Trojaner-Board - 2x RR Saving - Malware lässt sich nicht entfernen!

Hallo Support-Team,

bitte schaut auf meinen Chat vom 13.05.2014 "RR-Saving - Malware lässt sich nicht entfernen" von vmeyer. Habe eine anderen Comment gefunden "Spy Hunter lässt sich nicht entfernen" (wenn ich neues Fenster öffne, kommt genau dies "Spy Hunter", habe dies aber nicht installiert!).
Habe meine Festplatte mit Anti-Malware durchsuchen lassen und das ist das Ergbnis:

Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 18.05.2014
Suchlauf-Zeit: 20:24:48
Logdatei: Malware gefunden _Mdmt.txt
Administrator: Ja

Version: 2.00.1.1004
Malware Datenbank: v2014.03.04.09
Rootkit Datenbank: v2014.02.20.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Volker

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 240398
Verstrichene Zeit: 1 Std, 3 Min, 32 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 15
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, , [bc8d09f6d8a20135897a3f356e94758b],
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, , [bc8d09f6d8a20135897a3f356e94758b],
PUP.Optional.ScorpionSaver, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{10AD2C61-0898-4348-8600-14A342F22AC3}, , [a1a8a15e661448eeaad0393d9d65dd23],
PUP.Optional.ScorpionSaver, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{10AD2C61-0898-4348-8600-14A342F22AC3}, , [a1a8a15e661448eeaad0393d9d65dd23],
PUP.Optional.ScorpionSaver, HKU\S-1-5-21-2004500194-2705585011-2712920548-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{10AD2C61-0898-4348-8600-14A342F22AC3}, , [a1a8a15e661448eeaad0393d9d65dd23],
PUP.Optional.ScorpionSaver, HKU\S-1-5-21-2004500194-2705585011-2712920548-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{10AD2C61-0898-4348-8600-14A342F22AC3}, , [a1a8a15e661448eeaad0393d9d65dd23],
PUP.Optional.SearchResults.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{377e5d4d-77e5-476a-8716-7e70a9272da0}, , [7bced82727532b0bc3fa63dbde24d030],
PUP.Optional.SearchResults.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{377E5D4D-77E5-476A-8716-7E70A9272DA0}, , [7bced82727532b0bc3fa63dbde24d030],
PUP.Optional.Datamngr.A, HKU\S-1-5-21-2004500194-2705585011-2712920548-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}, , [1a2f9d62cbaf1422ce17fe7614ee0af6],
PUP.Optional.Babylon.A, HKLM\SOFTWARE\WOW6432NODE\babylontoolbar, , [91b847b8b5c543f3481c307c3fc45ba5],
PUP.Optional.DataMngr.A, HKU\S-1-5-21-2004500194-2705585011-2712920548-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr, , [3316f906e991ee4806a1beec29dabe42],
PUP.Optional.DataMngr.A, HKU\S-1-5-21-2004500194-2705585011-2712920548-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, , [86c3d92690ea2d09b3f35c4ee71caa56],
PUP.Optional.Delta.A, HKU\S-1-5-21-2004500194-2705585011-2712920548-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\delta LTD, , [92b79d62acce9f9784e1852756ad9d63],
PUP.Optional.Babylon.A, HKU\S-1-5-21-2004500194-2705585011-2712920548-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BABSOLUTION\Updater, , [63e61ee13b3f5ed82290a00b9e6511ef],
PUP.Optional.Conduit.A, HKU\S-1-5-21-2004500194-2705585011-2712920548-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CONDUIT\FF, , [f0594fb01367d3633721268a29dadb25],

Registrierungswerte: 4
PUP.Optional.VBates, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}, , [1336f20d6d0d62d4c0d00f3142c0f010],
PUP.Optional.VBates, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}, C:\Program Files\V-bates\Firefox, , [1336f20d6d0d62d4c0d00f3142c0f010]
PUP.Optional.VBates, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}, C:\Program Files\V-bates\Firefox, , [1336f20d6d0d62d4c0d00f3142c0f010]
PUP.Optional.VBates, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}, , [4cfdf00fe89276c057393d0355ad41bf],

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 10
PUP.Optional.HomeTab.A, C:\Users\Volker\AppData\Roaming\SimplyTech\home, , [58f152adef8b41f569c1634acb38ee12],
PUP.Optional.OpenCandy, C:\Users\Volker\AppData\Roaming\OpenCandy, , [d673a05fa5d5ab8b55362f57649e08f8],
PUP.Optional.OpenCandy, C:\Users\Volker\AppData\Roaming\OpenCandy\6D872CE6E7B14DD19CA65EB3A21431D9, , [d673a05fa5d5ab8b55362f57649e08f8],
PUP.Optional.OpenCandy, C:\Users\Volker\AppData\Roaming\OpenCandy\88A5012144FE416EA78E04D426F8A36A, , [d673a05fa5d5ab8b55362f57649e08f8],
PUP.Optional.OpenCandy, C:\Users\Volker\AppData\Roaming\OpenCandy\C0D7BEA4D77B4DF3AE8A6015A7B62F35, , [d673a05fa5d5ab8b55362f57649e08f8],
PUP.Optional.OpenCandy, C:\Users\Volker\AppData\Roaming\OpenCandy\E152B137A7AC460AA0BB5F729D2E7B10, , [d673a05fa5d5ab8b55362f57649e08f8],
PUP.Optional.OpenCandy, C:\Users\Volker\AppData\Roaming\OpenCandy\E990C6E8EA8B452F87AB94AC3CB4C68F, , [d673a05fa5d5ab8b55362f57649e08f8],
PUP.Optional.OpenCandy, C:\Users\Volker\AppData\Roaming\OpenCandy\ECB971E8111B495BAF211317176A7ACD, , [d673a05fa5d5ab8b55362f57649e08f8],
PUP.Optional.FileScout.A, C:\Users\Volker\AppData\Roaming\File Scout, , [58f11de2601a2214aef5a6e0818112ee],
PUP.Optional.Conduit.A, C:\Users\Volker\AppData\Local\Temp\ct3281675, , [76d37986b5c5b086ab59483f6b97f20e],

Dateien: 34
PUP.Optional.ScorpionSaver, C:\Program Files (x86)\Rr Savings\RrSavings.dll, , [a1a8a15e661448eeaad0393d9d65dd23],
PUP.Optional.FileScout.A, C:\Users\Volker\AppData\Roaming\File Scout\filescout.exe, , [de6ba659ef8b49eddaf0b792cb369d63],
PUP.Optional.Babylon.A, C:\Users\Volker\AppData\Roaming\OpenCandy\E152B137A7AC460AA0BB5F729D2E7B10\DeltaTB.exe, , [2920c53a8febae88e8f5f156e31ece32],
PUP.Optional.SearchProtect.A, C:\Users\Volker\AppData\Local\Temp\nsc15EE.exe, , [7ccd24dbd0aaa88ec58fda913cc559a7],
PUP.Optional.SearchProtect.A, C:\Users\Volker\AppData\Local\Temp\nsn2C73.exe, , [4aff21def88267cf57fdf67523dec63a],
PUP.Optional.FileScout.A, C:\Users\Volker\AppData\Local\Temp\setup_fsu_cid.exe, , [82c7bc439fdbd264fccea4a5bf4218e8],
PUP.Optional.Conduit.A, C:\Users\Volker\AppData\Local\Temp\83FE.tmp, , [4603827d2456fd39c8172a380bf621df],
PUP.Optional.SearchProtect.A, C:\Users\Volker\AppData\Local\Temp\nss32F9.exe, , [ea5f6798f189b086500499d203fedf21],
PUP.Optional.SearchProtect.A, C:\Users\Volker\AppData\Local\Temp\nss6458.exe, , [9eab58a7e397b383421278f319e88080],
PUP.Optional.SearchProtect.A, C:\Users\Volker\AppData\Local\Temp\nsy6B2D.exe, , [4ffa8f70e298de580f4581eaa160ff01],
PUP.Optional.Babylon.A, C:\Users\Volker\AppData\Local\Temp\3BB3FEF8-BAB0-7891-8BDE-DCACA7445251\Latest\BExternal.dll, , [1e2b53acaad03cfab017f67a9e62e719],
PUP.Optional.Babylon.A, C:\Users\Volker\AppData\Local\Temp\3BB3FEF8-BAB0-7891-8BDE-DCACA7445251\Latest\CrxInstaller.dll, , [4bfea45b47333ff7798e36250df414ec],
PUP.Optional.Babylon.A, C:\Users\Volker\AppData\Local\Temp\3BB3FEF8-BAB0-7891-8BDE-DCACA7445251\Latest\MntrDLLInstall.dll, , [0c3d03fc0a70d4626a9ea2b968993ec2],
PUP.Optional.Babylon.A, C:\Users\Volker\AppData\Local\Temp\3BB3FEF8-BAB0-7891-8BDE-DCACA7445251\Latest\Setup.exe, , [e465e8178bef82b411586e019d63f50b],
PUP.Optional.Conduit.A, C:\Users\Volker\AppData\Local\Temp\nsnBDD8\SpSetup.exe, , [6adfcd323e3cc175cc74a3bd8d748f71],
PUP.Optional.CRX.A, C:\Users\Volker\AppData\Local\Temp\bus2FAA\CrxUpdater_d.exe, , [95b45ca36a108da9d5e72ee8976d4cb4],
PUP.Optional.CRX.A, C:\Users\Volker\AppData\Local\Temp\bus7FF8\CrxUpdater_d.exe, , [153423dcafcbde585864809664a0ec14],
PUP.Optional.CRX.A, C:\Users\Volker\AppData\Local\Temp\bus9388\CrxUpdater_d.exe, , [5feac13e007a280e813b4ec88f75b34d],
PUP.Optional.CRX.A, C:\Users\Volker\AppData\Local\Temp\busB9AE\CrxUpdater_d.exe, , [f257d42b88f21323d4e88294ea1a18e8],
PUP.Optional.CRX.A, C:\Users\Volker\AppData\Local\Temp\busD89D\CrxUpdater_d.exe, , [58f187781a60999d03b9f620a85cb050],
PUP.Optional.HomeTab.A, C:\Users\Volker\AppData\Roaming\SimplyTech\home\home.htm, , [58f152adef8b41f569c1634acb38ee12],
PUP.Optional.HomeTab.A, C:\Users\Volker\AppData\Roaming\SimplyTech\home\jquery-ui-1.10.1.custom.min.js, , [58f152adef8b41f569c1634acb38ee12],
PUP.Optional.HomeTab.A, C:\Users\Volker\AppData\Roaming\SimplyTech\home\jquiso.js, , [58f152adef8b41f569c1634acb38ee12],
PUP.Optional.HomeTab.A, C:\Users\Volker\AppData\Roaming\SimplyTech\home\style.css, , [58f152adef8b41f569c1634acb38ee12],
PUP.Optional.HomeTab.A, C:\Users\Volker\AppData\Roaming\SimplyTech\home\vars.js, , [58f152adef8b41f569c1634acb38ee12],
PUP.Optional.OpenCandy, C:\Users\Volker\AppData\Roaming\OpenCandy\6D872CE6E7B14DD19CA65EB3A21431D9\5260.ico, , [d673a05fa5d5ab8b55362f57649e08f8],
PUP.Optional.OpenCandy, C:\Users\Volker\AppData\Roaming\OpenCandy\6D872CE6E7B14DD19CA65EB3A21431D9\conduitinstaller.exe, , [d673a05fa5d5ab8b55362f57649e08f8],
PUP.Optional.OpenCandy, C:\Users\Volker\AppData\Roaming\OpenCandy\6D872CE6E7B14DD19CA65EB3A21431D9\EBB77268-338F-4C6A-8590-AD88FED26F4A, , [d673a05fa5d5ab8b55362f57649e08f8],
PUP.Optional.OpenCandy, C:\Users\Volker\AppData\Roaming\OpenCandy\6D872CE6E7B14DD19CA65EB3A21431D9\OCBrowserHelper_1.0.5.112.dll, , [d673a05fa5d5ab8b55362f57649e08f8],
PUP.Optional.OpenCandy, C:\Users\Volker\AppData\Roaming\OpenCandy\88A5012144FE416EA78E04D426F8A36A\Trial-14.0.1000.89_de-DE_1004733_DE-2.exe, , [d673a05fa5d5ab8b55362f57649e08f8],
PUP.Optional.OpenCandy, C:\Users\Volker\AppData\Roaming\OpenCandy\C0D7BEA4D77B4DF3AE8A6015A7B62F35\Setupsft_chr_p1v7.exe, , [d673a05fa5d5ab8b55362f57649e08f8],
PUP.Optional.OpenCandy, C:\Users\Volker\AppData\Roaming\OpenCandy\E990C6E8EA8B452F87AB94AC3CB4C68F\TuneUpUtilities2013-2200217_de-DE.exe, , [d673a05fa5d5ab8b55362f57649e08f8],
PUP.Optional.OpenCandy, C:\Users\Volker\AppData\Roaming\OpenCandy\ECB971E8111B495BAF211317176A7ACD\TuneUpUtilities2013-2200218_de-DE.exe, , [d673a05fa5d5ab8b55362f57649e08f8],
PUP.Optional.FileScout.A, C:\Users\Volker\AppData\Roaming\File Scout\uninst.exe, , [58f11de2601a2214aef5a6e0818112ee],

Physische Sektoren: 0
(No malicious items detected)

(end)