Trojaner-Board
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Unzählige Werbe pop ups (zum beispiel von Reimage Repair) (https://www.trojaner-board.de/176993-unzaehlige-werbe-pop-ups-beispiel-reimage-repair.html)

cosinus 22.03.2016 14:53
Okay, dann Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte:


1. Schritt: MBAM

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.




2. Schritt: ESET

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset




3. Schritt: SecurityCheck

Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

Hilfeeee1 24.03.2016 12:22
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlaufdatum: 24.03.2016
Suchlaufzeit: 12:08
Protokolldatei: mbam.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2016.03.24.02
Rootkit-Datenbank: v2016.03.12.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Jan

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 338761
Abgelaufene Zeit: 7 Min., 6 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 2
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2315D709-83AB-451F-A03B-ACCD4F1B95CE}, In Quarantäne, [f79b2e5d37626ec8c2359dae34d0f907],
PUP.Optional.WinYahoo, HKU\S-1-5-21-1457610043-610635554-3917832456-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2315D709-83AB-451F-A03B-ACCD4F1B95CE}, In Quarantäne, [830f16755f3a87af5c99ba91709455ab],

Registrierungswerte: 4
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2315D709-83AB-451F-A03B-ACCD4F1B95CE}|URL, https://uk.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f[f79b2e5d37626ec8c2359dae34d0f907]D4%26b[f79b2e5d37626ec8c2359dae34d0f907]DIE%26cc[f79b2e5d37626ec8c2359dae34d0f907]Dgb%26pa[f79b2e5d37626ec8c2359dae34d0f907]DWincy%26cd[f79b2e5d37626ec8c2359dae34d0f907]D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr[f79b2e5d37626ec8c2359dae34d0f907]D1395985914%26a[f79b2e5d37626ec8c2359dae34d0f907]Dwncy_adsafld_16_04%26os_ver[f79b2e5d37626ec8c2359dae34d0f907]D6.1%26os[f79b2e5d37626ec8c2359dae34d0f907]DWindowsIn QuarantäneB7In QuarantäneBProfessional&p={searchTerms}, %4, %5
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2315D709-83AB-451F-A03B-ACCD4F1B95CE}|TopResultURLFallback, https://uk.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f[ace6f398594057dfd52280cb27dd52ae]D4%26b[ace6f398594057dfd52280cb27dd52ae]DIE%26cc[ace6f398594057dfd52280cb27dd52ae]Dgb%26pa[ace6f398594057dfd52280cb27dd52ae]DWincy%26cd[ace6f398594057dfd52280cb27dd52ae]D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr[ace6f398594057dfd52280cb27dd52ae]D1395985914%26a[ace6f398594057dfd52280cb27dd52ae]Dwncy_adsafld_16_04%26os_ver[ace6f398594057dfd52280cb27dd52ae]D6.1%26os[ace6f398594057dfd52280cb27dd52ae]DWindowsIn QuarantäneB7In QuarantäneBProfessional&p={searchTerms}, %4, %5
PUP.Optional.WinYahoo, HKU\S-1-5-21-1457610043-610635554-3917832456-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2315D709-83AB-451F-A03B-ACCD4F1B95CE}|URL, https://uk.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f[830f16755f3a87af5c99ba91709455ab]D4%26b[830f16755f3a87af5c99ba91709455ab]DIE%26cc[830f16755f3a87af5c99ba91709455ab]Dgb%26pa[830f16755f3a87af5c99ba91709455ab]DWincy%26cd[830f16755f3a87af5c99ba91709455ab]D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr[830f16755f3a87af5c99ba91709455ab]D1395985914%26a[830f16755f3a87af5c99ba91709455ab]Dwncy_adsafld_16_04%26os_ver[830f16755f3a87af5c99ba91709455ab]D6.1%26os[830f16755f3a87af5c99ba91709455ab]DWindowsIn QuarantäneB7In QuarantäneBProfessional&p={searchTerms}, %4, %5
PUP.Optional.WinYahoo, HKU\S-1-5-21-1457610043-610635554-3917832456-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2315D709-83AB-451F-A03B-ACCD4F1B95CE}|TopResultURLFallback, https://uk.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f[b8dad2b9d2c7a98d07ee7fccb54f5da3]D4%26b[b8dad2b9d2c7a98d07ee7fccb54f5da3]DIE%26cc[b8dad2b9d2c7a98d07ee7fccb54f5da3]Dgb%26pa[b8dad2b9d2c7a98d07ee7fccb54f5da3]DWincy%26cd[b8dad2b9d2c7a98d07ee7fccb54f5da3]D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr[b8dad2b9d2c7a98d07ee7fccb54f5da3]D1395985914%26a[b8dad2b9d2c7a98d07ee7fccb54f5da3]Dwncy_adsafld_16_04%26os_ver[b8dad2b9d2c7a98d07ee7fccb54f5da3]D6.1%26os[b8dad2b9d2c7a98d07ee7fccb54f5da3]DWindowsIn QuarantäneB7In QuarantäneBProfessional&p={searchTerms}, %4, %5

Registrierungsdaten: 3
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=fSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[771b8a016e2bbc7a1a3a0522f80d09f7]D1%26bSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[771b8a016e2bbc7a1a3a0522f80d09f7]DIE%26ccSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[771b8a016e2bbc7a1a3a0522f80d09f7]Dgb%26paSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[771b8a016e2bbc7a1a3a0522f80d09f7]DWincy%26cdSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[771b8a016e2bbc7a1a3a0522f80d09f7]D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26crSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[771b8a016e2bbc7a1a3a0522f80d09f7]D1395985914%26aSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[771b8a016e2bbc7a1a3a0522f80d09f7]Dwncy_adsafld_16_04%26os_verSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[771b8a016e2bbc7a1a3a0522f80d09f7]D6.1%26osSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[771b8a016e2bbc7a1a3a0522f80d09f7]DWindowsGut: (www.google.com)B7Gut: (www.google.com)BProfessional, %4, %5
PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=fSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[4d453259148577bfeb699097b45141bf]D1%26bSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[4d453259148577bfeb699097b45141bf]DIE%26ccSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[4d453259148577bfeb699097b45141bf]Dgb%26paSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[4d453259148577bfeb699097b45141bf]DWincy%26cdSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[4d453259148577bfeb699097b45141bf]D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26crSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[4d453259148577bfeb699097b45141bf]D1395985914%26aSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[4d453259148577bfeb699097b45141bf]Dwncy_adsafld_16_04%26os_verSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[4d453259148577bfeb699097b45141bf]D6.1%26osSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[4d453259148577bfeb699097b45141bf]DWindowsGut: (www.google.com)B7Gut: (www.google.com)BProfessional, %4, %5
PUP.Optional.WinYahoo, HKU\S-1-5-21-1457610043-610635554-3917832456-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=fSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[6c267219019892a484ce46e163a2d927]D1%26bSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[6c267219019892a484ce46e163a2d927]DIE%26ccSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[6c267219019892a484ce46e163a2d927]Dgb%26paSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[6c267219019892a484ce46e163a2d927]DWincy%26cdSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[6c267219019892a484ce46e163a2d927]D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26crSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[6c267219019892a484ce46e163a2d927]D1395985914%26aSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[6c267219019892a484ce46e163a2d927]Dwncy_adsafld_16_04%26os_verSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[6c267219019892a484ce46e163a2d927]D6.1%26osSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[6c267219019892a484ce46e163a2d927]DWindowsGut: (www.google.com)B7Gut: (www.google.com)BProfessional, %4, %5

Ordner: 1
PUP.Optional.DesktopTool, C:\Users\Public\Documents\Baidu\Common\I18N\IPCSUpdateCache\DesktopToolMini_globalUK, In Quarantäne, [eea4b3d8227748ee138838e6e023ed13],

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)

Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlaufdatum: 24.03.2016
Suchlaufzeit: 12:08
Protokolldatei: mbam.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2016.03.24.02
Rootkit-Datenbank: v2016.03.12.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Jan

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 338761
Abgelaufene Zeit: 7 Min., 6 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 2
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2315D709-83AB-451F-A03B-ACCD4F1B95CE}, In Quarantäne, [f79b2e5d37626ec8c2359dae34d0f907],
PUP.Optional.WinYahoo, HKU\S-1-5-21-1457610043-610635554-3917832456-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2315D709-83AB-451F-A03B-ACCD4F1B95CE}, In Quarantäne, [830f16755f3a87af5c99ba91709455ab],

Registrierungswerte: 4
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2315D709-83AB-451F-A03B-ACCD4F1B95CE}|URL, https://uk.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f[f79b2e5d37626ec8c2359dae34d0f907]D4%26b[f79b2e5d37626ec8c2359dae34d0f907]DIE%26cc[f79b2e5d37626ec8c2359dae34d0f907]Dgb%26pa[f79b2e5d37626ec8c2359dae34d0f907]DWincy%26cd[f79b2e5d37626ec8c2359dae34d0f907]D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr[f79b2e5d37626ec8c2359dae34d0f907]D1395985914%26a[f79b2e5d37626ec8c2359dae34d0f907]Dwncy_adsafld_16_04%26os_ver[f79b2e5d37626ec8c2359dae34d0f907]D6.1%26os[f79b2e5d37626ec8c2359dae34d0f907]DWindowsIn QuarantäneB7In QuarantäneBProfessional&p={searchTerms}, %4, %5
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2315D709-83AB-451F-A03B-ACCD4F1B95CE}|TopResultURLFallback, https://uk.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f[ace6f398594057dfd52280cb27dd52ae]D4%26b[ace6f398594057dfd52280cb27dd52ae]DIE%26cc[ace6f398594057dfd52280cb27dd52ae]Dgb%26pa[ace6f398594057dfd52280cb27dd52ae]DWincy%26cd[ace6f398594057dfd52280cb27dd52ae]D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr[ace6f398594057dfd52280cb27dd52ae]D1395985914%26a[ace6f398594057dfd52280cb27dd52ae]Dwncy_adsafld_16_04%26os_ver[ace6f398594057dfd52280cb27dd52ae]D6.1%26os[ace6f398594057dfd52280cb27dd52ae]DWindowsIn QuarantäneB7In QuarantäneBProfessional&p={searchTerms}, %4, %5
PUP.Optional.WinYahoo, HKU\S-1-5-21-1457610043-610635554-3917832456-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2315D709-83AB-451F-A03B-ACCD4F1B95CE}|URL, https://uk.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f[830f16755f3a87af5c99ba91709455ab]D4%26b[830f16755f3a87af5c99ba91709455ab]DIE%26cc[830f16755f3a87af5c99ba91709455ab]Dgb%26pa[830f16755f3a87af5c99ba91709455ab]DWincy%26cd[830f16755f3a87af5c99ba91709455ab]D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr[830f16755f3a87af5c99ba91709455ab]D1395985914%26a[830f16755f3a87af5c99ba91709455ab]Dwncy_adsafld_16_04%26os_ver[830f16755f3a87af5c99ba91709455ab]D6.1%26os[830f16755f3a87af5c99ba91709455ab]DWindowsIn QuarantäneB7In QuarantäneBProfessional&p={searchTerms}, %4, %5
PUP.Optional.WinYahoo, HKU\S-1-5-21-1457610043-610635554-3917832456-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2315D709-83AB-451F-A03B-ACCD4F1B95CE}|TopResultURLFallback, https://uk.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f[b8dad2b9d2c7a98d07ee7fccb54f5da3]D4%26b[b8dad2b9d2c7a98d07ee7fccb54f5da3]DIE%26cc[b8dad2b9d2c7a98d07ee7fccb54f5da3]Dgb%26pa[b8dad2b9d2c7a98d07ee7fccb54f5da3]DWincy%26cd[b8dad2b9d2c7a98d07ee7fccb54f5da3]D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr[b8dad2b9d2c7a98d07ee7fccb54f5da3]D1395985914%26a[b8dad2b9d2c7a98d07ee7fccb54f5da3]Dwncy_adsafld_16_04%26os_ver[b8dad2b9d2c7a98d07ee7fccb54f5da3]D6.1%26os[b8dad2b9d2c7a98d07ee7fccb54f5da3]DWindowsIn QuarantäneB7In QuarantäneBProfessional&p={searchTerms}, %4, %5

Registrierungsdaten: 3
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=fSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[771b8a016e2bbc7a1a3a0522f80d09f7]D1%26bSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[771b8a016e2bbc7a1a3a0522f80d09f7]DIE%26ccSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[771b8a016e2bbc7a1a3a0522f80d09f7]Dgb%26paSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[771b8a016e2bbc7a1a3a0522f80d09f7]DWincy%26cdSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[771b8a016e2bbc7a1a3a0522f80d09f7]D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26crSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[771b8a016e2bbc7a1a3a0522f80d09f7]D1395985914%26aSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[771b8a016e2bbc7a1a3a0522f80d09f7]Dwncy_adsafld_16_04%26os_verSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[771b8a016e2bbc7a1a3a0522f80d09f7]D6.1%26osSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[771b8a016e2bbc7a1a3a0522f80d09f7]DWindowsGut: (www.google.com)B7Gut: (www.google.com)BProfessional, %4, %5
PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=fSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[4d453259148577bfeb699097b45141bf]D1%26bSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[4d453259148577bfeb699097b45141bf]DIE%26ccSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[4d453259148577bfeb699097b45141bf]Dgb%26paSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[4d453259148577bfeb699097b45141bf]DWincy%26cdSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[4d453259148577bfeb699097b45141bf]D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26crSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[4d453259148577bfeb699097b45141bf]D1395985914%26aSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[4d453259148577bfeb699097b45141bf]Dwncy_adsafld_16_04%26os_verSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[4d453259148577bfeb699097b45141bf]D6.1%26osSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[4d453259148577bfeb699097b45141bf]DWindowsGut: (www.google.com)B7Gut: (www.google.com)BProfessional, %4, %5
PUP.Optional.WinYahoo, HKU\S-1-5-21-1457610043-610635554-3917832456-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=fSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[6c267219019892a484ce46e163a2d927]D1%26bSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[6c267219019892a484ce46e163a2d927]DIE%26ccSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[6c267219019892a484ce46e163a2d927]Dgb%26paSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[6c267219019892a484ce46e163a2d927]DWincy%26cdSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[6c267219019892a484ce46e163a2d927]D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26crSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[6c267219019892a484ce46e163a2d927]D1395985914%26aSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[6c267219019892a484ce46e163a2d927]Dwncy_adsafld_16_04%26os_verSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[6c267219019892a484ce46e163a2d927]D6.1%26osSchlecht: (https://uk.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_04&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0DtBtCyE0AtB0DyDyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDtAtCyEyEyCyD0FtGtAyEyBtCtGtAyD0D0AtGyD0CtD0EtG0AtDtC0EyDtA0DyDyD0Ezy0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DzztBtCzyyE0EtAtGtDtD0DtAtGyEtDyD0BtGzzyCtBtBtG0CtCtBtA0B0CzztByE0F0FtA2QtN0A0LzuyE%26cr%3D1395985914%26a%3Dwncy_adsafld_16_04%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional),Ersetzt,[6c267219019892a484ce46e163a2d927]DWindowsGut: (www.google.com)B7Gut: (www.google.com)BProfessional, %4, %5

Ordner: 1
PUP.Optional.DesktopTool, C:\Users\Public\Documents\Baidu\Common\I18N\IPCSUpdateCache\DesktopToolMini_globalUK, In Quarantäne, [eea4b3d8227748ee138838e6e023ed13],

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)


Alle Zeitangaben in WEZ +1. Es ist jetzt 02:57 Uhr.
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27