: 8 Min, 57 Sek
Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert
Prozesse: 0
(No malicious items detected)
Module: 0
(No malicious items detected)
Registrierungsschlüssel: 67
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\APPID\{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}, In Quarantäne, [3f6847e3b1cab581e7ed7dcc17eb37c9],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}, In Quarantäne, [3f6847e3b1cab581e7ed7dcc17eb37c9],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3004627E-F8E9-4E8B-909D-316753CBA923}, In Quarantäne, [2384b27888f332041d6dd1782ed4916f],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\mysearchdial.mysearchdialdskBnd.1, In Quarantäne, [2384b27888f332041d6dd1782ed4916f],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\mysearchdial.mysearchdialdskBnd, In Quarantäne, [2384b27888f332041d6dd1782ed4916f],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\mysearchdial.mysearchdialdskBnd, In Quarantäne, [2384b27888f332041d6dd1782ed4916f],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\mysearchdial.mysearchdialdskBnd.1, In Quarantäne, [2384b27888f332041d6dd1782ed4916f],
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-1995749372-3879991825-3176489354-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3004627E-F8E9-4E8B-909D-316753CBA923}, In Quarantäne, [2384b27888f332041d6dd1782ed4916f],
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-1995749372-3879991825-3176489354-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3004627E-F8E9-4E8B-909D-316753CBA923}, In Quarantäne, [2384b27888f332041d6dd1782ed4916f],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}, In Quarantäne, [bdea5ad05229a294369f85c47b872fd1],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{C292AD0A-C11F-479B-B8DB-743E72D283B0}, In Quarantäne, [bdea5ad05229a294369f85c47b872fd1],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{C292AD0A-C11F-479B-B8DB-743E72D283B0}, In Quarantäne, [bdea5ad05229a294369f85c47b872fd1],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\esrv.mysearchdialESrvc.1, In Quarantäne, [bdea5ad05229a294369f85c47b872fd1],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\esrv.mysearchdialESrvc, In Quarantäne, [bdea5ad05229a294369f85c47b872fd1],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.mysearchdialESrvc, In Quarantäne, [bdea5ad05229a294369f85c47b872fd1],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.mysearchdialESrvc.1, In Quarantäne, [bdea5ad05229a294369f85c47b872fd1],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}, In Quarantäne, [e1c6d6546f0c6bcb0b7e5aef37cbde22],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\mysearchdial.mysearchdialHlpr.1, In Quarantäne, [e1c6d6546f0c6bcb0b7e5aef37cbde22],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\mysearchdial.mysearchdialHlpr, In Quarantäne, [e1c6d6546f0c6bcb0b7e5aef37cbde22],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\mysearchdial.mysearchdialHlpr, In Quarantäne, [e1c6d6546f0c6bcb0b7e5aef37cbde22],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}, In Quarantäne, [e1c6d6546f0c6bcb0b7e5aef37cbde22],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\mysearchdial.mysearchdialHlpr.1, In Quarantäne, [e1c6d6546f0c6bcb0b7e5aef37cbde22],
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-1995749372-3879991825-3176489354-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}, In Quarantäne, [e1c6d6546f0c6bcb0b7e5aef37cbde22],
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-1995749372-3879991825-3176489354-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}, In Quarantäne, [e1c6d6546f0c6bcb0b7e5aef37cbde22],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{FBC322D5-407E-4854-8C0B-555B951FD8E3}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{0400EBCA-042C-4000-AA89-9713FBEDB671}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{0BD19251-4B4B-4B94-AB16-617106245BB7}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{3281114F-BCAB-45E3-80D9-A6CD64D4E636}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{44533FCB-F9FB-436A-8B6B-CF637B2D465A}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{44B29DDD-CF7A-454A-A275-A322A398D93F}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{A4DE94DB-DF03-45A3-8A5D-D1B7464B242D}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{AA0F50A8-2618-4AE4-A779-9F7378555A8F}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B2DB115C-8278-4947-9A07-57B53D1C4215}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B97FC455-DB33-431D-84DB-6F1514110BD5}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C67281E0-78F5-4E49-9FAE-4B1B2ADAF17B}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E72E9312-0367-4216-BFC7-21485FA8390B}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{F6CCB6C9-127E-44AE-8552-B94356F39FFE}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FFD25630-2734-4AE9-88E6-21BF6525F3FE}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0400EBCA-042C-4000-AA89-9713FBEDB671}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0BD19251-4B4B-4B94-AB16-617106245BB7}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3281114F-BCAB-45E3-80D9-A6CD64D4E636}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{44533FCB-F9FB-436A-8B6B-CF637B2D465A}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{44B29DDD-CF7A-454A-A275-A322A398D93F}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A4DE94DB-DF03-45A3-8A5D-D1B7464B242D}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{AA0F50A8-2618-4AE4-A779-9F7378555A8F}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B2DB115C-8278-4947-9A07-57B53D1C4215}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B97FC455-DB33-431D-84DB-6F1514110BD5}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C67281E0-78F5-4E49-9FAE-4B1B2ADAF17B}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E72E9312-0367-4216-BFC7-21485FA8390B}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{F6CCB6C9-127E-44AE-8552-B94356F39FFE}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FFD25630-2734-4AE9-88E6-21BF6525F3FE}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{FBC322D5-407E-4854-8C0B-555B951FD8E3}, In Quarantäne, [8d1ada50700b0f2743f792b80200d62a],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{219046AE-358F-4CF1-B1FD-2B4DE83642A8}, In Quarantäne, [e5c2e5455b20dd5957347dccab579967],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLCORE\mysearchdial, In Quarantäne, [fbac0f1b9dde3ff7bc375b357192659b],
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-1995749372-3879991825-3176489354-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\mysearchdial, In Quarantäne, [099e78b281fa54e24061a9e9f211f20e],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1995749372-3879991825-3176489354-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, In Quarantäne, [eeb951d96813f541f36f344734cefd03],
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-1995749372-3879991825-3176489354-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\mysearchdial, In Quarantäne, [faad4cde552637ff401cdabcaf54e41c],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1995749372-3879991825-3176489354-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, In Quarantäne, [bdead753e39862d4e9b48809d42fa45c],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C358B3D0-B911-41E3-A276-E7D43A6BA56D}, In Quarantäne, [951259d10a71e254fe0196c780827d83],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\mysearchdial.mysearchdialappCore.1, In Quarantäne, [951259d10a71e254fe0196c780827d83],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\mysearchdial.mysearchdialappCore, In Quarantäne, [951259d10a71e254fe0196c780827d83],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\mysearchdial.mysearchdialappCore, In Quarantäne, [951259d10a71e254fe0196c780827d83],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\mysearchdial.mysearchdialappCore.1, In Quarantäne, [951259d10a71e254fe0196c780827d83],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4ED063C9-4A0B-4B44-A9DC-23AFF424A0D3}, In Quarantäne, [951259d10a71e254fe0196c780827d83],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\m, In Quarantäne, [951259d10a71e254fe0196c780827d83],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\m, In Quarantäne, [951259d10a71e254fe0196c780827d83],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\mysearchdial, In Quarantäne, [951259d10a71e254fe0196c780827d83],
Registrierungswerte: 3
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{3004627E-F8E9-4E8B-909D-316753CBA923}, mysearchdial Toolbar, In Quarantäne, [2384b27888f332041d6dd1782ed4916f]
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{3004627E-F8E9-4E8B-909D-316753CBA923}, In Quarantäne, [d1d6aa80aecddc5a4248e168b151c53b],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1995749372-3879991825-3176489354-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0A2O1C1R1H2Z1S1G1M1F, In Quarantäne, [bdead753e39862d4e9b48809d42fa45c]
Registrierungsdaten: 0
(No malicious items detected)
Ordner: 6
PUP.Optional.MySearchDial.A, C:\Users\DenisFlorian\AppData\Roaming\mysearchdial, In Quarantäne, [713628023942da5c8b09f6664db57888],
PUP.Optional.MySearchDial.A, C:\Users\DenisFlorian\AppData\Roaming\mysearchdial\icons_2.20.1.0, In Quarantäne, [713628023942da5c8b09f6664db57888],
PUP.Optional.MySearchDial.A, C:\Users\DenisFlorian\AppData\Roaming\mysearchdial\UpdateProc, In Quarantäne, [713628023942da5c8b09f6664db57888],
PUP.Optional.MySearchDial.A, C:\Program Files (x86)\Mysearchdial, In Quarantäne, [951259d10a71e254fe0196c780827d83],
PUP.Optional.MySearchDial.A, C:\Program Files (x86)\Mysearchdial\1.8.29.0, In Quarantäne, [951259d10a71e254fe0196c780827d83],
PUP.Optional.MySearchDial.A, C:\Program Files (x86)\Mysearchdial\1.8.29.0\bh, In Quarantäne, [951259d10a71e254fe0196c780827d83],
Dateien: 7
PUP.Optional.MySearchDial.A, C:\Program Files (x86)\Mysearchdial\1.8.29.0\mysearchdialTlbr.dll, In Quarantäne, [2384b27888f332041d6dd1782ed4916f],
PUP.Optional.MySearchDial.A, C:\Program Files (x86)\Mysearchdial\1.8.29.0\mysearchdialsrv.exe, In Quarantäne, [bdea5ad05229a294369f85c47b872fd1],
PUP.Optional.MySearchDial.A, C:\Program Files (x86)\Mysearchdial\1.8.29.0\bh\mysearchdial.dll, In Quarantäne, [e1c6d6546f0c6bcb0b7e5aef37cbde22],
PUP.Optional.MySearchDial.A, C:\Program Files (x86)\Mysearchdial\1.8.29.0\mysearchdialApp.dll, In Quarantäne, [951259d10a71e254fe0196c780827d83],
PUP.Optional.MySearchDial.A, C:\Program Files (x86)\Mysearchdial\1.8.29.0\mysearchdialEng.dll, In Quarantäne, [951259d10a71e254fe0196c780827d83],
PUP.Optional.MySearchDial.A, C:\Program Files (x86)\Mysearchdial\1.8.29.0\uninst.dat, In Quarantäne, [951259d10a71e254fe0196c780827d83],
PUP.Optional.MySearchDial.A, C:\Program Files (x86)\Mysearchdial\1.8.29.0\uninstall.exe, In Quarantäne, [951259d10a71e254fe0196c780827d83],
Physische Sektoren: 0
(No malicious items detected)
(end)
|
