Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Win 7: Rechner crashed und startet von neuem und Browser spinnt. Teil 1 (langer code) (https://www.trojaner-board.de/167890-win-7-rechner-crashed-startet-neuem-browser-spinnt-teil-1-langer-code.html)

Why me 13.06.2015 16:16

Win 7: Rechner crashed und startet von neuem und Browser spinnt. Teil 1 (langer code)
 
Hallo ihr Lieben,

ich bin mir nicht sicher was genau mit meinem Rechner in den letzten Wochen und Monaten nicht stimmt. Alles hat damit angefangen das sich, während des Surfens, von alleine Tabs öffneten (chrome/firefox/internet explorer). Zu erst nur vereinzelt, dann aber immer öfter und mehrere zugleich. Auch wurde mein Rechner mit der Zeit immer langsamer und braucht durchschnittlich länger um Prozesse durchzuführen.

Oberes habe ich zunächst ignoriert und einfach immer alle Tabs geschlossen die sich geöffnet haben. Nach 2-3 Monaten allerdings hat es angefangen das mein Rechner einfach crashed und wieder hochfährt. Mittlerweile bis zu 2x am Tag.

Ich besitze Microsoft Security Essentials als Anti-Virus Tool und hin und wieder findet dieser auch mal was, dass ich dann sofort entferne, aber das eigentliche Problem bleibt trotz allem bestehen. Die Logs dafür zu finden hat sich als etwas problematisch heraus gestellt und ich bin mir nicht sicher ob es das ist was ihr benötigt, aber ich poste es trotz allem mal. Falls ihr andere Infos braucht werde ich mein bestes tun sie zu besorgen, wäre klasse wenn ihr mir zusätzlich erklären würdet wie ich an sie kommen kann :)

Ich hab die Logs jetzt mit Hilfe der Ereignisanzeige aufgetrieben und werde jeden log der entweder mit ''Warnung'' oder ''Fehler'' gekennzeichnet ist posten. Dabei bin ich mir nicht sicher ob ich sie in der ''Angezeigten Ansicht'' oder der ''XML-Ansicht'' Posten solL. Habe mich für letzteres entschieden da es mir einfacher zu lesen vorkommt. Falls ihr was anderes benötigt, einfach fragen :)

Ist eine ganze menge code geworden, muss es in 2 Beiträge aufspalten.


Code:

<Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-06-12T20:22:47.000000000Z" />
  <EventRecordID>601293</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>{71AE883F-5F9C-4A32-856A-68AC8A21D1D8}</Data>
  <Data>2015-06-12T20:22:46.853Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024&enterprise=0</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>1</Data>
  <Data>%%815</Data>
  <Data>Unknown</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>clsid:_HKLM\SOFTWARE\CLASSES\CLSID\{32cb76e8-d0b8-4223-b445-5fe3aa198903};clsid:_HKLM\SOFTWARE\CLASSES\CLSID\{5162a6d6-2502-4bad-968f-1ddec07ca022};file:_C:\ProgramData\DigiCuoupona\WsmACikv5JgdhL.x64.dll;file:_C:\ProgramData\ISSaveir\7NOZGBvZ08DF3m.x64.dll;regkey:_HKLM\SOFTWARE\CLASSES\CLSID\{32cb76e8-d0b8-4223-b445-5fe3aa198903};regkey:_HKLM\SOFTWARE\CLASSES\CLSID\{5162a6d6-2502-4bad-968f-1ddec07ca022}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>0</Data>
  <Data>%%812</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.199.2456.0, AS: 1.199.2456.0, NIS: 114.26.0.0</Data>
  <Data>AM: 1.1.11701.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1002</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-06-12T20:00:29.000000000Z" />
  <EventRecordID>601283</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>{C83886CC-777C-4A97-B0A7-11E20D686DEB}</Data>
  <Data>2</Data>
  <Data>%%802</Data>
  <Data>2</Data>
  <Data>%%805</Data>
  <Data>PC-PC</Data>
  <Data>PC</Data>
  <Data>S-1-5-21-1693460017-1945991507-4174054062-1001</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">5008</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-06-11T00:25:57.000000000Z" />
  <EventRecordID>599937</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data />
  <Data>2</Data>
  <Data>%%830</Data>
  <Data>0xc0000005</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-06-10T00:31:51.000000000Z" />
  <EventRecordID>599377</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>{70FBAFD0-1443-4905-8EF0-E4A353A1529B}</Data>
  <Data>2015-06-10T00:29:18.103Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024&enterprise=0</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\MRT.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>bho:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3a3e15d8-a6d6-4fd5-9a43-2d47c482d0e5};bho:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{6bd1c251-6b5f-47c5-a211-88acb7a46735};bho:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{8D78B3B8-C07B-421C-89FA-D26AF4DEFAC4};bho:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{ABE60554-1FC5-4326-893E-C5ED45DFD507};bho:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{dc6e153a-1631-42a1-b6e1-e3b435f92650};bho:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{f08b2dfd-fbd5-48d6-9e70-d495eabcdb1e};bho:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{f219f114-292c-4aeb-bfc4-753a5b23ccbf};bho:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3a3e15d8-a6d6-4fd5-9a43-2d47c482d0e5};bho:_HKLM\SOFTWARE\Wow6432N</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.199.2166.0, AS: 1.199.2166.0, NIS: 114.23.0.0</Data>
  <Data>AM: 1.1.11701.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-06-10T00:30:08.000000000Z" />
  <EventRecordID>599375</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>{70FBAFD0-1443-4905-8EF0-E4A353A1529B}</Data>
  <Data>2015-06-10T00:29:18.103Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024&enterprise=0</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\MRT.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\AllLSaavEr\eMw4qYjy3VMZOi.dll;file:_C:\Program Files (x86)\BesttSAveeFOOrYoU\H2zo63GAQCHLut.dll;file:_C:\Program Files (x86)\DealEExpress\LtA9irvhRyj3wR.dll;file:_C:\Program Files (x86)\DealEExpress\LtA9irvhRyj3wR.x64.dll;file:_C:\Program Files (x86)\DealEXXpress\rz2F254r3QNGkK.dll;file:_C:\Program Files (x86)\DealEXXpress\rz2F254r3QNGkK.x64.dll;file:_C:\Program Files (x86)\DealiEexpresS\peJ5lfKQZ7AX6p.dll;file:_C:\Program Files (x86)\DiscouuntExxtensi\0AcVSzkyjRbtNb.dll;file:_C:\Program Files (x86)\MinimUmPrioce\HnArboJqILAFcM.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.199.2166.0, AS: 1.199.2166.0, NIS: 114.23.0.0</Data>
  <Data>AM: 1.1.11701.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-06-10T00:30:05.000000000Z" />
  <EventRecordID>599373</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>{70FBAFD0-1443-4905-8EF0-E4A353A1529B}</Data>
  <Data>2015-06-10T00:29:18.103Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024&enterprise=0</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\MRT.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\AllLSaavEr\eMw4qYjy3VMZOi.dll;file:_C:\Program Files (x86)\BesttSAveeFOOrYoU\H2zo63GAQCHLut.dll;file:_C:\Program Files (x86)\DealEExpress\LtA9irvhRyj3wR.dll;file:_C:\Program Files (x86)\DealEExpress\LtA9irvhRyj3wR.x64.dll;file:_C:\Program Files (x86)\DealEXXpress\rz2F254r3QNGkK.dll;file:_C:\Program Files (x86)\DealEXXpress\rz2F254r3QNGkK.x64.dll;file:_C:\Program Files (x86)\DealiEexpresS\peJ5lfKQZ7AX6p.dll;file:_C:\Program Files (x86)\DiscouuntExxtensi\0AcVSzkyjRbtNb.dll;file:_C:\Program Files (x86)\MinimUmPrioce\HnArboJqILAFcM.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.199.2166.0, AS: 1.199.2166.0, NIS: 114.23.0.0</Data>
  <Data>AM: 1.1.11701.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-06-10T00:29:57.000000000Z" />
  <EventRecordID>599372</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>{70FBAFD0-1443-4905-8EF0-E4A353A1529B}</Data>
  <Data>2015-06-10T00:29:18.103Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024&enterprise=0</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\MRT.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\AllLSaavEr\eMw4qYjy3VMZOi.dll;file:_C:\Program Files (x86)\BesttSAveeFOOrYoU\H2zo63GAQCHLut.dll;file:_C:\Program Files (x86)\DealEExpress\LtA9irvhRyj3wR.dll;file:_C:\Program Files (x86)\DealEExpress\LtA9irvhRyj3wR.x64.dll;file:_C:\Program Files (x86)\DealEXXpress\rz2F254r3QNGkK.dll;file:_C:\Program Files (x86)\DealEXXpress\rz2F254r3QNGkK.x64.dll;file:_C:\Program Files (x86)\DiscouuntExxtensi\0AcVSzkyjRbtNb.dll;file:_C:\Program Files (x86)\MinimUmPrioce\HnArboJqILAFcM.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.199.2166.0, AS: 1.199.2166.0, NIS: 114.23.0.0</Data>
  <Data>AM: 1.1.11701.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-06-10T00:29:57.000000000Z" />
  <EventRecordID>599372</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>{70FBAFD0-1443-4905-8EF0-E4A353A1529B}</Data>
  <Data>2015-06-10T00:29:18.103Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024&enterprise=0</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\MRT.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\AllLSaavEr\eMw4qYjy3VMZOi.dll;file:_C:\Program Files (x86)\BesttSAveeFOOrYoU\H2zo63GAQCHLut.dll;file:_C:\Program Files (x86)\DealEExpress\LtA9irvhRyj3wR.dll;file:_C:\Program Files (x86)\DealEExpress\LtA9irvhRyj3wR.x64.dll;file:_C:\Program Files (x86)\DealEXXpress\rz2F254r3QNGkK.dll;file:_C:\Program Files (x86)\DealEXXpress\rz2F254r3QNGkK.x64.dll;file:_C:\Program Files (x86)\DiscouuntExxtensi\0AcVSzkyjRbtNb.dll;file:_C:\Program Files (x86)\MinimUmPrioce\HnArboJqILAFcM.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.199.2166.0, AS: 1.199.2166.0, NIS: 114.23.0.0</Data>
  <Data>AM: 1.1.11701.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-06-10T00:29:50.000000000Z" />
  <EventRecordID>599370</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>{70FBAFD0-1443-4905-8EF0-E4A353A1529B}</Data>
  <Data>2015-06-10T00:29:18.103Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024&enterprise=0</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\MRT.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\AllLSaavEr\eMw4qYjy3VMZOi.dll;file:_C:\Program Files (x86)\BesttSAveeFOOrYoU\H2zo63GAQCHLut.dll;file:_C:\Program Files (x86)\DealEExpress\LtA9irvhRyj3wR.dll;file:_C:\Program Files (x86)\DealEExpress\LtA9irvhRyj3wR.x64.dll;file:_C:\Program Files (x86)\DealEXXpress\rz2F254r3QNGkK.dll;file:_C:\Program Files (x86)\DealEXXpress\rz2F254r3QNGkK.x64.dll;file:_C:\Program Files (x86)\MinimUmPrioce\HnArboJqILAFcM.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.199.2166.0, AS: 1.199.2166.0, NIS: 114.23.0.0</Data>
  <Data>AM: 1.1.11701.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-06-10T00:29:44.000000000Z" />
  <EventRecordID>599369</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>{70FBAFD0-1443-4905-8EF0-E4A353A1529B}</Data>
  <Data>2015-06-10T00:29:18.103Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024&enterprise=0</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\MRT.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\BesttSAveeFOOrYoU\H2zo63GAQCHLut.dll;file:_C:\Program Files (x86)\DealEExpress\LtA9irvhRyj3wR.dll;file:_C:\Program Files (x86)\DealEExpress\LtA9irvhRyj3wR.x64.dll;file:_C:\Program Files (x86)\DealEXXpress\rz2F254r3QNGkK.dll;file:_C:\Program Files (x86)\DealEXXpress\rz2F254r3QNGkK.x64.dll;file:_C:\Program Files (x86)\MinimUmPrioce\HnArboJqILAFcM.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.199.2166.0, AS: 1.199.2166.0, NIS: 114.23.0.0</Data>
  <Data>AM: 1.1.11701.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-06-10T00:29:41.000000000Z" />
  <EventRecordID>599368</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>{70FBAFD0-1443-4905-8EF0-E4A353A1529B}</Data>
  <Data>2015-06-10T00:29:18.103Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024&enterprise=0</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\MRT.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\BesttSAveeFOOrYoU\H2zo63GAQCHLut.dll;file:_C:\Program Files (x86)\DealEExpress\LtA9irvhRyj3wR.x64.dll;file:_C:\Program Files (x86)\DealEXXpress\rz2F254r3QNGkK.dll;file:_C:\Program Files (x86)\DealEXXpress\rz2F254r3QNGkK.x64.dll;file:_C:\Program Files (x86)\MinimUmPrioce\HnArboJqILAFcM.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.199.2166.0, AS: 1.199.2166.0, NIS: 114.23.0.0</Data>
  <Data>AM: 1.1.11701.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-06-10T00:29:35.000000000Z" />
  <EventRecordID>599367</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>{70FBAFD0-1443-4905-8EF0-E4A353A1529B}</Data>
  <Data>2015-06-10T00:29:18.103Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024&enterprise=0</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\MRT.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\BesttSAveeFOOrYoU\H2zo63GAQCHLut.dll;file:_C:\Program Files (x86)\DealEXXpress\rz2F254r3QNGkK.dll;file:_C:\Program Files (x86)\DealEXXpress\rz2F254r3QNGkK.x64.dll;file:_C:\Program Files (x86)\MinimUmPrioce\HnArboJqILAFcM.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.199.2166.0, AS: 1.199.2166.0, NIS: 114.23.0.0</Data>
  <Data>AM: 1.1.11701.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-06-10T00:29:30.000000000Z" />
  <EventRecordID>599366</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>{70FBAFD0-1443-4905-8EF0-E4A353A1529B}</Data>
  <Data>2015-06-10T00:29:18.103Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024&enterprise=0</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\MRT.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\BesttSAveeFOOrYoU\H2zo63GAQCHLut.dll;file:_C:\Program Files (x86)\DealEXXpress\rz2F254r3QNGkK.x64.dll;file:_C:\Program Files (x86)\MinimUmPrioce\HnArboJqILAFcM.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.199.2166.0, AS: 1.199.2166.0, NIS: 114.23.0.0</Data>
  <Data>AM: 1.1.11701.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-06-10T00:29:25.000000000Z" />
  <EventRecordID>599365</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>{70FBAFD0-1443-4905-8EF0-E4A353A1529B}</Data>
  <Data>2015-06-10T00:29:18.103Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024&enterprise=0</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\MRT.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\BesttSAveeFOOrYoU\H2zo63GAQCHLut.dll;file:_C:\Program Files (x86)\MinimUmPrioce\HnArboJqILAFcM.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.199.2166.0, AS: 1.199.2166.0, NIS: 114.23.0.0</Data>
  <Data>AM: 1.1.11701.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-06-10T00:29:13.000000000Z" />
  <EventRecordID>599364</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>{A7F56B5F-1671-4A40-94A3-47320800233F}</Data>
  <Data>2015-06-10T00:29:11.747Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024&enterprise=0</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\MRT.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\EnjjoyCoupoin\xE4Quk7Ej3KeeO.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.199.2166.0, AS: 1.199.2166.0, NIS: 114.23.0.0</Data>
  <Data>AM: 1.1.11701.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">2004</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-06-04T14:27:42.000000000Z" />
  <EventRecordID>595121</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>1</Data>
  <Data>%%824</Data>
  <Data>0x8050a004</Data>
  <Data>Dieses Paket enthält keine aktuellen Definitionsdateien für das Programm. Weitere Informationen finden Sie in "Hilfe und Support".</Data>
  <Data />
  <Data />
  <Data>1.199.1629.0;1.199.1629.0</Data>
  <Data>1.1.11701.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">2004</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-06-03T13:51:32.000000000Z" />
  <EventRecordID>594534</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>1</Data>
  <Data>%%824</Data>
  <Data>0x80508001</Data>
  <Data>Aufgrund eines Problems konnte das Programm nicht gestartet werden. Installieren Sie alle verfügbaren Updates, und starten Sie das Programm erneut. Informationen über die Installation von Updates erhalten Sie unter Hilfe und Support.</Data>
  <Data />
  <Data />
  <Data>1.199.1429.0;1.199.1429.0</Data>
  <Data>1.1.11701.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">2004</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-31T15:09:28.000000000Z" />
  <EventRecordID>593205</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>1</Data>
  <Data>%%824</Data>
  <Data>0x8050800c</Data>
  <Data>Unerwartetes Problem. Installieren Sie bei Bedarf verfügbare Updates, und starten Sie das Programm dann erneut. Informationen zum Installieren von Updates finden Sie unter "Hilfe und Support".</Data>
  <Data />
  <Data />
  <Data>1.199.1313.0;1.199.1313.0</Data>
  <Data>1.1.11701.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-30T13:06:24.000000000Z" />
  <EventRecordID>593014</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>{C8D356AE-0CEA-4FFF-9C4A-D2E0D49A4624}</Data>
  <Data>2015-05-30T13:04:59.098Z</Data>
  <Data />
  <Data />
  <Data>2147692023</Data>
  <Data>Trojan:Win32/Skeeyah.C!plock</Data>
  <Data>5</Data>
  <Data>Schwerwiegend</Data>
  <Data>8</Data>
  <Data>Trojaner</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Skeeyah.C!plock&threatid=2147692023&enterprise=0</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>2</Data>
  <Data>%%820</Data>
  <Data>Unknown</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>clsid:_HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{50FBDB53-6D35-4258-9530-938DD76C927A};file:_C:\Program Files (x86)\DiGICOupon\kziAOM5vv9VYKO.dll;regkey:_HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{50FBDB53-6D35-4258-9530-938DD76C927A}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>0</Data>
  <Data>%%812</Data>
  <Data>8</Data>
  <Data>%%862</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.199.1313.0, AS: 1.199.1313.0, NIS: 114.20.0.0</Data>
  <Data>AM: 1.1.11701.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-30T13:04:59.000000000Z" />
  <EventRecordID>593013</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>{C8D356AE-0CEA-4FFF-9C4A-D2E0D49A4624}</Data>
  <Data>2015-05-30T13:04:59.098Z</Data>
  <Data />
  <Data />
  <Data>2147692023</Data>
  <Data>Trojan:Win32/Skeeyah.C!plock</Data>
  <Data>5</Data>
  <Data>Schwerwiegend</Data>
  <Data>8</Data>
  <Data>Trojaner</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Skeeyah.C!plock&threatid=2147692023&enterprise=0</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>2</Data>
  <Data>%%820</Data>
  <Data>Unknown</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\DiGICOupon\kziAOM5vv9VYKO.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>0</Data>
  <Data>%%812</Data>
  <Data>8</Data>
  <Data>%%862</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.199.1313.0, AS: 1.199.1313.0, NIS: 114.20.0.0</Data>
  <Data>AM: 1.1.11701.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">2004</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-30T11:54:08.000000000Z" />
  <EventRecordID>592746</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>2</Data>
  <Data>%%825</Data>
  <Data>0x8050800c</Data>
  <Data>Unerwartetes Problem. Installieren Sie bei Bedarf verfügbare Updates, und starten Sie das Programm dann erneut. Informationen zum Installieren von Updates finden Sie unter "Hilfe und Support".</Data>
  <Data />
  <Data />
  <Data>1.199.936.0;1.199.936.0</Data>
  <Data>1.1.11701.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">2004</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-30T11:54:00.000000000Z" />
  <EventRecordID>592742</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>1</Data>
  <Data>%%824</Data>
  <Data>0x8050800c</Data>
  <Data>Unerwartetes Problem. Installieren Sie bei Bedarf verfügbare Updates, und starten Sie das Programm dann erneut. Informationen zum Installieren von Updates finden Sie unter "Hilfe und Support".</Data>
  <Data />
  <Data />
  <Data>1.199.1088.0;1.199.1088.0</Data>
  <Data>1.1.11701.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">2001</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-28T17:08:47.000000000Z" />
  <EventRecordID>591892</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data />
  <Data />
  <Data>1</Data>
  <Data>%%815</Data>
  <Data />
  <Data>NT-AUTORITÄT</Data>
  <Data>NETZWERKDIENST</Data>
  <Data>S-1-5-20</Data>
  <Data>4</Data>
  <Data />
  <Data>0</Data>
  <Data />
  <Data />
  <Data />
  <Data>0x80070652</Data>
  <Data>Es wird bereits anderweitig eine Installation ausgeführt. Beenden Sie den anderen Installationsvorgang, bevor Sie diese Installation fortsetzen.</Data>
  <Data>3</Data>
  <Data>%%854</Data>
  <Data />
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">2001</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-28T17:08:34.000000000Z" />
  <EventRecordID>591885</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data />
  <Data>1.199.936.0</Data>
  <Data>7</Data>
  <Data>%%859</Data>
  <Data />
  <Data>NT-AUTORITÄT</Data>
  <Data>SYSTEM</Data>
  <Data>S-1-5-18</Data>
  <Data>1</Data>
  <Data>%%800</Data>
  <Data>1</Data>
  <Data>%%803</Data>
  <Data />
  <Data>1.1.11701.0</Data>
  <Data>0x8024001e</Data>
  <Data>Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support".</Data>
  <Data>3</Data>
  <Data>%%854</Data>
  <Data>hxxp://www.microsoft.com</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-27T19:41:03.000000000Z" />
  <EventRecordID>591328</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>{E03708C7-5BC5-4256-B514-E316F652C04F}</Data>
  <Data>2015-05-27T16:35:35.273Z</Data>
  <Data />
  <Data />
  <Data>2147692022</Data>
  <Data>Trojan:Win32/Skeeyah.B!plock</Data>
  <Data>5</Data>
  <Data>Schwerwiegend</Data>
  <Data>8</Data>
  <Data>Trojaner</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Skeeyah.B!plock&threatid=2147692022&enterprise=0</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>1</Data>
  <Data>%%815</Data>
  <Data>C:\Windows\System32\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>bho:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3F046446-9785-4715-A59C-E5D07964C818};bho:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{50FBDB53-6D35-4258-9530-938DD76C927A};bho:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3F046446-9785-4715-A59C-E5D07964C818};bho:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{50FBDB53-6D35-4258-9530-938DD76C927A};clsid:_HKLM\SOFTWARE\CLASSES\CLSID\{3F046446-9785-4715-A59C-E5D07964C818};clsid:_HKLM\SOFTWARE\CLASSES\CLSID\{50FBDB53-6D35-4258-9530-938DD76C927A};clsid:_HKLM\SOFTWARE\CLASSES\Wow6432Node\CLSID\{3F046446-9785-4715-A59C-E5D07964C818};clsid:_HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{3F046446-9785-4715-A59C-E5D07964C818};file:_C:\Program Files (x86)\DiGICOupon\kziAOM5vv9VYKO.x64.dll;file:_C:\Program Files (x86)\HaPpY2eSave\IffAkHjzEB3jjF.dll;file:_C:\Program Files (x86)\HaPpY2eSave\IffAkHjzEB3jjF.x64.dll;</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>8</Data>
  <Data>%%862</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.199.936.0, AS: 1.199.936.0, NIS: 114.20.0.0</Data>
  <Data>AM: 1.1.11701.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-27T18:01:32.000000000Z" />
  <EventRecordID>591316</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>{E03708C7-5BC5-4256-B514-E316F652C04F}</Data>
  <Data>2015-05-27T16:35:35.273Z</Data>
  <Data />
  <Data />
  <Data>2147692022</Data>
  <Data>Trojan:Win32/Skeeyah.B!plock</Data>
  <Data>5</Data>
  <Data>Schwerwiegend</Data>
  <Data>8</Data>
  <Data>Trojaner</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Skeeyah.B!plock&threatid=2147692022&enterprise=0</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>1</Data>
  <Data>%%815</Data>
  <Data>C:\Windows\System32\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>bho:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3F046446-9785-4715-A59C-E5D07964C818};bho:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3F046446-9785-4715-A59C-E5D07964C818};clsid:_HKLM\SOFTWARE\CLASSES\Wow6432Node\CLSID\{3F046446-9785-4715-A59C-E5D07964C818};file:_C:\Program Files (x86)\DiGICOupon\kziAOM5vv9VYKO.x64.dll;file:_C:\Program Files (x86)\HaPpY2eSave\IffAkHjzEB3jjF.dll;file:_C:\Program Files (x86)\HaPpY2eSave\IffAkHjzEB3jjF.x64.dll;regkey:_HKLM\SOFTWARE\CLASSES\Wow6432Node\CLSID\{3F046446-9785-4715-A59C-E5D07964C818};regkey:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3F046446-9785-4715-A59C-E5D07964C818};regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3F046446-9785-4715-A59C-E5D07964C818}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>8</Data>
  <Data>%%862</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.199.936.0, AS: 1.199.936.0, NIS: 114.20.0.0</Data>
  <Data>AM: 1.1.11701.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>
- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-27T16:38:14.000000000Z" />
  <EventRecordID>591302</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>{E03708C7-5BC5-4256-B514-E316F652C04F}</Data>
  <Data>2015-05-27T16:35:35.273Z</Data>
  <Data />
  <Data />
  <Data>2147692022</Data>
  <Data>Trojan:Win32/Skeeyah.B!plock</Data>
  <Data>5</Data>
  <Data>Schwerwiegend</Data>
  <Data>8</Data>
  <Data>Trojaner</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Skeeyah.B!plock&threatid=2147692022&enterprise=0</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>1</Data>
  <Data>%%815</Data>
  <Data>Unknown</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>bho:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3F046446-9785-4715-A59C-E5D07964C818};bho:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3F046446-9785-4715-A59C-E5D07964C818};clsid:_HKLM\SOFTWARE\CLASSES\Wow6432Node\CLSID\{3F046446-9785-4715-A59C-E5D07964C818};file:_C:\Program Files (x86)\DiGICOupon\kziAOM5vv9VYKO.x64.dll;file:_C:\Program Files (x86)\HaPpY2eSave\IffAkHjzEB3jjF.dll;file:_C:\Program Files (x86)\HaPpY2eSave\IffAkHjzEB3jjF.x64.dll;regkey:_HKLM\SOFTWARE\CLASSES\Wow6432Node\CLSID\{3F046446-9785-4715-A59C-E5D07964C818};regkey:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3F046446-9785-4715-A59C-E5D07964C818};regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3F046446-9785-4715-A59C-E5D07964C818}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>0</Data>
  <Data>%%812</Data>
  <Data>8</Data>
  <Data>%%862</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.199.936.0, AS: 1.199.936.0, NIS: 114.20.0.0</Data>
  <Data>AM: 1.1.11701.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-27T16:35:35.000000000Z" />
  <EventRecordID>591298</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>{E03708C7-5BC5-4256-B514-E316F652C04F}</Data>
  <Data>2015-05-27T16:35:35.273Z</Data>
  <Data />
  <Data />
  <Data>2147692022</Data>
  <Data>Trojan:Win32/Skeeyah.B!plock</Data>
  <Data>5</Data>
  <Data>Schwerwiegend</Data>
  <Data>8</Data>
  <Data>Trojaner</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Skeeyah.B!plock&threatid=2147692022&enterprise=0</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>1</Data>
  <Data>%%815</Data>
  <Data>Unknown</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>bho:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3F046446-9785-4715-A59C-E5D07964C818};bho:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3F046446-9785-4715-A59C-E5D07964C818};clsid:_HKLM\SOFTWARE\CLASSES\Wow6432Node\CLSID\{3F046446-9785-4715-A59C-E5D07964C818};file:_C:\Program Files (x86)\HaPpY2eSave\IffAkHjzEB3jjF.dll;regkey:_HKLM\SOFTWARE\CLASSES\Wow6432Node\CLSID\{3F046446-9785-4715-A59C-E5D07964C818};regkey:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3F046446-9785-4715-A59C-E5D07964C818};regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3F046446-9785-4715-A59C-E5D07964C818}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>0</Data>
  <Data>%%812</Data>
  <Data>8</Data>
  <Data>%%862</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.199.936.0, AS: 1.199.936.0, NIS: 114.20.0.0</Data>
  <Data>AM: 1.1.11701.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">2001</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-27T16:12:09.000000000Z" />
  <EventRecordID>591286</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data />
  <Data>1.199.904.0</Data>
  <Data>7</Data>
  <Data>%%859</Data>
  <Data />
  <Data>NT-AUTORITÄT</Data>
  <Data>SYSTEM</Data>
  <Data>S-1-5-18</Data>
  <Data>1</Data>
  <Data>%%800</Data>
  <Data>1</Data>
  <Data>%%803</Data>
  <Data />
  <Data>1.1.11701.0</Data>
  <Data>0x80072efe</Data>
  <Data>Die Serververbindung wurde aufgrund eines Fehlers beendet.</Data>
  <Data>1</Data>
  <Data>%%852</Data>
  <Data>hxxp://www.microsoft.com</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">2001</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-27T10:56:52.000000000Z" />
  <EventRecordID>590903</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data />
  <Data>1.199.647.0</Data>
  <Data>7</Data>
  <Data>%%859</Data>
  <Data />
  <Data>NT-AUTORITÄT</Data>
  <Data>SYSTEM</Data>
  <Data>S-1-5-18</Data>
  <Data>1</Data>
  <Data>%%800</Data>
  <Data>1</Data>
  <Data>%%803</Data>
  <Data />
  <Data>1.1.11701.0</Data>
  <Data>0x8024001e</Data>
  <Data>Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support".</Data>
  <Data>2</Data>
  <Data>%%853</Data>
  <Data>hxxp://www.microsoft.com</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">2001</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-27T10:56:51.000000000Z" />
  <EventRecordID>590902</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data />
  <Data>1.199.647.0</Data>
  <Data>7</Data>
  <Data>%%859</Data>
  <Data />
  <Data>NT-AUTORITÄT</Data>
  <Data>SYSTEM</Data>
  <Data>S-1-5-18</Data>
  <Data>1</Data>
  <Data>%%800</Data>
  <Data>1</Data>
  <Data>%%803</Data>
  <Data />
  <Data>1.1.11701.0</Data>
  <Data>0x8024001e</Data>
  <Data>Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support".</Data>
  <Data>2</Data>
  <Data>%%853</Data>
  <Data>hxxp://www.microsoft.com</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">2004</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-27T10:36:45.000000000Z" />
  <EventRecordID>590518</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>1</Data>
  <Data>%%824</Data>
  <Data>0x80508001</Data>
  <Data>Aufgrund eines Problems konnte das Programm nicht gestartet werden. Installieren Sie alle verfügbaren Updates, und starten Sie das Programm erneut. Informationen über die Installation von Updates erhalten Sie unter Hilfe und Support.</Data>
  <Data />
  <Data />
  <Data>1.199.682.0;1.199.682.0</Data>
  <Data>1.1.11701.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">5008</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-26T01:22:21.000000000Z" />
  <EventRecordID>590148</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>file:C:\Users\PC\AppData\Roaming\Spotify\Spotify.exe</Data>
  <Data>2</Data>
  <Data>%%830</Data>
  <Data>0xc0000005</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">3002</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-24T15:33:46.000000000Z" />
  <EventRecordID>589636</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>%%886</Data>
  <Data>%%892</Data>
  <Data>0x80070005</Data>
  <Data>Zugriff verweigert</Data>
  <Data>9</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">5008</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-21T12:42:21.000000000Z" />
  <EventRecordID>588242</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>file:C:\Users\PC\AppData\Roaming\Spotify\Spotify.exe</Data>
  <Data>2</Data>
  <Data>%%830</Data>
  <Data>0xc0000005</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">5008</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-21T12:42:21.000000000Z" />
  <EventRecordID>588241</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>file:C:\Users\PC\AppData\Roaming\Spotify\Spotify.exe</Data>
  <Data>2</Data>
  <Data>%%830</Data>
  <Data>0xc0000005</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">2004</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-16T12:00:43.000000000Z" />
  <EventRecordID>586376</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data>1</Data>
  <Data>%%824</Data>
  <Data>0x8050800c</Data>
  <Data>Unerwartetes Problem. Installieren Sie bei Bedarf verfügbare Updates, und starten Sie das Programm dann erneut. Informationen zum Installieren von Updates finden Sie unter "Hilfe und Support".</Data>
  <Data />
  <Data />
  <Data>1.197.2441.0;1.197.2441.0</Data>
  <Data>1.1.11602.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">2001</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-16T00:03:57.000000000Z" />
  <EventRecordID>586309</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data />
  <Data>1.197.2441.0</Data>
  <Data>7</Data>
  <Data>%%859</Data>
  <Data />
  <Data>NT-AUTORITÄT</Data>
  <Data>SYSTEM</Data>
  <Data>S-1-5-18</Data>
  <Data>1</Data>
  <Data>%%800</Data>
  <Data>1</Data>
  <Data>%%803</Data>
  <Data />
  <Data>1.1.11602.0</Data>
  <Data>0x8024001e</Data>
  <Data>Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support".</Data>
  <Data>2</Data>
  <Data>%%853</Data>
  <Data>hxxp://www.microsoft.com</Data>
  </EventData>
  </Event>
- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">2001</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-05-16T00:03:57.000000000Z" />
  <EventRecordID>586308</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.8.0204.0</Data>
  <Data />
  <Data>1.197.2441.0</Data>
  <Data>7</Data>
  <Data>%%859</Data>
  <Data />
  <Data>NT-AUTORITÄT</Data>
  <Data>SYSTEM</Data>
  <Data>S-1-5-18</Data>
  <Data>1</Data>
  <Data>%%800</Data>
  <Data>1</Data>
  <Data>%%803</Data>
  <Data />
  <Data>1.1.11602.0</Data>
  <Data>0x8024001e</Data>
  <Data>Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support".</Data>
  <Data>2</Data>
  <Data>%%853</Data>
  <Data>hxxp://www.microsoft.com</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-04-28T03:19:26.000000000Z" />
  <EventRecordID>579223</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{7D6DC674-0803-416D-822A-FEC24576C1E3}</Data>
  <Data>2015-04-28T03:19:22.926Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\SaveeLots\2pMVIkmppfWFlP.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.197.668.0, AS: 1.197.668.0, NIS: 114.3.0.0</Data>
  <Data>AM: 1.1.11602.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">2001</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-04-27T10:45:52.000000000Z" />
  <EventRecordID>579093</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data />
  <Data>1.197.668.0</Data>
  <Data>7</Data>
  <Data>%%859</Data>
  <Data />
  <Data>NT-AUTORITÄT</Data>
  <Data>SYSTEM</Data>
  <Data>S-1-5-18</Data>
  <Data>1</Data>
  <Data>%%800</Data>
  <Data>1</Data>
  <Data>%%803</Data>
  <Data />
  <Data>1.1.11602.0</Data>
  <Data>0x80070643</Data>
  <Data>Schwerwiegender Fehler bei der Installation.</Data>
  <Data>3</Data>
  <Data>%%854</Data>
  <Data>hxxp://www.microsoft.com</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">5008</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-04-23T09:29:33.000000000Z" />
  <EventRecordID>577959</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data />
  <Data>2</Data>
  <Data>%%830</Data>
  <Data>0xc0000005</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">5008</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-04-23T09:29:11.000000000Z" />
  <EventRecordID>577947</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data />
  <Data>2</Data>
  <Data>%%830</Data>
  <Data>0xc0000005</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">5008</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-04-23T09:29:10.000000000Z" />
  <EventRecordID>577945</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>file:C:\Users\PC\AppData\Roaming\Spotify\Spotify.exe</Data>
  <Data>2</Data>
  <Data>%%830</Data>
  <Data>0xc0000005</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">5008</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-04-23T09:29:10.000000000Z" />
  <EventRecordID>577944</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>file:C:\Users\PC\AppData\Roaming\Spotify\Spotify.exe</Data>
  <Data>2</Data>
  <Data>%%830</Data>
  <Data>0xc0000005</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">5008</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-04-23T09:29:09.000000000Z" />
  <EventRecordID>577943</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>process:pid:3952,ProcessStart:130742549433168000</Data>
  <Data>2</Data>
  <Data>%%830</Data>
  <Data>0xc0000005</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">5008</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-04-23T09:29:02.000000000Z" />
  <EventRecordID>577932</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>file:C:\Games\Planetside 2\LaunchPad.exe</Data>
  <Data>2</Data>
  <Data>%%830</Data>
  <Data>0xc0000005</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">5008</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-04-23T09:29:02.000000000Z" />
  <EventRecordID>577931</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>file:C:\Games\South Park - The Stick of Truth\South Park - The Stick of Truth.exe</Data>
  <Data>2</Data>
  <Data>%%830</Data>
  <Data>0xc0000005</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">5008</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-04-23T09:29:02.000000000Z" />
  <EventRecordID>577930</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>file:C:\Games\Planetside 2\LaunchPad.exe</Data>
  <Data>2</Data>
  <Data>%%830</Data>
  <Data>0xc0000005</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">5008</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-04-23T09:29:02.000000000Z" />
  <EventRecordID>577929</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>file:C:\Games\South Park - The Stick of Truth\South Park - The Stick of Truth.exe</Data>
  <Data>2</Data>
  <Data>%%830</Data>
  <Data>0xc0000005</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-04-08T12:25:38.000000000Z" />
  <EventRecordID>572525</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{A9C7303A-E164-49E5-8180-2EFE3F6719D5}</Data>
  <Data>2015-04-08T12:13:29.511Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\BesttSAveeFOOrYoU\H2zo63GAQCHLut.exe;file:_C:\Program Files (x86)\BitSaveR\BitSaveR.exe;file:_C:\Program Files (x86)\EnjjoyCoupoin\xE4Quk7Ej3KeeO.exe;regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{2DF3E224-05CD-4113-AA7A-86F2F6607B46};regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{A3FC46A0-9B62-0EF3-B475-743B3A2762B1};regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{F6A71DC7-28F4-C6C7-8FA9-8A56C80FC96A};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{2DF3E224-05CD-4113-AA7A-86F2F6607B46};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{A3FC46A0-9B62-0EF3-B475-743B3A2762B1};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{F6A71DC7-28F4-C6C7-8FA9-8A56C80FC96A}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.195.2233.0, AS: 1.195.2233.0, NIS: 114.3.0.0</Data>
  <Data>AM: 1.1.11502.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-04-08T12:23:50.000000000Z" />
  <EventRecordID>572523</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{A9C7303A-E164-49E5-8180-2EFE3F6719D5}</Data>
  <Data>2015-04-08T12:13:29.511Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\BesttSAveeFOOrYoU\H2zo63GAQCHLut.exe;file:_C:\Program Files (x86)\BitSaveR\BitSaveR.exe;file:_C:\Program Files (x86)\EnjjoyCoupoin\xE4Quk7Ej3KeeO.exe</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.195.2233.0, AS: 1.195.2233.0, NIS: 114.3.0.0</Data>
  <Data>AM: 1.1.11502.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-04-08T12:23:08.000000000Z" />
  <EventRecordID>572521</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{2FE32FD4-594B-47A9-B127-BD371F36836B}</Data>
  <Data>2015-04-08T12:11:08.985Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\Whiskey Militia Countdown Timer\Whiskey Militia Countdown Timer.exe;regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{98449C67-C7AF-BB53-112D-26C916814611};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{98449C67-C7AF-BB53-112D-26C916814611}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.195.2233.0, AS: 1.195.2233.0, NIS: 114.3.0.0</Data>
  <Data>AM: 1.1.11502.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-04-08T12:15:35.000000000Z" />
  <EventRecordID>572516</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{A9C7303A-E164-49E5-8180-2EFE3F6719D5}</Data>
  <Data>2015-04-08T12:13:29.511Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\BesttSAveeFOOrYoU\H2zo63GAQCHLut.exe;file:_C:\Program Files (x86)\BitSaveR\BitSaveR.exe;file:_C:\Program Files (x86)\EnjjoyCoupoin\xE4Quk7Ej3KeeO.exe</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.195.2233.0, AS: 1.195.2233.0, NIS: 114.3.0.0</Data>
  <Data>AM: 1.1.11502.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-04-08T12:13:55.000000000Z" />
  <EventRecordID>572515</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{A9C7303A-E164-49E5-8180-2EFE3F6719D5}</Data>
  <Data>2015-04-08T12:13:29.511Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\BesttSAveeFOOrYoU\H2zo63GAQCHLut.exe;file:_C:\Program Files (x86)\BitSaveR\BitSaveR.exe</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.195.2233.0, AS: 1.195.2233.0, NIS: 114.3.0.0</Data>
  <Data>AM: 1.1.11502.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-04-08T12:11:17.000000000Z" />
  <EventRecordID>572513</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{2FE32FD4-594B-47A9-B127-BD371F36836B}</Data>
  <Data>2015-04-08T12:11:08.985Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\Whiskey Militia Countdown Timer\Whiskey Militia Countdown Timer.exe</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.195.2233.0, AS: 1.195.2233.0, NIS: 114.3.0.0</Data>
  <Data>AM: 1.1.11502.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-04-07T09:04:51.000000000Z" />
  <EventRecordID>571965</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{964305F4-A166-4665-95AB-8ACDD1DE14B0}</Data>
  <Data>2015-04-07T09:04:50.595Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>1</Data>
  <Data>%%815</Data>
  <Data>Unknown</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>clsid:_HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{5aae721e-d529-47f8-97a5-3d7dfaf623f8};clsid:_HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{fa5e54a3-e342-4c30-ba8d-a45f1899897e};file:_C:\ProgramData\500CoupoNs\Q13BVDBoaQka3I.dll;file:_C:\ProgramData\JoniCaoupon\CA7znB0QQzGE4g.dll;regkey:_HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{5aae721e-d529-47f8-97a5-3d7dfaf623f8};regkey:_HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{fa5e54a3-e342-4c30-ba8d-a45f1899897e}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>0</Data>
  <Data>%%812</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.195.1882.0, AS: 1.195.1882.0, NIS: 114.3.0.0</Data>
  <Data>AM: 1.1.11502.0, NIS: 2.1.11502.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-19T14:47:18.000000000Z" />
  <EventRecordID>564942</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{9F448125-94FA-403D-8395-D9ED1B19D944}</Data>
  <Data>2015-03-19T14:46:59.442Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\MinimUmPrioce\HnArboJqILAFcM.exe;regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{CA1838EF-A497-194E-3850-37A62CEE398B};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{CA1838EF-A497-194E-3850-37A62CEE398B}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.3140.0, AS: 1.193.3140.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>


Why me 13.06.2015 16:20

Rechner crashed und startet von neuem und Browser spinnt. Teil 2 (langer code)
 
Code:

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-19T14:46:59.000000000Z" />
  <EventRecordID>564941</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{9F448125-94FA-403D-8395-D9ED1B19D944}</Data>
  <Data>2015-03-19T14:46:59.442Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\MinimUmPrioce\HnArboJqILAFcM.exe</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.3140.0, AS: 1.193.3140.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-19T14:46:53.000000000Z" />
  <EventRecordID>564939</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{D5D9A5EE-E650-4EEF-A037-A885A97F2FCD}</Data>
  <Data>2015-03-19T14:46:29.217Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\Web Browser Switcher for Chrome\Web Browser Switcher for Chrome.exe;regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{53B21E29-3967-C332-57EB-C02631658584};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{53B21E29-3967-C332-57EB-C02631658584}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.3140.0, AS: 1.193.3140.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>
- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-19T14:46:29.000000000Z" />
  <EventRecordID>564937</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{D5D9A5EE-E650-4EEF-A037-A885A97F2FCD}</Data>
  <Data>2015-03-19T14:46:29.217Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\Web Browser Switcher for Chrome\Web Browser Switcher for Chrome.exe</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.3140.0, AS: 1.193.3140.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-19T14:46:15.000000000Z" />
  <EventRecordID>564935</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{42A912B3-7673-431C-AC3A-859DCE5279BA}</Data>
  <Data>2015-03-19T14:45:17.176Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\BesttSiavEForYou\BesttSiavEForYou.exe;regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{F6A71DC7-28F4-C6C7-8FA9-8A56C80FC96A};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{F6A71DC7-28F4-C6C7-8FA9-8A56C80FC96A}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.3140.0, AS: 1.193.3140.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-19T14:45:57.000000000Z" />
  <EventRecordID>564934</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{42A912B3-7673-431C-AC3A-859DCE5279BA}</Data>
  <Data>2015-03-19T14:45:17.176Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\BesttSiavEForYou\BesttSiavEForYou.exe</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.3140.0, AS: 1.193.3140.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-19T14:45:56.000000000Z" />
  <EventRecordID>564932</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{BA4D481D-0284-4BEC-AAF0-B55B310DDD1F}</Data>
  <Data>2015-03-19T14:45:10.663Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\DealiEexpresS\peJ5lfKQZ7AX6p.exe;regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{25F259ED-12F6-429F-5783-527C3E2F8586};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{25F259ED-12F6-429F-5783-527C3E2F8586}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.3140.0, AS: 1.193.3140.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-19T14:45:11.000000000Z" />
  <EventRecordID>564931</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{BA4D481D-0284-4BEC-AAF0-B55B310DDD1F}</Data>
  <Data>2015-03-19T14:45:10.663Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\DealiEexpresS\peJ5lfKQZ7AX6p.exe</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.3140.0, AS: 1.193.3140.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">3002</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-12T10:06:10.000000000Z" />
  <EventRecordID>562392</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>%%886</Data>
  <Data>%%892</Data>
  <Data>0x80070005</Data>
  <Data>Zugriff verweigert</Data>
  <Data>9</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-11T23:31:46.000000000Z" />
  <EventRecordID>562093</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{797872CF-0C2E-4041-9B60-C4BD8B430CA4}</Data>
  <Data>2015-03-11T23:30:40.434Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\MRT.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>clsid:_HKLM\SOFTWARE\CLASSES\Wow6432Node\CLSID\{32cb76e8-d0b8-4223-b445-5fe3aa198903};clsid:_HKLM\SOFTWARE\CLASSES\Wow6432Node\CLSID\{5162a6d6-2502-4bad-968f-1ddec07ca022};clsid:_HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{32cb76e8-d0b8-4223-b445-5fe3aa198903};clsid:_HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{5162a6d6-2502-4bad-968f-1ddec07ca022};file:_C:\ProgramData\DigiCuoupona\WsmACikv5JgdhL.dll;file:_C:\ProgramData\GReaatSaevE4U\dCF_RBz.dll;file:_C:\ProgramData\ISSaveir\7NOZGBvZ08DF3m.dll;iepreapproved:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{32cb76e8-d0b8-4223-b445-5fe3aa198903};iepreapproved:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5162a6d6-2502-4bad-968f-1ddec07ca022};iepreapproved:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{32cb76e8-d0b8-4223-b445-5fe3aa198903};iepreapproved:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5162a6d6-2502-4bad-968f-1ddec07ca022};regkey:_HKLM\SOFTWARE\CLASSES\Wow6432N</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.2323.0, AS: 1.193.2323.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-11T23:31:25.000000000Z" />
  <EventRecordID>562092</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{797872CF-0C2E-4041-9B60-C4BD8B430CA4}</Data>
  <Data>2015-03-11T23:30:40.434Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\MRT.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\ProgramData\DigiCuoupona\WsmACikv5JgdhL.dll;file:_C:\ProgramData\GReaatSaevE4U\dCF_RBz.dll;file:_C:\ProgramData\ISSaveir\7NOZGBvZ08DF3m.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.2323.0, AS: 1.193.2323.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-11T23:31:15.000000000Z" />
  <EventRecordID>562090</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{33D90249-E82D-43D2-A91A-EF71A07897F1}</Data>
  <Data>2015-03-11T23:30:33.869Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\MRT.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>clsid:_HKLM\SOFTWARE\CLASSES\Wow6432Node\CLSID\{070EC31F-A606-24FD-279F-14B6938DE89A};clsid:_HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{070EC31F-A606-24FD-279F-14B6938DE89A};file:_C:\ProgramData\GReaatSaevE4U\dCF_RBz.dll;ieaddon:_HKCU@S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{070EC31F-A606-24FD-279F-14B6938DE89A};ieaddon:_HKCU@S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{070EC31F-A606-24FD-279F-14B6938DE89A};iepreapproved:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{070EC31F-A606-24FD-279F-14B6938DE89A};iepreapproved:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{070EC31F-A606-24FD-279F-14B6938DE89A};regkey:_HKCU@S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{070EC31F-A606-24FD-279F-14B6938DE89A};regkey:_HKCU@S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVER</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.2323.0, AS: 1.193.2323.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-11T23:31:07.000000000Z" />
  <EventRecordID>562089</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{797872CF-0C2E-4041-9B60-C4BD8B430CA4}</Data>
  <Data>2015-03-11T23:30:40.434Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\MRT.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\ProgramData\DigiCuoupona\WsmACikv5JgdhL.dll;file:_C:\ProgramData\GReaatSaevE4U\dCF_RBz.dll;file:_C:\ProgramData\ISSaveir\7NOZGBvZ08DF3m.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.2323.0, AS: 1.193.2323.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-11T23:30:54.000000000Z" />
  <EventRecordID>562088</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{797872CF-0C2E-4041-9B60-C4BD8B430CA4}</Data>
  <Data>2015-03-11T23:30:40.434Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\MRT.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\ProgramData\DigiCuoupona\WsmACikv5JgdhL.dll;file:_C:\ProgramData\ISSaveir\7NOZGBvZ08DF3m.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.2323.0, AS: 1.193.2323.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-11T23:30:34.000000000Z" />
  <EventRecordID>562087</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{33D90249-E82D-43D2-A91A-EF71A07897F1}</Data>
  <Data>2015-03-11T23:30:33.869Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\MRT.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\ProgramData\GReaatSaevE4U\dCF_RBz.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.2323.0, AS: 1.193.2323.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-09T12:04:05.000000000Z" />
  <EventRecordID>561227</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{0EFC0200-2FF9-41B9-ADBD-98BE18CB91CD}</Data>
  <Data>2015-03-09T12:03:49.223Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\rundll32.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>clsid:_HKLM\SOFTWARE\CLASSES\Wow6432Node\CLSID\{56E2D5A6-5621-00CB-DBCD-E6FC69DE9201};clsid:_HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{56E2D5A6-5621-00CB-DBCD-E6FC69DE9201};file:_C:\ProgramData\TakeuThaeCoeUpon\5361Ro.dll;ieaddon:_HKCU@S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{56E2D5A6-5621-00CB-DBCD-E6FC69DE9201};ieaddon:_HKCU@S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{56E2D5A6-5621-00CB-DBCD-E6FC69DE9201};iepreapproved:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{56E2D5A6-5621-00CB-DBCD-E6FC69DE9201};iepreapproved:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{56E2D5A6-5621-00CB-DBCD-E6FC69DE9201};regkey:_HKCU@S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{56E2D5A6-5621-00CB-DBCD-E6FC69DE9201};regkey:_HKCU@S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTV</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.2058.0, AS: 1.193.2058.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-09T12:03:49.000000000Z" />
  <EventRecordID>561226</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{0EFC0200-2FF9-41B9-ADBD-98BE18CB91CD}</Data>
  <Data>2015-03-09T12:03:49.223Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\rundll32.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\ProgramData\TakeuThaeCoeUpon\5361Ro.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.2058.0, AS: 1.193.2058.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-09T12:02:53.000000000Z" />
  <EventRecordID>561224</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{3F02DB8A-5F07-49E2-A21B-BF0845F5B49B}</Data>
  <Data>2015-03-09T12:02:35.678Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\rundll32.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>clsid:_HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{5ca4a85c-b64e-4c5a-b181-4a3af15ad6e1};file:_C:\Program Files (x86)\BuyNsAVe\E7qGnwuUpd0J7N.dll;regkey:_HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{5ca4a85c-b64e-4c5a-b181-4a3af15ad6e1}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.2058.0, AS: 1.193.2058.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-09T12:02:36.000000000Z" />
  <EventRecordID>561223</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{3F02DB8A-5F07-49E2-A21B-BF0845F5B49B}</Data>
  <Data>2015-03-09T12:02:35.678Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\rundll32.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\BuyNsAVe\E7qGnwuUpd0J7N.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.2058.0, AS: 1.193.2058.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-09T12:02:18.000000000Z" />
  <EventRecordID>561221</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{1E0F119C-D1EF-4906-B538-BB7309D72D56}</Data>
  <Data>2015-03-09T12:01:20.935Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>2</Data>
  <Data>%%820</Data>
  <Data>Unknown</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>clsid:_HKLM\SOFTWARE\CLASSES\Wow6432Node\CLSID\{1e329a98-e487-405f-89aa-323096bc7e1f};clsid:_HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{1e329a98-e487-405f-89aa-323096bc7e1f};file:_C:\Program Files (x86)\YoutuubeAdBlocke\cgTai8sTeTnHzO.dll;regkey:_HKLM\SOFTWARE\CLASSES\Wow6432Node\CLSID\{1e329a98-e487-405f-89aa-323096bc7e1f};regkey:_HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{1e329a98-e487-405f-89aa-323096bc7e1f}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>0</Data>
  <Data>%%812</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.2058.0, AS: 1.193.2058.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-09T12:01:43.000000000Z" />
  <EventRecordID>561220</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{1E0F119C-D1EF-4906-B538-BB7309D72D56}</Data>
  <Data>2015-03-09T12:01:20.935Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>2</Data>
  <Data>%%820</Data>
  <Data>Unknown</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>clsid:_HKLM\SOFTWARE\CLASSES\Wow6432Node\CLSID\{1e329a98-e487-405f-89aa-323096bc7e1f};file:_C:\Program Files (x86)\YoutuubeAdBlocke\cgTai8sTeTnHzO.dll;regkey:_HKLM\SOFTWARE\CLASSES\Wow6432Node\CLSID\{1e329a98-e487-405f-89aa-323096bc7e1f}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>0</Data>
  <Data>%%812</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.2058.0, AS: 1.193.2058.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-09T12:01:36.000000000Z" />
  <EventRecordID>561218</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{0F1AFB5C-B54B-4203-A6D6-CAD783F40E81}</Data>
  <Data>2015-03-09T12:00:25.188Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\rundll32.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>clsid:_HKLM\SOFTWARE\CLASSES\CLSID\{5aae721e-d529-47f8-97a5-3d7dfaf623f8};clsid:_HKLM\SOFTWARE\CLASSES\CLSID\{5ca4a85c-b64e-4c5a-b181-4a3af15ad6e1};clsid:_HKLM\SOFTWARE\CLASSES\CLSID\{fa5e54a3-e342-4c30-ba8d-a45f1899897e};file:_C:\Program Files (x86)\BuyNsAVe\E7qGnwuUpd0J7N.x64.dll;file:_C:\Program Files (x86)\YoutuubeAdBlocke\cgTai8sTeTnHzO.x64.dll;file:_C:\ProgramData\500CoupoNs\Q13BVDBoaQka3I.x64.dll;file:_C:\ProgramData\JoniCaoupon\CA7znB0QQzGE4g.x64.dll;iepreapproved:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5aae721e-d529-47f8-97a5-3d7dfaf623f8};iepreapproved:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5ca4a85c-b64e-4c5a-b181-4a3af15ad6e1};iepreapproved:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{fa5e54a3-e342-4c30-ba8d-a45f1899897e};iepreapproved:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5aae721e-d529-47f8-97a5-3d7dfaf623f8};iepreapproved:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PR</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.2058.0, AS: 1.193.2058.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-09T12:00:49.000000000Z" />
  <EventRecordID>561217</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{0F1AFB5C-B54B-4203-A6D6-CAD783F40E81}</Data>
  <Data>2015-03-09T12:00:25.188Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\rundll32.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\BuyNsAVe\E7qGnwuUpd0J7N.x64.dll;file:_C:\Program Files (x86)\YoutuubeAdBlocke\cgTai8sTeTnHzO.x64.dll;file:_C:\ProgramData\500CoupoNs\Q13BVDBoaQka3I.x64.dll;file:_C:\ProgramData\JoniCaoupon\CA7znB0QQzGE4g.x64.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.2058.0, AS: 1.193.2058.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-09T12:00:46.000000000Z" />
  <EventRecordID>561215</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{79531E51-DA40-40E5-8FE5-9711A42C490E}</Data>
  <Data>2015-03-09T12:00:19.275Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\rundll32.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>clsid:_HKLM\SOFTWARE\CLASSES\CLSID\{1e329a98-e487-405f-89aa-323096bc7e1f};file:_C:\Program Files (x86)\YoutuubeAdBlocke\cgTai8sTeTnHzO.x64.dll;iepreapproved:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{1e329a98-e487-405f-89aa-323096bc7e1f};iepreapproved:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{1e329a98-e487-405f-89aa-323096bc7e1f};regkey:_HKLM\SOFTWARE\CLASSES\CLSID\{1e329a98-e487-405f-89aa-323096bc7e1f};regkey:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{1e329a98-e487-405f-89aa-323096bc7e1f};regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{1e329a98-e487-405f-89aa-323096bc7e1f}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.2058.0, AS: 1.193.2058.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>
- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-09T12:00:33.000000000Z" />
  <EventRecordID>561214</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{0F1AFB5C-B54B-4203-A6D6-CAD783F40E81}</Data>
  <Data>2015-03-09T12:00:25.188Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\rundll32.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\BuyNsAVe\E7qGnwuUpd0J7N.x64.dll;file:_C:\Program Files (x86)\YoutuubeAdBlocke\cgTai8sTeTnHzO.x64.dll;file:_C:\ProgramData\500CoupoNs\Q13BVDBoaQka3I.x64.dll;file:_C:\ProgramData\JoniCaoupon\CA7znB0QQzGE4g.x64.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.2058.0, AS: 1.193.2058.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-09T12:00:31.000000000Z" />
  <EventRecordID>561213</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{0F1AFB5C-B54B-4203-A6D6-CAD783F40E81}</Data>
  <Data>2015-03-09T12:00:25.188Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\rundll32.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\BuyNsAVe\E7qGnwuUpd0J7N.x64.dll;file:_C:\ProgramData\500CoupoNs\Q13BVDBoaQka3I.x64.dll;file:_C:\ProgramData\JoniCaoupon\CA7znB0QQzGE4g.x64.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.2058.0, AS: 1.193.2058.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-09T12:00:28.000000000Z" />
  <EventRecordID>561212</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{0F1AFB5C-B54B-4203-A6D6-CAD783F40E81}</Data>
  <Data>2015-03-09T12:00:25.188Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\rundll32.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\BuyNsAVe\E7qGnwuUpd0J7N.x64.dll;file:_C:\ProgramData\500CoupoNs\Q13BVDBoaQka3I.x64.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.2058.0, AS: 1.193.2058.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>
- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-09T12:00:21.000000000Z" />
  <EventRecordID>561211</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{79531E51-DA40-40E5-8FE5-9711A42C490E}</Data>
  <Data>2015-03-09T12:00:19.275Z</Data>
  <Data />
  <Data />
  <Data>207024</Data>
  <Data>BrowserModifier:Win32/CouponRuc</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>13</Data>
  <Data>Browserveränderer</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/CouponRuc&threatid=207024</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\rundll32.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\YoutuubeAdBlocke\cgTai8sTeTnHzO.x64.dll</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.2058.0, AS: 1.193.2058.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>
- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-06T10:21:54.000000000Z" />
  <EventRecordID>560161</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{836581F7-63A4-493B-BE77-31DD98133AAE}</Data>
  <Data>2015-03-06T10:20:59.219Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\DiscouuntExxtensi\0AcVSzkyjRbtNb.exe;regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{B138259A-351E-33FA-2726-8D71704F1DA9};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{B138259A-351E-33FA-2726-8D71704F1DA9}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.1783.0, AS: 1.193.1783.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-03-06T10:21:54.000000000Z" />
  <EventRecordID>560161</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{836581F7-63A4-493B-BE77-31DD98133AAE}</Data>
  <Data>2015-03-06T10:20:59.219Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\DiscouuntExxtensi\0AcVSzkyjRbtNb.exe;regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{B138259A-351E-33FA-2726-8D71704F1DA9};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{B138259A-351E-33FA-2726-8D71704F1DA9}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.1783.0, AS: 1.193.1783.0, NIS: 113.70.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1002</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-02-26T19:47:11.000000000Z" />
  <EventRecordID>557510</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{85681F63-A446-4737-A49A-61EDDBD9A92C}</Data>
  <Data>2</Data>
  <Data>%%802</Data>
  <Data>2</Data>
  <Data>%%805</Data>
  <Data>PC-PC</Data>
  <Data>PC</Data>
  <Data>S-1-5-21-1693460017-1945991507-4174054062-1001</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-02-21T13:12:03.000000000Z" />
  <EventRecordID>556323</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{2770274B-ABF3-42AC-AE19-620DF47577DB}</Data>
  <Data>2015-02-21T13:11:43.881Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\Twitch Stream\Twitch Stream.exe;regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{98449C67-C7AF-BB53-112D-26C916814611};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{98449C67-C7AF-BB53-112D-26C916814611}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.444.0, AS: 1.193.444.0, NIS: 113.69.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>
- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-02-21T13:11:43.000000000Z" />
  <EventRecordID>556322</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{2770274B-ABF3-42AC-AE19-620DF47577DB}</Data>
  <Data>2015-02-21T13:11:43.881Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\Twitch Stream\Twitch Stream.exe</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.444.0, AS: 1.193.444.0, NIS: 113.69.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>
- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-02-21T13:11:13.000000000Z" />
  <EventRecordID>556320</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{75027212-753D-4158-A7A4-E368818F0C48}</Data>
  <Data>2015-02-21T13:10:39.723Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\Fun22Save\8SoQThLFLH3ZtM.exe;regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{9D9BEFAE-9499-F52B-6CC4-94818CCC2AB5};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{9D9BEFAE-9499-F52B-6CC4-94818CCC2AB5}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.444.0, AS: 1.193.444.0, NIS: 113.69.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-02-21T13:11:13.000000000Z" />
  <EventRecordID>556320</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{75027212-753D-4158-A7A4-E368818F0C48}</Data>
  <Data>2015-02-21T13:10:39.723Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\Fun22Save\8SoQThLFLH3ZtM.exe;regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{9D9BEFAE-9499-F52B-6CC4-94818CCC2AB5};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{9D9BEFAE-9499-F52B-6CC4-94818CCC2AB5}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.444.0, AS: 1.193.444.0, NIS: 113.69.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-02-21T13:11:13.000000000Z" />
  <EventRecordID>556320</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{75027212-753D-4158-A7A4-E368818F0C48}</Data>
  <Data>2015-02-21T13:10:39.723Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\Fun22Save\8SoQThLFLH3ZtM.exe;regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{9D9BEFAE-9499-F52B-6CC4-94818CCC2AB5};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{9D9BEFAE-9499-F52B-6CC4-94818CCC2AB5}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.444.0, AS: 1.193.444.0, NIS: 113.69.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-02-21T13:10:58.000000000Z" />
  <EventRecordID>556319</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{75027212-753D-4158-A7A4-E368818F0C48}</Data>
  <Data>2015-02-21T13:10:39.723Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\Fun22Save\8SoQThLFLH3ZtM.exe</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.444.0, AS: 1.193.444.0, NIS: 113.69.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-02-21T13:10:57.000000000Z" />
  <EventRecordID>556317</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{E27B322A-59F2-48B7-BDFE-FBADD76029DD}</Data>
  <Data>2015-02-21T13:10:19.917Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\550CouPonS\550CouPonS.exe;regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{CF987D06-1DCF-7B36-5B43-13BC8699C44C};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{CF987D06-1DCF-7B36-5B43-13BC8699C44C}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.444.0, AS: 1.193.444.0, NIS: 113.69.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-02-21T13:10:20.000000000Z" />
  <EventRecordID>556315</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.7.0205.0</Data>
  <Data>{E27B322A-59F2-48B7-BDFE-FBADD76029DD}</Data>
  <Data>2015-02-21T13:10:19.917Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\550CouPonS\550CouPonS.exe</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.193.444.0, AS: 1.193.444.0, NIS: 113.69.0.0</Data>
  <Data>AM: 1.1.11400.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-01-31T02:48:26.000000000Z" />
  <EventRecordID>549954</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.6.0305.0</Data>
  <Data>{D69BDD68-6CEA-4EB1-9E4C-D9DDB4B7C7DB}</Data>
  <Data>2015-01-31T02:48:06.978Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\Happyo2SAve\Happyo2SAve.exe;regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{E957849A-94AC-6F46-4623-C31474E3C170};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{E957849A-94AC-6F46-4623-C31474E3C170}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.191.3693.0, AS: 1.191.3693.0, NIS: 113.61.0.0</Data>
  <Data>AM: 1.1.11302.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-01-31T02:48:15.000000000Z" />
  <EventRecordID>549953</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.6.0305.0</Data>
  <Data>{D69BDD68-6CEA-4EB1-9E4C-D9DDB4B7C7DB}</Data>
  <Data>2015-01-31T02:48:06.978Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\Happyo2SAve\Happyo2SAve.exe</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.191.3693.0, AS: 1.191.3693.0, NIS: 113.61.0.0</Data>
  <Data>AM: 1.1.11302.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-01-31T02:48:14.000000000Z" />
  <EventRecordID>549951</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.6.0305.0</Data>
  <Data>{70CA16EE-9AFC-4803-8C0E-1136CCBA41E7}</Data>
  <Data>2015-01-31T02:47:56.880Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\WasteNoTime\WasteNoTime.exe;regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{BE360B8B-0F10-CA89-FC84-A5EAB71A6AF8};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{BE360B8B-0F10-CA89-FC84-A5EAB71A6AF8}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.191.3693.0, AS: 1.191.3693.0, NIS: 113.61.0.0</Data>
  <Data>AM: 1.1.11302.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-01-31T02:47:56.000000000Z" />
  <EventRecordID>549947</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.6.0305.0</Data>
  <Data>{70CA16EE-9AFC-4803-8C0E-1136CCBA41E7}</Data>
  <Data>2015-01-31T02:47:56.880Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\WasteNoTime\WasteNoTime.exe</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.191.3693.0, AS: 1.191.3693.0, NIS: 113.61.0.0</Data>
  <Data>AM: 1.1.11302.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-01-31T02:47:38.000000000Z" />
  <EventRecordID>549945</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.6.0305.0</Data>
  <Data>{2E56208E-0A6E-42E5-8966-5BC08537A187}</Data>
  <Data>2015-01-31T02:47:02.413Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\Iseaavver\IEWb20WjcVLBYi.exe;regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{F1422DAA-0829-09A1-7536-73936CAB8FFA};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{F1422DAA-0829-09A1-7536-73936CAB8FFA}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.191.3693.0, AS: 1.191.3693.0, NIS: 113.61.0.0</Data>
  <Data>AM: 1.1.11302.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-01-31T02:47:38.000000000Z" />
  <EventRecordID>549945</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.6.0305.0</Data>
  <Data>{2E56208E-0A6E-42E5-8966-5BC08537A187}</Data>
  <Data>2015-01-31T02:47:02.413Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\SysWOW64\rundll32.exe</Data>
  <Data>PC-PC\PC</Data>
  <Data />
  <Data>file:_C:\Program Files (x86)\Iseaavver\IEWb20WjcVLBYi.exe;regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{F1422DAA-0829-09A1-7536-73936CAB8FFA};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{F1422DAA-0829-09A1-7536-73936CAB8FFA}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.191.3693.0, AS: 1.191.3693.0, NIS: 113.61.0.0</Data>
  <Data>AM: 1.1.11302.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-01-29T14:32:00.000000000Z" />
  <EventRecordID>549477</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.6.0305.0</Data>
  <Data>{C100E678-3FBB-47FF-9DE9-BC09D57A1C1F}</Data>
  <Data>2015-01-29T14:31:41.479Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\rundll32.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\ProgramData\500CoupoNs\Q13BVDBoaQka3I.exe;file:_C:\ProgramData\JoniCaoupon\CA7znB0QQzGE4g.exe;regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{51417852-174C-88D4-34A0-D0FE7858BE47};regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{CF987D06-1DCF-7B36-5B43-13BC8699C44C};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{51417852-174C-88D4-34A0-D0FE7858BE47};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{CF987D06-1DCF-7B36-5B43-13BC8699C44C}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.191.3530.0, AS: 1.191.3530.0, NIS: 113.61.0.0</Data>
  <Data>AM: 1.1.11302.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-01-29T14:31:43.000000000Z" />
  <EventRecordID>549476</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.6.0305.0</Data>
  <Data>{C100E678-3FBB-47FF-9DE9-BC09D57A1C1F}</Data>
  <Data>2015-01-29T14:31:41.479Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\rundll32.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\ProgramData\500CoupoNs\Q13BVDBoaQka3I.exe;file:_C:\ProgramData\JoniCaoupon\CA7znB0QQzGE4g.exe</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.191.3530.0, AS: 1.191.3530.0, NIS: 113.61.0.0</Data>
  <Data>AM: 1.1.11302.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-01-29T14:31:43.000000000Z" />
  <EventRecordID>549476</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.6.0305.0</Data>
  <Data>{C100E678-3FBB-47FF-9DE9-BC09D57A1C1F}</Data>
  <Data>2015-01-29T14:31:41.479Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\rundll32.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\ProgramData\500CoupoNs\Q13BVDBoaQka3I.exe;file:_C:\ProgramData\JoniCaoupon\CA7znB0QQzGE4g.exe</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.191.3530.0, AS: 1.191.3530.0, NIS: 113.61.0.0</Data>
  <Data>AM: 1.1.11302.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-01-29T14:31:04.000000000Z" />
  <EventRecordID>549473</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.6.0305.0</Data>
  <Data>{073E54D2-1387-46BB-B594-A8380506229A}</Data>
  <Data>2015-01-29T14:30:48.621Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\rundll32.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\ProgramData\DigiCuoupona\WsmACikv5JgdhL.exe;regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{CE94DD89-7404-B4B9-E713-E55CC0AB6C3B};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{CE94DD89-7404-B4B9-E713-E55CC0AB6C3B}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.191.3530.0, AS: 1.191.3530.0, NIS: 113.61.0.0</Data>
  <Data>AM: 1.1.11302.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-01-29T14:30:48.000000000Z" />
  <EventRecordID>549472</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.6.0305.0</Data>
  <Data>{073E54D2-1387-46BB-B594-A8380506229A}</Data>
  <Data>2015-01-29T14:30:48.621Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\rundll32.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\ProgramData\DigiCuoupona\WsmACikv5JgdhL.exe</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.191.3530.0, AS: 1.191.3530.0, NIS: 113.61.0.0</Data>
  <Data>AM: 1.1.11302.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-01-29T14:29:42.000000000Z" />
  <EventRecordID>549470</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.6.0305.0</Data>
  <Data>{BCE6E52B-5FBA-4380-BEE1-42E1857FF3EC}</Data>
  <Data>2015-01-29T14:29:09.468Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\rundll32.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\ProgramData\ISSaveir\7NOZGBvZ08DF3m.exe;regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{F1422DAA-0829-09A1-7536-73936CAB8FFA};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{F1422DAA-0829-09A1-7536-73936CAB8FFA}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.191.3530.0, AS: 1.191.3530.0, NIS: 113.61.0.0</Data>
  <Data>AM: 1.1.11302.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">1116</EventID>
  <Level>3</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-01-29T14:29:42.000000000Z" />
  <EventRecordID>549470</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.6.0305.0</Data>
  <Data>{BCE6E52B-5FBA-4380-BEE1-42E1857FF3EC}</Data>
  <Data>2015-01-29T14:29:09.468Z</Data>
  <Data />
  <Data />
  <Data>207768</Data>
  <Data>Adware:Win32/SaverExtension</Data>
  <Data>4</Data>
  <Data>Hoch</Data>
  <Data>1</Data>
  <Data>Adware</Data>
  <Data>hxxp://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/SaverExtension&threatid=207768</Data>
  <Data>1</Data>
  <Data />
  <Data>1</Data>
  <Data>3</Data>
  <Data>%%818</Data>
  <Data>C:\Windows\System32\rundll32.exe</Data>
  <Data>NT-AUTORITÄT\SYSTEM</Data>
  <Data />
  <Data>file:_C:\ProgramData\ISSaveir\7NOZGBvZ08DF3m.exe;regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{F1422DAA-0829-09A1-7536-73936CAB8FFA};uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{F1422DAA-0829-09A1-7536-73936CAB8FFA}</Data>
  <Data>1</Data>
  <Data>%%845</Data>
  <Data>1</Data>
  <Data>%%813</Data>
  <Data>0</Data>
  <Data>%%822</Data>
  <Data>0</Data>
  <Data>9</Data>
  <Data>%%887</Data>
  <Data />
  <Data>0x00000000</Data>
  <Data>Der Vorgang wurde erfolgreich beendet.</Data>
  <Data />
  <Data>0</Data>
  <Data>0</Data>
  <Data>No additional actions required</Data>
  <Data />
  <Data />
  <Data>AV: 1.191.3530.0, AS: 1.191.3530.0, NIS: 113.61.0.0</Data>
  <Data>AM: 1.1.11302.0, NIS: 2.1.11005.0</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">2001</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-01-29T02:47:39.000000000Z" />
  <EventRecordID>549277</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.6.0305.0</Data>
  <Data />
  <Data>1.191.3390.0</Data>
  <Data>7</Data>
  <Data>%%859</Data>
  <Data />
  <Data>NT-AUTORITÄT</Data>
  <Data>SYSTEM</Data>
  <Data>S-1-5-18</Data>
  <Data>1</Data>
  <Data>%%800</Data>
  <Data>1</Data>
  <Data>%%803</Data>
  <Data />
  <Data>1.1.11302.0</Data>
  <Data>0x8024001e</Data>
  <Data>Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support".</Data>
  <Data>3</Data>
  <Data>%%854</Data>
  <Data>hxxp://www.microsoft.com</Data>
  </EventData>
  </Event>

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">2001</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-01-22T11:53:21.000000000Z" />
  <EventRecordID>547586</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.6.0305.0</Data>
  <Data />
  <Data>1.191.2930.0</Data>
  <Data>7</Data>
  <Data>%%859</Data>
  <Data />
  <Data>NT-AUTORITÄT</Data>
  <Data>SYSTEM</Data>
  <Data>S-1-5-18</Data>
  <Data>1</Data>
  <Data>%%800</Data>
  <Data>1</Data>
  <Data>%%803</Data>
  <Data />
  <Data>1.1.11302.0</Data>
  <Data>0x80070643</Data>
  <Data>Schwerwiegender Fehler bei der Installation.</Data>
  <Data>3</Data>
  <Data>%%854</Data>
  <Data>hxxp://www.microsoft.com</Data>
  </EventData>
  </Event

- <Event xmlns="hxxp://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft Antimalware" />
  <EventID Qualifiers="0">2001</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-01-22T11:18:02.000000000Z" />
  <EventRecordID>547410</EventRecordID>
  <Channel>System</Channel>
  <Computer>PC-PC</Computer>
  <Security />
  </System>
- <EventData>
  <Data>%%860</Data>
  <Data>4.6.0305.0</Data>
  <Data />
  <Data>1.191.2910.0</Data>
  <Data>7</Data>
  <Data>%%859</Data>
  <Data />
  <Data>NT-AUTORITÄT</Data>
  <Data>SYSTEM</Data>
  <Data>S-1-5-18</Data>
  <Data>1</Data>
  <Data>%%800</Data>
  <Data>1</Data>
  <Data>%%803</Data>
  <Data />
  <Data>1.1.11302.0</Data>
  <Data>0x8024402c</Data>
  <Data>Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support".</Data>
  <Data>1</Data>
  <Data>%%852</Data>
  <Data>hxxp://www.microsoft.com</Data>
  </EventData>
  </Event>

Das wärs, ich hoffe ihr könnt mir irgendwie helfen und wie gesagt, falls was fehlt einfach fragen ;)

schrauber 13.06.2015 16:29

hi,

bitte nur ein Thema aufmachen.


Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Why me 13.06.2015 16:52

FRST.txt

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-06-2015
Ran by PC (administrator) on PC-PC on 13-06-2015 17:43:16
Running from C:\Users\PC\Downloads
Loaded Profiles: PC (Available Profiles: PC)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\ProgramData\GreatSoft\WS.Booster\WS.Booster.exe
() C:\Program Files (x86)\Companion for Gamers\companion_for_gamers_helper_service.exe
(FileProperties_CompanyName) C:\Program Files (x86)\sup games\sup_games_notification_service.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Hi-Rez Studios) C:\Games\Neuer Ordner (2)\HiPatchService.exe
() C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancerService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Iminent) C:\Program Files (x86)\Common Files\Umbrella\Umbrella.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Search Snacks) C:\Program Files (x86)\SearchSnacks_1.10.0.1\Service\sssvc.exe
() C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancer.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Smartbar) C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.exe
(Spotify Ltd) C:\Users\PC\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDCountdown.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPictureViewer.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMovieViewer.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Windows Net) C:\Users\PC\AppData\Roaming\Windows Net Data\net.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Google Inc.) C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe
(Qwerty) C:\Program Files (x86)\TornPlusTV_version1.11\4bb8e883-b028-4f67-abf0-376e5be09182-6.exe
(Google Inc.) C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-14] (Logitech Inc.)
HKLM-x32\...\Run: [P17RunE] => RunDll32 P17RunE.dll,RunDLLEntry
HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1684360 2015-04-28] (APN)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-10-08] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Run: [Google Update] => C:\Users\PC\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-09-06] (Google Inc.)
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Run: [Browser Infrastructure Helper] => C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.exe [13824 2012-08-07] (Smartbar)
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Run: [TU] => C:\Users\PC\AppData\Roaming\SDIV 2.0\Prot\tu\tu.exe [133536 2012-10-28] ()
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Run: [Spotify Web Helper] => C:\Users\PC\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2021944 2015-05-28] (Spotify Ltd)
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Run: [OMESupervisor] => C:\Users\PC\AppData\Local\omesuperv.exe [939496 2015-04-02] ()
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Run: [EPSON SX125 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGGE.EXE [224768 2009-09-14] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8204056 2015-04-23] (Piriform Ltd)
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31280256 2015-04-17] (Skype Technologies S.A.)
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Run: [Sixth] => C:\Users\PC\AppData\Roaming\Sixth\Sixth.exe [74470 2014-11-24] ()
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Run: [Seventh] => C:\Users\PC\AppData\Roaming\Seventh\Seventh.exe [98491 2015-02-22] ()
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Run: [Intermediate] => C:\Users\PC\AppData\Roaming\Intermediate\Intermediate.exe [37376 2013-12-09] ()
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Run: [SCheck] => C:\Users\PC\AppData\Roaming\SCheck\SCheck.exe [37376 2013-12-09] ()
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Run: [Snoozer] => C:\Users\PC\AppData\Roaming\Snz\Snz.exe [1821972 2015-05-29] ()
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Run: [DataMgr] => C:\Users\PC\AppData\Roaming\DataMgr\DataMgr.exe [168264 2012-10-16] (HTTO Group, Ltd.)
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\MountPoints2: {d70da4bd-f7f1-11e1-8abd-002185f916c1} - F:\setup.exe
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\MountPoints2: {ffae5e0f-54b4-11e2-aeb7-002185f916c1} - F:\setup.exe
Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip [2013-04-23] ()
Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\net.lnk [2013-11-15]
ShortcutTarget: net.lnk -> C:\Users\PC\AppData\Roaming\Windows Net Data\net.exe (Windows Net)
Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk [2014-01-13]
ShortcutTarget: Xfire.lnk -> C:\Program Files (x86)\Xfire\Xfire.exe (Xfire Inc.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled
ProxyServer: [.DEFAULT] => http=127.0.0.1:49727;https=127.0.0.1:49727
ProxyEnable: [S-1-5-21-1693460017-1945991507-4174054062-1001] => Internet Explorer proxy is enabled
ProxyServer: [S-1-5-21-1693460017-1945991507-4174054062-1001] => http=127.0.0.1:49727;https=127.0.0.1:49727
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=MSE&Tid=000328B0&OHP=http%3A%2F%2Fsearch.fbdownloader.com%2F%3Fchannel%3Dfpo%26t%3D41F2714362583E7D&OSP=http%3A%2F%2Fsearch.fbdownloader.com%2Fsearch.php%3Fchannel%3Dfpo%26q%3D%7BsearchTerms%7D%26t%3D41F2714362583E7D
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
URLSearchHook: HKU\S-1-5-21-1693460017-1945991507-4174054062-1001 - (No Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File
SearchScopes: HKLM-x32 -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 -> {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.searchoholic.info/?l=1&q={searchTerms}&pid=21073&r=2014/12/22&hid=5952623993991962179&lg=EN&cc=DE&unqvl=72
SearchScopes: HKLM-x32 -> {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://search.iminent.com/?appId=713BE664-A319-4DDF-9BA8-723FD0DDFD09&ref=toolbox&q={searchTerms}
SearchScopes: HKLM-x32 -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&crg=3.09010003&st=12&q={searchTerms}&barid={FF4FD482-C153-4A34-B19A-6B25C7B6153E}
SearchScopes: HKU\S-1-5-21-1693460017-1945991507-4174054062-1001 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-1693460017-1945991507-4174054062-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1693460017-1945991507-4174054062-1001 -> {06F77479-2CD0-4FDB-896C-C27609545EB2} URL = hxxp://www.bing.com/search?FORM=WLETDF&PC=WLEM&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-1693460017-1945991507-4174054062-1001 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=44444&tt=040912_ctrl_3712_1&babsrc=SP_ss&mntrId=6c1d3239000000000000002185f916c1
SearchScopes: HKU\S-1-5-21-1693460017-1945991507-4174054062-1001 -> {4327FABE-3C22-4689-8DBF-D226CF777FE9} URL = hxxp://www.searchplusnetwork.com/?sp=vit4&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1693460017-1945991507-4174054062-1001 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-1693460017-1945991507-4174054062-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-1693460017-1945991507-4174054062-1001 -> {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.searchoholic.info/?l=1&q={searchTerms}&pid=21073&r=2014/12/22&hid=5952623993991962179&lg=EN&cc=DE&unqvl=72
SearchScopes: HKU\S-1-5-21-1693460017-1945991507-4174054062-1001 -> {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://search.iminent.com/?appId=713BE664-A319-4DDF-9BA8-723FD0DDFD09&ref=toolbox&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1693460017-1945991507-4174054062-1001 -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&crg=3.09010003&st=12&q={searchTerms}&barid={FF4FD482-C153-4A34-B19A-6B25C7B6153E}
BHO: SaveeLots -> {a359c88f-2347-49a4-93b4-fee2d59c6c89} -> C:\Program Files (x86)\SaveeLots\2pMVIkmppfWFlP.x64.dll [2015-04-28] ()
BHO-x32: FavGenius -> {3FB16A3D-F03E-4565-A532-666B219C9FF3} -> C:\Users\PC\AppData\Local\ext_favgenius\ext_favgenius.dll [2015-03-30] ()
BHO-x32: Simple New Tab -> {5C2DD58F-613F-4580-8AC0-F10D760AF938} -> C:\Users\PC\AppData\Local\simple_new_tab\simple_new_tab.dll [2014-09-06] ()
Toolbar: HKU\S-1-5-21-1693460017-1945991507-4174054062-1001 -> No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll [2014-02-02] (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default
FF DefaultSearchEngine: Search
FF DefaultSearchUrl: hxxp://search.fbdownloader.com/search.php?channel=fpo&q=
FF SearchEngineOrder.1: WebSearch
FF SearchEngineOrder.1,S: WebSearch
FF SelectedSearchEngine: Search
FF Homepage: hxxp://search.fbdownloader.com/?channel=fpo&t=41F2714362583E7D
FF Keyword.URL: hxxp://search.fbdownloader.com/search.php?channel=fpo&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll [2015-05-15] ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\system32\npDeployJava1.dll [2013-05-29] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2012-06-28] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-05-15] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2013-02-20] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-27] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-27] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [2014-11-26] (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [2014-11-26] (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll [2014-02-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll [2014-02-15] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1693460017-1945991507-4174054062-1001: @tools.google.com/Google Update;version=3 -> C:\Users\PC\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF Plugin HKU\S-1-5-21-1693460017-1945991507-4174054062-1001: @tools.google.com/Google Update;version=9 -> C:\Users\PC\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF Plugin HKU\S-1-5-21-1693460017-1945991507-4174054062-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\PC\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-02-20] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-1693460017-1945991507-4174054062-1001: bebomedia.com/OfferMosquitoIEHelper -> C:\Users\PC\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll [2013-12-24] (Bebo Media Ltd)
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\searchplugins\fbdownloader_search.xml [2014-08-17]
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\searchplugins\search.xml [2015-05-30]
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\searchplugins\trovi-search.xml [2014-11-27]
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\searchplugins\WebSearch.xml [2014-12-22]
FF Extension: BitSaveR - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\04vWXTq1t@QB.net [2015-04-08]
FF Extension: 550CouPonS - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\0RNf1ggc@i.org [2015-02-21]
FF Extension: DeeeaalExprress - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\499k@4.edu [2015-06-09]
FF Extension: sup games - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\622Q6@gmail.com [2015-04-01]
FF Extension: TheTorntvs V10 1.1 - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com [2015-06-10]
FF Extension: antmarkantcom - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\antmark@ant.com [2015-04-18]
FF Extension: JoniCoUUpioin - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\d@s.co.uk [2015-01-05]
FF Extension: GreatuSave4U - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\dF@g3t.edu [2015-04-28]
FF Extension: Browser AdBlocker - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\izdg_oblculbxoisg@ssgsbhkbxfras.edu [2015-02-10]
FF Extension: IIsaver - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\KH@f.net [2015-05-21]
FF Extension: surfkeepit - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\m1@ViJj.com [2014-12-18]
FF Extension: YoutuubeAdBlocke - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\Mu@b.net [2014-12-22]
FF Extension: DigiCoupon - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\NmG@vw7IBWDt.net [2014-12-13]
FF Extension: Companion for Gamers - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\nupfpEg@gmail.com [2015-05-27]
FF Extension: BuyNsAVe - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\opp@m6FE.edu [2014-12-22]
FF Extension: organizesearchenginesmaltekrausde - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\organize-search-engines@maltekraus.de [2015-05-28]
FF Extension: AllCheapPrice - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\q@R4.edu [2014-12-13]
FF Extension: BesttSiavEForYou - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\w1Ciy@QvgE.edu [2015-03-20]
FF Extension: Happyo2SAve - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\ySE@ZZ2c.com [2015-01-31]
FF Extension: TheAdBlock - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\_idxmcmutexflypfr@ogunbfnggtbb_sw_jfc.net [2015-04-15]
FF Extension: E10A6337382E4FE696DE936ADC34DD04 - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\{E10A6337-382E-4FE6-96DE-936ADC34DD04} [2015-04-01]
FF Extension: AGSafeBrowsing - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\cm@agsafebrowsing.com.xpi [2015-03-25]
FF Extension: FavGenius - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\fg@favgenius.com.xpi [2015-03-30]
FF Extension: ProxTube - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\ich@maltegoetz.de.xpi [2014-11-03]
FF Extension: ProxMate - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi [2015-04-27]
FF Extension: Reddit Enhancement Suite - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\jid1-xUfzOsOFlzSOXg@jetpack.xpi [2015-04-01]
FF Extension: Simple New Tab - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\snt@simplenewtab.com.xpi [2014-12-24]
FF Extension: Adblock Plus - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-08]
FF Extension: Search Snacks - C:\Program Files (x86)\Mozilla Firefox\extensions\{c0eb055f-057e-4671-95f5-6bba7ba017fa} [2014-11-26]
FF HKLM-x32\...\Firefox\Extensions: [{c0eb055f-057e-4671-95f5-6bba7ba017fa}] - C:\Program Files (x86)\Mozilla Firefox\extensions\{c0eb055f-057e-4671-95f5-6bba7ba017fa}
FF HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Firefox\Extensions: [{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}] - C:\Program Files (x86)\PriceGong\2.6.7\FF
FF Extension: PriceGong - C:\Program Files (x86)\PriceGong\2.6.7\FF [2012-09-06]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\browser\defaults\preferences\!vitruvian-autoenable.js [2014-11-26] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\browser\defaults\preferences\!vitruvian-csp.js [2014-11-26]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\browser\defaults\preferences\my-prefs.js [2015-03-25] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\my.cfg [2015-03-25] <==== ATTENTION

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Chrome toolbar by SweetPacks) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl [2015-04-27]
CHR Extension: (Babylon Toolbar) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb [2015-04-27]
CHR Extension: (OfferMosquito) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk [2015-04-27]
CHR Extension: (SweetIM for Facebook) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn [2015-04-27]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-06-11]
CHR Extension: (Amazon-Icon) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkcedibhemacmilmkpndpkoidlnmgngg [2015-04-27]
CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2015-04-27]
CHR Extension: (Google Wallet) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-27]
CHR Extension: (SEO Global For Google Search) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojgmigafbpedhdilmemphfklkbghlphi [2015-06-07]
CHR HKLM\...\Chrome\Extension: [aaaajmgokiecajekipolejjhdgijlefj] - C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\CRX\ToolbarCR.crx [2015-06-06]
CHR HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [amfclgbdpgndipgoegfpkkgobahigbcl] - C:\Users\PC\AppData\Local\Smartbar/Application\0Extension.crx [2012-08-07]
CHR HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [gbmdkmlcnbapgegninelmjbfibaghdmk] - C:\Users\PC\AppData\Local\Google\Chrome Frame\User Data\IEXPLORE\Default\ext_offermosquito\ext_offermosquito.crx [2013-12-19]
CHR HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2012-12-23]
CHR HKLM-x32\...\Chrome\Extension: [aaaajmgokiecajekipolejjhdgijlefj] - C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\CRX\ToolbarCR.crx [2015-06-06]
CHR HKLM-x32\...\Chrome\Extension: [bkomkajifikmkfnjgphkjcfeepbnojok] - C:\Program Files (x86)\PriceGong\2.6.7\pricegong.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [bodddioamolcibagionmmobehnbhiakf] - C:\Program Files (x86)\BrowserCompanion\blabbers-ch.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Users\PC\AppData\Roaming\BabylonToolbar\CR\BabylonChrome1.crx [2012-08-08]
CHR HKLM-x32\...\Chrome\Extension: [igdhbblpcellaljokkpfhcjlagemhgjl] - "C:\Program Files (x86)\Iminent\Iminent.crx" [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx [2012-09-06]
CHR HKLM-x32\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\PC\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2013-11-15]
CHR HKLM-x32\...\Chrome\Extension: [niapdbllcanepiiimjjndipklodoedlc] - C:\Program Files (x86)\Yontoo\YontooLayers.crx [2012-09-06]
StartMenuInternet: Google Chrome.PMFMVYSTHPZDSLKMYC657ZFHFE - C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [178568 2015-04-23] (APN LLC.)
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2012-09-05] (Creative Labs) [File not signed]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [307200 2008-11-18] (Creative Technology Ltd) [File not signed]
R2 fc67e7a0; c:\Program Files (x86)\DeltaFix\DeltaFix.dll [4182016 2014-12-22] () [File not signed] <==== ATTENTION
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-11-26] (globalUpdate) [File not signed] <==== ATTENTION
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-11-26] (globalUpdate) [File not signed] <==== ATTENTION
R2 HiPatchService; C:\Games\Neuer Ordner (2)\HiPatchService.exe [9216 2013-10-25] (Hi-Rez Studios) [File not signed]
R2 Internet Enhancer Service; C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancerService.exe [312320 2014-12-19] () [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [398184 2012-12-14] (Malwarebytes Corporation) [File not signed]
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [682344 2012-12-14] (Malwarebytes Corporation) [File not signed]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 SProtection; C:\Program Files (x86)\Common Files\Umbrella\Umbrella.exe [2620016 2013-01-25] (Iminent)
R2 sssvc_1.10.0.1; C:\Program Files (x86)\SearchSnacks_1.10.0.1\Service\sssvc.exe [277600 2014-10-14] (Search Snacks)
S2 51cdb72; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\Optimizer Pro 3.11\OptProCrash.dll",ENT

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-01-02] (DT Soft Ltd)
R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [24176 2012-12-14] (Malwarebytes Corporation) [File not signed]
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
R1 ssnfd_1_10_0_1; C:\Windows\System32\drivers\ssnfd_1_10_0_1.sys [58248 2014-10-14] (Search Snacks)
S3 WinRing0_1_2_0; C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2010-11-01] (OpenLibSys.org)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-13 17:43 - 2015-06-13 17:44 - 00031066 _____ C:\Users\PC\Downloads\FRST.txt
2015-06-13 17:42 - 2015-06-13 17:44 - 00000000 ____D C:\FRST
2015-06-13 17:41 - 2015-06-13 17:41 - 02109952 _____ (Farbar) C:\Users\PC\Downloads\FRST64.exe
2015-06-13 17:08 - 2015-06-13 17:11 - 00186822 _____ C:\Users\PC\Desktop\Trojana.txt
2015-06-10 02:22 - 2015-06-10 02:22 - 00000000 ____D C:\ProgramData\ATI
2015-06-10 02:21 - 2015-06-10 02:21 - 00055617 _____ C:\Windows\SysWOW64\CCCInstall_201506100221264246.log
2015-06-10 02:21 - 2015-06-10 02:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-06-10 02:21 - 2015-06-10 02:21 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2015-06-10 01:50 - 2015-06-10 01:50 - 207468968 _____ (Advanced Micro Devices, Inc.) C:\Users\PC\Downloads\13-9_win7_win8_64_dd_ccc_whql.exe
2015-06-10 01:36 - 2015-06-10 01:37 - 156548224 _____ (Advanced Micro Devices, Inc.) C:\Users\PC\Downloads\13-9_win7_win8_32_dd_ccc_whql.exe
2015-06-10 01:31 - 2015-06-10 02:02 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-10 01:24 - 2015-06-10 01:24 - 05451464 _____ (Advanced Micro Devices, Inc.) C:\Users\PC\Downloads\autodetectutility.exe
2015-06-10 01:23 - 2015-06-10 01:23 - 00052852 _____ C:\Users\PC\Downloads\incomplete.htm
2015-06-10 01:23 - 2015-06-10 01:23 - 00052852 _____ C:\Users\PC\Downloads\incomplete (3).htm
2015-06-10 01:23 - 2015-06-10 01:23 - 00052852 _____ C:\Users\PC\Downloads\incomplete (2).htm
2015-06-10 01:23 - 2015-06-10 01:23 - 00052852 _____ C:\Users\PC\Downloads\incomplete (1).htm
2015-06-09 22:18 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-09 22:18 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-09 22:18 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-09 22:18 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-09 22:18 - 2015-05-25 19:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-09 22:18 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-06-09 22:18 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-09 22:18 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-06-09 22:18 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-06-09 22:18 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-09 22:18 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-06-09 22:18 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-09 22:18 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-06-09 22:18 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-06-09 22:18 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-06-09 22:18 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-09 22:18 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-06-09 22:18 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-09 22:18 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-06-09 22:18 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-09 22:18 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-06-09 22:18 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-09 22:18 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-09 22:18 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-09 22:18 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-09 22:18 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-09 22:18 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-06-09 22:18 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-09 22:18 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-09 22:18 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-09 22:18 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-09 22:18 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-09 22:18 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-09 22:18 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-09 22:18 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-09 22:18 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-09 22:18 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-09 22:18 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-09 22:18 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-09 22:18 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-09 22:18 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-09 22:18 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-09 22:18 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-09 22:18 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-09 22:18 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-09 22:18 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-09 22:18 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-09 22:18 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-09 22:18 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-09 22:18 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-09 22:18 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-09 22:18 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-09 22:18 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-09 22:18 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-09 22:18 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-09 22:18 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-09 22:18 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-09 22:18 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-09 22:18 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-09 22:18 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-09 22:18 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-09 22:17 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-06-09 22:17 - 2015-05-25 20:23 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-09 22:17 - 2015-05-25 20:23 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-06-09 22:17 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-06-09 22:17 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-09 22:17 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-06-09 22:17 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-09 22:17 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-09 22:17 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-06-09 22:17 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-06-09 22:17 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-09 22:17 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-06-09 22:17 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-06-09 22:17 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-06-09 22:17 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-06-09 22:17 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-06-09 22:17 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-09 22:17 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-06-09 22:17 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-09 22:17 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-06-09 22:17 - 2015-05-22 20:18 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-09 22:17 - 2015-05-22 20:18 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-09 22:17 - 2015-05-22 20:18 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-09 22:17 - 2015-05-22 20:18 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-09 22:17 - 2015-05-22 20:18 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-09 22:17 - 2015-05-22 20:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-09 22:17 - 2015-05-22 20:13 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-09 22:17 - 2015-05-21 15:19 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-09 22:17 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-09 22:17 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-09 22:17 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-09 22:17 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-09 22:17 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-09 22:17 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-09 22:17 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-09 22:17 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-09 22:17 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-09 22:17 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-09 22:16 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-09 22:16 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-09 22:16 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-09 22:16 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-06-09 22:16 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-09 22:16 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-09 22:16 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-09 22:16 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-09 22:16 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-09 22:16 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-09 22:16 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-06-07 06:22 - 2015-06-07 06:22 - 00000000 ____D C:\Program Files (x86)\SEO Global For Google Search
2015-06-07 06:21 - 2015-06-10 02:32 - 00000000 ____D C:\Program Files (x86)\DealEXXpress
2015-06-07 06:21 - 2015-06-10 02:32 - 00000000 ____D C:\Program Files (x86)\DealEExpress
2015-06-07 06:20 - 2015-06-07 06:20 - 00000000 ____D C:\Program Files (x86)\DeeeaalExprress
2015-05-29 16:59 - 2015-05-29 16:59 - 00000000 ____D C:\Users\PC\AppData\Roaming\Snz
2015-05-27 23:59 - 2015-06-13 15:13 - 00000556 _____ C:\Windows\Tasks\companion_for_gamers_helper_service.job
2015-05-27 23:59 - 2015-05-27 23:59 - 00003500 _____ C:\Windows\System32\Tasks\companion_for_gamers_helper_service
2015-05-27 23:59 - 2015-05-27 23:59 - 00000000 ____D C:\Program Files (x86)\Companion for Gamers
2015-05-23 00:33 - 2015-05-23 00:33 - 00000000 ____D C:\Users\PC\AppData\Local\Blizzard
2015-05-23 00:18 - 2015-05-23 00:18 - 00000860 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2015-05-23 00:18 - 2015-05-23 00:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2015-05-23 00:16 - 2015-06-03 04:18 - 00000000 ____D C:\Users\PC\AppData\Local\Battle.net
2015-05-23 00:16 - 2015-05-28 19:25 - 00000000 ____D C:\Users\PC\AppData\Roaming\Battle.net
2015-05-23 00:16 - 2015-05-23 00:16 - 00001122 _____ C:\Users\Public\Desktop\Battle.net.lnk
2015-05-23 00:16 - 2015-05-23 00:16 - 00000000 ____D C:\Users\PC\AppData\Local\Blizzard Entertainment
2015-05-23 00:15 - 2015-06-03 02:47 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-05-23 00:15 - 2015-05-23 00:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2015-05-23 00:11 - 2015-05-23 00:12 - 03057720 _____ (Blizzard Entertainment) C:\Users\PC\Downloads\Hearthstone-Setup-deDE.exe
2015-05-21 14:40 - 2015-06-13 15:13 - 00004191 _____ C:\Windows\setupact.log
2015-05-21 14:40 - 2015-05-21 14:40 - 00000000 _____ C:\Windows\setuperr.log
2015-05-21 14:39 - 2015-06-13 06:42 - 00016544 _____ C:\Windows\PFRO.log
2015-05-20 22:56 - 2015-05-20 22:56 - 00000000 ____D C:\Program Files (x86)\Web Timer
2015-05-20 22:55 - 2015-05-30 15:06 - 00000000 ____D C:\Program Files (x86)\DiGICOupon
2015-05-20 22:54 - 2015-05-27 21:41 - 00000000 ____D C:\Program Files (x86)\HaPpY2eSave
2015-05-20 22:54 - 2015-05-20 22:54 - 00000000 ____D C:\Program Files (x86)\IIsaver
2015-05-20 18:51 - 2015-05-20 18:51 - 00031666 _____ C:\Users\PC\Documents\cc_20150520_185130.reg
2015-05-16 02:04 - 2015-05-16 02:04 - 00000000 ____D C:\83c8af8c93343fc3a1d9f78b
2015-05-14 01:38 - 2015-05-01 15:17 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-14 01:38 - 2015-05-01 15:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-13 17:42 - 2012-09-06 08:57 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1693460017-1945991507-4174054062-1001UA.job
2015-06-13 17:13 - 2015-04-01 18:13 - 00001302 _____ C:\Windows\Tasks\sup_games_notification_service.job
2015-06-13 17:03 - 2013-12-25 16:46 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-13 17:01 - 2012-09-05 15:10 - 01962611 _____ C:\Windows\WindowsUpdate.log
2015-06-13 16:54 - 2014-11-26 18:48 - 00005514 _____ C:\Windows\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-6.job
2015-06-13 16:48 - 2012-09-06 08:49 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-13 16:04 - 2014-09-24 22:05 - 00000000 ____D C:\Users\PC\AppData\Roaming\vlc
2015-06-13 15:25 - 2009-07-14 06:45 - 00022432 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-13 15:25 - 2009-07-14 06:45 - 00022432 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-13 15:17 - 2012-09-06 08:57 - 00000000 ____D C:\Users\PC\AppData\Local\Deployment
2015-06-13 15:16 - 2012-09-27 18:44 - 00000000 ____D C:\Users\PC\AppData\Roaming\Skype
2015-06-13 15:15 - 2014-11-24 11:24 - 00000000 ____D C:\Users\PC\AppData\Roaming\Seventh
2015-06-13 15:14 - 2015-04-01 19:13 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-06-13 15:14 - 2015-04-01 18:13 - 00000664 _____ C:\Windows\Tasks\sup_games_updating_service.job
2015-06-13 15:14 - 2014-11-26 18:49 - 00004834 _____ C:\Windows\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-4.job
2015-06-13 15:14 - 2014-11-26 18:49 - 00002442 _____ C:\Windows\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-5_user.job
2015-06-13 15:14 - 2014-11-26 18:49 - 00002442 _____ C:\Windows\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-5.job
2015-06-13 15:14 - 2014-11-26 18:48 - 00003810 _____ C:\Windows\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-3.job
2015-06-13 15:14 - 2014-11-26 18:48 - 00000898 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-06-13 15:13 - 2014-02-22 04:03 - 00000442 ____H C:\Windows\Tasks\WS.Booster-S-5195167130.job
2015-06-13 15:13 - 2013-12-25 16:46 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-13 15:13 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-13 13:05 - 2012-11-23 21:34 - 00000000 ____D C:\Users\PC\AppData\Local\Spotify
2015-06-13 11:58 - 2014-11-26 18:48 - 00000902 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-06-13 11:55 - 2012-11-23 21:32 - 00000000 ____D C:\Users\PC\AppData\Roaming\Spotify
2015-06-13 11:09 - 2014-05-13 11:38 - 00000000 ____D C:\Users\PC\AppData\Roaming\TS3Client
2015-06-13 06:47 - 2015-05-12 21:12 - 00000024 _____ C:\Users\PC\AppData\Roaming\appdataFr25.bin
2015-06-12 23:43 - 2015-01-05 23:09 - 00000000 ____D C:\ProgramData\DigiCuoupona
2015-06-12 23:43 - 2015-01-05 23:08 - 00000000 ____D C:\ProgramData\ISSaveir
2015-06-12 18:42 - 2012-09-06 08:57 - 00001056 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1693460017-1945991507-4174054062-1001Core.job
2015-06-12 15:06 - 2014-08-14 15:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-12 15:06 - 2012-09-11 18:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-06-12 06:58 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-06-11 08:28 - 2014-04-28 08:33 - 00000695 _____ C:\Users\PC\Desktop\Start in the Day
2015-06-10 03:49 - 2012-09-06 08:49 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-06-10 03:49 - 2012-09-06 08:49 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-10 03:49 - 2012-09-06 08:49 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-06-10 03:12 - 2009-07-14 19:58 - 00699654 _____ C:\Windows\system32\perfh007.dat
2015-06-10 03:12 - 2009-07-14 19:58 - 00149794 _____ C:\Windows\system32\perfc007.dat
2015-06-10 03:12 - 2009-07-14 07:13 - 01621612 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-10 03:07 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-10 03:04 - 2009-07-14 06:45 - 00346080 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-10 03:01 - 2014-12-11 05:56 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-10 03:01 - 2014-07-13 16:31 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-10 03:01 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-10 02:50 - 2012-09-05 17:09 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-10 02:48 - 2014-07-13 14:14 - 00000000 ____D C:\Windows\system32\MRT
2015-06-10 02:32 - 2015-04-28 05:20 - 00000000 ____D C:\Program Files (x86)\AllLSaavEr
2015-06-10 02:32 - 2015-04-08 14:12 - 00000000 ____D C:\Program Files (x86)\BesttSAveeFOOrYoU
2015-06-10 02:32 - 2015-03-19 16:46 - 00000000 ____D C:\Program Files (x86)\MinimUmPrioce
2015-06-10 02:32 - 2015-03-19 16:45 - 00000000 ____D C:\Program Files (x86)\DealiEexpresS
2015-06-10 02:32 - 2015-03-06 12:20 - 00000000 ____D C:\Program Files (x86)\DiscouuntExxtensi
2015-06-10 02:30 - 2015-04-08 14:14 - 00000000 ____D C:\Program Files (x86)\EnjjoyCoupoin
2015-06-10 02:27 - 2012-09-05 15:30 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-10 02:21 - 2013-01-19 00:57 - 00000000 ____D C:\ProgramData\AMD
2015-06-10 02:20 - 2012-09-06 08:53 - 00000000 ____D C:\Program Files\ATI Technologies
2015-06-10 01:26 - 2013-01-19 00:49 - 00000000 ____D C:\AMD
2015-06-09 21:18 - 2014-04-28 10:48 - 00000253 _____ C:\Users\PC\Desktop\Ranked Advices
2015-06-07 06:22 - 2014-12-22 04:26 - 00000000 ____D C:\ProgramData\17848795055068589206
2015-05-29 18:01 - 2012-11-08 12:46 - 00000000 ____D C:\Users\PC\AppData\Roaming\DataMgr
2015-05-23 00:18 - 2012-09-06 12:10 - 00000000 ____D C:\Games
2015-05-21 01:24 - 2015-04-05 03:02 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-05-21 01:24 - 2015-04-05 03:02 - 00000000 ___SD C:\Windows\system32\GWX
2015-05-19 14:05 - 2014-10-27 14:48 - 00000000 ____D C:\Users\PC\AppData\Local\Adobe
2015-05-18 20:11 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-05-15 19:55 - 2014-09-14 12:43 - 00000000 ____D C:\Users\PC\AppData\Local\Audible
2015-05-15 18:37 - 2012-09-06 08:57 - 00004076 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1693460017-1945991507-4174054062-1001UA
2015-05-15 18:37 - 2012-09-06 08:57 - 00003680 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1693460017-1945991507-4174054062-1001Core
2015-05-15 00:02 - 2013-06-06 12:12 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-05-14 13:10 - 2009-07-14 20:18 - 00000000 ____D C:\Program Files\Windows Journal
2015-05-14 13:10 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2015-05-14 02:06 - 2012-09-06 09:08 - 00002117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-05-14 02:06 - 2012-09-06 09:08 - 00001912 _____ C:\Windows\epplauncher.mif
2015-05-14 02:06 - 2012-09-06 09:08 - 00000000 ____D C:\Program Files\Microsoft Security Client
2015-05-14 02:06 - 2012-09-06 09:08 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2015-05-14 01:38 - 2015-03-20 03:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-05-14 01:37 - 2015-03-20 03:48 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-05-14 01:37 - 2015-03-20 03:48 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

==================== Files in the root of some directories =======

2015-02-09 22:52 - 2015-04-15 09:32 - 0000079 _____ () C:\Program Files (x86)\prefs.js
2015-05-12 21:12 - 2015-06-13 06:47 - 0000024 _____ () C:\Users\PC\AppData\Roaming\appdataFr25.bin
2015-02-04 03:01 - 2015-05-12 19:00 - 0000020 _____ () C:\Users\PC\AppData\Roaming\appdataFr3.bin
2014-11-26 18:48 - 2014-11-26 18:48 - 2010072 _____ (Qwerty) C:\Users\PC\AppData\Roaming\DPQMJ.exe
2014-11-26 18:49 - 2014-11-26 18:49 - 1366488 _____ (Qwerty) C:\Users\PC\AppData\Roaming\QAWBXRD.exe
2014-06-19 12:28 - 2014-06-19 12:28 - 0000024 _____ () C:\Users\PC\AppData\Roaming\temp.ini
2014-12-22 05:16 - 2014-12-22 05:16 - 0000600 _____ () C:\Users\PC\AppData\Roaming\winscp.rnd
2015-04-02 20:01 - 2015-04-02 20:01 - 0939496 _____ () C:\Users\PC\AppData\Local\omesuperv.exe
2014-01-06 22:53 - 2014-07-16 17:59 - 0007598 _____ () C:\Users\PC\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
C:\Users\PC\AppData\Local\Temp\amd-catalyst-omega-14.12-without-dotnet45-win7-64bit.exe
C:\Users\PC\AppData\Local\Temp\AutoDetectUtilApp.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-06 21:54

==================== End of log ============================


Why me 13.06.2015 16:53

Addition.txt

[CODE]Additional
FRST Logfile:
Code:

scan result of Farbar Recovery Scan Tool (x64) Version:13-06-2015
Ran by PC at 2015-06-13 17:47:46
Running from C:\Users\PC\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1693460017-1945991507-4174054062-500 - Administrator - Disabled)
Gast (S-1-5-21-1693460017-1945991507-4174054062-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1693460017-1945991507-4174054062-1002 - Limited - Enabled)
PC (S-1-5-21-1693460017-1945991507-4174054062-1001 - Administrator - Enabled) => C:\Users\PC

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\uTorrent) (Version: 3.4.2.37754 - BitTorrent Inc.)
7-Zip 9.35 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0935-000001000000}) (Version: 9.35.00.0 - Igor Pavlov)
Adblock Plus für IE (32-Bit- und 64-Bit) (HKLM\...\{123A22CB-6D84-4135-A71F-886C9119E996}) (Version: 99.9 - Eyeo GmbH)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
AllLSaavEr (HKLM-x32\...\{F5853CDF-2C63-6D1D-B286-CBB1CD5DFD62}) (Version:  - "") <==== ATTENTION
AMD Catalyst Install Manager (HKLM\...\{5AE0838D-19B1-5D12-5FE8-E6503B2C8716}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{45C56AA7-ED1B-4800-A97F-EDDF3F3520B1}) (Version: 2.3.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2F72F540-1F60-4266-9506-952B21D6640D}) (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
applicationupdater (HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\SOE-C:/Users/PC/AppData/Local/Sony Online Entertainment/ApplicationUpdater) (Version:  - Sony Online Entertainment)
Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team)
AudibleManager (HKLM-x32\...\AudibleManager) (Version: 2005613822.48.56.7875074 - Audible, Inc.)
BabylonObjectInstaller (HKLM-x32\...\{E55E7026-EF2A-4A17-AAA7-DB98EA3FD1B1}) (Version: 2.0.0.4 - Babylon Ltd) <==== ATTENTION
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
BCool Gadget (HKLM-x32\...\{8B1881C3-A40C-4DF3-BFD2-CCD2FEDD7D83}) (Version: 1.0 - BCool Gadget)
BondedReader (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{fc67e7a0}) (Version:  - PCGear) <==== ATTENTION
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BuyNsAVe (HKLM-x32\...\{842C4394-47F7-60DE-480B-C09116B63559}) (Version:  - BuyNsave) <==== ATTENTION
CCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform)
Chrome toolbar by SweetPacks (x32 Version: 1.6.0.308 - SweetIM Inc.) Hidden
Creative Audio-Systemsteuerung (HKLM-x32\...\AudioCS) (Version: 2.56 - Creative Technology Limited)
Creative Software AutoUpdate (HKLM-x32\...\Creative Software AutoUpdate) (Version: 1.40 - Creative Technology Limited)
Creative Sound Blaster Properties x64 Edition (HKLM-x32\...\Creative Sound Blaster Properties x64 Edition) (Version:  - )
Curse Client (HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\101a9f93b8f0bb6f) (Version: 5.1.1.820 - Curse)
Cuttermaran 1.70 (HKLM-x32\...\{5F499D33-546A-442B-B0F9-4C58F3B5B6E3}) (Version: 1.7.0 - toarnold)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.46.1.0327 - DT Soft Ltd)
Desktop Live Streamer (HKLM-x32\...\{90B6DE78-F018-4479-AEAC-0FF6712356D1}) (Version: 0.9.4000 - Charnet3D)
diclovit's mod pack 9.5.1 (HKLM-x32\...\{28B1238E-1C18-4637-A2B7-95315E94EB29}_is1) (Version: 9.5.1 - diclovit)
DiGICOupon (HKLM-x32\...\{CE94DD89-7404-B4B9-E713-E55CC0AB6C3B}) (Version:  - "") <==== ATTENTION
DownTango (HKLM-x32\...\DownTango) (Version: 1.0.716 - Red Sky Sp. z o.o.) <==== ATTENTION
EPSON SX125 Series Printer Uninstall (HKLM\...\EPSON SX125 Series) (Version:  - SEIKO EPSON Corporation)
EZDownloader (HKLM-x32\...\{0F44DC3A-6E62-4961-A14B-95323C512F9B}_is1) (Version: 1.0 - EZDownloader) <==== ATTENTION
fbDownloader (HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\fbDownloader) (Version: 1.0.0.0 - HTTO Group, Ltd.)
Fifa 12 (c) Electronic Arts version 1 (HKLM-x32\...\Fifa 12 (c) Electronic Arts_is1) (Version: 1 - )
Free YouTube to MP3 Converter version 3.11.37.1212 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.11.37.1212 - DVDVideoSoft Ltd.)
FunDealS (HKLM-x32\...\{478472F9-9E09-492A-BDAB-42EE595EF1AD}) (Version:  - FunDeals) <==== ATTENTION
Game Booster 3 (HKLM-x32\...\Game Booster_is1) (Version: 3.4 - IObit)
gamelauncher-ps2-psg (HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\SOE-C:/Games/Planetside 2) (Version:  - Sony Online Entertainment)
Google Chrome (HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Google Chrome) (Version: 43.0.2357.124 - Google Inc.)
Google Chrome Frame (HKLM-x32\...\{8E9A3680-3E84-3CAB-99CD-66D1FD4C99A7}) (Version: 65.156.32831 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
GreatuSave4U (HKLM-x32\...\{45606A90-3363-3A3B-1C15-C40E77F4DAA0}) (Version:  - "") <==== ATTENTION
HaPpY2eSave (HKLM-x32\...\{E957849A-94AC-6F46-4623-C31474E3C170}) (Version:  - "") <==== ATTENTION
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
IIsaver (HKLM-x32\...\{F1422DAA-0829-09A1-7536-73936CAB8FFA}) (Version:  - "") <==== ATTENTION
Iminent (HKLM-x32\...\IMBoosterARP) (Version: 8.18.1.1 - Iminent)
Iminent (x32 Version: 5.45.21.0 - Iminent) Hidden
Iminent Toolbar on IE and Chrome (HKLM-x32\...\iminent) (Version: 1.8.28.3 - IminentToolbar)
Interenet Optimizer (HKLM-x32\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{c632643}) (Version:  - BullPoint) <==== ATTENTION
Internet Explorer Toolbar 4.6 by SweetPacks (x32 Version: 4.6.0004 - SweetIM Technologies Ltd.) Hidden
iTunes (HKLM\...\{0225AD21-F3E2-4916-BFF3-65D3F9052582}) (Version: 11.0.2.26 - Apple Inc.)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
Junk Mail filter update (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)
Livestreamer 1.11.1 (HKLM-x32\...\Livestreamer) (Version:  - )
Logitech Gaming Software 8.51 (HKLM\...\Logitech Gaming Software) (Version: 8.51.5 - Logitech Inc.)
Malwarebytes Anti-Malware Version 1.70.0.1100 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.70.0.1100 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) (Version:  - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Language Pack 2007 - German/Deutsch (HKLM-x32\...\OMUI.de-de) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
MixPad Audiodatei-Mixer (HKLM-x32\...\MixPad) (Version:  - NCH Software)
Moozy (HKLM-x32\...\{739126B3-1B80-4F9F-8D59-312A19633E1A}_is1) (Version:  - )
Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.0 - Mozilla)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.1.6 - )
Online Calculator (HKLM-x32\...\{AF992111-52BE-832B-5882-8477E4A3C99A}) (Version:  - "") <==== ATTENTION
Origin (HKLM-x32\...\Origin) (Version: 9.1.10.2728 - Electronic Arts, Inc.)
osu! (HKLM-x32\...\{1b48279c-f9f4-4bed-b653-0ae5d8cf5848}) (Version: latest - ppy Pty Ltd)
PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r5350) (Version:  - )
Pixillion Imagedatei-Konverter (HKLM-x32\...\Pixillion) (Version:  - NCH Software)
Prism Videodatei-Konverter (HKLM-x32\...\Prism) (Version:  - NCH Software)
Red AdBlocker (HKLM-x32\...\{37476589-E48E-439E-A706-56189E2ED4C4}_is1) (Version:  - Red AdBlocker) <==== ATTENTION
RegularDeaals (HKLM-x32\...\{76DEE3DC-2B8B-E212-2126-D31D9E73DFE4}) (Version:  - RegulaarDeeaals) <==== ATTENTION
SaveeLots (HKLM-x32\...\{35E13884-BAC3-5F4A-799B-05F882E0BD9F}) (Version:  - "") <==== ATTENTION
saver box (HKLM-x32\...\{CA8C94BE-9F47-1B2E-90F8-D8C07119BD96}) (Version:  - "") <==== ATTENTION
Search Snacks 1.10.0.1 (HKLM-x32\...\SearchSnacks_1.10.0.1) (Version: 1.10.0.1 - Search Snacks)
SEO Global For Google Search (HKLM-x32\...\{25F259ED-12F6-429F-5783-527C3E2F8586}) (Version:  - "") <==== ATTENTION
ShopDrop (HKLM-x32\...\{B6D700D3-3D0D-FEEB-D675-2CE78F9EC5D6}) (Version:  - "") <==== ATTENTION
Skype™ 7.4 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.4.102 - Skype Technologies S.A.)
Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 0.1.1831.1 - Hi-Rez Studios)
South Park - The Stick of Truth Version 1.0.1353 (HKLM-x32\...\{83736891-79AE-49BA-96F5-55DD6F2186AC}_is1) (Version: 1.0.1353 - Ubisoft)
Spotify (HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Spotify) (Version: 1.0.6.80.g2a801a53 - Spotify AB)
Stealthy (HKLM-x32\...\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}) (Version:  - ) <==== ATTENTION
SUPER © v2012.build.54 (Nov 18, 2012) Version v2012.build.54 (HKLM-x32\...\{8F311E92-C29F-4DF9-8259-B739A1831669}_is1) (Version: v2012.build.54 - eRightSoft)
SweetIM for Messenger 3.7 (x32 Version: 3.7.0005 - SweetIM Technologies Ltd.) Hidden
TeamSpeak 3 Client (HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TornPlusTV_version1.11 (HKLM-x32\...\TornPlusTV_version1.11) (Version: 1.35.9.29 - Qwerty) <==== ATTENTION
Unity Web Player (HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_OMUI.de-de_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_OMUI.de-de_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_OMUI.de-de_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_OMUI.de-de_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Update Manager for SweetPacks 1.1 (x32 Version: 1.1.0008 - SweetIM Technologies Ltd.) Hidden
Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft)
Video Converter (HKLM-x32\...\Video Converter) (Version: 1 - SweetPacks)
Video Converter Bundle by SweetPacks (HKLM-x32\...\Video Converter Bundle by SweetPacks) (Version: 1.0.0.0 - SweetPacks LTD)
VideoPad Videobearbeitungs-Software (HKLM-x32\...\VideoPad) (Version:  - NCH Software)
Virtual DJ Toolbar (HKLM-x32\...\{56444A2D-5637-006A-76A7-A758B70C1D00}) (Version: 12.29.0.1587 - APN, LLC)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version:  - Elaborate Bytes)
VirtualDJ Home FREE (HKLM-x32\...\{77C2D5D4-ADC5-49F9-B36E-5992FCF35EA3}) (Version: 7.4.1 - Atomix Productions)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
VLC media player 2.0.2 (HKLM\...\VLC media player) (Version: 2.0.2 - VideoLAN)
Wajam (HKLM-x32\...\WInterEnhance) (Version: 2.21.2.25 (i2.6) - WInterEnhance)
WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 5.49 - NCH Software)
Web Timer (HKLM-x32\...\{6933C2BA-C67D-42C7-8C77-1FF4B364AF54}) (Version:  - "") <==== ATTENTION
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)
Windows Utils (HKLM-x32\...\Windows Utils) (Version:  - )
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
World of Tanks (HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version:  - Wargaming.net)
WS.Booster (HKLM-x32\...\S-5195167130) (Version: 2.1.0.1832 - PremiumSoft) <==== ATTENTION
Xfire (remove only) (HKLM-x32\...\Xfire) (Version:  - )
Yontoo 1.10.02 (HKLM\...\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}) (Version: 1.10.02 - Yontoo LLC)
YoutuubeAdBlocke (HKLM-x32\...\{4820778D-AB0D-6D18-C316-52A6A0E1D507}) (Version:  - ) <==== ATTENTION

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1693460017-1945991507-4174054062-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\PC\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1693460017-1945991507-4174054062-1001_Classes\CLSID\{3e066137-1b6c-420a-b396-5332597cc40d}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1693460017-1945991507-4174054062-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\PC\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll (Google Inc.)

==================== Restore Points =========================

01-06-2015 20:59:21 Windows Update
06-06-2015 07:11:56 Windows Update
10-06-2015 00:26:30 Windows Update
10-06-2015 01:30:09 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727
10-06-2015 01:58:27 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727
10-06-2015 02:02:02 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727
10-06-2015 02:24:48 Windows Update

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {011F4D63-50EF-4F59-84EA-FC063323BF28} - System32\Tasks\{8A7B7440-B945-493E-872A-AA1DEB133704} => pcalua.exe -a "C:\Users\PC\Downloads\dotnetfx35setup (4).exe" -d C:\Users\PC\Downloads
Task: {08D6464A-8DB7-475B-B5AC-200B181412AF} - System32\Tasks\{4F79F2E9-62A5-47F5-97DA-115B537F0CBC} => pcalua.exe -a "C:\Users\PC\Downloads\dotnetfx35setup (2).exe" -d C:\Users\PC\Downloads
Task: {14A1AD4D-65B8-424A-9FA7-2E5C2F8E3AE9} - System32\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-11 => C:\Program Files (x86)\TornPlusTV_version1.11\4bb8e883-b028-4f67-abf0-376e5be09182-11.exe [2014-11-26] (Qwerty) <==== ATTENTION
Task: {19ED663F-6359-43D9-9792-00FA4FD4C558} - System32\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-5_user => C:\Program Files (x86)\TornPlusTV_version1.11\4bb8e883-b028-4f67-abf0-376e5be09182-5.exe [2014-11-26] (Qwerty) <==== ATTENTION
Task: {21C72A7A-EE9F-428D-9F6E-1DD973C58B7D} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {2BC1ADF4-1615-4F33-B55E-ED1C947A6C25} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-07] (Microsoft Corporation)
Task: {2F23DD76-E825-41C6-8CE0-EA34527C1E95} - System32\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-6 => C:\Program Files (x86)\TornPlusTV_version1.11\4bb8e883-b028-4f67-abf0-376e5be09182-6.exe [2014-11-26] (Qwerty) <==== ATTENTION
Task: {3996344B-2091-4C35-8AF1-CB1BFFCF8D61} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {4538D4A2-E5DF-4CD5-B120-2DC34C498EAF} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1693460017-1945991507-4174054062-1001UA => C:\Users\PC\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-06] (Google Inc.)
Task: {504E5219-8904-4FA0-B510-9EF69585FE2F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-04-23] (Piriform Ltd)
Task: {527B8F23-9BB0-48C0-8448-C79DE488E390} - System32\Tasks\{626D1DA7-561E-4867-AE19-DA1D11493B79} => pcalua.exe -a "C:\Users\PC\Downloads\dotnetfx35setup (1).exe" -d C:\Users\PC\Downloads
Task: {530790F8-3438-4768-B343-741BEE7B5643} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {57903CA9-67ED-452F-A644-462AA9562639} - System32\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-5 => C:\Program Files (x86)\TornPlusTV_version1.11\4bb8e883-b028-4f67-abf0-376e5be09182-5.exe [2014-11-26] (Qwerty) <==== ATTENTION
Task: {5B08A27F-91BC-4D22-9422-74F18F48248F} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-11-26] (globalUpdate) <==== ATTENTION
Task: {69474464-C7DD-4A8C-8371-BD666A3512A2} - System32\Tasks\{10FDB5B9-9C1E-47DF-B1F6-925E121DB086} => pcalua.exe -a "C:\Users\PC\Downloads\dotnetfx35setup (5).exe" -d C:\Users\PC\Downloads
Task: {892E3916-8200-4623-9ACF-E0240F15747F} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe [2013-06-09] ()
Task: {8D182316-9418-46FA-8183-5BD31CA01307} - System32\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-3 => C:\Program Files (x86)\TornPlusTV_version1.11\4bb8e883-b028-4f67-abf0-376e5be09182-3.exe [2014-11-26] (Qwerty) <==== ATTENTION
Task: {8E7B40A9-2565-4A2C-B7CB-7FB5AA6011AF} - System32\Tasks\{38DF1A40-2631-453A-9703-BE38283FB9C8} => pcalua.exe -a "C:\Users\PC\Downloads\dotnetfx35setup (3).exe" -d C:\Users\PC\Downloads
Task: {90541F31-57D3-479A-9CA5-3DEB7AA7E5DA} - System32\Tasks\elbyExecuteWithUAC => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ExecuteWithUAC.exe [2008-06-27] ()
Task: {9DB98868-0144-49D0-B43D-B5F304D6F36A} - System32\Tasks\{E2C4BAE4-38EB-4622-B5C6-8AB355CDAA71} => pcalua.exe -a G:\Installer.exe -d G:\
Task: {9E8A43E2-3A48-4D2C-AFCA-A070E0085971} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => C:\Windows\system32\compattel\DiagTrackRunner.exe [2015-03-16] (Microsoft Corporation)
Task: {A7713B3D-9F6A-495D-A0B3-DC8190B1A4B0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-10] (Adobe Systems Incorporated)
Task: {C04303B1-981C-4990-AADE-021FA2C2E484} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {C8C044A2-0889-4170-8390-26CE2F38FBD6} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {CAB9710F-E293-415E-A27D-6755040220E3} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-11-26] (globalUpdate) <==== ATTENTION
Task: {D065D837-CEF8-4416-9EAD-FCD5F22A43D6} - System32\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-7 => C:\Program Files (x86)\TornPlusTV_version1.11\4bb8e883-b028-4f67-abf0-376e5be09182-7.exe [2014-11-26] (Qwerty) <==== ATTENTION
Task: {D3020CC9-B8EE-4249-B8E7-FFC77DA7AF66} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-25] (Google Inc.)
Task: {D99D0522-0580-4E8A-81C0-B71A8C06F3BF} - System32\Tasks\sup_games_notification_service => C:\Program Files (x86)\sup games\sup_games_notification_service.exe [2015-04-01] (FileProperties_CompanyName) <==== ATTENTION
Task: {DD590841-6589-4934-A553-6E94FE1C4F9D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {DEE4204F-0BE9-4266-8EAC-3551E25FA3CF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-25] (Google Inc.)
Task: {E1AEC6DB-6345-4D7D-A399-B51C0B6E32DF} - System32\Tasks\WS.Booster-S-5195167130 => c:\programdata\greatsoft\ws.booster\WS.Booster.exe [2013-02-22] () <==== ATTENTION
Task: {E7B78039-237E-4804-BB0E-47DFB306B59A} - System32\Tasks\{ED45188B-9F10-4941-9525-62E456E352FF} => pcalua.exe -a F:\HentaIIInstall.exe -d F:\
Task: {E92C9524-456C-4182-8712-3E253410571E} - System32\Tasks\companion_for_gamers_helper_service => C:\Program Files (x86)\Companion for Gamers\companion_for_gamers_helper_service.exe [2015-05-27] ()
Task: {EA73E03D-0876-4097-BD99-CFBE3FFA4017} - System32\Tasks\sup_games_updating_service => C:\Program Files (x86)\sup games\sup_games_updating_service.exe [2015-04-01] () <==== ATTENTION
Task: {EE3BAB8E-4B5C-41CC-AF12-FC1C2C6129B8} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1693460017-1945991507-4174054062-1001Core => C:\Users\PC\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-06] (Google Inc.)
Task: {F2D9DB4A-1FD2-48A7-B535-F319610F9CD3} - System32\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-1 => C:\Program Files (x86)\TornPlusTV_version1.11\TornPlusTV_version1.11-codedownloader.exe [2014-11-26] (Qwerty) <==== ATTENTION
Task: {FBE7A451-11EF-4B3F-A4AC-8AE49BD47485} - System32\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-4 => C:\Program Files (x86)\TornPlusTV_version1.11\4bb8e883-b028-4f67-abf0-376e5be09182-4.exe [2014-11-26] (Qwerty) <==== ATTENTION
Task: {FD661ACA-512B-455B-8061-D56A45F51CF7} - System32\Tasks\{81C0D670-25F3-47E6-8C8D-A2C32D382C38} => pcalua.exe -a "C:\Users\PC\Downloads\epson374893eu (1).exe" -d C:\Users\PC\Downloads
Task: C:\Windows\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-1.job => C:\Program Files (x86)\TornPlusTV_version1.11\TornPlusTV_version1.11-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-11.job => C:\Program Files (x86)\TornPlusTV_version1.11\4bb8e883-b028-4f67-abf0-376e5be09182-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-3.job => C:\Program Files (x86)\TornPlusTV_version1.11\4bb8e883-b028-4f67-abf0-376e5be09182-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-4.job => C:\Program Files (x86)\TornPlusTV_version1.11\4bb8e883-b028-4f67-abf0-376e5be09182-4.exe <==== ATTENTION
Task: C:\Windows\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-5.job => C:\Program Files (x86)\TornPlusTV_version1.11\4bb8e883-b028-4f67-abf0-376e5be09182-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-5_user.job => C:\Program Files (x86)\TornPlusTV_version1.11\4bb8e883-b028-4f67-abf0-376e5be09182-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-6.job => C:\Program Files (x86)\TornPlusTV_version1.11\4bb8e883-b028-4f67-abf0-376e5be09182-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-7.job => C:\Program Files (x86)\TornPlusTV_version1.11\4bb8e883-b028-4f67-abf0-376e5be09182-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\companion_for_gamers_helper_service.job => C:\Program Files (x86)\Companion for Gamers\companion_for_gamers_helper_service.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1693460017-1945991507-4174054062-1001Core.job => C:\Users\PC\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1693460017-1945991507-4174054062-1001UA.job => C:\Users\PC\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\sup_games_notification_service.job => C:\Program Files (x86)\sup games\sup_games_notification_service.exeå/url='http:/cdn.selectbestopt.com/notf_sys/index.html' /crregname='sup games' /appid='73143' /srcid='2913' /bic='4e468df44319810901a5edcef1fc62dd' /verifier='bfb94f25abb8d1dc8d63ffc4504d5b13' /installerversion='1.50.3.10' /statsdomain='http:/stats.buildomserv.com/data.gif?' /errorsdomain='http:/stats.buildomserv.com/data.gif?' /monetizationdomain='http:/logs.buildomserv.com/monetization.gif <==== ATTENTION
Task: C:\Windows\Tasks\sup_games_updating_service.job => C:\Program Files (x86)\sup games\sup_games_updating_service.exeª /campid=2913 /verid=1 /url=http:/cdn.buildomserv.com/txt/@CAMPID@/@VER@/file.txt /appid=73143 /taskname=sup_games_updating_service /funurl=http:/stats.buildomserv.com <==== ATTENTION
Task: C:\Windows\Tasks\WS.Booster-S-5195167130.job => c:\programdata\greatsoft\ws.booster\WS.Booster.exeH/schedule /profile c:\programdata\greatsoft\ws.booster\5195167130.iniPCWS.Boo <==== ATTENTION

==================== Loaded Modules (Whitelisted) ==============

2013-02-22 04:03 - 2013-02-22 04:03 - 00729600 _____ () c:\programdata\greatsoft\ws.booster\WS.Booster.exe
2015-05-27 23:59 - 2015-05-27 23:59 - 00191719 _____ () C:\Program Files (x86)\Companion for Gamers\companion_for_gamers_helper_service.exe
2014-12-19 18:58 - 2014-12-19 18:58 - 00312320 _____ () C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancerService.exe
2014-12-19 18:58 - 2014-12-19 18:58 - 00083456 _____ () C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancer.exe
2015-04-08 21:53 - 2015-04-08 21:53 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2012-05-30 20:06 - 2012-05-30 20:06 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-05-30 20:06 - 2012-05-30 20:06 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-12-22 04:27 - 2014-12-22 04:27 - 04182016 _____ () c:\Program Files (x86)\DeltaFix\DeltaFix.dll
2012-08-07 16:10 - 2012-08-07 16:10 - 00025088 _____ () C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll
2012-08-07 16:09 - 2012-08-07 16:09 - 00028672 _____ () C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.AutomaticUpdates.dll
2012-08-07 16:10 - 2012-08-07 16:10 - 00012288 _____ () C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll
2012-08-07 16:10 - 2012-08-07 16:10 - 00062464 _____ () C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll
2012-08-07 16:09 - 2012-08-07 16:09 - 01267712 _____ () C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll
2012-08-07 16:09 - 2012-08-07 16:09 - 00073216 _____ () C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessLogic.dll
2012-08-07 16:09 - 2012-08-07 16:09 - 00006144 _____ () C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.EventManager.dll
2012-08-07 16:09 - 2012-08-07 16:09 - 00559616 _____ () C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll
2012-08-07 16:09 - 2012-08-07 16:09 - 00074752 _____ () C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll
2012-08-07 16:09 - 2012-08-07 16:09 - 00006656 _____ () C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll
2012-08-07 16:10 - 2012-08-07 16:10 - 00009728 _____ () C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll
2012-08-07 16:09 - 2012-08-07 16:09 - 00013312 _____ () C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.SideBySide.dll
2012-08-07 16:10 - 2012-08-07 16:10 - 00010240 _____ () C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.Utilities.dll
2012-08-07 16:10 - 2012-08-07 16:10 - 00007168 _____ () C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.ProcessDownMonitor.dll
2012-09-06 13:06 - 2012-09-06 13:06 - 00904704 _____ () C:\Windows\assembly\GAC_32\System.Data.SQLite\1.0.66.0__db937bc2d44ff139\System.Data.SQLite.dll
2012-08-07 16:09 - 2012-08-07 16:09 - 00007168 _____ () C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.Loader.dll
2012-08-07 16:11 - 2012-08-07 16:11 - 00041472 _____ () C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll
2012-08-07 16:09 - 2012-08-07 16:09 - 00040960 _____ () C:\Users\PC\AppData\Local\Smartbar\Application\MACTrackBarLib.dll
2012-08-07 16:11 - 2012-08-07 16:11 - 00028672 _____ () C:\Users\PC\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll
2012-08-07 16:09 - 2012-08-07 16:09 - 00018944 _____ () C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll
2012-08-07 16:09 - 2012-08-07 16:09 - 00040960 _____ () C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.XmlSerializers.dll
2012-09-05 15:41 - 2009-02-06 18:52 - 00073728 _____ () C:\Windows\SysWOW64\CmdRtr.DLL
2012-09-05 15:41 - 2009-07-10 09:07 - 00166912 _____ () C:\Windows\SysWOW64\APOMngr.DLL
2014-11-26 18:48 - 2014-11-26 18:48 - 00137688 _____ () C:\Program Files (x86)\TornPlusTV_version1.11\4dc311d6-16a2-455c-88a2-7c5840e6c636.dll
2015-06-09 15:47 - 2015-06-05 20:22 - 01281864 _____ () C:\Users\PC\AppData\Local\Google\Chrome\Application\43.0.2357.124\libglesv2.dll
2015-06-09 15:47 - 2015-06-05 20:22 - 00080712 _____ () C:\Users\PC\AppData\Local\Google\Chrome\Application\43.0.2357.124\libegl.dll
2015-06-09 15:48 - 2015-06-05 20:22 - 15003464 _____ () C:\Users\PC\AppData\Local\Google\Chrome\Application\43.0.2357.124\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\.DEFAULT\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\.DEFAULT\...\freerealms.com -> freerealms.com
IE trusted site: HKU\.DEFAULT\...\soe.com -> soe.com
IE trusted site: HKU\.DEFAULT\...\sony.com -> sony.com


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\PC\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^PC^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CurseClientStartup.ccip => C:\Windows\pss\CurseClientStartup.ccip.Startup
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: EADM => "C:\Games\Origin\Origin.exe" -AutoStart
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Spotify => "C:\Users\PC\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\PC\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
MSCONFIG\startupreg: SweetIM => C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
MSCONFIG\startupreg: Sweetpacks Communicator => C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
MSCONFIG\startupreg: VirtualCloneDrive => "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{35371388-77EE-497C-94F4-324C4D31DEA5}] => (Allow) C:\Users\PC\Downloads\SweetIMSetup.exe
FirewallRules: [{29008363-4994-42EC-A49E-07F753E1ACB3}] => (Allow) C:\Users\PC\Downloads\SweetIMSetup.exe
FirewallRules: [{40C934B1-A0F3-4976-BAFA-DCBE6F94D823}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [{C0C767ED-D888-4384-AF42-EF4754B4B22D}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [{41CA2D87-3286-4162-A348-39FF348091B7}] => (Allow) C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
FirewallRules: [{AB5A3691-EC35-4049-AFF8-C624026C5B49}] => (Allow) C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
FirewallRules: [TCP Query User{2C4450C3-5645-439C-8FF7-B035E1DE6D2A}C:\games\fifa 12\game\fifa.exe] => (Allow) C:\games\fifa 12\game\fifa.exe
FirewallRules: [UDP Query User{8C98E9A6-D163-41BF-9AAF-2BB4E40E2342}C:\games\fifa 12\game\fifa.exe] => (Allow) C:\games\fifa 12\game\fifa.exe
FirewallRules: [{93B0B0F0-F0C6-46EA-9EF7-D75D08369DB0}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{36F0788A-B13F-46B2-A73F-929B1FA6BA87}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{67B71564-FD4E-47CE-8162-79A179E2FC23}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{A06F8630-6AB0-469E-B6D9-F97FBDC2918D}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C47F54CF-5360-4DD3-8A99-19F73B0D694F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{680F6556-3ACF-4B27-8CE2-C54D5C1264D7}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{EDDAE2F9-560A-4A6F-8DAA-E56FFF9572EE}] => (Allow) LPort=2869
FirewallRules: [{1EBA0933-E714-4B55-89D6-7B92B4D4C7AE}] => (Allow) LPort=1900
FirewallRules: [{C8BCFEBA-650B-4A4A-A074-C39865471E18}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{89DACF56-3D3D-4D4A-9723-FCF155AA160F}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe
FirewallRules: [{3A650B50-F952-4941-98E1-4AC93F70C438}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe
FirewallRules: [{801DCFAC-D39B-48D2-8D6D-C67DFF944EB0}] => (Allow) C:\Users\PC\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{46812352-23D8-427E-8ED4-FB27CBB8BD6B}] => (Allow) C:\Users\PC\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{70AFCED2-52B2-41AC-826F-1F4129E3CE03}] => (Allow) C:\Program Files (x86)\Red Sky\DownTango\DownTango.exe
FirewallRules: [{1A4A8292-5F37-479E-B1EB-AD6496CDCE68}] => (Allow) C:\Program Files (x86)\Red Sky\DownTango\DownTango.exe
FirewallRules: [{6C284BD0-1033-4538-AB56-759A423A9D54}] => (Allow) C:\Program Files (x86)\Red Sky\DownTango\pyload-dist\pyLoadCore.exe
FirewallRules: [{24C9DD1F-502B-430C-9D5D-0AE5F3CDED83}] => (Allow) C:\Program Files (x86)\Red Sky\DownTango\pyload-dist\pyLoadCore.exe
FirewallRules: [{1BC94932-A0DC-4B9A-9EDE-1185AA89AE04}] => (Allow) C:\Users\PC\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{F215DC14-CF59-4A57-B327-8655E97AD07C}] => (Allow) C:\Users\PC\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{CA7077AC-11DA-4459-9DB8-44727D9E209A}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{A6DA2FA9-2684-4CA9-9675-79FD67EDB521}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [TCP Query User{F160C356-7D6F-4494-9D17-9DB28A4A25C1}C:\games\devil may cry 2013\dmc - devil may cry\binaries\win32\dmc-devilmaycry.exe] => (Allow) C:\games\devil may cry 2013\dmc - devil may cry\binaries\win32\dmc-devilmaycry.exe
FirewallRules: [UDP Query User{790CC4F8-1B0E-47EE-B663-8D734DA9F180}C:\games\devil may cry 2013\dmc - devil may cry\binaries\win32\dmc-devilmaycry.exe] => (Allow) C:\games\devil may cry 2013\dmc - devil may cry\binaries\win32\dmc-devilmaycry.exe
FirewallRules: [{6FFCFD53-C99B-4D46-B089-97E6FD2FCF21}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [{6E99CF0B-84F4-4F7D-A486-3C332017845D}] => (Allow) C:\Games\League of Legends\lol.launcher.exe
FirewallRules: [{5C5D4729-9F91-4063-996D-3878C1E0CE5B}] => (Allow) C:\Games\League of Legends\lol.launcher.exe
FirewallRules: [{0EFCC63C-E2DF-4579-ADCB-2B2224420FC3}] => (Allow) C:\Games\League of Legends\lol.launcher.exe
FirewallRules: [{A43A9F00-A5E9-47C4-9B82-FB5A184B506F}] => (Allow) C:\Games\League of Legends\lol.launcher.exe
FirewallRules: [{AF5AFB99-DBDF-4E41-B781-9E784E5CE4DB}] => (Allow) C:\Users\PC\AppData\Local\Apps\2.0\PA9P799M.HRZ\P16LOCBR.AGL\curs..tion_9e9e83ddf3ed3ead_0005.0001_181b5e0542e9eb6c\CurseClient.exe
FirewallRules: [{B6D69998-DC3F-4EB8-B955-95BE84AA819D}] => (Allow) C:\Users\PC\AppData\Local\Apps\2.0\PA9P799M.HRZ\P16LOCBR.AGL\curs..tion_9e9e83ddf3ed3ead_0005.0001_181b5e0542e9eb6c\CurseClient.exe
FirewallRules: [{FAA922A0-FC05-47A0-A4A9-F17D8DC27F74}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{5A5EE1A6-49AA-4AB3-983D-301CF927647C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{3F7DCE16-6671-4C6A-A9D5-AC4265B282C6}] => (Allow) C:\Users\PC\AppData\Local\Apps\2.0\PA9P799M.HRZ\P16LOCBR.AGL\curs..tion_9e9e83ddf3ed3ead_0005.0001_181b5e0542e9eb6c\CurseClient.exe
FirewallRules: [{3DA2AAAE-4F1B-4424-B482-EBEB8E12BFD6}] => (Allow) C:\Users\PC\AppData\Local\Apps\2.0\PA9P799M.HRZ\P16LOCBR.AGL\curs..tion_9e9e83ddf3ed3ead_0005.0001_181b5e0542e9eb6c\CurseClient.exe
FirewallRules: [TCP Query User{3D486772-CA77-480C-A59F-36CB330A87D7}C:\users\pc\appdata\local\google\chrome\application\chrome.exe] => (Block) C:\users\pc\appdata\local\google\chrome\application\chrome.exe
FirewallRules: [UDP Query User{AE153092-7F6E-41B3-AFCD-F947F6652138}C:\users\pc\appdata\local\google\chrome\application\chrome.exe] => (Block) C:\users\pc\appdata\local\google\chrome\application\chrome.exe
FirewallRules: [{04EEB4C9-3032-44DD-84E3-93DF7166ED3C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{4DCBB3C0-01F3-4FBC-89E2-09E7CE3231C5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{D053F0F7-741C-48F7-92E4-1071FA3D1D76}] => (Allow) C:\Users\PC\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{932EE6D7-4FBD-40C6-AE0C-6985981EBB74}] => (Allow) C:\Users\PC\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{B856D70B-318D-4A7F-89F4-E6D735A90B81}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [UDP Query User{BB9DB756-8D42-4B84-9A3A-0E4BB03248D6}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [TCP Query User{8EE660F5-9766-4C12-AED2-BFD8CEFB523A}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe
FirewallRules: [UDP Query User{40D14B72-2B04-4F60-A57B-C142C43B8C3F}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe
FirewallRules: [{D2F31F94-2254-4166-9C92-2ADA5568A07A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0100B384-01F7-427F-8E2D-D2F4CCBD9E07}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{14E13268-70E8-468A-9431-81F956FCA7F2}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{D43B5E25-CE6A-4C3E-806F-701FA09E354D}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{C1427BF0-DD6C-414E-8D30-5A4DDC4D7A8C}] => (Allow) C:\Games\Hearthstone\Hearthstone.exe
FirewallRules: [{20EBAFB5-ACE2-466A-BD8A-AD7B04881CF6}] => (Allow) C:\Games\Hearthstone\Hearthstone.exe
FirewallRules: [{70BEB17D-977A-4D28-BC2F-F218CAEC145B}] => (Allow) C:\Users\PC\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

Name: Coprozessor
Description: Coprozessor
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/13/2015 03:17:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: CurseClient.exe, Version: 4.0.0.10, Zeitstempel: 0x5436d39d
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18869, Zeitstempel: 0x556366fd
Ausnahmecode: 0xe0434f4d
Fehleroffset: 0x000000000000b3dd
ID des fehlerhaften Prozesses: 0x%9
Startzeit der fehlerhaften Anwendung: 0xCurseClient.exe0
Pfad der fehlerhaften Anwendung: CurseClient.exe1
Pfad des fehlerhaften Moduls: CurseClient.exe2
Berichtskennung: CurseClient.exe3

Error: (06/13/2015 03:17:15 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Skype.exe, Version 7.4.0.102 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: dfc

Startzeit: 01d0a5daf0319ff0

Endzeit: 10

Anwendungspfad: C:\Program Files (x86)\Skype\Phone\Skype.exe

Berichts-ID: 7fa856b1-11ce-11e5-8865-002185f916c1

Error: (06/13/2015 03:16:11 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm rads_user_kernel.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 14d8

Startzeit: 01d0a5db112d8890

Endzeit: 3

Anwendungspfad: C:\Games\League of Legends\RADS\system\rads_user_kernel.exe

Berichts-ID: 56c36fa1-11ce-11e5-8865-002185f916c1

Error: (06/13/2015 03:16:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Name des fehlerhaften Moduls: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000b8554
ID des fehlerhaften Prozesses: 0x14d8
Startzeit der fehlerhaften Anwendung: 0xrads_user_kernel.exe0
Pfad der fehlerhaften Anwendung: rads_user_kernel.exe1
Pfad des fehlerhaften Moduls: rads_user_kernel.exe2
Berichtskennung: rads_user_kernel.exe3

Error: (06/13/2015 06:46:27 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: CurseClient.exe, Version: 4.0.0.10, Zeitstempel: 0x5436d39d
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18869, Zeitstempel: 0x556366fd
Ausnahmecode: 0xe0434f4d
Fehleroffset: 0x000000000000b3dd
ID des fehlerhaften Prozesses: 0x%9
Startzeit der fehlerhaften Anwendung: 0xCurseClient.exe0
Pfad der fehlerhaften Anwendung: CurseClient.exe1
Pfad des fehlerhaften Moduls: CurseClient.exe2
Berichtskennung: CurseClient.exe3

Error: (06/12/2015 03:29:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: CurseClient.exe, Version: 4.0.0.10, Zeitstempel: 0x5436d39d
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18869, Zeitstempel: 0x556366fd
Ausnahmecode: 0xe0434f4d
Fehleroffset: 0x000000000000b3dd
ID des fehlerhaften Prozesses: 0x%9
Startzeit der fehlerhaften Anwendung: 0xCurseClient.exe0
Pfad der fehlerhaften Anwendung: CurseClient.exe1
Pfad des fehlerhaften Moduls: CurseClient.exe2
Berichtskennung: CurseClient.exe3

Error: (06/12/2015 03:10:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Skype.exe, Version: 7.4.0.102, Zeitstempel: 0x55310e09
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x65646956
ID des fehlerhaften Prozesses: 0x10c0
Startzeit der fehlerhaften Anwendung: 0xSkype.exe0
Pfad der fehlerhaften Anwendung: Skype.exe1
Pfad des fehlerhaften Moduls: Skype.exe2
Berichtskennung: Skype.exe3

Error: (06/12/2015 03:09:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: CurseClient.exe, Version: 4.0.0.10, Zeitstempel: 0x5436d39d
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18869, Zeitstempel: 0x556366fd
Ausnahmecode: 0xe0434f4d
Fehleroffset: 0x000000000000b3dd
ID des fehlerhaften Prozesses: 0x%9
Startzeit der fehlerhaften Anwendung: 0xCurseClient.exe0
Pfad der fehlerhaften Anwendung: CurseClient.exe1
Pfad des fehlerhaften Moduls: CurseClient.exe2
Berichtskennung: CurseClient.exe3

Error: (06/12/2015 11:18:46 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: CurseClient.exe, Version: 4.0.0.10, Zeitstempel: 0x5436d39d
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18869, Zeitstempel: 0x556366fd
Ausnahmecode: 0xe0434f4d
Fehleroffset: 0x000000000000b3dd
ID des fehlerhaften Prozesses: 0x%9
Startzeit der fehlerhaften Anwendung: 0xCurseClient.exe0
Pfad der fehlerhaften Anwendung: CurseClient.exe1
Pfad des fehlerhaften Moduls: CurseClient.exe2
Berichtskennung: CurseClient.exe3

Error: (06/12/2015 08:24:55 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Name des fehlerhaften Moduls: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000b8554
ID des fehlerhaften Prozesses: 0x398
Startzeit der fehlerhaften Anwendung: 0xrads_user_kernel.exe0
Pfad der fehlerhaften Anwendung: rads_user_kernel.exe1
Pfad des fehlerhaften Moduls: rads_user_kernel.exe2
Berichtskennung: rads_user_kernel.exe3


System errors:
=============
Error: (06/13/2015 03:19:18 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (06/13/2015 03:14:10 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Optimizer Pro Crash Monitor erreicht.

Error: (06/13/2015 03:13:22 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎13.‎06.‎2015 um 15:11:43 unerwartet heruntergefahren.

Error: (06/13/2015 06:43:30 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Optimizer Pro Crash Monitor erreicht.

Error: (06/13/2015 06:40:15 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen:
%%5

Error: (06/13/2015 06:30:24 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Optimizer Pro Crash Monitor erreicht.

Error: (06/13/2015 06:28:32 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
dtsoftbus01

Error: (06/13/2015 06:27:54 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Optimizer Pro Crash Monitor erreicht.

Error: (06/12/2015 09:23:28 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Optimizer Pro Crash Monitor erreicht.

Error: (06/12/2015 09:22:45 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎12.‎06.‎2015 um 21:21:01 unerwartet heruntergefahren.


Microsoft Office:
=========================

CodeIntegrity Errors:
===================================
  Date: 2015-05-07 09:19:46.388
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\PEAuth.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-05-07 09:19:46.307
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\PEAuth.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-05-02 09:34:47.204
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\PEAuth.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-05-02 09:34:47.119
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\PEAuth.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Quad CPU Q8200 @ 2.33GHz
Percentage of memory in use: 82%
Total physical RAM: 3071.24 MB
Available physical RAM: 524.57 MB
Total Pagefile: 6069.45 MB
Available Pagefile: 2103.05 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:86.81 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 7BAA20FD)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== End of log ============================

--- --- ---

schrauber 14.06.2015 15:33

Lade Dir bitte von hier Revo Uninstaller Download Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
  • Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
  • Klicke auf Optionen und wähle als Sprache Deutsch.
  • Suche im Uninstallerfeld nach den Programmen:

    AllLSaavEr

    BabylonObjectInstaller

    BondedReader

    BuyNsAVe

    DiGICOupon

    DownTango

    EZDownloader

    FunDealS

    GreatuSave4U

    HaPpY2eSave

    IIsaver

    Interenet Optimizer

    Online Calculator

    Red AdBlocker

    RegularDeaals

    SaveeLots

    saver box

    SEO Global For Google Search

    ShopDrop

    Stealthy

    TornPlusTV_version1.11

    Web Timer

    WS.Booster

    YoutuubeAdBlocke


  • Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
  • Wähle anschließend den Modus "Moderat" aus.
  • Reste löschen:
    Klicke auf dann auf und dann auf .

 





Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.


Why me 16.06.2015 15:11

Combofix hat sich beim ersten erstellen der logfiles aufgehängt. habe den Rechner neu gestartet und combofix nochmal durchlaufen lassen. Hoffe das sind die infos die sie benötigen :)

Das Problem ist übrigens noch nicht behoben, es öffnen sich immer noch tabs von selbst, aber zurzeit nur wenn ich auf eurer seite unterwechs bin :D

Combofix Logfiles

Code:

ComboFix 15-06-09.01 - PC 14.06.2015  21:45:25.2.4 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.3071.1692 [GMT 2:00]
ausgeführt von:: c:\users\PC\Downloads\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
SP: Microsoft Security Essentials *Disabled/Updated* {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Vorheriger Suchlauf -------
.
c:\program files (x86)\DealEExpress\LtA9irvhRyj3wR.dat
c:\program files (x86)\DealEExpress\LtA9irvhRyj3wR.exe
c:\program files (x86)\DealEExpress\LtA9irvhRyj3wR.tlb
c:\program files (x86)\DealEXXpress\rz2F254r3QNGkK.dat
c:\program files (x86)\DealEXXpress\rz2F254r3QNGkK.exe
c:\program files (x86)\DealEXXpress\rz2F254r3QNGkK.tlb
c:\program files (x86)\EExSTraCouPOn\TWY60xvXdnyz1Z.dat
c:\program files (x86)\EExSTraCouPOn\TWY60xvXdnyz1Z.dll
c:\program files (x86)\EExSTraCouPOn\TWY60xvXdnyz1Z.exe
c:\program files (x86)\EExSTraCouPOn\TWY60xvXdnyz1Z.tlb
c:\program files (x86)\EExSTraCouPOn\TWY60xvXdnyz1Z.x64.dll
c:\program files (x86)\EXstraCouponi\ulYG5azwTvdk40.dat
c:\program files (x86)\EXstraCouponi\ulYG5azwTvdk40.dll
c:\program files (x86)\EXstraCouponi\ulYG5azwTvdk40.exe
c:\program files (x86)\EXstraCouponi\ulYG5azwTvdk40.tlb
c:\program files (x86)\EXstraCouponi\ulYG5azwTvdk40.x64.dll
c:\program files (x86)\PriceGong\2.6.7\FF\chrome.manifest
c:\program files (x86)\PriceGong\2.6.7\FF\chrome\content\overlay.js
c:\program files (x86)\PriceGong\2.6.7\FF\chrome\content\preferences.xul
c:\program files (x86)\PriceGong\2.6.7\FF\chrome\locale\en-US\overlay.dtd
c:\program files (x86)\PriceGong\2.6.7\FF\chrome\locale\en-US\pricegong.dtd
c:\program files (x86)\PriceGong\2.6.7\FF\chrome\skin\overlay.css
c:\program files (x86)\PriceGong\2.6.7\FF\chrome\skin\PriceGong.png
c:\program files (x86)\PriceGong\2.6.7\FF\install.rdf
c:\program files (x86)\PriceGong\2.6.7\FF\modules\pg_tab_wrapper.js
c:\program files (x86)\PriceGong\uninst.exe
c:\program files (x86)\Wajam\uninstall.exe
c:\programdata\17848795055068589206\1547aa30421efb5b529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\18ddebc21b1899ce529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\22d744506cad0c4c529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\2544e9905b19ed48529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\2708f9ff3884b3dd529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\28d0b1947fe80791529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\37a553f5bd0c8932529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\3f0327b152e6b712529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\4b432ab495a89933529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\4dc887bcc29b26c6529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\52f7a96b3ed86261529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\55a8e9c86128951f529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\5fd9088430f752d0529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\638b22b38fe15e8c529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\7507b1760d291bcb529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\7766d983eaa2eed8529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\7d3a17969ee8d54e529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\800d0e2f346d2d49529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\880e4cb7292a1ce4529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\8eb0729fbf1cb052529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\906b6fb1d09c124b529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\add7520f3dd44cb7529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\af7d149721897c8a529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\b1b04b8135a80c97529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\beca2007fdd0d58a529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\c9cd1ae9d4a3d15e529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\cab7ed1b673b5e5e529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\cd5b15e575e1c3d0529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\d20502567d1fd408529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\d43a473d94acb0b6529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\d55b1ff83dc82c98529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\e1a11ca282117dcd529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206\f457e49ace5c075b529bf7fbf35b9e43.ini
c:\programdata\17848795055068589206UL\4ff6e7b3db4d05d4529bf7fbf35b9e43.ini
c:\programdata\3872871776\BITB844.tmp
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\adeejecgedbiamfbbfbhakdjhgfkdeke\3.7\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\adeejecgedbiamfbbfbhakdjhgfkdeke\3.7\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\adeejecgedbiamfbbfbhakdjhgfkdeke\3.7\DXDiwVN4Z.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\adeejecgedbiamfbbfbhakdjhgfkdeke\3.7\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\adeejecgedbiamfbbfbhakdjhgfkdeke\3.7\manifest.json
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\adeejecgedbiamfbbfbhakdjhgfkdeke\3.7\background.html
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\adeejecgedbiamfbbfbhakdjhgfkdeke\3.7\content.js
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\adeejecgedbiamfbbfbhakdjhgfkdeke\3.7\DXDiwVN4Z.js
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\adeejecgedbiamfbbfbhakdjhgfkdeke\3.7\lsdb.js
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\adeejecgedbiamfbbfbhakdjhgfkdeke\3.7\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\adeejecgedbiamfbbfbhakdjhgfkdeke\3.7\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\adeejecgedbiamfbbfbhakdjhgfkdeke\3.7\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\adeejecgedbiamfbbfbhakdjhgfkdeke\3.7\DXDiwVN4Z.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\adeejecgedbiamfbbfbhakdjhgfkdeke\3.7\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\adeejecgedbiamfbbfbhakdjhgfkdeke\3.7\manifest.json
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojgmigafbpedhdilmemphfklkbghlphi\218\background.html
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojgmigafbpedhdilmemphfklkbghlphi\218\content.js
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojgmigafbpedhdilmemphfklkbghlphi\218\ER17RsV.js
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojgmigafbpedhdilmemphfklkbghlphi\218\lsdb.js
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojgmigafbpedhdilmemphfklkbghlphi\218\manifest.json
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ddiblodcpaaieoopolanaoecbhicgjfo\000003.log
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ddiblodcpaaieoopolanaoecbhicgjfo\CURRENT
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ddiblodcpaaieoopolanaoecbhicgjfo\LOCK
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ddiblodcpaaieoopolanaoecbhicgjfo\LOG
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ddiblodcpaaieoopolanaoecbhicgjfo\MANIFEST-000001
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gldjckfcakggohoblbfgmnjihakcijia\000003.log
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gldjckfcakggohoblbfgmnjihakcijia\CURRENT
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gldjckfcakggohoblbfgmnjihakcijia\LOCK
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gldjckfcakggohoblbfgmnjihakcijia\LOG
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gldjckfcakggohoblbfgmnjihakcijia\MANIFEST-000001
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mimbnekakoafehdbmehcliolpblpchki\000003.log
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mimbnekakoafehdbmehcliolpblpchki\CURRENT
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mimbnekakoafehdbmehcliolpblpchki\LOCK
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mimbnekakoafehdbmehcliolpblpchki\LOG
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mimbnekakoafehdbmehcliolpblpchki\MANIFEST-000001
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnpbfmbldigngiccdgkbikaeifoljngg\000003.ldb
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnpbfmbldigngiccdgkbikaeifoljngg\000004.log
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnpbfmbldigngiccdgkbikaeifoljngg\CURRENT
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnpbfmbldigngiccdgkbikaeifoljngg\LOCK
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnpbfmbldigngiccdgkbikaeifoljngg\LOG
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnpbfmbldigngiccdgkbikaeifoljngg\LOG.old
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnpbfmbldigngiccdgkbikaeifoljngg\MANIFEST-000001
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_aiockdklnaeikkippjiofcioidjdfjda_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_aiockdklnaeikkippjiofcioidjdfjda_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bfchgcbmheebfgccmphpabmjmiphgafa_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bfchgcbmheebfgccmphpabmjmiphgafa_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_biabdliipjnbkehnbdjjfaibodlaeinf_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bibclkcoilbnbnppanidhimphmfbjaab_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bibclkcoilbnbnppanidhimphmfbjaab_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bpimjanmknifnoiajikmhmhmlihdccbd_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bpimjanmknifnoiajikmhmhmlihdccbd_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_caokcfodlgbkajhgeeocooagaaklafmj_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_caokcfodlgbkajhgeeocooagaaklafmj_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cieamfbopgjdndnglgaoipojodpaebla_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cieamfbopgjdndnglgaoipojodpaebla_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ddiblodcpaaieoopolanaoecbhicgjfo_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ddiblodcpaaieoopolanaoecbhicgjfo_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dfpiojgfcpgmmngegabpkhdehkdoafgf_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dfpiojgfcpgmmngegabpkhdehkdoafgf_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dlggapfljcnbmajohkhhapaoajopbncm_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dlggapfljcnbmajohkhhapaoajopbncm_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ehloibeiaffhibffchiobihgcainmcep_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ehloibeiaffhibffchiobihgcainmcep_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ejfokbhhajajcgcndeiamkipdcjnjmpe_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ejfokbhhajajcgcndeiamkipdcjnjmpe_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eodejnpnekkneapkicljnillpeodnlak_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eodejnpnekkneapkicljnillpeodnlak_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fjaicoojlfoococemdcaollmhaiolole_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fjaicoojlfoococemdcaollmhaiolole_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fmgncofpadimjlpmndcpcfiilplihmop_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fmgncofpadimjlpmndcpcfiilplihmop_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_geklbcigmpeljogplgbgnakkbajkkmbb_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_geklbcigmpeljogplgbgnakkbajkkmbb_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ggnjbdfgigejghknieofeahaknkjafim_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ggnjbdfgigejghknieofeahaknkjafim_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ginepjojjbmfbfiibfdebddmbkjmgfle_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ginepjojjbmfbfiibfdebddmbkjmgfle_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gldjckfcakggohoblbfgmnjihakcijia_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gldjckfcakggohoblbfgmnjihakcijia_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gnofooopiakigkabiamimgejljaekgfo_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hcngmcbfhnbadikopieafpodfcfigech_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hcngmcbfhnbadikopieafpodfcfigech_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hgnpdbanhfmmdgeogllhocdajiphlkgi_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hgnpdbanhfmmdgeogllhocdajiphlkgi_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_iamenlcilajknacjljblkfpnbjjdagmh_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ibgbdgngjflpkahkoabmiijlaggkinaj_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ibgbdgngjflpkahkoabmiijlaggkinaj_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_impaepofmnammebeenafgmllpnjaiime_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_impaepofmnammebeenafgmllpnjaiime_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_kahoebmmfnjmjcbclecdkhiapmefpaed_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_kkagohhgodpbgcddadcmnidnphajkmhm_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_kkagohhgodpbgcddadcmnidnphajkmhm_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_kmojdioehehfhdcdheaigaalidcklhjh_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_kmojdioehehfhdcdheaigaalidcklhjh_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lkmaimcdgeidlpffbmgnpnfcjjjppmab_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lkmaimcdgeidlpffbmgnpnfcjjjppmab_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mhhflamheoandbibgflojkjccnenjbda_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mimbnekakoafehdbmehcliolpblpchki_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mimbnekakoafehdbmehcliolpblpchki_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mmebmmnpohfhoknnlpohjaembcipocaa_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mmebmmnpohfhoknnlpohjaembcipocaa_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mnegnogmdmccelhibehpmakmkiibinil_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mnegnogmdmccelhibehpmakmkiibinil_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mnpbfmbldigngiccdgkbikaeifoljngg_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mnpbfmbldigngiccdgkbikaeifoljngg_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_nmbfljkmcghmakofbhhgemjhboabdkcn_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_nmbfljkmcghmakofbhhgemjhboabdkcn_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_npmhlidlacoobmdcgkfcdpjkdinjadpp_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_npmhlidlacoobmdcgkfcdpjkdinjadpp_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_obdejhodejngcbmkiddfjkieejekbfil_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ogminpmldncgcmokldnmmapddoccmhfl_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ogminpmldncgcmokldnmmapddoccmhfl_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ojgmigafbpedhdilmemphfklkbghlphi_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ojgmigafbpedhdilmemphfklkbghlphi_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pmblmlebfhgmggndnfipebabpklgnnae_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pmblmlebfhgmggndnfipebabpklgnnae_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pnnjhcapkfbnhlnapejhapnciojnmlmn_0.localstorage-journal
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pnnjhcapkfbnhlnapejhapnciojnmlmn_0.localstorage
c:\users\PC\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\PC\AppData\Local\omesuperv.exe
c:\users\PC\AppData\Roaming\Common\LuaRT\alien.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\alien\core.dll
c:\users\PC\AppData\Roaming\Common\LuaRT\alien\struct.dll
c:\users\PC\AppData\Roaming\Common\LuaRT\base.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\base64.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\debug_ext.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\debug_init.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\getopt.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\io_ext.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\json.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\json\decode.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\json\decode\array.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\json\decode\calls.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\json\decode\number.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\json\decode\object.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\json\decode\others.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\json\decode\strings.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\json\decode\util.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\json\encode.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\json\encode\array.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\json\encode\calls.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\json\encode\number.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\json\encode\object.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\json\encode\others.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\json\encode\output.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\json\encode\output_utility.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\json\encode\strings.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\json\util.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\lfs.dll
c:\users\PC\AppData\Roaming\Common\LuaRT\list.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\lpeg.dll
c:\users\PC\AppData\Roaming\Common\LuaRT\ltn12.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\lua.exe
c:\users\PC\AppData\Roaming\Common\LuaRT\lua5.1.dll
c:\users\PC\AppData\Roaming\Common\LuaRT\lua51.dll
c:\users\PC\AppData\Roaming\Common\LuaRT\luacom.dll
c:\users\PC\AppData\Roaming\Common\LuaRT\luasql\sqlite3.dll
c:\users\PC\AppData\Roaming\Common\LuaRT\math_ext.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\Microsoft.VC80.CRT\Microsoft.VC80.CRT.manifest
c:\users\PC\AppData\Roaming\Common\LuaRT\Microsoft.VC80.CRT\msvcm80.dll
c:\users\PC\AppData\Roaming\Common\LuaRT\Microsoft.VC80.CRT\msvcp80.dll
c:\users\PC\AppData\Roaming\Common\LuaRT\Microsoft.VC80.CRT\msvcr80.dll
c:\users\PC\AppData\Roaming\Common\LuaRT\mime.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\mime\core.dll
c:\users\PC\AppData\Roaming\Common\LuaRT\modules.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\Neues Textdokument.txt
c:\users\PC\AppData\Roaming\Common\LuaRT\package_ext.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\set.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\sha256.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\socket.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\socket\core.dll
c:\users\PC\AppData\Roaming\Common\LuaRT\socket\http.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\socket\url.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\std.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\strbuf.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\string_ext.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\table_ext.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\tree.lua
c:\users\PC\AppData\Roaming\Common\LuaRT\wlua.exe
c:\users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam\uninstall.lnk
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\04vWXTq1t@QB.net\bootstrap.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\04vWXTq1t@QB.net\chrome.manifest
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\04vWXTq1t@QB.net\content\bg.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\04vWXTq1t@QB.net\install.rdf
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\0RNf1ggc@i.org\bootstrap.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\0RNf1ggc@i.org\chrome.manifest
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\0RNf1ggc@i.org\content\bg.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\0RNf1ggc@i.org\install.rdf
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\499k@4.edu\bootstrap.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\499k@4.edu\chrome.manifest
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\499k@4.edu\content\bg.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\499k@4.edu\install.rdf
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\d@s.co.uk\bootstrap.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\d@s.co.uk\chrome.manifest
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\d@s.co.uk\content\bg.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\d@s.co.uk\install.rdf
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\dF@g3t.edu\bootstrap.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\dF@g3t.edu\chrome.manifest
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\dF@g3t.edu\content\bg.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\dF@g3t.edu\install.rdf
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\KH@f.net\bootstrap.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\KH@f.net\chrome.manifest
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\KH@f.net\content\bg.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\KH@f.net\install.rdf
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\m1@ViJj.com\bootstrap.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\m1@ViJj.com\chrome.manifest
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\m1@ViJj.com\content\bg.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\m1@ViJj.com\install.rdf
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\Mu@b.net\bootstrap.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\Mu@b.net\chrome.manifest
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\Mu@b.net\content\bg.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\Mu@b.net\install.rdf
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\NmG@vw7IBWDt.net\bootstrap.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\NmG@vw7IBWDt.net\chrome.manifest
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\NmG@vw7IBWDt.net\content\bg.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\NmG@vw7IBWDt.net\install.rdf
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\opp@m6FE.edu\bootstrap.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\opp@m6FE.edu\chrome.manifest
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\opp@m6FE.edu\content\bg.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\opp@m6FE.edu\install.rdf
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\q@R4.edu\bootstrap.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\q@R4.edu\chrome.manifest
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\q@R4.edu\content\bg.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\q@R4.edu\install.rdf
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\staged\cd@JuE1.com\bootstrap.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\staged\cd@JuE1.com\chrome.manifest
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\staged\cd@JuE1.com\content\bg.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\staged\cd@JuE1.com\install.rdf
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\w1Ciy@QvgE.edu\bootstrap.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\w1Ciy@QvgE.edu\chrome.manifest
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\w1Ciy@QvgE.edu\content\bg.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\w1Ciy@QvgE.edu\install.rdf
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\ySE@ZZ2c.com\bootstrap.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\ySE@ZZ2c.com\chrome.manifest
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\ySE@ZZ2c.com\content\bg.js
c:\users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\ySE@ZZ2c.com\install.rdf
c:\users\PC\AppData\Roaming\Seventh\Seventh.exe
c:\users\PC\AppData\Roaming\Windows Net Data\id.dat
c:\users\PC\AppData\Roaming\Windows Net Data\net.exe
c:\users\PC\AppData\Roaming\Windows Net Data\uninstaller.exe
c:\windows\PFRO.log
.
.
(((((((((((((((((((((((((((((((((((((((  Treiber/Dienste  )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_globalUpdate
.
.
(((((((((((((((((((((((  Dateien erstellt von 2015-05-14 bis 2015-06-14  ))))))))))))))))))))))))))))))
.
.
2015-06-14 19:53 . 2015-06-14 19:53        --------        d-----w-        c:\users\Default\AppData\Local\temp
2015-06-14 19:39 . 2015-06-14 19:39        75888        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{82B31D49-A9F6-4C43-B4FA-874B89F0AE5A}\offreg.888.dll
2015-06-14 19:37 . 2015-05-03 03:16        12214312        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{82B31D49-A9F6-4C43-B4FA-874B89F0AE5A}\mpengine.dll
2015-06-14 19:34 . 2015-06-14 19:34        --------        d-----w-        c:\users\PC\AppData\Local\GWX
2015-06-14 16:04 . 2015-06-14 16:04        --------        d-----w-        c:\program files (x86)\Fluid UI
2015-06-14 16:01 . 2015-06-14 16:01        --------        d-----w-        c:\program files (x86)\EXstraCCoupOn
2015-06-14 16:00 . 2015-06-14 16:00        --------        d-----w-        c:\program files (x86)\RegularDeaals
2015-06-14 15:47 . 2015-06-14 15:47        --------        d-----w-        c:\program files (x86)\FunDealS
2015-06-14 15:40 . 2015-06-14 15:40        --------        d-----w-        c:\program files (x86)\PragmaFoobar
2015-06-14 15:29 . 2015-06-14 15:29        --------        d-----w-        c:\program files (x86)\VS Revo Group
2015-06-14 12:08 . 2015-05-03 03:16        12214312        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2015-06-13 15:42 . 2015-06-13 15:49        --------        d-----w-        C:\FRST
2015-06-12 19:40 . 2015-03-26 12:38        1187344        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{096601DC-1913-49A4-AF93-98CD39850C28}\gapaengine.dll
2015-06-10 00:22 . 2015-06-10 00:22        --------        d-----w-        c:\programdata\ATI
2015-06-10 00:21 . 2015-06-10 00:21        --------        d-----w-        c:\program files (x86)\AMD AVT
2015-06-09 23:31 . 2015-06-10 00:02        --------        d-----w-        c:\programdata\Package Cache
2015-06-09 20:17 . 2015-04-29 18:22        14635008        ----a-w-        c:\windows\system32\wmp.dll
2015-06-09 20:16 . 2015-05-25 17:59        5120        ----a-w-        c:\windows\SysWow64\wow32.dll
2015-06-07 04:20 . 2015-06-07 04:20        --------        d-----w-        c:\program files (x86)\DeeeaalExprress
2015-05-29 14:59 . 2015-05-29 14:59        --------        d-----w-        c:\users\PC\AppData\Roaming\Snz
2015-05-27 21:59 . 2015-05-27 21:59        --------        d-----w-        c:\program files (x86)\Companion for Gamers
2015-05-22 22:33 . 2015-05-22 22:33        --------        d-----w-        c:\users\PC\AppData\Local\Blizzard
2015-05-22 22:16 . 2015-05-22 22:16        --------        d-----w-        c:\users\PC\AppData\Local\Blizzard Entertainment
2015-05-22 22:16 . 2015-06-03 02:18        --------        d-----w-        c:\users\PC\AppData\Local\Battle.net
2015-05-22 22:16 . 2015-05-28 17:25        --------        d-----w-        c:\users\PC\AppData\Roaming\Battle.net
2015-05-22 22:15 . 2015-06-03 00:47        --------        d-----w-        c:\program files (x86)\Battle.net
2015-05-16 00:04 . 2015-05-16 00:04        --------        d-----w-        C:\83c8af8c93343fc3a1d9f78b
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-06-13 04:47 . 2015-05-12 19:12        24        ----a-w-        c:\users\PC\AppData\Roaming\appdataFr25.bin
2015-06-10 01:49 . 2012-09-06 06:49        778416        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2015-06-10 01:49 . 2012-09-06 06:49        142512        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-06-10 00:27 . 2012-09-05 13:30        140135120        ----a-w-        c:\windows\system32\MRT.exe
2015-05-25 18:01 . 2015-06-09 20:17        44032        ----a-w-        c:\windows\apppatch\acwow64.dll
2015-05-12 17:00 . 2015-02-04 01:01        20        ----a-w-        c:\users\PC\AppData\Roaming\appdataFr3.bin
2015-05-01 13:17 . 2015-05-13 23:38        124112        ----a-w-        c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-01 13:16 . 2015-05-13 23:38        102608        ----a-w-        c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2015-04-20 03:17 . 2015-05-13 10:17        1647104        ----a-w-        c:\windows\system32\DWrite.dll
2015-04-20 03:17 . 2015-05-13 10:17        1179136        ----a-w-        c:\windows\system32\FntCache.dll
2015-04-20 02:56 . 2015-05-13 10:17        1250816        ----a-w-        c:\windows\SysWow64\DWrite.dll
2015-04-18 03:10 . 2015-05-13 10:19        460800        ----a-w-        c:\windows\system32\certcli.dll
2015-04-18 02:56 . 2015-05-13 10:19        342016        ----a-w-        c:\windows\SysWow64\certcli.dll
2015-04-15 07:32 . 2015-02-09 20:52        79        ----a-w-        c:\program files (x86)\prefs.js
2015-04-13 03:28 . 2015-05-13 10:18        328704        ----a-w-        c:\windows\system32\services.exe
2015-04-08 03:29 . 2015-05-13 10:16        275456        ----a-w-        c:\windows\system32\InkEd.dll
2015-04-08 03:29 . 2015-05-13 10:16        24576        ----a-w-        c:\windows\system32\jnwmon.dll
2015-04-08 03:14 . 2015-05-13 10:16        216064        ----a-w-        c:\windows\SysWow64\InkEd.dll
2015-03-26 12:38 . 2012-10-02 21:18        1187344        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2015-03-25 03:24 . 2015-04-15 07:10        98304        ----a-w-        c:\windows\system32\wudriver.dll
2015-03-25 03:24 . 2015-04-15 07:10        37376        ----a-w-        c:\windows\system32\wups2.dll
2015-03-25 03:24 . 2015-04-15 07:10        35328        ----a-w-        c:\windows\system32\wups.dll
2015-03-25 03:24 . 2015-04-15 07:10        3298816        ----a-w-        c:\windows\system32\wucltux.dll
2015-03-25 03:24 . 2015-04-15 07:10        2553856        ----a-w-        c:\windows\system32\wuaueng.dll
2015-03-25 03:24 . 2015-04-15 07:10        191488        ----a-w-        c:\windows\system32\wuwebv.dll
2015-03-25 03:24 . 2015-04-15 07:10        696320        ----a-w-        c:\windows\system32\wuapi.dll
2015-03-25 03:24 . 2015-04-15 07:10        60416        ----a-w-        c:\windows\system32\WinSetupUI.dll
2015-03-25 03:23 . 2015-04-15 07:10        12288        ----a-w-        c:\windows\system32\wu.upgrade.ps.dll
2015-03-25 03:23 . 2015-04-15 07:10        36864        ----a-w-        c:\windows\system32\wuapp.exe
2015-03-25 03:23 . 2015-04-15 07:10        135168        ----a-w-        c:\windows\system32\wuauclt.exe
2015-03-25 03:00 . 2015-04-15 07:10        92672        ----a-w-        c:\windows\SysWow64\wudriver.dll
2015-03-25 03:00 . 2015-04-15 07:10        29696        ----a-w-        c:\windows\SysWow64\wups.dll
2015-03-25 03:00 . 2015-04-15 07:10        173056        ----a-w-        c:\windows\SysWow64\wuwebv.dll
2015-03-25 03:00 . 2015-04-15 07:10        566784        ----a-w-        c:\windows\SysWow64\wuapi.dll
2015-03-25 03:00 . 2015-04-15 07:10        33792        ----a-w-        c:\windows\SysWow64\wuapp.exe
2006-05-03 10:06        163328        --sha-r-        c:\windows\SysWOW64\flvDX.dll
2007-02-21 11:47        31232        --sha-r-        c:\windows\SysWOW64\msfDX.dll
2008-03-16 13:30        216064        --sha-r-        c:\windows\SysWOW64\nbDX.dll
2010-01-06 23:00        107520        --sha-r-        c:\windows\SysWOW64\TAKDSDecoder.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Browser Infrastructure Helper"="c:\users\PC\AppData\Local\Smartbar\Application\Smartbar.exe" [2012-08-07 13824]
"Spotify Web Helper"="c:\users\PC\AppData\Roaming\Spotify\SpotifyWebHelper.exe" [2015-05-28 2021944]
"OMESupervisor"="c:\users\PC\AppData\Local\omesuperv.exe" [BU]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2015-04-23 8204056]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2015-04-17 31280256]
"Sixth"="c:\users\PC\AppData\Roaming\Sixth\Sixth.exe" [2014-11-24 74470]
"Seventh"="c:\users\PC\AppData\Roaming\Seventh\Seventh.exe" [BU]
"Intermediate"="c:\users\PC\AppData\Roaming\Intermediate\Intermediate.exe" [2013-12-09 37376]
"SCheck"="c:\users\PC\AppData\Roaming\SCheck\SCheck.exe" [2013-12-09 37376]
"Snoozer"="c:\users\PC\AppData\Roaming\Snz\Snz.exe" [2015-05-29 1821972]
"DataMgr"="c:\users\PC\AppData\Roaming\DataMgr\DataMgr.exe" [2012-10-16 168264]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"P17RunE"="P17RunE.dll" [2008-03-28 14848]
"ApnTBMon"="c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [2015-04-27 1684360]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-12-19 1022152]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2013-10-08 766208]
.
c:\users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
CurseClientStartup.ccip [2013-4-23 0]
Xfire.lnk - c:\program files (x86)\Xfire\Xfire.exe [2005-9-28 3088520]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 51cdb72;Optimizer Pro Crash Monitor;c:\windows\system32\rundll32.exe;c:\windows\SYSNATIVE\rundll32.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x]
R3 globalUpdatem;globalUpdate Update Service (globalUpdatem);c:\program files (x86)\globalUpdate\Update\GoogleUpdate.exe;c:\program files (x86)\globalUpdate\Update\GoogleUpdate.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys;c:\program files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 ssnfd_1_10_0_1;ssnfd_1_10_0_1;c:\windows\system32\drivers\ssnfd_1_10_0_1.sys;c:\windows\SYSNATIVE\drivers\ssnfd_1_10_0_1.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 APNMCP;Ask Aktualisierungsdienst;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 ed30d1cf;PragmaFoobar;c:\windows\system32\rundll32.exe;c:\windows\SYSNATIVE\rundll32.exe [x]
S2 EPSON_EB_RPCV4_04;EPSON V5 Service4(04);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE;c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE [x]
S2 EPSON_PM_RPCV4_04;EPSON V3 Service4(04);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE;c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE [x]
S2 HiPatchService;Hi-Rez Studios Authenticate and Update Service;c:\games\Neuer Ordner (2)\HiPatchService.exe;c:\games\Neuer Ordner (2)\HiPatchService.exe [x]
S2 Internet Enhancer Service;Internet Enhancer Service;c:\program files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancerService.exe;c:\program files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancerService.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 SProtection;SProtection;c:\program files (x86)\Common Files\Umbrella\Umbrella.exe;c:\program files (x86)\Common Files\Umbrella\Umbrella.exe [x]
S2 sssvc_1.10.0.1;Search Snacks 1.10.0.1 Client Service;c:\program files (x86)\SearchSnacks_1.10.0.1\Service\sssvc.exe;c:\program files (x86)\SearchSnacks_1.10.0.1\Service\sssvc.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 LGPBTDD;LGPBTDD.sys Display Driver;c:\windows\system32\Drivers\LGPBTDD.sys;c:\windows\SYSNATIVE\Drivers\LGPBTDD.sys [x]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{2D46B6DC-2207-486B-B523-A557E6D54B47}]
start [BU]
.
Inhalt des "geplante Tasks" Ordners
.
2015-06-14 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-06 01:49]
.
2015-06-14 c:\windows\Tasks\companion_for_gamers_helper_service.job
- c:\program files (x86)\Companion for Gamers\companion_for_gamers_helper_service.exe [2015-05-27 21:59]
.
2015-06-14 c:\windows\Tasks\globalUpdateUpdateTaskMachineCore.job
- c:\program files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-11-26 16:53]
.
2015-06-14 c:\windows\Tasks\globalUpdateUpdateTaskMachineUA.job
- c:\program files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-11-26 16:53]
.
2015-06-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-12-25 14:45]
.
2015-06-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-12-25 14:45]
.
2015-06-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1693460017-1945991507-4174054062-1001Core.job
- c:\users\PC\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-06 06:57]
.
2015-06-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1693460017-1945991507-4174054062-1001UA.job
- c:\users\PC\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-06 06:57]
.
2015-06-14 c:\windows\Tasks\sup_games_notification_service.job
- c:\program files (x86)\sup games\sup_games_notification_service.exe [2015-04-01 16:13]
.
2015-06-14 c:\windows\Tasks\sup_games_updating_service.job
- c:\program files (x86)\sup games\sup_games_updating_service.exe [2015-04-01 16:13]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2015-04-29 1337000]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2013-11-14 8292120]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <-loopback>
uInternet Settings,ProxyServer = http=127.0.0.1:49727;https=127.0.0.1:49727
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Free YouTube to MP3 Converter - c:\users\PC\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: DhcpNameServer = 192.168.0.1
DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
FF - ProfilePath - c:\users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.fbdownloader.com/search.php?channel=fpo&q=
FF - prefs.js: browser.startup.homepage - hxxp://search.fbdownloader.com/?channel=fpo&t=41F2714362583E7D
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
AddRemove-Windows Utils - c:\users\PC\AppData\Roaming\Windows Net Data\uninstaller.exe
AddRemove-WInterEnhance - c:\program files (x86)\Wajam\uninstall.exe
AddRemove-Planetside 2 - c:\games\Planetside 2\Uninstaller.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1693460017-1945991507-4174054062-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1693460017-1945991507-4174054062-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_188_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_188_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_17_0_0_188_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_17_0_0_188_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_188.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.17"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_188.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_188.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_188.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2015-06-14  21:57:04
ComboFix-quarantined-files.txt  2015-06-14 19:57
.
Vor Suchlauf: 18 Verzeichnis(se), 93.725.151.232 Bytes frei
Nach Suchlauf: 19 Verzeichnis(se), 93.408.935.936 Bytes frei
.
- - End Of File - - DE9431D73A09F6B0CE73C1DDEE5635F8
A36C5E4F47E84449FF07ED3517B43A31

Nach einigem surfen hab ich noch andere Seiten gefunden auf denen sich tabs öffnen, aber nur noch vereinzelt.

PC startet auch immer noch regelmäßig beim Spielen neu (Bildschirm wird einfach schwarz und er fährt nach ca. 2 Sekunden wieder hoch). Befindet sich kein Staub im Gehäuse und ich lasse es auch zurzeit offen für bessere Luftzirkulation aber es kommt mir nicht so vor als ob die Graka zu heiß wird. Hab ihn zusätzlich von 800mhz auf 600mhz herunter getaktet. Problem bleibt bestehen.

Hab mal die Temp. meiner Radeon HD 5800 gescheckt während ich mir nen HD Anime angeschaut habe, 90-93° kommt mir dezent däftig vor, denke das geht noch höher beim spielen. Irgend ne Meinung dazu?

Hab meine Graka mal ausgebaut und ordentlich vom staub befreit, Problem der Überhitzung hat sich damit erledigt (65-68° unter den selben Bedingungen wie beim letzten test), aber ob die crashes auch der Vergangenheit angehören muss sich noch heraus stellen, halte sie auf dem laufendem.

PC ist wieder gecrasht... Graka auf unter 60°, war mir fast 100% sicher dass das Problem damit gelöst sein müsste. Bin etwas ratlos :/

schrauber 17.06.2015 05:36

Wir entfernen erstmal die ganze Malware :)


Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

Why me 17.06.2015 14:15

Mbam.txt (Teil 1):

Code:

Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 17.06.2015
Suchlauf-Zeit: 13:05:54
Logdatei: Mbam.txt
Administrator: Ja

Version: 2.01.6.1022
Malware Datenbank: v2015.06.17.02
Rootkit Datenbank: v2015.06.15.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: PC

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 436655
Verstrichene Zeit: 1 Std, 5 Min, 29 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Warnen
PUM: Aktiviert

Prozesse: 7
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancerService.exe, 128, Löschen bei Neustart, [3e88e0dbf694c076592877c9a75bac54]
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancer.exe, 1968, Löschen bei Neustart, [c2048b30494172c4d49ebe69b74beb15]
PUP.Optional.Iminent, C:\Program Files (x86)\Common Files\Umbrella\Umbrella.exe, 1680, Löschen bei Neustart, [cafce4d7d6b4ef4786c3f64a887938c8]
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe, 4712, Löschen bei Neustart, [fdc9813a5b2fa09620eaf9f9b251b64a]
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe, 2676, Löschen bei Neustart, [a22455666a2054e297745b9709faf10f]
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\SearchSnacks_1.10.0.1\Service\sssvc.exe, 1044, Löschen bei Neustart, [6462d0eb068479bd7284ac62db29e818]
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.exe, 3564, Löschen bei Neustart, [5670823923673ff709f898be33d2619f]

Module: 33
PUP.Optional.Multiplug, C:\Program Files (x86)\PragmaFoobar\PragmaFoobar.dll, Löschen bei Neustart, [ccfa04b75a30c86ed46f350336cc22de],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\FiddlerCore.dll, Löschen bei Neustart, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\Newtonsoft.Json.dll, Löschen bei Neustart, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\MACTrackBarLib.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.Logging.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.Loader.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.EventManager.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.Base.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.ChromeLocalPlugin.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.ShareManagerLocalPlugin.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessEntities.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessLogic.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Personalization.Settings.UserSettingsManager.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.AutomaticUpdates.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.ProcessDownMonitor.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.SetBrowsersSettings.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.DefaultBrowser.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.SetBrowsersSettingsAutoUpdater.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.SideBySide.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.XmlSerializers.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.Utilities.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],

Registrierungsschlüssel: 630
PUP.Optional.Wajam.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Internet Enhancer Service, In Quarantäne, [3e88e0dbf694c076592877c9a75bac54],
PUP.Optional.Iminent, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SProtection, In Quarantäne, [cafce4d7d6b4ef4786c3f64a887938c8],
PUP.Optional.ModGoog, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdatem, In Quarantäne, [4a7ca615d9b14ceade0ec7864db50000],
PUP.Optional.ModGoog, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, In Quarantäne, [4a7ca615d9b14ceade0ec7864db50000],
PUP.Optional.ModGoog, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, In Quarantäne, [4a7ca615d9b14ceade0ec7864db50000],
PUP.Optional.SearchSnacks.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ssnfd_1_10_0_1, In Quarantäne, [418599222a60cc6ae968917841c151af],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\APPID\{01994268-3C10-4044-A1EA-7A9C1B739A11}, In Quarantäne, [547225965c2e79bd5e6327870ef553ad],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{01994268-3C10-4044-A1EA-7A9C1B739A11}, In Quarantäne, [547225965c2e79bd5e6327870ef553ad],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{01994268-3C10-4044-A1EA-7A9C1B739A11}, In Quarantäne, [547225965c2e79bd5e6327870ef553ad],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\APPID\{0E4B2CAB-B859-4C57-B96E-63DDEC692BC4}, In Quarantäne, [fdc98833563491a5c932c4b0a063da26],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{0E4B2CAB-B859-4C57-B96E-63DDEC692BC4}, In Quarantäne, [fdc98833563491a5c932c4b0a063da26],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{0E4B2CAB-B859-4C57-B96E-63DDEC692BC4}, In Quarantäne, [fdc98833563491a5c932c4b0a063da26],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\APPID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}, In Quarantäne, [e8de00bb1e6c9d99dc208a1ffe05d62a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{35C1605E-438B-4D64-AAB1-8885F097A9B1}, In Quarantäne, [e8de00bb1e6c9d99dc208a1ffe05d62a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{35C1605E-438B-4D64-AAB1-8885F097A9B1}, In Quarantäne, [e8de00bb1e6c9d99dc208a1ffe05d62a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{35C1605E-438B-4D64-AAB1-8885F097A9B1}, In Quarantäne, [e8de00bb1e6c9d99dc208a1ffe05d62a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}, In Quarantäne, [e8de00bb1e6c9d99dc208a1ffe05d62a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}, In Quarantäne, [e8de00bb1e6c9d99dc208a1ffe05d62a],
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\APPID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}, In Quarantäne, [c2043a8143477eb816106511ea193ac6],
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}, In Quarantäne, [c2043a8143477eb816106511ea193ac6],
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}, In Quarantäne, [c2043a8143477eb816106511ea193ac6],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC}, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{ACA608DB-A210-4253-B799-3FD24E9A7BF5}, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C58D664A-3DBC-4925-AE74-0382007DF113}, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{ACA608DB-A210-4253-B799-3FD24E9A7BF5}, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C58D664A-3DBC-4925-AE74-0382007DF113}, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{ACA608DB-A210-4253-B799-3FD24E9A7BF5}, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{C58D664A-3DBC-4925-AE74-0382007DF113}, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC}, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC}, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.ScriptExtender.1, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.ScriptExtender, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IminentWebBooster.ScriptExtender, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\IminentWebBooster.ScriptExtender, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IminentWebBooster.ScriptExtender.1, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\IminentWebBooster.ScriptExtender.1, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.BrowserHelperObject.1, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.BrowserHelperObject, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IminentWebBooster.BrowserHelperObject, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\IminentWebBooster.BrowserHelperObject, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IminentWebBooster.BrowserHelperObject.1, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\IminentWebBooster.BrowserHelperObject.1, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{112BA211-334C-4A90-90EC-2AD1CDAB287C}, In Quarantäne, [a71f5665f991082eb140c5e3c53e55ab],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{112BA211-334C-4A90-90EC-2AD1CDAB287C}, In Quarantäne, [a71f5665f991082eb140c5e3c53e55ab],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1FAFD711-ABF9-4F6A-8130-5166C7371427}, In Quarantäne, [00c6ab108ffb50e6dc1622864eb52bd5],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{1FAFD711-ABF9-4F6A-8130-5166C7371427}, In Quarantäne, [00c6ab108ffb50e6dc1622864eb52bd5],
PUP.Optional.SimpleNewTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5C2DD58F-613F-4580-8AC0-F10D760AF938}, In Quarantäne, [00c658637515a3932dc369077a89728e],
PUP.Optional.SimpleNewTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{8DAA9564-C7BF-43E1-ADB9-17B44DA980A6}, In Quarantäne, [00c658637515a3932dc369077a89728e],
PUP.Optional.SimpleNewTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{8DAA9564-C7BF-43E1-ADB9-17B44DA980A6}, In Quarantäne, [00c658637515a3932dc369077a89728e],
PUP.Optional.SimpleNewTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{5C2DD58F-613F-4580-8AC0-F10D760AF938}, In Quarantäne, [00c658637515a3932dc369077a89728e],
PUP.Optional.OfferMosquito, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{82B16A3D-F03E-4565-A532-666B219C9A53}, In Quarantäne, [9333893225653ff7b31de491ed16ab55],
PUP.Optional.OfferMosquito, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{82B16A3D-F03E-4565-A532-666B219C9A53}, In Quarantäne, [9333893225653ff7b31de491ed16ab55],
PUP.Optional.SearchSnacks.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{DEDCD400-D7C3-4B07-924F-50AE6CDAC183}, In Quarantäne, [883e14a72961c076623a79f43cc7718f],
PUP.Optional.SearchSnacks.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{DEDCD400-D7C3-4B07-924F-50AE6CDAC183}, In Quarantäne, [883e14a72961c076623a79f43cc7718f],
PUP.Optional.SearchSnacks.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{DEDCD400-D7C3-4B07-924F-50AE6CDAC183}, In Quarantäne, [883e14a72961c076623a79f43cc7718f],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}, In Quarantäne, [55710ead0189d066cd0d0862828157a9],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}, In Quarantäne, [55710ead0189d066cd0d0862828157a9],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}, In Quarantäne, [55710ead0189d066cd0d0862828157a9],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}, In Quarantäne, [55710ead0189d066cd0d0862828157a9],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}, In Quarantäne, [b2143586e7a372c4845bbcb422e10df3],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}, In Quarantäne, [b2143586e7a372c4845bbcb422e10df3],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}, In Quarantäne, [b2143586e7a372c4845bbcb422e10df3],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}, In Quarantäne, [b2143586e7a372c4845bbcb422e10df3],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}, In Quarantäne, [b2143586e7a372c4845bbcb422e10df3],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}, In Quarantäne, [b2143586e7a372c4845bbcb422e10df3],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}, In Quarantäne, [b2143586e7a372c4845bbcb422e10df3],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\CLASSES\YontooIEClient.Api.1, In Quarantäne, [b2143586e7a372c4845bbcb422e10df3],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\CLASSES\YontooIEClient.Api, In Quarantäne, [b2143586e7a372c4845bbcb422e10df3],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\YontooIEClient.Api, In Quarantäne, [b2143586e7a372c4845bbcb422e10df3],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\YontooIEClient.Api, In Quarantäne, [b2143586e7a372c4845bbcb422e10df3],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\YontooIEClient.Api.1, In Quarantäne, [b2143586e7a372c4845bbcb422e10df3],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\YontooIEClient.Api.1, In Quarantäne, [b2143586e7a372c4845bbcb422e10df3],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}, In Quarantäne, [b2143586e7a372c4845bbcb422e10df3],
PUP.Optional.Yontoo.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}, In Quarantäne, [b2143586e7a372c4845bbcb422e10df3],
PUP.Optional.Yontoo.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}, In Quarantäne, [b2143586e7a372c4845bbcb422e10df3],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}, In Quarantäne, [b2143586e7a372c4845bbcb422e10df3],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}, In Quarantäne, [b2143586e7a372c4845bbcb422e10df3],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{6E8BF012-2C85-4834-B10A-1B31AF173D70}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{706D4A4B-184A-4434-B331-296B07493D2D}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{8BE10F21-185F-4CA0-B789-9921674C3993}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{94C0B25D-3359-4B10-B227-F96A77DB773F}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B173667F-8395-4317-8DD6-45AD1FE00047}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B32672B3-F656-46E0-B584-FE61C0BB6037}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C2996524-2187-441F-A398-CD6CB6B3D020}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E047E227-5342-4D94-80F7-CFB154BF55BD}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{706D4A4B-184A-4434-B331-296B07493D2D}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{8BE10F21-185F-4CA0-B789-9921674C3993}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{94C0B25D-3359-4B10-B227-F96A77DB773F}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B173667F-8395-4317-8DD6-45AD1FE00047}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B32672B3-F656-46E0-B584-FE61C0BB6037}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C2996524-2187-441F-A398-CD6CB6B3D020}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E047E227-5342-4D94-80F7-CFB154BF55BD}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{706D4A4B-184A-4434-B331-296B07493D2D}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{8BE10F21-185F-4CA0-B789-9921674C3993}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{94C0B25D-3359-4B10-B227-F96A77DB773F}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{B173667F-8395-4317-8DD6-45AD1FE00047}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{B32672B3-F656-46E0-B584-FE61C0BB6037}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{C2996524-2187-441F-A398-CD6CB6B3D020}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{E047E227-5342-4D94-80F7-CFB154BF55BD}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{6E8BF012-2C85-4834-B10A-1B31AF173D70}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{6E8BF012-2C85-4834-B10A-1B31AF173D70}, In Quarantäne, [e6e0befd96f438fee01dd7d2887b669a],
PUP.Optional.Babylon.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, In Quarantäne, [bf0707b41179e1556158036c0ef5e020],
PUP.Optional.Iminent.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}, In Quarantäne, [73539229cbbf043281376d02f80bad53],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}, In Quarantäne, [73539229cbbf043281376d02f80bad53],
PUP.Optional.SweetPacks.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EEE6C360-6118-11DC-9C72-001320C79847}, In Quarantäne, [8f370ead503a48ee009c1993689b966a],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EEE6C360-6118-11DC-9C72-001320C79847}, In Quarantäne, [8f370ead503a48ee009c1993689b966a],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{0af350d9-3916-454b-ac53-0b0b65f41301}, In Quarantäne, [3f87bffc4e3ce5510b4f2b7efc07926e],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}, In Quarantäne, [cff71aa10288ef4738233a6ff40fa45c],
PUP.Optional.BabylonToolBar.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}, In Quarantäne, [10b6813a5f2b65d1ee10c9e01ee521df],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, In Quarantäne, [c006506b7b0f9b9bff5d1099ba496e92],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\CLSID\{070EC31F-A606-24FD-279F-14B6938DE89A}, In Quarantäne, [16b0506b4446e4526b27770b17ea857b],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\GreatuSave4U.GreatuSave4U, In Quarantäne, [16b0506b4446e4526b27770b17ea857b],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\GreatuSave4U.GreatuSave4U.2.3, In Quarantäne, [16b0506b4446e4526b27770b17ea857b],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\GreatuSave4U.GreatuSave4U, In Quarantäne, [16b0506b4446e4526b27770b17ea857b],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\GreatuSave4U.GreatuSave4U.2.3, In Quarantäne, [16b0506b4446e4526b27770b17ea857b],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\GreatuSave4U.GreatuSave4U, In Quarantäne, [16b0506b4446e4526b27770b17ea857b],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\GreatuSave4U.GreatuSave4U.2.3, In Quarantäne, [16b0506b4446e4526b27770b17ea857b],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\CLSID\{56E2D5A6-5621-00CB-DBCD-E6FC69DE9201}, In Quarantäne, [9d29dbe0e5a5e94d5b376220eb16fd03],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\TTakeTheiCoupoin.TTakeTheiCoupoin, In Quarantäne, [9d29dbe0e5a5e94d5b376220eb16fd03],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\TTakeTheiCoupoin.TTakeTheiCoupoin.1.5, In Quarantäne, [9d29dbe0e5a5e94d5b376220eb16fd03],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TTakeTheiCoupoin.TTakeTheiCoupoin, In Quarantäne, [9d29dbe0e5a5e94d5b376220eb16fd03],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TTakeTheiCoupoin.TTakeTheiCoupoin.1.5, In Quarantäne, [9d29dbe0e5a5e94d5b376220eb16fd03],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TTakeTheiCoupoin.TTakeTheiCoupoin, In Quarantäne, [9d29dbe0e5a5e94d5b376220eb16fd03],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TTakeTheiCoupoin.TTakeTheiCoupoin.1.5, In Quarantäne, [9d29dbe0e5a5e94d5b376220eb16fd03],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\CLSID\{6bd1c251-6b5f-47c5-a211-88acb7a46735}, In Quarantäne, [cff73f7c6525ca6c3098e068d32fa55b],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\P6bd1c251_6b5f_47c5_a211_88acb7a46735_.P6bd1c251_6b5f_47c5_a211_88acb7a46735_, In Quarantäne, [cff73f7c6525ca6c3098e068d32fa55b],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\P6bd1c251_6b5f_47c5_a211_88acb7a46735_.P6bd1c251_6b5f_47c5_a211_88acb7a46735_.9, In Quarantäne, [cff73f7c6525ca6c3098e068d32fa55b],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P6bd1c251_6b5f_47c5_a211_88acb7a46735_.P6bd1c251_6b5f_47c5_a211_88acb7a46735_, In Quarantäne, [cff73f7c6525ca6c3098e068d32fa55b],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P6bd1c251_6b5f_47c5_a211_88acb7a46735_.P6bd1c251_6b5f_47c5_a211_88acb7a46735_.9, In Quarantäne, [cff73f7c6525ca6c3098e068d32fa55b],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P6bd1c251_6b5f_47c5_a211_88acb7a46735_.P6bd1c251_6b5f_47c5_a211_88acb7a46735_, In Quarantäne, [cff73f7c6525ca6c3098e068d32fa55b],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P6bd1c251_6b5f_47c5_a211_88acb7a46735_.P6bd1c251_6b5f_47c5_a211_88acb7a46735_.9, In Quarantäne, [cff73f7c6525ca6c3098e068d32fa55b],
PUP.Optional.SearchSnacks.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SearchSnacks_1.10.0.1, In Quarantäne, [5373ead13c4ee05633f5cc25b849fc04],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{3a3e15d8-a6d6-4fd5-9a43-2d47c482d0e5}, In Quarantäne, [eadc12a909815dd90dc3a79a8a78ae52],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\P3a3e15d8_a6d6_4fd5_9a43_2d47c482d0e5_.P3a3e15d8_a6d6_4fd5_9a43_2d47c482d0e5_, In Quarantäne, [eadc12a909815dd90dc3a79a8a78ae52],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\P3a3e15d8_a6d6_4fd5_9a43_2d47c482d0e5_.P3a3e15d8_a6d6_4fd5_9a43_2d47c482d0e5_.9, In Quarantäne, [eadc12a909815dd90dc3a79a8a78ae52],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P3a3e15d8_a6d6_4fd5_9a43_2d47c482d0e5_.P3a3e15d8_a6d6_4fd5_9a43_2d47c482d0e5_, In Quarantäne, [eadc12a909815dd90dc3a79a8a78ae52],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P3a3e15d8_a6d6_4fd5_9a43_2d47c482d0e5_.P3a3e15d8_a6d6_4fd5_9a43_2d47c482d0e5_.9, In Quarantäne, [eadc12a909815dd90dc3a79a8a78ae52],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P3a3e15d8_a6d6_4fd5_9a43_2d47c482d0e5_.P3a3e15d8_a6d6_4fd5_9a43_2d47c482d0e5_, In Quarantäne, [eadc12a909815dd90dc3a79a8a78ae52],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P3a3e15d8_a6d6_4fd5_9a43_2d47c482d0e5_.P3a3e15d8_a6d6_4fd5_9a43_2d47c482d0e5_.9, In Quarantäne, [eadc12a909815dd90dc3a79a8a78ae52],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{f219f114-292c-4aeb-bfc4-753a5b23ccbf}, In Quarantäne, [43835467f9912e08a62a66db7a8859a7],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\Pf219f114_292c_4aeb_bfc4_753a5b23ccbf_.Pf219f114_292c_4aeb_bfc4_753a5b23ccbf_, In Quarantäne, [43835467f9912e08a62a66db7a8859a7],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\Pf219f114_292c_4aeb_bfc4_753a5b23ccbf_.Pf219f114_292c_4aeb_bfc4_753a5b23ccbf_.9, In Quarantäne, [43835467f9912e08a62a66db7a8859a7],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pf219f114_292c_4aeb_bfc4_753a5b23ccbf_.Pf219f114_292c_4aeb_bfc4_753a5b23ccbf_, In Quarantäne, [43835467f9912e08a62a66db7a8859a7],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pf219f114_292c_4aeb_bfc4_753a5b23ccbf_.Pf219f114_292c_4aeb_bfc4_753a5b23ccbf_.9, In Quarantäne, [43835467f9912e08a62a66db7a8859a7],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Pf219f114_292c_4aeb_bfc4_753a5b23ccbf_.Pf219f114_292c_4aeb_bfc4_753a5b23ccbf_, In Quarantäne, [43835467f9912e08a62a66db7a8859a7],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Pf219f114_292c_4aeb_bfc4_753a5b23ccbf_.Pf219f114_292c_4aeb_bfc4_753a5b23ccbf_.9, In Quarantäne, [43835467f9912e08a62a66db7a8859a7],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{f08b2dfd-fbd5-48d6-9e70-d495eabcdb1e}, In Quarantäne, [d2f4d1ea09815fd7d2fe48f9cc3612ee],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\Pf08b2dfd_fbd5_48d6_9e70_d495eabcdb1e_.Pf08b2dfd_fbd5_48d6_9e70_d495eabcdb1e_, In Quarantäne, [d2f4d1ea09815fd7d2fe48f9cc3612ee],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\Pf08b2dfd_fbd5_48d6_9e70_d495eabcdb1e_.Pf08b2dfd_fbd5_48d6_9e70_d495eabcdb1e_.9, In Quarantäne, [d2f4d1ea09815fd7d2fe48f9cc3612ee],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pf08b2dfd_fbd5_48d6_9e70_d495eabcdb1e_.Pf08b2dfd_fbd5_48d6_9e70_d495eabcdb1e_, In Quarantäne, [d2f4d1ea09815fd7d2fe48f9cc3612ee],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pf08b2dfd_fbd5_48d6_9e70_d495eabcdb1e_.Pf08b2dfd_fbd5_48d6_9e70_d495eabcdb1e_.9, In Quarantäne, [d2f4d1ea09815fd7d2fe48f9cc3612ee],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Pf08b2dfd_fbd5_48d6_9e70_d495eabcdb1e_.Pf08b2dfd_fbd5_48d6_9e70_d495eabcdb1e_, In Quarantäne, [d2f4d1ea09815fd7d2fe48f9cc3612ee],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Pf08b2dfd_fbd5_48d6_9e70_d495eabcdb1e_.Pf08b2dfd_fbd5_48d6_9e70_d495eabcdb1e_.9, In Quarantäne, [d2f4d1ea09815fd7d2fe48f9cc3612ee],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\CLSID\{012a3bf7-b959-4eea-bc96-ae2f11a7b39d}, In Quarantäne, [30963f7cff8bb482646458f01ae809f7],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\P012a3bf7_b959_4eea_bc96_ae2f11a7b39d_.P012a3bf7_b959_4eea_bc96_ae2f11a7b39d_, In Quarantäne, [30963f7cff8bb482646458f01ae809f7],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\P012a3bf7_b959_4eea_bc96_ae2f11a7b39d_.P012a3bf7_b959_4eea_bc96_ae2f11a7b39d_.9, In Quarantäne, [30963f7cff8bb482646458f01ae809f7],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P012a3bf7_b959_4eea_bc96_ae2f11a7b39d_.P012a3bf7_b959_4eea_bc96_ae2f11a7b39d_, In Quarantäne, [30963f7cff8bb482646458f01ae809f7],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P012a3bf7_b959_4eea_bc96_ae2f11a7b39d_.P012a3bf7_b959_4eea_bc96_ae2f11a7b39d_.9, In Quarantäne, [30963f7cff8bb482646458f01ae809f7],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P012a3bf7_b959_4eea_bc96_ae2f11a7b39d_.P012a3bf7_b959_4eea_bc96_ae2f11a7b39d_, In Quarantäne, [30963f7cff8bb482646458f01ae809f7],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P012a3bf7_b959_4eea_bc96_ae2f11a7b39d_.P012a3bf7_b959_4eea_bc96_ae2f11a7b39d_.9, In Quarantäne, [30963f7cff8bb482646458f01ae809f7],
PUP.Optional.Multiplug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{98449C67-C7AF-BB53-112D-26C916814611}, In Quarantäne, [f1d5308b2c5e91a5777803356d959f61],
PUP.Optional.OfferMosquito.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001_Classes\TYPELIB\{B83C16AE-3C3D-5362-85D6-D19F9FB51262}, In Quarantäne, [3a8ce9d20585d363942670b0cc347d83],
PUP.Optional.OfferMosquito.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001_Classes\INTERFACE\{2C0830EC-8559-5E15-9DC7-5BB830020064}, In Quarantäne, [3a8ce9d20585d363942670b0cc347d83],
PUP.Optional.OfferMosquito.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001_Classes\INTERFACE\{A384AB73-46D8-570B-982A-776E7DED115A}, In Quarantäne, [3a8ce9d20585d363942670b0cc347d83],
PUP.Optional.OfferMosquito.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001_Classes\INTERFACE\{E4BC2DD7-8F3D-5254-8B4C-D2C3888D2A38}, In Quarantäne, [3a8ce9d20585d363942670b0cc347d83],
PUP.Optional.HTTOGROUP.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\fbDownloader, In Quarantäne, [4581a7145d2d3afc6f53760b55b10af6],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{26C9BBE4-6D45-4AB6-A5B4-E068C9F5EF6D}, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.ActiveContentHandle.1, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.ActiveContentHandler, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IminentWebBooster.ActiveContentHandler, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\IminentWebBooster.ActiveContentHandler, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IminentWebBooster.ActiveContentHandle.1, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\IminentWebBooster.ActiveContentHandle.1, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{26C9BBE4-6D45-4AB6-A5B4-E068C9F5EF6D}, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D8F01233-2DE6-4EE7-8988-37263F00651B}, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.TinyUrlHandler.1, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.TinyUrlHandler, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IminentWebBooster.TinyUrlHandler, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\IminentWebBooster.TinyUrlHandler, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IminentWebBooster.TinyUrlHandler.1, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\IminentWebBooster.TinyUrlHandler.1, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{D8F01233-2DE6-4EE7-8988-37263F00651B}, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IMBoosterARP, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.EnjoyCoupon.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{E7E31D58-524A-497F-BDA0-7C1B4D0E7D8D}, In Quarantäne, [03c392295634d2645f03582ea75eb947],
PUP.Optional.EnjoyCoupon.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{1CF7D67D-7195-4879-826D-12B1244DC9A6}, In Quarantäne, [03c392295634d2645f03582ea75eb947],
PUP.Optional.EnjoyCoupon.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{A56F8861-608D-4095-B51B-8BB65C00BB91}, In Quarantäne, [03c392295634d2645f03582ea75eb947],
PUP.Optional.EnjoyCoupon.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C9BAF74B-E106-472F-B4F8-45DF44B905F7}, In Quarantäne, [03c392295634d2645f03582ea75eb947],
PUP.Optional.EnjoyCoupon.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{DC925DE6-E884-486D-9976-605D57C9D8D3}, In Quarantäne, [03c392295634d2645f03582ea75eb947],
PUP.Optional.EnjoyCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{1CF7D67D-7195-4879-826D-12B1244DC9A6}, In Quarantäne, [03c392295634d2645f03582ea75eb947],
PUP.Optional.EnjoyCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A56F8861-608D-4095-B51B-8BB65C00BB91}, In Quarantäne, [03c392295634d2645f03582ea75eb947],
PUP.Optional.EnjoyCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C9BAF74B-E106-472F-B4F8-45DF44B905F7}, In Quarantäne, [03c392295634d2645f03582ea75eb947],
PUP.Optional.EnjoyCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{DC925DE6-E884-486D-9976-605D57C9D8D3}, In Quarantäne, [03c392295634d2645f03582ea75eb947],
PUP.Optional.EnjoyCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{1CF7D67D-7195-4879-826D-12B1244DC9A6}, In Quarantäne, [03c392295634d2645f03582ea75eb947],
PUP.Optional.EnjoyCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{A56F8861-608D-4095-B51B-8BB65C00BB91}, In Quarantäne, [03c392295634d2645f03582ea75eb947],
PUP.Optional.EnjoyCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{C9BAF74B-E106-472F-B4F8-45DF44B905F7}, In Quarantäne, [03c392295634d2645f03582ea75eb947],
PUP.Optional.EnjoyCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{DC925DE6-E884-486D-9976-605D57C9D8D3}, In Quarantäne, [03c392295634d2645f03582ea75eb947],
PUP.Optional.EnjoyCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{E7E31D58-524A-497F-BDA0-7C1B4D0E7D8D}, In Quarantäne, [03c392295634d2645f03582ea75eb947],
PUP.Optional.EnjoyCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{E7E31D58-524A-497F-BDA0-7C1B4D0E7D8D}, In Quarantäne, [03c392295634d2645f03582ea75eb947],
PUP.Optional.Fun2Save.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{DD1CFE82-CC89-497D-9573-B8B1867DDA09}, In Quarantäne, [09bdc5f693f78aac3e2a88fe9273d62a],
PUP.Optional.Fun2Save.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{74972EDF-A814-4507-8DD0-7A8C56A7DDBF}, In Quarantäne, [09bdc5f693f78aac3e2a88fe9273d62a],
PUP.Optional.Fun2Save.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{CEEAE576-EBDB-4824-929F-273454600785}, In Quarantäne, [09bdc5f693f78aac3e2a88fe9273d62a],
PUP.Optional.Fun2Save.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FB9A7BD0-EE09-427E-AB13-C54EE0C4EF86}, In Quarantäne, [09bdc5f693f78aac3e2a88fe9273d62a],
PUP.Optional.Fun2Save.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{74972EDF-A814-4507-8DD0-7A8C56A7DDBF}, In Quarantäne, [09bdc5f693f78aac3e2a88fe9273d62a],
PUP.Optional.Fun2Save.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{CEEAE576-EBDB-4824-929F-273454600785}, In Quarantäne, [09bdc5f693f78aac3e2a88fe9273d62a],
PUP.Optional.Fun2Save.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FB9A7BD0-EE09-427E-AB13-C54EE0C4EF86}, In Quarantäne, [09bdc5f693f78aac3e2a88fe9273d62a],
PUP.Optional.Fun2Save.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{74972EDF-A814-4507-8DD0-7A8C56A7DDBF}, In Quarantäne, [09bdc5f693f78aac3e2a88fe9273d62a],
PUP.Optional.Fun2Save.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{CEEAE576-EBDB-4824-929F-273454600785}, In Quarantäne, [09bdc5f693f78aac3e2a88fe9273d62a],
PUP.Optional.Fun2Save.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{FB9A7BD0-EE09-427E-AB13-C54EE0C4EF86}, In Quarantäne, [09bdc5f693f78aac3e2a88fe9273d62a],
PUP.Optional.Fun2Save.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{DD1CFE82-CC89-497D-9573-B8B1867DDA09}, In Quarantäne, [09bdc5f693f78aac3e2a88fe9273d62a],
PUP.Optional.Fun2Save.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{DD1CFE82-CC89-497D-9573-B8B1867DDA09}, In Quarantäne, [09bdc5f693f78aac3e2a88fe9273d62a],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{41F978F3-431A-4464-A789-5C0692D562FB}, In Quarantäne, [2e989b205b2f53e3c8b0444221e44eb2],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{138E44EF-8988-4DC7-8F48-FBC4FCEF83D1}, In Quarantäne, [2e989b205b2f53e3c8b0444221e44eb2],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{BB50CC62-09E1-4DD9-912C-F1DA4D6D71D8}, In Quarantäne, [2e989b205b2f53e3c8b0444221e44eb2],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E481A870-86C7-44E1-97DF-E759FC147CBE}, In Quarantäne, [2e989b205b2f53e3c8b0444221e44eb2],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FE332809-93C1-48DF-929F-AEC0BC4BFCFE}, In Quarantäne, [2e989b205b2f53e3c8b0444221e44eb2],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{138E44EF-8988-4DC7-8F48-FBC4FCEF83D1}, In Quarantäne, [2e989b205b2f53e3c8b0444221e44eb2],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{BB50CC62-09E1-4DD9-912C-F1DA4D6D71D8}, In Quarantäne, [2e989b205b2f53e3c8b0444221e44eb2],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E481A870-86C7-44E1-97DF-E759FC147CBE}, In Quarantäne, [2e989b205b2f53e3c8b0444221e44eb2],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FE332809-93C1-48DF-929F-AEC0BC4BFCFE}, In Quarantäne, [2e989b205b2f53e3c8b0444221e44eb2],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{138E44EF-8988-4DC7-8F48-FBC4FCEF83D1}, In Quarantäne, [2e989b205b2f53e3c8b0444221e44eb2],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{BB50CC62-09E1-4DD9-912C-F1DA4D6D71D8}, In Quarantäne, [2e989b205b2f53e3c8b0444221e44eb2],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{E481A870-86C7-44E1-97DF-E759FC147CBE}, In Quarantäne, [2e989b205b2f53e3c8b0444221e44eb2],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{FE332809-93C1-48DF-929F-AEC0BC4BFCFE}, In Quarantäne, [2e989b205b2f53e3c8b0444221e44eb2],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{41F978F3-431A-4464-A789-5C0692D562FB}, In Quarantäne, [2e989b205b2f53e3c8b0444221e44eb2],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{41F978F3-431A-4464-A789-5C0692D562FB}, In Quarantäne, [2e989b205b2f53e3c8b0444221e44eb2],
PUP.Optional.iSaver.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{230332DF-D235-47EE-BC42-60860EF144CD}, In Quarantäne, [953100bb16740234129ec0c73cc9837d],
PUP.Optional.iSaver.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{7D7DC692-982E-45B7-A6BF-17FCC4116652}, In Quarantäne, [953100bb16740234129ec0c73cc9837d],
PUP.Optional.iSaver.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{8F9CF0DE-24F7-4C18-907F-B4040F311E63}, In Quarantäne, [953100bb16740234129ec0c73cc9837d],
PUP.Optional.iSaver.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B022C8F0-0147-458C-BEC6-708E525402ED}, In Quarantäne, [953100bb16740234129ec0c73cc9837d],
PUP.Optional.iSaver.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7D7DC692-982E-45B7-A6BF-17FCC4116652}, In Quarantäne, [953100bb16740234129ec0c73cc9837d],
PUP.Optional.iSaver.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{8F9CF0DE-24F7-4C18-907F-B4040F311E63}, In Quarantäne, [953100bb16740234129ec0c73cc9837d],
PUP.Optional.iSaver.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B022C8F0-0147-458C-BEC6-708E525402ED}, In Quarantäne, [953100bb16740234129ec0c73cc9837d],
PUP.Optional.iSaver.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{7D7DC692-982E-45B7-A6BF-17FCC4116652}, In Quarantäne, [953100bb16740234129ec0c73cc9837d],
PUP.Optional.iSaver.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{8F9CF0DE-24F7-4C18-907F-B4040F311E63}, In Quarantäne, [953100bb16740234129ec0c73cc9837d],
PUP.Optional.iSaver.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{B022C8F0-0147-458C-BEC6-708E525402ED}, In Quarantäne, [953100bb16740234129ec0c73cc9837d],
PUP.Optional.iSaver.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{230332DF-D235-47EE-BC42-60860EF144CD}, In Quarantäne, [953100bb16740234129ec0c73cc9837d],
PUP.Optional.iSaver.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{230332DF-D235-47EE-BC42-60860EF144CD}, In Quarantäne, [953100bb16740234129ec0c73cc9837d],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\Iminent, In Quarantäne, [5f67f6c55c2e4ceaa0e2ea58e81c16ea],
PUP.Optional.TornTV.A, HKLM\SOFTWARE\TornPlusTV_version1.11-nv, In Quarantäne, [aa1c19a2365445f1d270a1694fb505fb],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\esrv.iminentESrvc, In Quarantäne, [873f1d9e87036bcbd562e55df70d58a8],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\esrv.iminentESrvc.1, In Quarantäne, [dde97546c8c22115aa8d1d25758f25db],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickCtrl.10, In Quarantäne, [e7df6a517d0d4cea5518d7afdf268a76],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickProcessLauncherMachine, In Quarantäne, [a71fa813abdf46f070fd9bebaa5b6c94],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickProcessLauncherMachine.1.0, In Quarantäne, [13b386359bef0630b4b9246249bc36ca],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoCreateAsync, In Quarantäne, [21a56259a3e76fc7dd914a3cf3128e72],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoCreateAsync.1.0, In Quarantäne, [675fe7d43f4b83b38ce2dea8ec1905fb],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoreClass, In Quarantäne, [51753f7cbfcbfe38b3bb6d197e87fd03],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoreClass.1, In Quarantäne, [a0266a514149ca6c6707a6e0eb1a21df],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoreMachineClass, In Quarantäne, [d5f1e0dbb4d6c1757fef1e68b055b54b],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoreMachineClass.1, In Quarantäne, [0fb709b2a5e549ed8ce289fd0cf9b848],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CredentialDialogMachine, In Quarantäne, [1ea8b704ff8b6acc77f73e488b7a07f9],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CredentialDialogMachine.1.0, In Quarantäne, [d1f51e9db0dae551fb73770f40c5c63a],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachine, In Quarantäne, [8e3878433b4ff93d69054a3c6a9bcc34],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachine.1.0, In Quarantäne, [02c45d5e7d0d171f501e56308c79a759],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachineFallback, In Quarantäne, [487e25968ffb37ff620c077fc1448080],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0, In Quarantäne, [378fffbc850579bda0ce642231d47d83],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassSvc, In Quarantäne, [dbeb0bb022683105f975681ef015bd43],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassSvc.1.0, In Quarantäne, [943282395b2f092dd698e5a1f213ff01],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.ProcessLauncher, In Quarantäne, [efd74c6f9eec6dc99dd14e3861a406fa],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.ProcessLauncher.1.0, In Quarantäne, [7254a516e0aa310529456521e02553ad],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3COMClassService, In Quarantäne, [527415a662283afc81ed107659acfb05],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3COMClassService.1.0, In Quarantäne, [c8fedae12d5d56e0dc92048261a47987],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebMachine, In Quarantäne, [1caafac19febda5c5f0fa0e67c89ef11],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebMachine.1.0, In Quarantäne, [42845d5e94f6043279f5d2b4669faa56],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebMachineFallback, In Quarantäne, [5e68febd4f3b6acc59158204a75ef10f],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebMachineFallback.1.0, In Quarantäne, [7650ceed9bef6ec8b2bcb5d1a263aa56],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebSvc, In Quarantäne, [6d59e0db3f4b4ee896d8483eea1be719],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebSvc.1.0, In Quarantäne, [6165d0ebd0ba93a36fff72140ff658a8],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\iminent, In Quarantäne, [5670516ac0ca04328177d09bd92c13ed],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\iminent.iminentappCore, In Quarantäne, [17af1e9d1476af8787b1212155af4eb2],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\iminent.iminentappCore.1, In Quarantäne, [34923c7f93f7fe3885b3f34fe123fd03],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\APPID\Iminent.WebBooster.InternetExplorer.DLL, In Quarantäne, [3195edcea6e4d36344c50d539c6939c7],
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\APPID\PriceGongIE.DLL, In Quarantäne, [d6f0fdbe3b4f4ee8af685fe512f2d22e],
PUP.Optional.BetterSurf.A, HKLM\SOFTWARE\CLASSES\APPID\YontooIEClient.DLL, In Quarantäne, [8145615a008af93d626af92a25df48b8],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\Iminent.WebBooster.InternetExplorer.DLL, In Quarantäne, [c006dfdca8e21b1b6e9b64fcba4b13ed],
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\PriceGongIE.DLL, In Quarantäne, [576fb00bff8b0630cb4c281cb05429d7],
PUP.Optional.BetterSurf.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\YontooIEClient.DLL, In Quarantäne, [7b4b10abc6c476c005c7061d9074ff01],
PUP.Optional.ASK.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\aaaajmgokiecajekipolejjhdgijlefj, In Quarantäne, [2c9a3388305a49edbfab32edc63eed13],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\3874, In Quarantäne, [f3d3f9c22664280e37b4b58008fc5da3],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4F101032-FB13-4E26-BFBC-138ABAF11412}, In Quarantäne, [16b0803b0189c96da0d32269a75e35cb],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B146D859-9117-4885-B21D-821EBB7F23CB}, In Quarantäne, [2c9a2299f298072f561f1d6eb74e08f8],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DC479BD1-95DC-4D7D-BED5-7AB4C0AF028E}, In Quarantäne, [a12554678cfe8da9e78d0e7de520d42c],
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE, In Quarantäne, [dbebf2c99dedf343ba981f6f56afdd23],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\WOW6432NODE\AskPartnerNetwork, In Quarantäne, [a91d05b6553554e269a04fa334cf3bc5],
PUP.Optional.Babylon.A, HKLM\SOFTWARE\WOW6432NODE\BabylonToolbar, In Quarantäne, [2b9ba912f4966fc727a4094f7491fa06],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, In Quarantäne, [01c57a41acdeea4c4b37fc463cc819e7],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\IminentToolbar, In Quarantäne, [5f67516a543662d4600bec5760a4ca36],
PUP.Optional.SearchSnacks.A, HKLM\SOFTWARE\WOW6432NODE\SearchSnacks_1.10.0.1, In Quarantäne, [daec6f4ceaa0fd398f66ca44dc28916f],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\SweetIM, In Quarantäne, [f8ce3388484279bd550c6f97cd370cf4],
PUP.Optional.TornTV.A, HKLM\SOFTWARE\WOW6432NODE\TornPlusTV_version1.11-nv, In Quarantäne, [2e980ab13852fe388db55eac9173dc24],
PUP.Optional.Wajam.A, HKLM\SOFTWARE\WOW6432NODE\WInterEnhance, In Quarantäne, [02c4605b335738fea3cc2fd6f50f9c64],
PUP.Optional.SuperOptimizer.C, HKLM\SOFTWARE\WOW6432NODE\{6791A2F3-FC80-475C-A002-C014AF797E9C}, In Quarantäne, [f9cdc9f2563441f53c1d622e8c79956b],
PUP.Optional.CrossRider.C, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\Crossrider, In Quarantäne, [fbcb34873b4fd660f7ccba39c93a639d],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.iminentESrvc, In Quarantäne, [d6f06358e0aa5ed8e651ab979272748c],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.iminentESrvc.1, In Quarantäne, [efd7fdbeb4d63df9c67187bbe81c05fb],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickCtrl.10, In Quarantäne, [45819229afdb8da9fc716c1a5fa626da],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickProcessLauncherMachine, In Quarantäne, [a1253388c2c86fc76ffee6a0d43143bd],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickProcessLauncherMachine.1.0, In Quarantäne, [33937249c8c253e372fbd3b344c10df3],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoCreateAsync, In Quarantäne, [4185caf1bdcdd561ea84374f52b3e21e],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoCreateAsync.1.0, In Quarantäne, [b01655666d1de74fc2acbfc7c93c14ec],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoreClass, In Quarantäne, [4d792596cebc0036115da0e6729320e0],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoreClass.1, In Quarantäne, [e3e37645b2d8f93d2f3fb1d514f1b947],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoreMachineClass, In Quarantäne, [893db407e6a4db5b323c0b7b40c5a65a],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoreMachineClass.1, In Quarantäne, [9333e6d5187291a54a244541f11444bc],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CredentialDialogMachine, In Quarantäne, [03c3c1fadab068ceb6b8a2e4be47e719],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CredentialDialogMachine.1.0, In Quarantäne, [4d79c6f54347e353e08ef88e7392de22],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachine, In Quarantäne, [b511605b6a20f442105e790d41c422de],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachine.1.0, In Quarantäne, [675f6c4f0a809f97234b7b0b2ed708f8],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachineFallback, In Quarantäne, [1fa7fdbedfab30067ef0f78ff31249b7],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0, In Quarantäne, [b4123d7e0684c96d3836bec84bba8977],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassSvc, In Quarantäne, [d9edf9c26c1e88ae244a2d59c83d48b8],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassSvc.1.0, In Quarantäne, [893d5a61fc8e280e1d51d8ae0401c63a],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.ProcessLauncher, In Quarantäne, [d1f5f1ca8505ad89234b0680c04524dc],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.ProcessLauncher.1.0, In Quarantäne, [378f6457aedc989e442a9ee8fb0aa15f],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3COMClassService, In Quarantäne, [21a54e6d52382e089cd26e18669fc937],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3COMClassService.1.0, In Quarantäne, [7b4bbefdcdbd25117af4ee9840c5eb15],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebMachine, In Quarantäne, [1fa74b70d5b56bcbe985691ddc29da26],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebMachine.1.0, In Quarantäne, [35918a31e7a32c0a541af78f1ee7eb15],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebMachineFallback, In Quarantäne, [4185cfec5d2d0234115daadc996c53ad],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebMachineFallback.1.0, In Quarantäne, [299d299248423303204e14720302c33d],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebSvc, In Quarantäne, [07bf04b7127853e38ae4394d44c14ab6],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebSvc.1.0, In Quarantäne, [d9edba0173173df9c9a59ee828ddac54],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\iminent, In Quarantäne, [f1d59a2116748fa77d7be18a91740bf5],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\iminent.iminentappCore, In Quarantäne, [6660a11a484241f5a98f152dcd379769],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\iminent.iminentappCore.1, In Quarantäne, [40869a21f09a2313cd6b5de563a18878],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\Iminent.WebBooster.InternetExplorer.DLL, In Quarantäne, [8145d2e94347e05655b480e0f80d758b],
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\PriceGongIE.DLL, In Quarantäne, [a026fbc0305ac472c156053fbd47e61a],
PUP.Optional.BetterSurf.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\YontooIEClient.DLL, In Quarantäne, [5274c8f3206ad2644389e63d62a24cb4],
PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE\Clients, In Quarantäne, [cafca01be8a244f2d5a0ee9e7b8a639d],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE, In Quarantäne, [dfe7aa11c2c83cfa32ba6fafa06406fa],
PUP.Optional.ASK.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\aaaajmgokiecajekipolejjhdgijlefj, In Quarantäne, [6264a516dbaf66d0fb6f52cd9470619f],
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\bkomkajifikmkfnjgphkjcfeepbnojok, In Quarantäne, [fbcb9e1d3b4f280efe1b9fa561a360a0],
PUP.Optional.BrowserCompanion.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\bodddioamolcibagionmmobehnbhiakf, In Quarantäne, [f1d5209b0981f244fb23af4b778c4db3],
PUP.Optional.Babylon.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dhkplhfnhceodhffomolpfigojocbpcb, In Quarantäne, [ad1915a64c3e0a2c7a20d5a10ef758a8],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\igdhbblpcellaljokkpfhcjlagemhgjl, In Quarantäne, [13b37f3c5733c274e59c91b17193fa06],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\jcdgjdiieiljkfkdcloehkohchhpekkn, In Quarantäne, [ccfaf1ca5238cb6b35f2d1538d7756aa],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\niapdbllcanepiiimjjndipklodoedlc, In Quarantäne, [0bbb4b70a7e346f07ab275b8d430ab55],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\3874, In Quarantäne, [992d95261872ac8a9f4c2e075ea619e7],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4F101032-FB13-4E26-BFBC-138ABAF11412}, In Quarantäne, [fccadedd8dfdb383df94414a3fc619e7],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B146D859-9117-4885-B21D-821EBB7F23CB}, In Quarantäne, [a125f9c2b2d84cea383de9a28283fb05],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DC479BD1-95DC-4D7D-BED5-7AB4C0AF028E}, In Quarantäne, [16b07e3ddab0290de98b7813a26360a0],
PUP.Optional.FastSearchings, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, In Quarantäne, [85415566c0ca43f3c3ce116665a0cb35],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{ed30d1cf}, In Quarantäne, [21a5c8f3ec9e8ea84169addf2ed7fc04],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10, In Quarantäne, [15b13e7d7c0eb6809f2b13657d88f808],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4, In Quarantäne, [a4227a41d5b5bc7a3299314730d541bf],
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE, In Quarantäne, [e7df2d8ef991181eec66602e1ce9ff01],
PUP.Optional.APNToolBar.Gen, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\APNMCP, In Quarantäne, [a22455666a2054e297745b9709faf10f],
PUP.Optional.PragmaFoobar.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ed30d1cf, In Quarantäne, [04c2f6c5b0da89ad90ab15e060a3b14f],
PUP.Optional.SearchSnacks.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\sssvc_1.10.0.1, In Quarantäne, [6462d0eb068479bd7284ac62db29e818],
PUP.Optional.APNToolBar.Gen, HKU\S-1-5-18\SOFTWARE\AskPartnerNetwork, In Quarantäne, [b51166555436979f63a533bf32d1956b],
PUP.Optional.SuperOptimizer.C, HKU\S-1-5-18\SOFTWARE\APPDATALOW\{1146AC44-2F03-4431-B4FD-889BC837521F}, In Quarantäne, [8f370face9a1c6701a3d9cf41aeba15f],
PUP.Optional.1ClickDownload.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\1ClickDownload, In Quarantäne, [b214d8e334569c9aeda5fa5efb0af40c],
PUP.Optional.APNToolBar.Gen, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\AskPartnerNetwork, In Quarantäne, [9135b10a1f6b3402f216aa4805fe936d],
PUP.Optional.BabylonToolBar.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\BabylonToolbar, In Quarantäne, [be08cfec3951dd59796779e1f60ffd03],
PUP.Optional.Iminent.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\Iminent, In Quarantäne, [8c3a6f4c3a5043f3384b83bf45bf2ad6],
PUP.Optional.Iminent.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\IminentToolbar, In Quarantäne, [5e686952d4b66acc086403407292d52b],
PUP.Optional.InstallCore.C, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\InstallCore, In Quarantäne, [46806754bccee353064d68287e87da26],
PUP.Optional.OfferMosquito.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\OfferMosquito, In Quarantäne, [4185befd286286b0b727275442c323dd],
PUP.Optional.SimpleNewTab.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\SimpleNewTab, In Quarantäne, [a323b605d7b3e452739714189c68e21e],
PUP.Optional.SmartBar, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\SmartbarBackup, In Quarantäne, [9531eecd3f4b0333b177d49b4abbbc44],
PUP.Optional.SmartBar, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\SmartbarLog, In Quarantäne, [3a8c0facccbe1422cd5a72fd818431cf],
PUP.Optional.SweetIM.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\SweetIM, In Quarantäne, [3294d8e37d0dc76f5f013ccabb4935cb],
PUP.Optional.TornTV.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\TornPlusTV_version1.11-nv, In Quarantäne, [08be714af9910432aa9931d936ceaf51],
PUP.Optional.TornTV.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\TornTv Downloader, In Quarantäne, [ae1806b5c7c350e6ebcfa26848bc4fb1],
PUP.Optional.Wajam.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\WajIEnhance, In Quarantäne, [4482b506c1c92016c4ad48bdce36ab55],
PUP.Optional.Wajam.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\WInterEnhance, In Quarantäne, [675f2695c9c17eb81b55f21322e20000],
PUP.Optional.SuperOptimizer.C, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\APPDATALOW\{1146AC44-2F03-4431-B4FD-889BC837521F}, In Quarantäne, [477ffcbf1575e55168efdab634d114ec],
PUP.Optional.PriceGong.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, In Quarantäne, [9c2a704b1c6eae88311bd9321be927d9],
PUP.Optional.TornTV.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\APPDATALOW\SOFTWARE\TornPlusTV_version1.11, In Quarantäne, [b51166551377a5915aea27e3fa0ae61a],
PUP.Optional.GlobalUpdate.C, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY, In Quarantäne, [85418338533792a4de09995c5aa9c838],
PUP.Optional.SmartBar, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\amfclgbdpgndipgoegfpkkgobahigbcl, In Quarantäne, [2f976d4ef298e056ae7871fe8b7afc04],
PUP.Optional.OfferMosquito.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\gbmdkmlcnbapgegninelmjbfibaghdmk, In Quarantäne, [21a508b333578ea819f3d656b84c4fb1],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\3874, In Quarantäne, [a224516aeb9f1a1ce45e769e48bc936d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Qwerty, In Quarantäne, [66608635d0ba8bab966f9963ac57b947],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{13555DAC-956B-4CC0-AE46-848340784422}, In Quarantäne, [14b209b296f459dd353c5536c83d0000],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{15DB3EFE-6B84-4EA8-A959-305E51F27383}, In Quarantäne, [c3035d5e701a74c209687c0f867f13ed],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{160AC6E7-95F1-47CC-A0D8-885781977E2A}, In Quarantäne, [d9ed38830783c373a5cdf299dd288b75],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{19758A5B-410D-4E7E-86D7-432BA3A8AFEE}, In Quarantäne, [1aac14a7a2e84ee88ce6414ad431867a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1EC0AAC2-E267-4214-963B-729B8C84DD3D}, In Quarantäne, [a5219e1ddcaee452056cc8c30203639d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1EC22442-1236-4467-BE2D-668DE16419DE}, In Quarantäne, [9630d9e24644ec4af47d810af60f4eb2],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1F35B22D-4543-4B73-8DCC-1CF74AA8FC27}, In Quarantäne, [ad19b6052961fc3ae68c6526ce3712ee],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{203C19DA-B7D8-4279-B04D-44D92226C1A3}, In Quarantäne, [7452aa11c1c90531df9202897f8642be],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21499D9A-D487-41D8-86A1-339A65DE9431}, In Quarantäne, [34922b90d2b8b284b5bdf497a95c38c8],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21F3CABE-4A08-4C5F-9ED2-6F4A30C29D13}, In Quarantäne, [f8ce803bafdbce680072bdce000523dd],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{224EEB89-285D-4EFA-8441-44702179D6E5}, In Quarantäne, [e7dfa91293f741f5492977147f86d927],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{23B39210-3219-4DCE-BC70-56A06C213E36}, In Quarantäne, [4f77fcbf2664cc6acea3ec9f2cd9c63a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2421BB6F-C5C8-43FA-933D-BBC8B08BE662}, In Quarantäne, [b412c2f9fe8cc67059196823ed18d828],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2462B7E8-6D8C-46DD-9BE3-53E47DB04EEC}, In Quarantäne, [23a315a651394fe75a1899f2f1144fb1],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{25834CFE-BD4A-4BB4-A548-18E3BD78E72A}, In Quarantäne, [4d79299265256bcb8ae88308b94c4bb5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{25DCF045-2965-49B8-9FCC-FB1CD0B259D0}, In Quarantäne, [edd90bb066243df986ebf3980005728e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{26A9B0B4-C6E8-4AEB-A2DE-61438762846F}, In Quarantäne, [64623e7d6426152138393f4c986d3fc1],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{28667503-AA5A-472F-BA11-C06F58933513}, In Quarantäne, [b90d3b807b0f0a2cdc964c3fb253c040],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{28BBE2AB-6EAF-4C49-AEA9-503FC4D054FC}, In Quarantäne, [22a4dcdf8cfef83e3042503b48bd0ef2],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2B0A6E3F-FA7E-4DF6-9BED-C8A3529445DB}, In Quarantäne, [dde9dddeb6d4c96df0820c7ffc09de22],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2BE6590A-B284-463C-9CF2-961228AFCACA}, In Quarantäne, [7a4c4f6c6b1f7eb8b0c1f992c93c29d7],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2C185BF5-AA54-4E29-875F-D9C64B989A3B}, In Quarantäne, [c1057b400b7f8aacff724a41ab5a6799],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2C80DFAC-C329-4D2E-B99A-3CC0C1B4C732}, In Quarantäne, [15b1b9020f7bee48d0a263281bea6799],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{30E5FA26-2113-46D5-BE89-A1263794F77A}, In Quarantäne, [7a4c497227634cead49e4744c540e917],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{31CA9D15-B3CE-4FFF-8B8A-9DD4B7495097}, In Quarantäne, [40866556682280b672002b60ea1b718f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{32D43877-451E-4892-BA8F-BEE4BF626FEB}, In Quarantäne, [bd09e9d2a9e10c2a1f53ec9f5ea705fb],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{35EAD046-D922-473D-A9B7-148CB9EEE9CB}, In Quarantäne, [3f87d1ea0b7f2d09ed847c0f8e7719e7],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{37F82B34-67B6-418D-B9D3-42D3ED477934}, In Quarantäne, [a81eab1037536fc7a5ccfd8ed530fe02],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{38806BC6-C466-48E2-B4F1-D9F9A461103E}, In Quarantäne, [51751e9d52383105fa787b10a85d07f9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3BF7A325-77B4-4EA2-909F-9755C61E728B}, In Quarantäne, [755119a2e6a46cca531e3b505da8da26],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3CAA96E9-7047-4CF9-9DF7-EC83882D9559}, In Quarantäne, [0eb8b6056b1f5cda5e1394f77e87837d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3D48F5D4-E04A-4D6E-8CC7-E952A522A01B}, In Quarantäne, [cbfb89322a60bc7aef82c7c48a7b12ee],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3D8E10ED-1B1B-46F9-9064-93156E33E334}, In Quarantäne, [5b6bb6057911aa8cafc38efda164738d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3E6D493F-A941-40C8-B0CD-46815BBD81A9}, In Quarantäne, [923448736e1c30065d14b2d9e61f05fb],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3EF22482-B49E-4AE0-BC93-A32194BFECE1}, In Quarantäne, [dde916a5602a6ec89ed4484322e35ca4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3F42A7BE-E533-4AB0-A4F7-6FBDDEC11A39}, In Quarantäne, [8b3bf5c68109fe387ef4e6a55baa20e0],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{410CC6B1-C5E9-4CFB-A721-7A66873945B7}, In Quarantäne, [fec86e4db4d658de4a278efdb550a060],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4399A406-8AE6-4FD9-B4BB-403A218A7E84}, In Quarantäne, [04c2f1ca59310630a1d04e3d63a2857b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{447116FB-23F8-4F46-8AC9-4767498AB3FC}, In Quarantäne, [b115d5e632586bcb74fe1378f312e41c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{44D5BBB4-AD5E-4F2C-AEB1-C1733A6B6391}, In Quarantäne, [4185b209d8b2c76f9ad7d9b2d72e2dd3],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4601DEF5-6E27-49A1-BE3D-C7249D63F939}, In Quarantäne, [774f44778a0047ef91e0a4e785807d83],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{47EBBFDA-A15B-4007-9621-187629BF1442}, In Quarantäne, [7155ac0f5238fd39c1b0aedd996c42be],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4A63AFE1-355E-42A4-B380-353314977E94}, In Quarantäne, [44827348d0ba7bbbd0a112793ec7ac54],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4AE93E36-2869-4B2E-9BC5-FD4E408238BF}, In Quarantäne, [5373e9d2ddad67cf1062a4e782837c84],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4B1E17FC-B0CF-4E0F-8CC9-823FDD585934}, In Quarantäne, [71551f9ca7e3b97d6110ed9e8e778878],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4B316EA6-CEA7-4D89-AD8C-37ABEDFD1CF5}, In Quarantäne, [63638a317b0ff6400869d4b7aa5b3cc4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4B53C5FA-8283-435F-A514-38C1C4B7FA7E}, In Quarantäne, [5472e0dba6e461d5adc4038828dd41bf],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4BBC4087-509E-4F52-BA72-4EC3A84487CB}, In Quarantäne, [6f573f7c1c6e181ec0b10685a461cc34],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4E57D8A7-C8E1-43A3-AB6E-8E199A2BD9AE}, In Quarantäne, [dee88a314842c86e155dc1cafd0808f8],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4F101032-FB13-4E26-BFBC-138ABAF11412}, In Quarantäne, [685e03b80783b680e8887e0d8d782cd4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{509200CF-8D3D-4193-B3DF-63D2FBA7F75C}, In Quarantäne, [f6d094273a508aacfc76454651b446ba],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{50BB1589-1885-40EF-9AF9-C514B267151A}, In Quarantäne, [f7cf4c6fb2d8cb6b620f6c1f52b3b34d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{51CE881F-E908-4DE9-8C4D-F5F8D23EEF20}, In Quarantäne, [903645764149d1656b07fa9104012bd5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{54BB2726-EFDB-4026-9C8C-541CC76912A9}, In Quarantäne, [f0d6fac1dfab270f244ef7946a9bd828],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{56239A88-21DF-47E5-882D-71B3EC40D158}, In Quarantäne, [9d299526a7e3b086571a2962bc49f40c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{570F40F1-7721-40BB-B162-2050E15C15B3}, In Quarantäne, [1ea8bdfe068468cefc752d5e9d68a858],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5789CD6F-AC14-461A-9013-865D4B7A99F0}, In Quarantäne, [ffc7a91249412b0bb8b9bad1ea1b6e92],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5861AE01-9996-4406-8AE7-BC801A7D60B0}, In Quarantäne, [883ed7e441499c9adc95810ad23321df],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5CA8B5DC-17F9-4B95-BF31-8D83588BEAA0}, In Quarantäne, [6561ab105f2bfb3b2b47d8b3ed1857a9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5CB05241-BE6D-4960-BF35-32382D5EDD94}, In Quarantäne, [dfe7f0cbacdef83e78f9b4d748bd7d83],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5E8D6750-32BE-4F43-99C9-5D54AB3EACE5}, In Quarantäne, [992de2d9e7a3a78f2c452863877e738d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5EAB19F8-43D0-4119-AA4A-FEB76B6DEB42}, In Quarantäne, [992d18a3d9b1ad89591889029c690bf5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{601FAAE0-DFB4-4CC0-9D15-87B3AC29EBB3}, In Quarantäne, [a224c0fbcfbb8caa264c533852b3ae52],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{60531651-8AE2-40C2-B112-FC8C86E154B9}, In Quarantäne, [35918c2fa0ea46f0cca54b406b9acf31],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{608C3011-93B5-4CE8-959E-9146112C372C}, In Quarantäne, [6660ceedaedcdb5b95dd4744f4119e62],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6098170F-AA56-4A12-B8DE-9EAEA1BB2BD6}, In Quarantäne, [3f87e9d268226ec8333f6e1d828311ef],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{615D4741-16BC-45C0-B29C-89BA4A225984}, In Quarantäne, [08be17a46327eb4b0968bad1b74e19e7],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{61DC901F-75F3-45E2-9B17-4AFC3C37D6C4}, In Quarantäne, [05c1f2c948423600bcb6aae1bc4950b0],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{640603B8-4FF1-4AEA-B23F-69A94DD44DE8}, In Quarantäne, [bb0b4b70365484b299d8eaa1c73e9b65],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{644C0C86-9875-44CE-90F8-F2E8CEDF6BAC}, In Quarantäne, [b2142695a9e1ed49fc76b5d63ec74fb1],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{64D9D55F-E1AF-49D3-ADC6-818063EB6031}, In Quarantäne, [fbcbb803b4d6191d106114772adb837d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6884E3AB-6FBB-4559-A2F2-F0FBAA558A93}, In Quarantäne, [95317447e2a82f07333e3a51bf4641bf],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68A51729-61A3-447E-A2E5-AB8822F6D817}, In Quarantäne, [14b2ae0dff8b0036eb867b103dc8e41c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6B62CF90-39D0-4BE0-8A67-24ACB36A6F51}, In Quarantäne, [d4f268534a4056e083ee99f214f10af6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6B65A272-6F3F-4A5C-8F8B-72AF51E7AA5D}, In Quarantäne, [576fac0fadddc670304175167194a35d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6D18C1FF-EE09-43A0-A162-684B96F3E019}, In Quarantäne, [a71fb704bbcf85b1de94b4d7ed187c84],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6DC7E56E-2404-4F4B-AD73-8E3E4DC3C8E6}, In Quarantäne, [07bf615aa0ea71c5b8b9afdcb94c26da],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6E031E42-FDAE-4264-B371-C38D86B812F3}, In Quarantäne, [05c1b10aaedc95a1640e0f7ca95cdc24],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6E48FA9D-57FF-4F91-BEC6-68772EC66658}, In Quarantäne, [4a7cefccbad03ef8660c2764897c7f81],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F27B504-256B-480C-9DB6-A651222EB632}, In Quarantäne, [dceaf0cbbad088ae1d5495f653b2649c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F359BFC-8815-4141-A2F7-9ECC3BB7A960}, In Quarantäne, [fbcbdddec2c82214c0b13b50a461956b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{71417E86-7707-41A5-8C3C-402BBD1D59CC}, In Quarantäne, [96305467d0ba88ae3f336d1e04010ff1],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{71A8220A-7B67-497B-A7CC-8036C8C327A5}, In Quarantäne, [dee89a21b3d74de988e98cff9c69ec14],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{726572E5-5BEC-4716-9F63-98DC9F5039E4}, In Quarantäne, [5571c5f62862d561225049426c997987],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7328ED47-9B2B-4ADE-888A-1C358497904D}, In Quarantäne, [08be5c5f1e6c3ff797db0883e025cf31],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{79969DE0-DE45-435F-AB40-10B843F64789}, In Quarantäne, [527439820684be78aec43457d134f30d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7A58C4B4-9E12-4886-8758-EDE5552FAE42}, In Quarantäne, [d2f498235a3072c4294963280afbfd03],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{80071690-BE27-4E51-ADEA-F638471C8A46}, In Quarantäne, [4b7b0ab18406d462d9993358b2533ac6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{80911FC7-96D0-485B-A81D-5B723C95797F}, In Quarantäne, [5c6aa01b1b6f37ffabc7b6d5bd48c739],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{81AA2498-A9D6-4D89-9482-34E5BBD0B2BB}, In Quarantäne, [1ea805b6f89279bd7df5e9a2c0453bc5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{81DA1701-9C7A-4B99-B03C-7ED32379D8A2}, In Quarantäne, [11b586358dfd0a2cf37eddaedf26a25e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{82A12D5B-3068-4518-9A92-56E1ED123C3F}, In Quarantäne, [794d2e8da1e91c1a9bd643489174fc04],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{846D7B24-E797-4B48-BB7A-D54AD33A6B1B}, In Quarantäne, [f6d0f7c41971ff378de4c0cb9471b54b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{85778745-6721-409E-8919-E9C741BF5E6C}, In Quarantäne, [d9ed8f2cd5b56bcb3f3376154cb9ea16],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{86328A8B-D943-4DD8-8988-8D9DF5AD8A5A}, In Quarantäne, [23a323985634d75f5819e8a363a2c739],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8B1D6B38-9F07-4181-9A76-902B74D224FA}, In Quarantäne, [d5f1ccef5832c96d432e43487b8ae41c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8B528D71-7589-46F8-9C8F-2B505A5EAFDE}, In Quarantäne, [378f66556525b18597dbb8d3eb1aa759],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8E7F8E7D-4668-4D53-B336-56858E317239}, In Quarantäne, [fcca2a91e6a47db98de58cffbe47b24e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8EE5C312-397F-4039-A33C-559261B09D89}, In Quarantäne, [31951d9eb2d838fe31418cff64a123dd],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8FEF76F7-D9FB-4D8D-984C-7B2D7AEFCDB8}, In Quarantäne, [c7ff912a0a80a690b6bc117a6a9b9f61],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{907149D2-F0F1-470F-8A4F-A55E2376CDBB}, In Quarantäne, [ecda3e7d39512016bcb60487f70e0af6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{926E0B10-AB3C-4EC3-A85B-8B1C90D846B4}, In Quarantäne, [596d5c5f355572c4cea35932ca3b3dc3],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{92EA6914-1C1C-4A5D-9B5B-A0C6B85EFC2F}, In Quarantäne, [25a16259adddc76fbfb25932c63f7987],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{94549B53-8B98-4C75-B921-28A08FEE30AC}, In Quarantäne, [ab1ba61523678aac85ec6c1fe61fdb25],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{94F33C37-1F08-4E7A-B233-B62C7A83B6F8}, In Quarantäne, [784efac1a9e18ea82d458cfffa0b16ea],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{99DF167A-AC5B-4963-827C-77BFFE27D382}, In Quarantäne, [0abc5f5ca8e2d066066cbecde223d22e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{99FAC615-443D-4CD6-9AA3-C21C77A1B2F0}, In Quarantäne, [72546f4cc5c5e551a2d03b50976eca36],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9E9F101D-234C-4585-9217-A836F9306FC0}, In Quarantäne, [5175e8d3177396a0d89a8cff06ffbc44],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A0C5C1FB-D737-408B-952E-BA45EE6852E1}, In Quarantäne, [cbfb477473178ea87bf61873877e926e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A21A1607-84D0-4799-B4B5-35FAA0679EBA}, In Quarantäne, [10b67b406f1b47efc9a9711afd083bc5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A432C93A-6F4C-408D-9367-851AC0E086E2}, In Quarantäne, [00c68536a0ea23131e54800b16ef8779],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A5BC7AAD-943F-4219-B577-AD7B37A3B319}, In Quarantäne, [11b55764eaa00a2c8ee3e7a4e91caf51],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A77408B9-F717-47D7-9E1E-8510A3E2C259}, In Quarantäne, [992d685351399c9acca5d1bac83dc23e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A7D44431-C495-428A-AE94-F5A8C935D97E}, In Quarantäne, [dbebedce90fa1422e58cef9c72934cb4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AC9B58BB-D8C9-4E67-91C8-E88FBB4ED842}, In Quarantäne, [3c8ac3f837530630c0b14e3dbc496a96],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AD52DB4A-4168-49C3-B3E4-1A8F162848B1}, In Quarantäne, [fcca685301895bdbff7394f7897cc63a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AD9131B5-E4B9-4529-88A5-FFF22D9A83BB}, In Quarantäne, [ecda0ab1543672c47bf68605a560d12f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AE63217C-EB36-4C35-95CC-D3817D4D909F}, In Quarantäne, [972fe6d51773c373561c48434bbac937],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B146D859-9117-4885-B21D-821EBB7F23CB}, In Quarantäne, [b016a01b2a601620135fd9b265a050b0],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B1FF7E62-5ABA-4C91-B69B-D97B8AD45B8E}, In Quarantäne, [9c2adedd4446bf77fe7326650cf99e62],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B59DDEA0-ADA7-49B6-A5D0-8212E321D8AF}, In Quarantäne, [388e6853f09a5adc81f02f5c0401e917],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B8726841-64E4-4054-AEB5-9EA24B3E558A}, In Quarantäne, [6165ceed3d4dea4c78fa4942c93c30d0],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B884E5AE-8F78-461B-B1D3-578B4A8EEC6E}, In Quarantäne, [dbeb5f5cb4d650e6cda5dbb07392758b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B92441D9-6E04-4E75-92CA-FB994B7E4511}, In Quarantäne, [6b5bf3c8f8921620e9882d5e8f761fe1],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B945C334-258B-4498-8EF2-662581FA3487}, In Quarantäne, [e6e011aa484254e2b2bf642752b326da],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B9B6E9FA-1BCF-4EAB-BD58-AF85F6D296D8}, In Quarantäne, [873fb506dcaebd79bfb290fb976e55ab],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BA073145-D54A-47DE-9F6B-4CCCFC6ECA73}, In Quarantäne, [85417e3da6e450e6f978d6b5ad5831cf],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BA3416E3-236E-425D-A36F-FC7DC676BE86}, In Quarantäne, [ac1ac0fbe6a430060a67088341c402fe],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BAB1C3ED-D21E-4A8B-A5FF-D78A249222B3}, In Quarantäne, [685e01ba3951c472333e9eed7b8a7a86],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BCFE8E09-6ECF-4ADF-B0B6-88CC89CF226A}, In Quarantäne, [03c335867515cb6bc7abed9e16ef15eb],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BE8CD7AE-4078-4EB6-80B3-A3C7A1D196F0}, In Quarantäne, [51754675b0dabc7a81f1d6b57c895ba5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BF739EE9-6004-4E8B-81B7-6E15CEF5C1C8}, In Quarantäne, [3c8a6259cfbb0f2751213b5005003ac6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C1E7D2DE-2446-4FDC-9544-3A4A314AB52A}, In Quarantäne, [4a7cfcbf2664f145561ce2a946bf3dc3],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C2085EEC-1C15-41A1-8AB3-C17D72159243}, In Quarantäne, [5274724986046fc7056cdead62a31fe1],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C284AB12-A368-4FCF-BF76-B1D055508273}, In Quarantäne, [b214a71445456dc92e43840741c4b14f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C2F33D95-8CE4-4526-9911-B672B286662E}, In Quarantäne, [7056497274160d298ee44c3f54b10af6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C468573A-711C-4EBE-8313-F153604B2754}, In Quarantäne, [735310ab840659dd1161127958adcb35],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C4C4D92F-21A3-4BEC-BDFA-CFCFC21EAEB6}, In Quarantäne, [c1058c2f51394fe74c2586059b6aab55],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7EB8190-D6F4-4EE4-B8E1-93CD2024AD39}, In Quarantäne, [e1e5c9f273177eb8611114771aeb36ca],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CA945C24-5C72-4F70-B4AA-7DDC9842D816}, In Quarantäne, [e1e56a51771348eef77b0c7fd233916f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CBD9E240-E85C-45F8-B2EF-61D584A5FE1C}, In Quarantäne, [a422ead11b6f39fd6c052467ac599f61],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CCED5D00-E8BE-4A12-B8AD-ECF6EAF2213B}, In Quarantäne, [7c4ae3d85a3059dde889e7a416ef738d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CF95196C-D21D-4EFD-8C1F-D89B3EDDC94D}, In Quarantäne, [596d427996f466d03e34b1da986da858],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CFA2D123-6FFE-414B-9C1C-37582A479E63}, In Quarantäne, [d3f37348ee9cde5839391576ea1b8878],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D088882D-1C78-4A2F-B419-69D3FA1D1AFB}, In Quarantäne, [6c5a9328c7c3d165541e8902ca3bdd23],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D3A5ADBD-9FCF-4DD3-9C7D-64B7D584F751}, In Quarantäne, [685e7942355562d4571a6328c0454eb2],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D64E347A-A841-4297-867F-49EBA7C13FCD}, In Quarantäne, [7b4bd4e7800a171fe9896229eb1af709],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D693B18C-A757-402B-A5C0-33CE8A1E722B}, In Quarantäne, [b3130ab15b2f3bfb6111454658ad08f8],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D92BDAF5-79D4-4661-A126-5C38ED6B75AE}, In Quarantäne, [af170ab1fb8faf87fc7556359471837d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DAB30ADA-BA4C-4861-9813-E0F79E148D3D}, In Quarantäne, [3f87c1fa4b3fd561c1b052397f8640c0],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DC479BD1-95DC-4D7D-BED5-7AB4C0AF028E}, In Quarantäne, [5b6b1d9e4f3b9f977af77615c3429f61],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DC891971-8BB8-4BD2-A241-C34A9C7F66F7}, In Quarantäne, [6363b3081d6d8caa7cf5dfac798c30d0],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E06CB930-1437-4295-A556-C2F6AE16C0AB}, In Quarantäne, [eadc09b2cfbb7db9472a038816ef6b95],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E403B2D8-41C7-4078-AF1F-5FBD9C287C83}, In Quarantäne, [7e485467117922149fd32c5fdd28c040],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E42553E3-5671-4C45-AB7A-1A316FBC2143}, In Quarantäne, [8d39ba01e6a440f6b9b9f7940df8d62a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EB6A0B0A-CED2-4B8E-AFF1-C25BC833CDFC}, In Quarantäne, [b31378435a301422c2b09cef9b6ac739],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EB77AAFC-6F03-4651-AEEE-DDF6395CB82D}, In Quarantäne, [ffc77546b3d78bab116096f558ad5fa1],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EBFD4D1D-C3F6-4932-8B8F-FD877AB76749}, In Quarantäne, [289ef0cbd0ba3600333ef497a0659a66],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EC323C3E-B4A1-4C9F-A397-50FA6828B22D}, In Quarantäne, [43832f8c36545bdb383af39847be9a66],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F16EBFEA-1F30-425B-9728-133B8F2266DE}, In Quarantäne, [f0d604b7612949ed0c65afdcd92ca65a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F20665C1-773F-44FB-BBEB-4D9C60328048}, In Quarantäne, [e4e29e1d8efca1953a37afdc0ff6dc24],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F3838226-C4CA-4679-855C-EB109C413382}, In Quarantäne, [b61082393159f1457cf6018a907536ca],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F72B683E-906B-42DA-B710-9E83A2DF437F}, In Quarantäne, [09bd219a15755bdb353c3556f60f8878],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FEFFDEB3-261E-44A1-BBCC-9864D5479584}, In Quarantäne, [ac1a6952a9e1a0963240ff8c11f412ee],
PUP.Optional.Iminent.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOWREGISTRY\Iminent, In Quarantäne, [a125efcc464476c01926929dea1aa65a],
PUP.Optional.WebSearchInfo, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, In Quarantäne, [93337d3ee8a2e452d86970f591745da3],
PUP.Optional.OptimizerPro.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\OPTIMIZER PRO, In Quarantäne, [ac1afcbf474379bd1bc2fb9256afb34d],
PUP.Optional.Wajam.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\WAJAM, In Quarantäne, [22a4a9128a00191d5c3077e339cc25db],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A2CC3C46-143B-4142-9D5A-B8543F0A6F55}, In Quarantäne, [60665f5c593130069db66955788bb14f],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\iminent.iminentappCore, In Quarantäne, [60665f5c593130069db66955788bb14f],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\iminent.iminentappCore.1, In Quarantäne, [60665f5c593130069db66955788bb14f],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{A2CC3C46-143B-4142-9D5A-B8543F0A6F55}, In Quarantäne, [60665f5c593130069db66955788bb14f],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{9FD0C1D9-180B-4834-B80B-4B7325AF90E1}, In Quarantäne, [60665f5c593130069db66955788bb14f],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\i, In Quarantäne, [60665f5c593130069db66955788bb14f],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\i, In Quarantäne, [60665f5c593130069db66955788bb14f],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\i, In Quarantäne, [60665f5c593130069db66955788bb14f],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{9FD0C1D9-180B-4834-B80B-4B7325AF90E1}, In Quarantäne, [60665f5c593130069db66955788bb14f],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{8E9F2D02-6B06-4EBA-92C2-68438EADED28}, In Quarantäne, [60665f5c593130069db66955788bb14f],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{8E9F2D02-6B06-4EBA-92C2-68438EADED28}, In Quarantäne, [60665f5c593130069db66955788bb14f],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{8E9F2D02-6B06-4EBA-92C2-68438EADED28}, In Quarantäne, [60665f5c593130069db66955788bb14f],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\iminent, In Quarantäne, [60665f5c593130069db66955788bb14f],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdate.OneClickCtrl.10, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.Update3WebControl.4, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.Update3WebControl.4, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdate.Update3WebControl.4, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Video Converter, In Quarantäne, [a81e813a4a40e84e5d14588526dda060],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Video Converter Bundle by SweetPacks, In Quarantäne, [7155ebd0d0ba0e28304116c7d82b956b],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A439801C-961D-452C-AB42-7848E9CBD289}, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{A439801C-961D-452C-AB42-7848E9CBD289}, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\MgMediaPlayer.GifAnimator.1, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\MgMediaPlayer.GifAnimator, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MgMediaPlayer.GifAnimator, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\MgMediaPlayer.GifAnimator, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MgMediaPlayer.GifAnimator.1, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\MgMediaPlayer.GifAnimator.1, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\MediaPlayer.GraphicsUtils.1, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\MediaPlayer.GraphicsUtils, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MediaPlayer.GraphicsUtils, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\MediaPlayer.GraphicsUtils, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MediaPlayer.GraphicsUtils.1, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\MediaPlayer.GraphicsUtils.1, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],


Why me 17.06.2015 14:17

Mbam.txt (teil 2):

Code:

Registrierungswerte: 202
PUP.Optional.HTTOGROUP.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|DataMgr, "C:\Users\PC\AppData\Roaming\DataMgr\DataMgr.exe", In Quarantäne, [cef8c9f2d5b52d091ba7315024e25aa6]
PUP.Optional.AskPartnerNetwork.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\aaaajmgokiecajekipolejjhdgijlefj|path, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\CRX\ToolbarCR.crx, In Quarantäne, [09bd17a45c2efd39e1277f10966f7090]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4f101032-fb13-4e26-bfbc-138abaf11412}|AppName, TornPlusTV_version1.11-bg.exe, In Quarantäne, [16b0803b0189c96da0d32269a75e35cb]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{b146d859-9117-4885-b21d-821ebb7f23cb}|AppName, TornPlusTV_version1.11-codedownloader.exe, In Quarantäne, [2c9a2299f298072f561f1d6eb74e08f8]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{dc479bd1-95dc-4d7d-bed5-7ab4c0af028e}|AppName, TornPlusTV_version1.11-buttonutil.exe, In Quarantäne, [a12554678cfe8da9e78d0e7de520d42c]
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, In Quarantäne, [dbebf2c99dedf343ba981f6f56afdd23]
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE|path, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, In Quarantäne, [dfe7aa11c2c83cfa32ba6fafa06406fa]
PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATEDEV|AuCheckPeriodMs, 21600000, In Quarantäne, [92349c1f4f3b082e93c1cb2ab54ed12f]
PUP.Optional.AskPartnerNetwork.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\aaaajmgokiecajekipolejjhdgijlefj|path, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\CRX\ToolbarCR.crx, In Quarantäne, [873f7d3e6e1cd75fae5a345b8a7b22de]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4f101032-fb13-4e26-bfbc-138abaf11412}|AppName, TornPlusTV_version1.11-bg.exe, In Quarantäne, [fccadedd8dfdb383df94414a3fc619e7]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{b146d859-9117-4885-b21d-821ebb7f23cb}|AppName, TornPlusTV_version1.11-codedownloader.exe, In Quarantäne, [a125f9c2b2d84cea383de9a28283fb05]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{dc479bd1-95dc-4d7d-bed5-7ab4c0af028e}|AppName, TornPlusTV_version1.11-buttonutil.exe, In Quarantäne, [16b07e3ddab0290de98b7813a26360a0]
PUP.Optional.Searchoholic.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}|FaviconURL, hxxp://websearch.searchoholic.info/favicon.ico, In Quarantäne, [6d59c5f6701a84b225488371f80be41c]
PUP.Optional.Searchoholic.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}|FaviconURLFallback, hxxp://websearch.searchoholic.info/favicon.ico, In Quarantäne, [e0e6d3e80b7f00368edfbb39b0539e62]
PUP.Optional.Searchoholic.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}|URL, hxxp://websearch.searchoholic.info/?l=1&q={searchTerms}&pid=21073&r=2014/12/22&hid=5952623993991962179&lg=EN&cc=DE&unqvl=72, In Quarantäne, [0cba2c8fb3d757df2f3e08ecb0538878]
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}|Url, hxxp://search.iminent.com/?appId=713BE664-A319-4DDF-9BA8-723FD0DDFD09&ref=toolbox&q={searchTerms}, In Quarantäne, [9234b90276146fc7302addaf9570c63a]
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EEE6C360-6118-11DC-9C72-001320C79847}|URL, hxxp://search.sweetim.com/search.asp?src=6&crg=3.09010003&st=12&q={searchTerms}&barid={FF4FD482-C153-4A34-B19A-6B25C7B6153E}, In Quarantäne, [e2e453683852cd691c6f6092f3105aa6]
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|ApnTBMon, "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe", In Quarantäne, [fdc9813a5b2fa09620eaf9f9b251b64a]
PUP.Optional.SearchSnacks.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{c0eb055f-057e-4671-95f5-6bba7ba017fa}, C:\Program Files (x86)\Mozilla Firefox\extensions\{c0eb055f-057e-4671-95f5-6bba7ba017fa}, In Quarantäne, [a81e417a0f7bec4a9a5f63ab27ddc63a]
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, In Quarantäne, [e7df2d8ef991181eec66602e1ce9ff01]
PUP.Optional.Vitruvian.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\sssvc_1.10.0.1|ImagePath, "C:\Program Files (x86)\SearchSnacks_1.10.0.1\Service\sssvc.exe", In Quarantäne, [b70fa5163951dd5954705337788d46ba]
PUP.Optional.Iminent.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPROTECTION|ImagePath, C:\Program Files (x86)\Common Files\Umbrella\Umbrella.exe, In Quarantäne, [0cba318a1b6f2c0a3513691fce37d729]
PUP.Optional.GlobalUpdate.C, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY|source, auto, In Quarantäne, [85418338533792a4de09995c5aa9c838]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{13555DAC-956B-4CC0-AE46-848340784422}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [14b209b296f459dd353c5536c83d0000]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{15DB3EFE-6B84-4EA8-A959-305E51F27383}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [c3035d5e701a74c209687c0f867f13ed]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{160AC6E7-95F1-47CC-A0D8-885781977E2A}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [d9ed38830783c373a5cdf299dd288b75]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{19758A5B-410D-4E7E-86D7-432BA3A8AFEE}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [1aac14a7a2e84ee88ce6414ad431867a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1EC0AAC2-E267-4214-963B-729B8C84DD3D}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [a5219e1ddcaee452056cc8c30203639d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1EC22442-1236-4467-BE2D-668DE16419DE}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [9630d9e24644ec4af47d810af60f4eb2]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1F35B22D-4543-4B73-8DCC-1CF74AA8FC27}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [ad19b6052961fc3ae68c6526ce3712ee]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{203C19DA-B7D8-4279-B04D-44D92226C1A3}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [7452aa11c1c90531df9202897f8642be]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21499D9A-D487-41D8-86A1-339A65DE9431}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [34922b90d2b8b284b5bdf497a95c38c8]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21F3CABE-4A08-4C5F-9ED2-6F4A30C29D13}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [f8ce803bafdbce680072bdce000523dd]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{224EEB89-285D-4EFA-8441-44702179D6E5}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [e7dfa91293f741f5492977147f86d927]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{23B39210-3219-4DCE-BC70-56A06C213E36}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [4f77fcbf2664cc6acea3ec9f2cd9c63a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2421BB6F-C5C8-43FA-933D-BBC8B08BE662}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [b412c2f9fe8cc67059196823ed18d828]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2462B7E8-6D8C-46DD-9BE3-53E47DB04EEC}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [23a315a651394fe75a1899f2f1144fb1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{25834CFE-BD4A-4BB4-A548-18E3BD78E72A}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [4d79299265256bcb8ae88308b94c4bb5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{25DCF045-2965-49B8-9FCC-FB1CD0B259D0}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [edd90bb066243df986ebf3980005728e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{26A9B0B4-C6E8-4AEB-A2DE-61438762846F}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [64623e7d6426152138393f4c986d3fc1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{28667503-AA5A-472F-BA11-C06F58933513}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [b90d3b807b0f0a2cdc964c3fb253c040]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{28BBE2AB-6EAF-4C49-AEA9-503FC4D054FC}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [22a4dcdf8cfef83e3042503b48bd0ef2]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2B0A6E3F-FA7E-4DF6-9BED-C8A3529445DB}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [dde9dddeb6d4c96df0820c7ffc09de22]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2BE6590A-B284-463C-9CF2-961228AFCACA}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [7a4c4f6c6b1f7eb8b0c1f992c93c29d7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2C185BF5-AA54-4E29-875F-D9C64B989A3B}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [c1057b400b7f8aacff724a41ab5a6799]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2C80DFAC-C329-4D2E-B99A-3CC0C1B4C732}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [15b1b9020f7bee48d0a263281bea6799]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{30E5FA26-2113-46D5-BE89-A1263794F77A}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [7a4c497227634cead49e4744c540e917]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{31CA9D15-B3CE-4FFF-8B8A-9DD4B7495097}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [40866556682280b672002b60ea1b718f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{32D43877-451E-4892-BA8F-BEE4BF626FEB}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [bd09e9d2a9e10c2a1f53ec9f5ea705fb]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{35EAD046-D922-473D-A9B7-148CB9EEE9CB}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [3f87d1ea0b7f2d09ed847c0f8e7719e7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{37F82B34-67B6-418D-B9D3-42D3ED477934}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [a81eab1037536fc7a5ccfd8ed530fe02]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{38806BC6-C466-48E2-B4F1-D9F9A461103E}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [51751e9d52383105fa787b10a85d07f9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3BF7A325-77B4-4EA2-909F-9755C61E728B}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [755119a2e6a46cca531e3b505da8da26]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3CAA96E9-7047-4CF9-9DF7-EC83882D9559}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [0eb8b6056b1f5cda5e1394f77e87837d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3D48F5D4-E04A-4D6E-8CC7-E952A522A01B}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [cbfb89322a60bc7aef82c7c48a7b12ee]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3D8E10ED-1B1B-46F9-9064-93156E33E334}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [5b6bb6057911aa8cafc38efda164738d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3E6D493F-A941-40C8-B0CD-46815BBD81A9}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [923448736e1c30065d14b2d9e61f05fb]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3EF22482-B49E-4AE0-BC93-A32194BFECE1}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [dde916a5602a6ec89ed4484322e35ca4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3F42A7BE-E533-4AB0-A4F7-6FBDDEC11A39}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [8b3bf5c68109fe387ef4e6a55baa20e0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{410CC6B1-C5E9-4CFB-A721-7A66873945B7}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [fec86e4db4d658de4a278efdb550a060]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4399A406-8AE6-4FD9-B4BB-403A218A7E84}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [04c2f1ca59310630a1d04e3d63a2857b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{447116FB-23F8-4F46-8AC9-4767498AB3FC}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [b115d5e632586bcb74fe1378f312e41c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{44D5BBB4-AD5E-4F2C-AEB1-C1733A6B6391}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [4185b209d8b2c76f9ad7d9b2d72e2dd3]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4601DEF5-6E27-49A1-BE3D-C7249D63F939}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [774f44778a0047ef91e0a4e785807d83]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{47EBBFDA-A15B-4007-9621-187629BF1442}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [7155ac0f5238fd39c1b0aedd996c42be]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4A63AFE1-355E-42A4-B380-353314977E94}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [44827348d0ba7bbbd0a112793ec7ac54]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4AE93E36-2869-4B2E-9BC5-FD4E408238BF}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [5373e9d2ddad67cf1062a4e782837c84]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4B1E17FC-B0CF-4E0F-8CC9-823FDD585934}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [71551f9ca7e3b97d6110ed9e8e778878]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4B316EA6-CEA7-4D89-AD8C-37ABEDFD1CF5}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [63638a317b0ff6400869d4b7aa5b3cc4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4B53C5FA-8283-435F-A514-38C1C4B7FA7E}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [5472e0dba6e461d5adc4038828dd41bf]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4BBC4087-509E-4F52-BA72-4EC3A84487CB}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [6f573f7c1c6e181ec0b10685a461cc34]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4E57D8A7-C8E1-43A3-AB6E-8E199A2BD9AE}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [dee88a314842c86e155dc1cafd0808f8]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4f101032-fb13-4e26-bfbc-138abaf11412}|AppName, TornPlusTV_version1.11-bg.exe, In Quarantäne, [685e03b80783b680e8887e0d8d782cd4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{509200CF-8D3D-4193-B3DF-63D2FBA7F75C}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [f6d094273a508aacfc76454651b446ba]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{50BB1589-1885-40EF-9AF9-C514B267151A}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [f7cf4c6fb2d8cb6b620f6c1f52b3b34d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{51CE881F-E908-4DE9-8C4D-F5F8D23EEF20}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [903645764149d1656b07fa9104012bd5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{54BB2726-EFDB-4026-9C8C-541CC76912A9}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [f0d6fac1dfab270f244ef7946a9bd828]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{56239A88-21DF-47E5-882D-71B3EC40D158}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [9d299526a7e3b086571a2962bc49f40c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{570F40F1-7721-40BB-B162-2050E15C15B3}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [1ea8bdfe068468cefc752d5e9d68a858]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5789CD6F-AC14-461A-9013-865D4B7A99F0}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [ffc7a91249412b0bb8b9bad1ea1b6e92]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5861AE01-9996-4406-8AE7-BC801A7D60B0}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [883ed7e441499c9adc95810ad23321df]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5CA8B5DC-17F9-4B95-BF31-8D83588BEAA0}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [6561ab105f2bfb3b2b47d8b3ed1857a9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5CB05241-BE6D-4960-BF35-32382D5EDD94}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [dfe7f0cbacdef83e78f9b4d748bd7d83]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5E8D6750-32BE-4F43-99C9-5D54AB3EACE5}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [992de2d9e7a3a78f2c452863877e738d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5EAB19F8-43D0-4119-AA4A-FEB76B6DEB42}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [992d18a3d9b1ad89591889029c690bf5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{601FAAE0-DFB4-4CC0-9D15-87B3AC29EBB3}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [a224c0fbcfbb8caa264c533852b3ae52]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{60531651-8AE2-40C2-B112-FC8C86E154B9}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [35918c2fa0ea46f0cca54b406b9acf31]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{608C3011-93B5-4CE8-959E-9146112C372C}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [6660ceedaedcdb5b95dd4744f4119e62]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6098170F-AA56-4A12-B8DE-9EAEA1BB2BD6}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [3f87e9d268226ec8333f6e1d828311ef]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{615D4741-16BC-45C0-B29C-89BA4A225984}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [08be17a46327eb4b0968bad1b74e19e7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{61DC901F-75F3-45E2-9B17-4AFC3C37D6C4}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [05c1f2c948423600bcb6aae1bc4950b0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{640603B8-4FF1-4AEA-B23F-69A94DD44DE8}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [bb0b4b70365484b299d8eaa1c73e9b65]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{644C0C86-9875-44CE-90F8-F2E8CEDF6BAC}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [b2142695a9e1ed49fc76b5d63ec74fb1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{64D9D55F-E1AF-49D3-ADC6-818063EB6031}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [fbcbb803b4d6191d106114772adb837d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6884E3AB-6FBB-4559-A2F2-F0FBAA558A93}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [95317447e2a82f07333e3a51bf4641bf]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68A51729-61A3-447E-A2E5-AB8822F6D817}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [14b2ae0dff8b0036eb867b103dc8e41c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6B62CF90-39D0-4BE0-8A67-24ACB36A6F51}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [d4f268534a4056e083ee99f214f10af6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6B65A272-6F3F-4A5C-8F8B-72AF51E7AA5D}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [576fac0fadddc670304175167194a35d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6D18C1FF-EE09-43A0-A162-684B96F3E019}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [a71fb704bbcf85b1de94b4d7ed187c84]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6DC7E56E-2404-4F4B-AD73-8E3E4DC3C8E6}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [07bf615aa0ea71c5b8b9afdcb94c26da]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6E031E42-FDAE-4264-B371-C38D86B812F3}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [05c1b10aaedc95a1640e0f7ca95cdc24]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6E48FA9D-57FF-4F91-BEC6-68772EC66658}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [4a7cefccbad03ef8660c2764897c7f81]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F27B504-256B-480C-9DB6-A651222EB632}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [dceaf0cbbad088ae1d5495f653b2649c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F359BFC-8815-4141-A2F7-9ECC3BB7A960}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [fbcbdddec2c82214c0b13b50a461956b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{71417E86-7707-41A5-8C3C-402BBD1D59CC}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [96305467d0ba88ae3f336d1e04010ff1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{71A8220A-7B67-497B-A7CC-8036C8C327A5}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [dee89a21b3d74de988e98cff9c69ec14]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{726572E5-5BEC-4716-9F63-98DC9F5039E4}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [5571c5f62862d561225049426c997987]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7328ED47-9B2B-4ADE-888A-1C358497904D}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [08be5c5f1e6c3ff797db0883e025cf31]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{79969DE0-DE45-435F-AB40-10B843F64789}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [527439820684be78aec43457d134f30d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7A58C4B4-9E12-4886-8758-EDE5552FAE42}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [d2f498235a3072c4294963280afbfd03]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{80071690-BE27-4E51-ADEA-F638471C8A46}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [4b7b0ab18406d462d9993358b2533ac6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{80911FC7-96D0-485B-A81D-5B723C95797F}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [5c6aa01b1b6f37ffabc7b6d5bd48c739]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{81AA2498-A9D6-4D89-9482-34E5BBD0B2BB}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [1ea805b6f89279bd7df5e9a2c0453bc5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{81DA1701-9C7A-4B99-B03C-7ED32379D8A2}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [11b586358dfd0a2cf37eddaedf26a25e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{82A12D5B-3068-4518-9A92-56E1ED123C3F}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [794d2e8da1e91c1a9bd643489174fc04]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{846D7B24-E797-4B48-BB7A-D54AD33A6B1B}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [f6d0f7c41971ff378de4c0cb9471b54b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{85778745-6721-409E-8919-E9C741BF5E6C}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [d9ed8f2cd5b56bcb3f3376154cb9ea16]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{86328A8B-D943-4DD8-8988-8D9DF5AD8A5A}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [23a323985634d75f5819e8a363a2c739]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8B1D6B38-9F07-4181-9A76-902B74D224FA}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [d5f1ccef5832c96d432e43487b8ae41c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8B528D71-7589-46F8-9C8F-2B505A5EAFDE}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [378f66556525b18597dbb8d3eb1aa759]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8E7F8E7D-4668-4D53-B336-56858E317239}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [fcca2a91e6a47db98de58cffbe47b24e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8EE5C312-397F-4039-A33C-559261B09D89}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [31951d9eb2d838fe31418cff64a123dd]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8FEF76F7-D9FB-4D8D-984C-7B2D7AEFCDB8}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [c7ff912a0a80a690b6bc117a6a9b9f61]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{907149D2-F0F1-470F-8A4F-A55E2376CDBB}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [ecda3e7d39512016bcb60487f70e0af6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{926E0B10-AB3C-4EC3-A85B-8B1C90D846B4}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [596d5c5f355572c4cea35932ca3b3dc3]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{92EA6914-1C1C-4A5D-9B5B-A0C6B85EFC2F}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [25a16259adddc76fbfb25932c63f7987]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{94549B53-8B98-4C75-B921-28A08FEE30AC}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [ab1ba61523678aac85ec6c1fe61fdb25]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{94F33C37-1F08-4E7A-B233-B62C7A83B6F8}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [784efac1a9e18ea82d458cfffa0b16ea]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{99DF167A-AC5B-4963-827C-77BFFE27D382}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [0abc5f5ca8e2d066066cbecde223d22e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{99FAC615-443D-4CD6-9AA3-C21C77A1B2F0}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [72546f4cc5c5e551a2d03b50976eca36]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9E9F101D-234C-4585-9217-A836F9306FC0}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [5175e8d3177396a0d89a8cff06ffbc44]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A0C5C1FB-D737-408B-952E-BA45EE6852E1}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [cbfb477473178ea87bf61873877e926e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A21A1607-84D0-4799-B4B5-35FAA0679EBA}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [10b67b406f1b47efc9a9711afd083bc5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A432C93A-6F4C-408D-9367-851AC0E086E2}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [00c68536a0ea23131e54800b16ef8779]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A5BC7AAD-943F-4219-B577-AD7B37A3B319}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [11b55764eaa00a2c8ee3e7a4e91caf51]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A77408B9-F717-47D7-9E1E-8510A3E2C259}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [992d685351399c9acca5d1bac83dc23e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A7D44431-C495-428A-AE94-F5A8C935D97E}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [dbebedce90fa1422e58cef9c72934cb4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AC9B58BB-D8C9-4E67-91C8-E88FBB4ED842}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [3c8ac3f837530630c0b14e3dbc496a96]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AD52DB4A-4168-49C3-B3E4-1A8F162848B1}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [fcca685301895bdbff7394f7897cc63a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AD9131B5-E4B9-4529-88A5-FFF22D9A83BB}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [ecda0ab1543672c47bf68605a560d12f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AE63217C-EB36-4C35-95CC-D3817D4D909F}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [972fe6d51773c373561c48434bbac937]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{b146d859-9117-4885-b21d-821ebb7f23cb}|AppName, TornPlusTV_version1.11-codedownloader.exe, In Quarantäne, [b016a01b2a601620135fd9b265a050b0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B1FF7E62-5ABA-4C91-B69B-D97B8AD45B8E}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [9c2adedd4446bf77fe7326650cf99e62]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B59DDEA0-ADA7-49B6-A5D0-8212E321D8AF}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [388e6853f09a5adc81f02f5c0401e917]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B8726841-64E4-4054-AEB5-9EA24B3E558A}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [6165ceed3d4dea4c78fa4942c93c30d0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B884E5AE-8F78-461B-B1D3-578B4A8EEC6E}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [dbeb5f5cb4d650e6cda5dbb07392758b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B92441D9-6E04-4E75-92CA-FB994B7E4511}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [6b5bf3c8f8921620e9882d5e8f761fe1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B945C334-258B-4498-8EF2-662581FA3487}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [e6e011aa484254e2b2bf642752b326da]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B9B6E9FA-1BCF-4EAB-BD58-AF85F6D296D8}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [873fb506dcaebd79bfb290fb976e55ab]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BA073145-D54A-47DE-9F6B-4CCCFC6ECA73}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [85417e3da6e450e6f978d6b5ad5831cf]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BA3416E3-236E-425D-A36F-FC7DC676BE86}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [ac1ac0fbe6a430060a67088341c402fe]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BAB1C3ED-D21E-4A8B-A5FF-D78A249222B3}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [685e01ba3951c472333e9eed7b8a7a86]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BCFE8E09-6ECF-4ADF-B0B6-88CC89CF226A}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [03c335867515cb6bc7abed9e16ef15eb]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BE8CD7AE-4078-4EB6-80B3-A3C7A1D196F0}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [51754675b0dabc7a81f1d6b57c895ba5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BF739EE9-6004-4E8B-81B7-6E15CEF5C1C8}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [3c8a6259cfbb0f2751213b5005003ac6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C1E7D2DE-2446-4FDC-9544-3A4A314AB52A}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [4a7cfcbf2664f145561ce2a946bf3dc3]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C2085EEC-1C15-41A1-8AB3-C17D72159243}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [5274724986046fc7056cdead62a31fe1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C284AB12-A368-4FCF-BF76-B1D055508273}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [b214a71445456dc92e43840741c4b14f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C2F33D95-8CE4-4526-9911-B672B286662E}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [7056497274160d298ee44c3f54b10af6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C468573A-711C-4EBE-8313-F153604B2754}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [735310ab840659dd1161127958adcb35]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C4C4D92F-21A3-4BEC-BDFA-CFCFC21EAEB6}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [c1058c2f51394fe74c2586059b6aab55]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7EB8190-D6F4-4EE4-B8E1-93CD2024AD39}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [e1e5c9f273177eb8611114771aeb36ca]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CA945C24-5C72-4F70-B4AA-7DDC9842D816}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [e1e56a51771348eef77b0c7fd233916f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CBD9E240-E85C-45F8-B2EF-61D584A5FE1C}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [a422ead11b6f39fd6c052467ac599f61]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CCED5D00-E8BE-4A12-B8AD-ECF6EAF2213B}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [7c4ae3d85a3059dde889e7a416ef738d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CF95196C-D21D-4EFD-8C1F-D89B3EDDC94D}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [596d427996f466d03e34b1da986da858]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CFA2D123-6FFE-414B-9C1C-37582A479E63}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [d3f37348ee9cde5839391576ea1b8878]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D088882D-1C78-4A2F-B419-69D3FA1D1AFB}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [6c5a9328c7c3d165541e8902ca3bdd23]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D3A5ADBD-9FCF-4DD3-9C7D-64B7D584F751}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [685e7942355562d4571a6328c0454eb2]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D64E347A-A841-4297-867F-49EBA7C13FCD}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [7b4bd4e7800a171fe9896229eb1af709]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D693B18C-A757-402B-A5C0-33CE8A1E722B}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [b3130ab15b2f3bfb6111454658ad08f8]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D92BDAF5-79D4-4661-A126-5C38ED6B75AE}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [af170ab1fb8faf87fc7556359471837d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DAB30ADA-BA4C-4861-9813-E0F79E148D3D}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [3f87c1fa4b3fd561c1b052397f8640c0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{dc479bd1-95dc-4d7d-bed5-7ab4c0af028e}|AppName, TornPlusTV_version1.11-buttonutil.exe, In Quarantäne, [5b6b1d9e4f3b9f977af77615c3429f61]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DC891971-8BB8-4BD2-A241-C34A9C7F66F7}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [6363b3081d6d8caa7cf5dfac798c30d0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E06CB930-1437-4295-A556-C2F6AE16C0AB}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [eadc09b2cfbb7db9472a038816ef6b95]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E403B2D8-41C7-4078-AF1F-5FBD9C287C83}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [7e485467117922149fd32c5fdd28c040]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E42553E3-5671-4C45-AB7A-1A316FBC2143}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [8d39ba01e6a440f6b9b9f7940df8d62a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EB6A0B0A-CED2-4B8E-AFF1-C25BC833CDFC}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [b31378435a301422c2b09cef9b6ac739]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EB77AAFC-6F03-4651-AEEE-DDF6395CB82D}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [ffc77546b3d78bab116096f558ad5fa1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EBFD4D1D-C3F6-4932-8B8F-FD877AB76749}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [289ef0cbd0ba3600333ef497a0659a66]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EC323C3E-B4A1-4C9F-A397-50FA6828B22D}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [43832f8c36545bdb383af39847be9a66]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F16EBFEA-1F30-425B-9728-133B8F2266DE}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [f0d604b7612949ed0c65afdcd92ca65a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F20665C1-773F-44FB-BBEB-4D9C60328048}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [e4e29e1d8efca1953a37afdc0ff6dc24]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F3838226-C4CA-4679-855C-EB109C413382}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [b61082393159f1457cf6018a907536ca]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F72B683E-906B-42DA-B710-9E83A2DF437F}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-buttonutil.exe, In Quarantäne, [09bd219a15755bdb353c3556f60f8878]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FEFFDEB3-261E-44A1-BBCC-9864D5479584}|AppName, 4bb8e883-b028-4f67-abf0-376e5be09182-2.exe-codedownloader.exe, In Quarantäne, [ac1a6952a9e1a0963240ff8c11f412ee]
PUP.Optional.Babylon.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}|DisplayName, Search the web (Babylon), In Quarantäne, [c7ff704bc3c7082e6e53f68e9f66cc34]
PUP.Optional.Babylon.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}|URL, hxxp://search.babylon.com/?q={searchTerms}&affID=44444&tt=040912_ctrl_3712_1&babsrc=SP_ss&mntrId=6c1d3239000000000000002185f916c1, In Quarantäne, [a81e7249107adc5a70cedf13ca397d83]
PUP.Optional.Searchoholic.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}|FaviconURL, hxxp://websearch.searchoholic.info/favicon.ico, In Quarantäne, [e3e39c1f404a320467051fd5748f748c]
PUP.Optional.Searchoholic.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}|FaviconURLFallback, hxxp://websearch.searchoholic.info/favicon.ico, In Quarantäne, [0fb79e1d0189ae8816562fc505fee11f]
PUP.Optional.Searchoholic.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}|URL, hxxp://websearch.searchoholic.info/?l=1&q={searchTerms}&pid=21073&r=2014/12/22&hid=5952623993991962179&lg=EN&cc=DE&unqvl=72, In Quarantäne, [be08368598f283b3f874ac487c8724dc]
PUP.Optional.Iminent.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}|Url, hxxp://search.iminent.com/?appId=713BE664-A319-4DDF-9BA8-723FD0DDFD09&ref=toolbox&q={searchTerms}, In Quarantäne, [398d12a9672371c5db7eace0fc0919e7]
PUP.Optional.Iminent.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}|FaviconPath, C:\Program Files (x86)\Iminent\SearchTheWeb.ico, In Quarantäne, [a125c1fa7218bb7bb7a2b4d833d2a957]
PUP.Optional.SweetIM.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EEE6C360-6118-11DC-9C72-001320C79847}|URL, hxxp://search.sweetim.com/search.asp?src=6&crg=3.09010003&st=12&q={searchTerms}&barid={FF4FD482-C153-4A34-B19A-6B25C7B6153E}, In Quarantäne, [0fb7cdeedcae2511cfbb00f24ab94cb4]
PUP.Optional.SmartBar.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Browser Infrastructure Helper, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.exe startup, In Quarantäne, [5670823923673ff709f898be33d2619f]
PUP.Optional.OfferMosquito, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|OMESupervisor, "C:\Users\PC\AppData\Local\omesuperv.exe", In Quarantäne, [963001bafe8c15216fa6610f31d4fe02]
PUP.Optional.PriceGong.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}, C:\Program Files (x86)\PriceGong\2.6.7\FF, In Quarantäne, [0fb70ead1f6b280eccb55ebf788c5ba5]
PUP.Optional.OptimizerPro.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\OPTIMIZER PRO|AdsBuyNowURL, hxxp://www.safeshopgate.com/r?s=121001374&g=3625036B-9D58-82A1-ED08-7F8E544A285F, In Quarantäne, [ac1afcbf474379bd1bc2fb9256afb34d]
PUP.Optional.Wajam.A, HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\WAJAM|affiliate_id, 6447, In Quarantäne, [22a4a9128a00191d5c3077e339cc25db]
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS|C:\PROGRAM FILES (X86)\SWEETIM\TOOLBARS\INTERNET EXPLORER\MGHELPERAPP.EXE, 1, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84]
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS|C:\PROGRAM FILES (X86)\SWEETIM\TOOLBARS\INTERNET EXPLORER\MGTOOLBARPROXY.DLL, 1, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84]

Registrierungsdaten: 0
(Keine schädliche Elemente gefunden)

Ordner: 191
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Search, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Shopping, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Uninstall Wajam, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Yontoo.A, C:\Program Files (x86)\Yontoo, In Quarantäne, [e1e5576461292016fa312508e4202fd1],
PUP.Optional.Iminent.A, C:\Program Files (x86)\Iminent, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, C:\Program Files (x86)\Iminent\inst, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, C:\Program Files (x86)\Iminent\inst\Bootstrapper, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\skin, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\api, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\defaults, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\defaults\preferences, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\userCode, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\locale, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\locale\en-US, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.BestSaveForYou.A, C:\Program Files (x86)\BesttSAveeFOOrYoU, In Quarantäne, [774f2b903852ea4c2522e89e8f7616ea],
PUP.Optional.DealExpress.A, C:\Program Files (x86)\DealiEexpresS, In Quarantäne, [a91d0ab12f5b25118acf05819f66b749],
PUP.Optional.EnjoyCoupon.A, C:\Program Files (x86)\EnjjoyCoupoin, In Quarantäne, [03c392295634d2645f03582ea75eb947],
PUP.Optional.Fun2Save.A, C:\Program Files (x86)\Fun22Save, In Quarantäne, [09bdc5f693f78aac3e2a88fe9273d62a],
PUP.Optional.MinimumPrice.A, C:\Program Files (x86)\MinimUmPrioce, In Quarantäne, [2e989b205b2f53e3c8b0444221e44eb2],
PUP.Optional.MultiPlug, C:\ProgramData\coilhijefelhnblgjdkaciplihbjkbpf, In Quarantäne, [c2049f1c98f20c2a37ecd2b594713dc3],
PUP.Optional.MultiPlug, C:\ProgramData\dhpafobkjdcgjlpjkeigndogkaoehkfh, In Quarantäne, [893d6a5192f82a0c33f0e3a48580718f],
PUP.Optional.MultiPlug, C:\ProgramData\hblpajpcplfopmdejeimcpcaemdoipbm, In Quarantäne, [0fb773481a7093a39e85d5b2e81dfb05],
PUP.Optional.iSaver.A, C:\Program Files (x86)\Iseaavver, In Quarantäne, [953100bb16740234129ec0c73cc9837d],
PUP.Optional.OptimizerPro.A, C:\Users\PC\Documents\Optimizer Pro, In Quarantäne, [1fa7e3d8c3c75dd99546791417ee2ed2],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance, Löschen bei Neustart, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer, Löschen bei Neustart, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\ar, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Configs, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\de, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\es, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\fr, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\he, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\it, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\pt, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\Configs, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\ServicesPlugins, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\DistributionFiles, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\DistributionFiles\Configs, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\DistributionFiles\Profiles, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Smartbar.exe_StrongName_vuedtbpoockmp1sq45awfxuouevabx0i, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Smartbar.exe_StrongName_vuedtbpoockmp1sq45awfxuouevabx0i\1.2.0.0, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.Iminent.A, C:\Program Files (x86)\IminentToolbar, In Quarantäne, [60665f5c593130069db66955788bb14f],
PUP.Optional.Iminent.A, C:\Program Files (x86)\IminentToolbar\1.8.28.3, In Quarantäne, [60665f5c593130069db66955788bb14f],
PUP.Optional.Iminent.A, C:\Program Files (x86)\IminentToolbar\1.8.28.3\bh, In Quarantäne, [60665f5c593130069db66955788bb14f],
PUP.Optional.Iminent.A, C:\Users\PC\AppData\Roaming\IminentToolbar, In Quarantäne, [72546f4ceb9f66d04ca1f1ce39ca60a0],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\LocalLow\SweetIM, In Quarantäne, [cff79d1eb2d857dfbde0fcc541c2da26],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\LocalLow\SweetIM\Toolbars, In Quarantäne, [cff79d1eb2d857dfbde0fcc541c2da26],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\LocalLow\SweetIM\Toolbars\Internet Explorer, In Quarantäne, [cff79d1eb2d857dfbde0fcc541c2da26],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\LocalLow\SweetIM\Toolbars\Internet Explorer\cache, In Quarantäne, [cff79d1eb2d857dfbde0fcc541c2da26],
PUP.Optional.Babylon.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb, In Quarantäne, [873f249723678caaacbdcef4bd469b65],
PUP.Optional.Babylon.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.11_0, In Quarantäne, [873f249723678caaacbdcef4bd469b65],
PUP.Optional.PriceGong.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong, In Quarantäne, [b1154f6c1b6f90a663b42c98e3206f91],
PUP.Optional.SimpleNewTab.A, C:\Users\PC\AppData\Local\simple_new_tab, In Quarantäne, [507654678406a393dfa3eedce51ed729],
PUP.Optional.SimpleNewTab.A, C:\Users\PC\AppData\Local\simple_new_tab\htmls, In Quarantäne, [507654678406a393dfa3eedce51ed729],
PUP.Optional.OfferMosquito.A, C:\Users\PC\AppData\Local\ext_offermosquito, In Quarantäne, [21a57942a0ea81b5c9bb5e6cfc072bd5],
PUP.Optional.OfferMosquito.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk, In Quarantäne, [19adf3c8e0aaeb4b15708b3f7291639d],
PUP.Optional.OfferMosquito.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk\1.2_1, In Quarantäne, [19adf3c8e0aaeb4b15708b3f7291639d],
PUP.Optional.OfferMosquito.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\ext_offermosquito, In Quarantäne, [3c8a87341476e84e13738c3e7d867c84],
PUP.Optional.Babylon.A, C:\Users\PC\AppData\LocalLow\BabylonToolbar, In Quarantäne, [32947e3dec9ed16559389438e41fb947],
PUP.Optional.Babylon.A, C:\Users\PC\AppData\LocalLow\BabylonToolbar\BabylonToolbar, In Quarantäne, [32947e3dec9ed16559389438e41fb947],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn, In Quarantäne, [63632c8fd1b9d95de99157793fc441bf],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.2.0.0_0, In Quarantäne, [63632c8fd1b9d95de99157793fc441bf],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Download, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Download\{0C2AF9DC-66D1-48AE-9090-CEBC6474A847}, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Download\{0C2AF9DC-66D1-48AE-9090-CEBC6474A847}\1.3.25.29, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Install, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline\{8E8DABC0-84CF-4983-835A-4958CE17268B}, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.DownTango.A, C:\Users\PC\AppData\Local\DownTango, In Quarantäne, [2f975d5ef991003649dae5f29c67c33d],
PUP.Optional.Supporter.A, C:\Program Files (x86)\GS Supporter, In Quarantäne, [04c2308b2e5ca69099bf627512f1e11f],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\images, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\de, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\en, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\es, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\fr, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\it, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\ja, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\nl, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\pl, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\pt, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\ru, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\tr, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\zh_CN, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\zh_TW, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.NoMoreAds.A, C:\ProgramData\NoMore Ads, In Quarantäne, [e3e33c7fd8b2dd59b3b001db897a46ba],
PUP.Optional.AdsRemover.A, C:\ProgramData\Ads Remover, In Quarantäne, [9d292c8fcfbb092d7127924ac93ad52b],
PUP.Optional.BrowserAdBlocker.A, C:\ProgramData\Browser AdBlocker, In Quarantäne, [d0f66a513e4c95a17c1dc913e221f907],
PUP.Optional.SweetPacks.A, C:\Program Files (x86)\SweetPacks, In Quarantäne, [a81e813a4a40e84e5d14588526dda060],
PUP.Optional.SweetPacks.A, C:\Program Files (x86)\SweetPacks\VideoConverter, In Quarantäne, [a81e813a4a40e84e5d14588526dda060],
PUP.Optional.SweetPacks.A, C:\Program Files (x86)\sweetpacks bundle uninstaller, In Quarantäne, [7155ebd0d0ba0e28304116c7d82b956b],
PUP.Optional.Fun2Save.A, C:\ProgramData\Fun2Save, In Quarantäne, [5373bffcb4d6092d5d1e7e5f6e9559a7],
PUP.Optional.SearchSnacks.A, C:\Program Files\SearchSnacks_1.10.0.1, In Quarantäne, [73530ab1b8d2280e56f030ae13f044bc],
PUP.Optional.SearchSnacks.A, C:\Program Files\SearchSnacks_1.10.0.1\IE, In Quarantäne, [73530ab1b8d2280e56f030ae13f044bc],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\SearchSnacks_1.10.0.1, Löschen bei Neustart, [3f8748730e7c280eb98df8e6e81b857b],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\SearchSnacks_1.10.0.1\3rd Party Licenses, In Quarantäne, [3f8748730e7c280eb98df8e6e81b857b],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\SearchSnacks_1.10.0.1\FireFox, In Quarantäne, [3f8748730e7c280eb98df8e6e81b857b],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\SearchSnacks_1.10.0.1\IE, In Quarantäne, [3f8748730e7c280eb98df8e6e81b857b],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\SearchSnacks_1.10.0.1\Service, Löschen bei Neustart, [3f8748730e7c280eb98df8e6e81b857b],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\Mozilla Firefox\extensions\{c0eb055f-057e-4671-95f5-6bba7ba017fa}, In Quarantäne, [a91d9427345686b0d86f974728db8d73],
PUP.Optional.InterenetOptimizer.A, C:\ProgramData\Interenet Optimizer, In Quarantäne, [a5212299e3a775c16809edf30ef5a35d],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\CSS, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\JS, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\PublisherImages, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.EzDownloader.A, C:\Users\PC\AppData\Roaming\EZDownloader, In Quarantäne, [a91dac0f91f964d2ae155690be4521df],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Communicator, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Communicator\Microsoft.VC90.CRT, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Communicator\resources, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Communicator\resources\sqlite, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\resources, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\resources\images, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\resources\sqlite, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\conf, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.GreatSave4U.A, C:\ProgramData\GreatSave4U, In Quarantäne, [1aac34878efc5fd71dec3dae54af45bb],
PUP.Optional.SupGames.A, C:\Program Files (x86)\sup games, Löschen bei Neustart, [6c5a992217738caa001a9d51e51e12ee],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\APN\APN-Stub, In Quarantäne, [e6e01ba0d1b943f3672d40b0c340e917],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\CRX, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater\Config, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater\Response, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\Users\PC\AppData\Local\AskPartnerNetwork, In Quarantäne, [893d447794f666d06333f2fe9f64f40c],
PUP.Optional.APNToolBar.Gen, C:\Users\PC\AppData\Local\AskPartnerNetwork\Toolbar, In Quarantäne, [893d447794f666d06333f2fe9f64f40c],
PUP.Optional.APNToolBar.Gen, C:\Users\PC\AppData\Local\AskPartnerNetwork\Toolbar\Updater, In Quarantäne, [893d447794f666d06333f2fe9f64f40c],
PUP.Optional.APNToolBar.Gen, C:\Users\PC\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC, In Quarantäne, [893d447794f666d06333f2fe9f64f40c],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork, Löschen bei Neustart, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\ChromeUtils, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar, Löschen bei Neustart, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater, Löschen bei Neustart, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\VDJ-V7, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\appdata, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\appdata\Mozilla, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\appdata\Mozilla\Firefox, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\appdata\Mozilla\Firefox\Profiles, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\appdata\Mozilla\Firefox\Profiles\{DefaultProfilesFolder}, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\appdata\Mozilla\Firefox\Profiles\{DefaultProfilesFolder}\extensions, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\common appdata, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\common appdata\AskPartnerNetwork, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\common appdata\AskPartnerNetwork\Toolbar, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\{Crx_Version}, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\ChromeUtils, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\IDC, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\{PartnerID}, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\VNT, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.SupGames.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\622Q6@gmail.com, In Quarantäne, [dfe71d9ec7c3ec4a061eadd6b6509a66],
PUP.Optional.SupGames.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\622Q6@gmail.com\chrome, In Quarantäne, [dfe71d9ec7c3ec4a061eadd6b6509a66],
PUP.Optional.SupGames.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\622Q6@gmail.com\chrome\content, In Quarantäne, [dfe71d9ec7c3ec4a061eadd6b6509a66],
PUP.Optional.SupGames.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\622Q6@gmail.com\defaults, In Quarantäne, [dfe71d9ec7c3ec4a061eadd6b6509a66],
PUP.Optional.SupGames.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\622Q6@gmail.com\defaults\preferences, In Quarantäne, [dfe71d9ec7c3ec4a061eadd6b6509a66],


Why me 17.06.2015 14:18

Mbam.txt (teil 3):

Code:

Dateien: 1283
PUP.Optional.Multiplug, C:\Program Files (x86)\PragmaFoobar\PragmaFoobar.dll, Löschen bei Neustart, [ccfa04b75a30c86ed46f350336cc22de],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancerService.exe, Löschen bei Neustart, [3e88e0dbf694c076592877c9a75bac54],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancer.exe, Löschen bei Neustart, [c2048b30494172c4d49ebe69b74beb15],
PUP.Optional.Iminent, C:\Program Files (x86)\Common Files\Umbrella\Umbrella.exe, Löschen bei Neustart, [cafce4d7d6b4ef4786c3f64a887938c8],
PUP.Optional.HTTOGROUP.A, C:\Users\PC\AppData\Roaming\DataMgr\datamgr.exe, In Quarantäne, [cef8c9f2d5b52d091ba7315024e25aa6],
PUP.Optional.ModGoog, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, In Quarantäne, [4a7ca615d9b14ceade0ec7864db50000],
PUP.Optional.SearchSnacks.A, C:\Windows\System32\drivers\ssnfd_1_10_0_1.sys, In Quarantäne, [418599222a60cc6ae968917841c151af],
PUP.Optional.Iminent.A, C:\Program Files (x86)\Iminent\Minibar.InternetExplorer.BHOx64.dll, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, C:\Program Files (x86)\Iminent\Minibar.InternetExplorer.BHOx86.dll, In Quarantäne, [75514279e7a3f145fb87099fb84bfb05],
PUP.Optional.Iminent.A, C:\Program Files (x86)\IminentToolbar\1.8.28.3\bh\iminent.dll, In Quarantäne, [a71f5665f991082eb140c5e3c53e55ab],
PUP.Optional.Iminent.A, C:\Program Files (x86)\IminentToolbar\1.8.28.3\iminentTlbr.dll, In Quarantäne, [00c6ab108ffb50e6dc1622864eb52bd5],
PUP.Optional.SimpleNewTab.A, C:\Users\PC\AppData\Local\simple_new_tab\simple_new_tab.dll, In Quarantäne, [00c658637515a3932dc369077a89728e],
PUP.Optional.OfferMosquito, C:\Users\PC\AppData\Local\ext_offermosquito\OfferMosquitoIEPlaceholder.dll, In Quarantäne, [9333893225653ff7b31de491ed16ab55],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\SearchSnacks_1.10.0.1\IE\SearchSnacksClientIE.dll, In Quarantäne, [883e14a72961c076623a79f43cc7718f],
PUP.Optional.SweetPacks.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll, In Quarantäne, [55710ead0189d066cd0d0862828157a9],
PUP.Optional.Yontoo.A, C:\Program Files (x86)\Yontoo\YontooIEClient.dll, In Quarantäne, [b2143586e7a372c4845bbcb422e10df3],
PUP.Optional.MultiPlug.Uns, C:\ProgramData\Ads Remover\Ads Remover.exe, In Quarantäne, [e5e14774503a4cead6d472f1d033cd33],
PUP.Optional.MultiPlug, C:\ProgramData\Fun2Save\dj2Ag0.exe, In Quarantäne, [477f2398127867cff5401cad6c9503fd],
PUP.Optional.MultiPlug.A, C:\ProgramData\GReaatSaevE4U\dCF_RBz.exe, In Quarantäne, [893d3a8127631026d5bd6d150ff2659b],
PUP.Optional.MultiPlug.A, C:\ProgramData\GReaatSaevE4U\dCF_RBz.x64.dll, In Quarantäne, [16b0506b4446e4526b27770b17ea857b],
PUP.Optional.MultiPlug.A, C:\ProgramData\GreaatSaVe4Ui\aZfpXvLn.exe, In Quarantäne, [0abc774429618aac8e04cbb7bd448c74],
Trojan.Agent, C:\ProgramData\GreatSave4U\7G6cHHIEQ1pSFm.exe, In Quarantäne, [6660219a315943f340cc30e522e0a55b],
PUP.Optional.MultiPlug.Uns, C:\ProgramData\NoMore Ads\NoMore Ads.exe, In Quarantäne, [a521febdc6c402342684c1a2d330ca36],
PUP.Optional.SweetIM, C:\ProgramData\SweetIM\Messenger\update\sweetimsetup.exe, In Quarantäne, [d3f3dddefa900630ac36a0cbd13557a9],
PUP.Optional.MultiPlug.A, C:\ProgramData\TakeuThaeCoeUpon\5361Ro.exe, In Quarantäne, [6b5bd8e3ec9e63d35d35e2a005fc7789],
PUP.Optional.MultiPlug.A, C:\ProgramData\TakeuThaeCoeUpon\5361Ro.x64.dll, In Quarantäne, [9d29dbe0e5a5e94d5b376220eb16fd03],
PUP.Optional.MultiPlug.Uns, C:\ProgramData\BlockIt Ad remover\BlockIt Ad remover.exe, In Quarantäne, [c1056d4eaedcde58258590d3778c6a96],
PUP.Optional.MultiPlug.Uns, C:\ProgramData\Browser AdBlocker\Browser AdBlocker.exe, In Quarantäne, [9d295c5f434710265555352ef21154ac],
PUP.Optional.MultiPlug.A, C:\ProgramData\DowwnSavE\XSXcwbENe.exe, In Quarantäne, [00c67c3f81099a9cf39fa6dc08f930d0],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\QAWBXRD.exe, In Quarantäne, [af176e4d8505033333dd285223e3c937],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\DPQMJ.exe, In Quarantäne, [3492fac13456f73f62aef68492747789],
PUP.Optional.HTTOGROUP.A, C:\Users\PC\AppData\Roaming\SDIV 2.0\Prot\tu\tu.exe, In Quarantäne, [8d392299fd8dfa3c19a9e49d778fa15f],
PUP.Optional.InstallCore.C, C:\Program Files (x86)\455bf313-ae09-4982-a398-d61f4d270bb9\24e4ea21-2bd7-4013-ad02-e791229fd8bb.dll, In Quarantäne, [6e588b30cdbd54e2db6d86fc57af4ab6],
PUP.Optional.Nova.A, C:\Program Files (x86)\455bf313-ae09-4982-a398-d61f4d270bb9\f95d4faf-cb28-4bbe-8b59-a70c5c9d0063.dll, In Quarantäne, [596d00bbe7a31c1a8bdc888e0df520e0],
PUP.Optional.InstallCore.C, C:\Program Files (x86)\AMD APP\455bf313-ae09-4982-a398-d61f4d270bb9.dll, In Quarantäne, [3a8c00bba8e291a53e0aa2e028dee41c],
PUP.Optional.Nova.A, C:\Program Files (x86)\AMD APP\b805041c-02f6-4d4b-926e-a6a3e7c3f158.dll, In Quarantäne, [1aac66558bff3204bea98e888181e11f],
PUP.Optional.MultiPlug.A, C:\Program Files (x86)\BesttSAveeFOOrYoU\H2zo63GAQCHLut.x64.dll, In Quarantäne, [cff73f7c6525ca6c3098e068d32fa55b],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\SearchSnacks_1.10.0.1\Uninstall.exe, In Quarantäne, [5373ead13c4ee05633f5cc25b849fc04],
PUP.Optional.CrossRider, C:\Program Files (x86)\sup games\sup_games_notification_service.exe, Löschen bei Neustart, [50762d8e91f9ce68391f7fcab151758b],
PUP.Optional.CrossRider, C:\Program Files (x86)\sup games\sup_games_updating_service.exe, In Quarantäne, [3f876952197174c2103bf454da284eb2],
PUP.Optional.Multiplug, C:\Program Files (x86)\MinimUmPrioce\HnArboJqILAFcM.x64.dll, In Quarantäne, [eadc12a909815dd90dc3a79a8a78ae52],
PUP.Optional.Multiplug.A, C:\Program Files (x86)\Mozilla Firefox\dbghelp.dll, In Quarantäne, [cff779425e2c5adc1de775de9b679f61],
PUP.Optional.Multiplug, C:\Program Files (x86)\DealiEexpresS\peJ5lfKQZ7AX6p.x64.dll, In Quarantäne, [43835467f9912e08a62a66db7a8859a7],
PUP.Optional.Multiplug.A, C:\Program Files (x86)\DeeeaalExprress\DeeeaalExprress.exe, In Quarantäne, [398d5f5cfa90c3736f800137c04208f8],
PUP.Optional.Multiplug, C:\Program Files (x86)\DiscouuntExxtensi\0AcVSzkyjRbtNb.x64.dll, In Quarantäne, [d2f4d1ea09815fd7d2fe48f9cc3612ee],
PUP.Optional.MultiPlug.A, C:\Program Files (x86)\EnjjoyCoupoin\xE4Quk7Ej3KeeO.x64.dll, In Quarantäne, [30963f7cff8bb482646458f01ae809f7],
PUP.Optional.OptChrome.A, C:\Program Files (x86)\Yontoo\OptChrome.exe, In Quarantäne, [8e3802b9305a35014ea89090639d8e72],
PUP.Optional.Multiplug.A, C:\Program Files (x86)\EXstraCCoupOn\EXstraCCoupOn.exe, In Quarantäne, [4b7b0ead5c2e063029c692a6de24ef11],
PUP.Optional.Multiplug.A, C:\Program Files (x86)\Fluid UI\Fluid UI.exe, In Quarantäne, [f1d5308b2c5e91a5777803356d959f61],
PUP.Optional.APNToolBar.A, C:\Users\PC\Documents\APNSetup.exe, In Quarantäne, [4482fac1fc8e3ff77b46174e44be08f8],
FraudTool.YAC, C:\Users\PC\Downloads\yet_another_cleaner_cdls_setup_13721.exe, In Quarantäne, [3d89b902e7a31620e534162542c0cd33],
PUP.Optional.OpenCandy, C:\Users\PC\Downloads\DTLite4454-0316 (1).exe, In Quarantäne, [3e88edce7614261057fa2745d43221df],
PUP.Optional.OpenCandy, C:\Users\PC\Downloads\DTLite4454-0316.exe, In Quarantäne, [b214bcffc8c2e2541041501c49bd8977],
PUP.Optional.SweetIM, C:\Users\PC\Downloads\VideoConverterSDM.exe, In Quarantäne, [c8fea219503a7cba3aa8a2c965a1a55b],
PUP.Optional.DownTango.A, C:\Users\PC\Downloads\Brother_Beyond_-_The_Harder_I_Try_(88).mp3_downloader.exe, In Quarantäne, [a71feccf5a300333211e408758a9dd23],
PUP.Optional.InstallCore.A, C:\Users\PC\Downloads\setup (1).exe, In Quarantäne, [378fc2f995f572c463ca74e73ac76c94],
PUP.Optional.DomaIQ, C:\Users\PC\Downloads\Setup (3).exe, In Quarantäne, [efd78e2dcdbdc571d65969f57091c838],
PUP.Optional.InstallCore.A, C:\Users\PC\Downloads\setup.exe, In Quarantäne, [cdf91c9f90fa290db17c57047e83c63a],
PUP.Optional.Amonetize.AS, C:\Users\PC\Downloads\Feuchtgebiete film stream__2971_i62829041_il4355053.exe, In Quarantäne, [cdf9fac1147620164a34e865f60ba65a],
PUP.Optional.MultiPlug, C:\Users\PC\Downloads\Hinterm Horizont - Hinterm Horizont gehts weiter.exe, In Quarantäne, [9f27853686044ee8ce31e27247bb08f8],
PUP.Optional.Softonic.A, C:\Users\PC\Downloads\SoftonicDownloader_fuer_utorrent.exe, In Quarantäne, [13b32f8c9eeccd69711491c707fa5fa1],
PUP.Optional.Softonic, C:\Users\PC\Downloads\SoftonicDownloader_fuer_wowmatrix.exe, In Quarantäne, [c501b308eb9f58dea78f8faef40dc33d],
PUP.Optional.Conduit.A, C:\Users\PC\Downloads\FileConverter_1_3.exe, In Quarantäne, [2c9a3982147649ed6e9155ffaa57847c],
PUP.Optional.InstallMonetizer, C:\Users\PC\Downloads\FlashPlayersetup__3873_i250562692_il3.exe, In Quarantäne, [2e987744b7d35cdadb6aee73d42dd12f],
PUP.Optional.InstallMonetizer, C:\Users\PC\Downloads\FlashPlayersetup__3873_i250563302_il3.exe, In Quarantäne, [1da96259ff8be35333126af734cde31d],
PUP.Optional.InstallMonetizer, C:\Users\PC\Downloads\FlashPlayersetup__3873_i256846040_il3.exe, In Quarantäne, [96304576612963d35aeb233e867b9070],
PUP.Optional.Somoto, C:\Users\PC\Downloads\FLVPlayerSetup-2TUBNKg.exe, In Quarantäne, [b90dfebd07831f170980b0bb897d35cb],
PUP.Optional.Installex, C:\Users\PC\Downloads\the-wire-the-target-ger-5189700.exe, In Quarantäne, [3c8a615a8307b97d94a97f1255ac5ba5],
PUP.Optional.SweetIM, C:\Users\PC\Downloads\SweetIMSetup.exe, In Quarantäne, [a620bdfefd8d60d6c71b1457c44212ee],
PUP.Optional.OfferMosquito.A, C:\Users\PC\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll, In Quarantäne, [3a8ce9d20585d363942670b0cc347d83],
PUP.Optional.HTTOGROUP.A, C:\Users\PC\AppData\Local\fbDownloader\Uninstall.exe, In Quarantäne, [4581a7145d2d3afc6f53760b55b10af6],
PUP.Optional.Iminent.A, C:\Windows\Installer\3d73ae.msi, In Quarantäne, [84422695c9c182b4f11cde880bf69967],
PUP.Optional.SweetIM, C:\Windows\Installer\d6ee75.msi, In Quarantäne, [65618b3052381d1928ba600b9b6b8a76],
PUP.Optional.SweetIM, C:\Windows\Installer\d6ee7a.msi, In Quarantäne, [84424d6efb8f44f262805417b0565ea2],
PUP.Optional.SweetIM, C:\Windows\Installer\d6ee7f.msi, In Quarantäne, [8541caf1afdbb87ec0223d2eac5aa15f],
PUP.Optional.SmartBar, C:\Windows\Installer\d6ee84.msi, In Quarantäne, [d1f5e6d59ceeec4ac4ac3ff155ab6a96],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Wajam Website.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Settings.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\SignIn with Facebook.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\SignIn with Twitter.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Search\Ask.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Search\Google.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Search\IMDb.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Search\Shopping.com.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Search\TripAdvisor.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Search\Wikipedia.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Search\Yahoo!.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Shopping\Amazon.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Shopping\Argos.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Shopping\Ebay.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Shopping\Etsy.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Shopping\HomeDepot.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Shopping\Ikea.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Shopping\Lowe's.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Shopping\Mercadolivre.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Shopping\MyShopping.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Shopping\Sears.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Shopping\Target.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Shopping\Tesco.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Shopping\Walmart.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Explore Social Shopping\Zalando.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance\Uninstall Wajam\uninstall.lnk, In Quarantäne, [eed88a31ddadb18524ae5e94eb18aa56],
PUP.Optional.PricePeep.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.pricepeep00.pricepeep.net_0.localstorage, Löschen bei Neustart, [c9fd3388ddadfd3925fbf201c73c16ea],
PUP.Optional.PricePeep.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.pricepeep00.pricepeep.net_0.localstorage-journal, In Quarantäne, [953185362d5d1f17de42a94a4eb57c84],
PUP.Optional.PricePeep.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.pricepeep00.pricepeep.net_0.localstorage-journal, In Quarantäne, [8640f2c98dfdb284a080b43f59aa5ca4],
PUP.Optional.Updating.A, C:\Windows\System32\Tasks\sup_games_updating_service, In Quarantäne, [3294d0eb96f4989ea3c0f9fbe51ede22],
PUP.Optional.Updating.A, C:\Windows\Tasks\sup_games_updating_service.job, In Quarantäne, [992de7d4bdcd181e164ed123a75c639d],
PUP.Optional.Notification.A, C:\Windows\Tasks\sup_games_notification_service.job, In Quarantäne, [ab1bba01e7a350e6cbc1db19dd26857b],
PUP.Optional.Notification.A, C:\Windows\System32\Tasks\sup_games_notification_service, In Quarantäne, [e9ddcfec0585e3532469e41022e12bd5],
PUP.Optional.FBDownloader.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\searchplugins\fbdownloader_search.xml, In Quarantäne, [497de6d50783bc7af0f25f9d04ff9c64],
PUP.Optional.SimpleNewTab.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\snt@simplenewtab.com.xpi, In Quarantäne, [6561c7f43a5066d097d1fd0190734cb4],
PUP.Optional.SelectNGo.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.selectgo00.selectgo.net_0.localstorage-journal, In Quarantäne, [92345e5d008aed495ae048b9828257a9],
PUP.Optional.Vitruvian.A, C:\Program Files (x86)\Mozilla Firefox\browser\defaults\preferences\!vitruvian-autoenable.js, In Quarantäne, [873fd2e994f65fd767d425dccb39d42c],
PUP.Optional.Vitruvian.A, C:\Program Files (x86)\Mozilla Firefox\defaults\preferences\!vitruvian-autoenable.js, In Quarantäne, [1ea8c9f297f368ce46f65aa710f4b64a],
PUP.Optional.Vitruvian.A, C:\Program Files (x86)\Mozilla Firefox\vitruvian-autoenable.cfg, In Quarantäne, [cff752694941999dd8656d947292c838],
PUP.Optional.BoostSaves.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.boostsaves.com_0.localstorage, Löschen bei Neustart, [2d9914a78dfdd660d73f30d7699b5ca4],
PUP.Optional.BoostSaves.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.boostsaves.com_0.localstorage-journal, Löschen bei Neustart, [418512a96723d75f46d0a760ff0504fc],
PUP.Optional.Vitruvian.A, C:\Program Files (x86)\Mozilla Firefox\browser\defaults\preferences\!vitruvian-csp.js, In Quarantäne, [f9cdceedd9b1e6506e1d7b8e1ee631cf],
PUP.Optional.Vitruvian.A, C:\Program Files (x86)\Mozilla Firefox\defaults\preferences\!vitruvian-csp.js, In Quarantäne, [16b09526beccb4824f3d64a50ff57789],
PUP.Optional.Boost.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.boostsaves.com_0.localstorage, Löschen bei Neustart, [f1d52299d6b439fdb916c65818ecde22],
PUP.Optional.Boost.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.boostsaves.com_0.localstorage-journal, Löschen bei Neustart, [62647942404aa393319ee03ec044e11f],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-1, In Quarantäne, [52746c4fbcce5cdad710e33bf212d22e],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-11, In Quarantäne, [be08209bc3c7f73f44a3ef2ff113b947],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4bb8e883-b028-4f67-abf0-376e5be09182-7, In Quarantäne, [e8de516a058562d48a5d1fff9f65e21e],
PUP.Optional.SelectNGo.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.select-n-go00.select-n-go.com_0.localstorage-journal, In Quarantäne, [1fa71ba05634b680317e9198b252857b],
PUP.Optional.ShoppingGate.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_inst.shoppingate.info_0.localstorage, In Quarantäne, [0fb754678bff3ef819fcdc5074904ab6],
PUP.Optional.ShoppingGate.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_inst.shoppingate.info_0.localstorage-journal, In Quarantäne, [9c2a3d7e4545dc5abc597fadda2ad828],
PUP.Optional.Trovi.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\searchplugins\trovi-search.xml, In Quarantäne, [c9fd8c2ff29884b2590782aa05ff45bb],
PUP.Optional.Yontoo.A, C:\Program Files (x86)\Yontoo\YontooLayers.crx, In Quarantäne, [e1e5576461292016fa312508e4202fd1],
PUP.Optional.Iminent.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage, In Quarantäne, [4c7afebd7a104bebb41972bb5ca8758b],
PUP.Optional.WebSearch.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\searchplugins\WebSearch.xml, In Quarantäne, [a224d1ea5d2d4bebff46bc7c1ee66a96],
PUP.Optional.Iminent.A, C:\Program Files (x86)\Iminent\SearchTheWeb.xml, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, C:\Program Files (x86)\Iminent\Iminent.WebBooster.InternetExplorer.dll, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, C:\Program Files (x86)\Iminent\StartWeb.xml, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, C:\Program Files (x86)\Iminent\USearch.xml, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, C:\Program Files (x86)\Iminent\WinkHandler.exe, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, C:\Program Files (x86)\Iminent\inst\main.ico, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, C:\Program Files (x86)\Iminent\inst\SearchTheWeb.ico, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, C:\Program Files (x86)\Iminent\inst\Universely.ico, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, C:\Program Files (x86)\Iminent\inst\Bootstrapper\CustomActionsIminent.dll, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, C:\Program Files (x86)\Iminent\inst\Bootstrapper\MetroConfig.json, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.Iminent.A, C:\Program Files (x86)\Iminent\inst\Bootstrapper\uninstall.exe, In Quarantäne, [cafcb9025b2fc670e3cec68ebd484db3],
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job, In Quarantäne, [2e9807b42961f046b322cfa744c13bc5],
PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore, In Quarantäne, [6066befdfa90f2440fc7db9b9372ac54],
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job, In Quarantäne, [3f87edce7614270fab2cf086fa0b41bf],
PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA, In Quarantäne, [f0d6833889012b0b597fccaa42c328d8],
PUP.Optional.ReMarkable.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage, Löschen bei Neustart, [1caa0bb05931bc7a7681baca26dff10f],
PUP.Optional.ReMarkable.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage-journal, Löschen bei Neustart, [d6f0b506800a7fb737c02b5904011ce4],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\skin\crossrider_statusbar.png, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\skin\button1.png, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\skin\button2.png, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\skin\button3.png, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\skin\button4.png, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\skin\button5.png, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\skin\icon128.png, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\skin\icon16.png, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\skin\icon24.png, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\skin\icon48.png, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\skin\panelarrow-up.png, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\skin\popup.html, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\skin\skin.css, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\skin\update.css, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome.manifest, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\install.rdf, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\0c05c008c4c1846f59456732516245b6.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\137611552ebe6cd7e92f868eb971ce9e.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\2d4a45018500317e6fac6b15985d6846.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\2e174f3effbc07a117f394bde3ebab7b.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\background.html, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\browser.xul, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\ccd80ccfd4b09829feef16a1ab31f5e4.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\cf68ebb26d6df29e283dc789c5ca554d.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\dialog.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\options.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\options.xul, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\search_dialog.xul, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\api\949d20c397ef39f56dbb3b342a8938b4.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\api\026a9a1d99d89b937194b37b1554e487.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\api\28d6b4d97bbddc5a2c6d9d452fd527bd.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\api\32d2f21a56727c381648c7e36d0d496f.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\api\43801236f6c493f9cc57a8615683128b.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\api\4b06dd2640ce3e555d2ee117bff55af6.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\api\7ffc58afebef8f8467c43599d652cb0e.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\api\836fee3987ff1f0ce230c8ce8a65b12c.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\api\86d91a27216da7602c1a01ed75272f23.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\api\9b34d121f00f986ac30efd83ef664fa4.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\api\9b97aca43a74d0af5b40554a7814864b.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\api\9d77563d519feebac15f436bffd4146b.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\api\e82f48f58f09f496ad88c62a418cc14d.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\api\ed3954737def2309997c710df8224a25.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\api\ede255d1e4faeb91eb5d34eb84253a20.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\api\fd8de7eb179e7e919360b6216c3afce0.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core\86098f274399f3a179bd3070887c085c.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core\0a7f20e0ae6166e5aa85921616a0d704.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core\0d192173d3ef0fff669d6f89cb3b0636.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core\20424ded49ad7271f46622091b72888c.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core\216dfdac8e9c916ba58ba2f6195210a8.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core\3d280dc908dafe6bf830c0b2422c7e87.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core\3e91377bd5f82d41d8487e1244a09d12.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core\4c3ae30d083ea08ad688d53db3181a27.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core\51f13c2612d8189a0dcf20b21d63007a.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core\630993d9b9d31f8cc2b244addb793077.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core\636a208f08c2011c473a33ea7b8f9928.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core\714f632e296c4e2d445dd99ec449f669.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core\774f5394220cd5d47118f92fcb2335ff.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core\84ac12f05bbb66316959141f4c4cdb68.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core\93eb708f59585ed0f7425eb478c48946.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core\9e39281193afafafe81b65157816e119.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core\a15a8d0e2a7ac8535789ad3708667702.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core\a2ac34e5e71d4daba842903aa6570631.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core\b9bccbb52ab68f6b0edab783636b574c.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core\d6d0c3dbc5198446f57e2af3bd132542.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\chrome\content\core\installer.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\defaults\preferences\prefs.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\manifest.xml, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins.json, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\253.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\1.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\1000020.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\1000025.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\1000030.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\102.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\13.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\14.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\16.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\17.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\177.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\178.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\179.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\180.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\182.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\183.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\193.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\195.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\200.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\207.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\21.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\22.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\220.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\223.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\226.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\234.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\246.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\273.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\28.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\281.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\288.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\345.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\354.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\376.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\380.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\385.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\390.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\391.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\4.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\47.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\64.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\7.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\72.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\78.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\9.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\91.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\plugins\98.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\userCode\background.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\extensionData\userCode\extension.js, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.CrossRider.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com\locale\en-US\translations.dtd, In Quarantäne, [c30373483d4d231331b03055da2b26da],
PUP.Optional.BestSaveForYou.A, C:\Program Files (x86)\BesttSAveeFOOrYoU\H2zo63GAQCHLut.tlb, In Quarantäne, [774f2b903852ea4c2522e89e8f7616ea],
PUP.Optional.BestSaveForYou.A, C:\Program Files (x86)\BesttSAveeFOOrYoU\H2zo63GAQCHLut.dat, In Quarantäne, [774f2b903852ea4c2522e89e8f7616ea],
PUP.Optional.DealExpress.A, C:\Program Files (x86)\DealiEexpresS\peJ5lfKQZ7AX6p.tlb, In Quarantäne, [a91d0ab12f5b25118acf05819f66b749],
PUP.Optional.DealExpress.A, C:\Program Files (x86)\DealiEexpresS\peJ5lfKQZ7AX6p.dat, In Quarantäne, [a91d0ab12f5b25118acf05819f66b749],
PUP.Optional.EnjoyCoupon.A, C:\Program Files (x86)\EnjjoyCoupoin\xE4Quk7Ej3KeeO.tlb, In Quarantäne, [03c392295634d2645f03582ea75eb947],
PUP.Optional.EnjoyCoupon.A, C:\Program Files (x86)\EnjjoyCoupoin\xE4Quk7Ej3KeeO.dat, In Quarantäne, [03c392295634d2645f03582ea75eb947],
PUP.Optional.Fun2Save.A, C:\Program Files (x86)\Fun22Save\8SoQThLFLH3ZtM.tlb, In Quarantäne, [09bdc5f693f78aac3e2a88fe9273d62a],
PUP.Optional.Fun2Save.A, C:\Program Files (x86)\Fun22Save\8SoQThLFLH3ZtM.dat, In Quarantäne, [09bdc5f693f78aac3e2a88fe9273d62a],
PUP.Optional.MinimumPrice.A, C:\Program Files (x86)\MinimUmPrioce\HnArboJqILAFcM.tlb, In Quarantäne, [2e989b205b2f53e3c8b0444221e44eb2],
PUP.Optional.MinimumPrice.A, C:\Program Files (x86)\MinimUmPrioce\HnArboJqILAFcM.dat, In Quarantäne, [2e989b205b2f53e3c8b0444221e44eb2],
PUP.Optional.MultiPlug, C:\ProgramData\coilhijefelhnblgjdkaciplihbjkbpf\lsdb.js, In Quarantäne, [c2049f1c98f20c2a37ecd2b594713dc3],
PUP.Optional.MultiPlug, C:\ProgramData\coilhijefelhnblgjdkaciplihbjkbpf\background.html, In Quarantäne, [c2049f1c98f20c2a37ecd2b594713dc3],
PUP.Optional.MultiPlug, C:\ProgramData\coilhijefelhnblgjdkaciplihbjkbpf\content.js, In Quarantäne, [c2049f1c98f20c2a37ecd2b594713dc3],
PUP.Optional.MultiPlug, C:\ProgramData\coilhijefelhnblgjdkaciplihbjkbpf\manifest.json, In Quarantäne, [c2049f1c98f20c2a37ecd2b594713dc3],
PUP.Optional.MultiPlug, C:\ProgramData\coilhijefelhnblgjdkaciplihbjkbpf\pSVZ0.js, In Quarantäne, [c2049f1c98f20c2a37ecd2b594713dc3],
PUP.Optional.MultiPlug, C:\ProgramData\dhpafobkjdcgjlpjkeigndogkaoehkfh\lsdb.js, In Quarantäne, [893d6a5192f82a0c33f0e3a48580718f],
PUP.Optional.MultiPlug, C:\ProgramData\dhpafobkjdcgjlpjkeigndogkaoehkfh\ba7g.js, In Quarantäne, [893d6a5192f82a0c33f0e3a48580718f],
PUP.Optional.MultiPlug, C:\ProgramData\dhpafobkjdcgjlpjkeigndogkaoehkfh\background.html, In Quarantäne, [893d6a5192f82a0c33f0e3a48580718f],
PUP.Optional.MultiPlug, C:\ProgramData\dhpafobkjdcgjlpjkeigndogkaoehkfh\content.js, In Quarantäne, [893d6a5192f82a0c33f0e3a48580718f],
PUP.Optional.MultiPlug, C:\ProgramData\dhpafobkjdcgjlpjkeigndogkaoehkfh\manifest.json, In Quarantäne, [893d6a5192f82a0c33f0e3a48580718f],
PUP.Optional.MultiPlug, C:\ProgramData\hblpajpcplfopmdejeimcpcaemdoipbm\lsdb.js, In Quarantäne, [0fb773481a7093a39e85d5b2e81dfb05],
PUP.Optional.MultiPlug, C:\ProgramData\hblpajpcplfopmdejeimcpcaemdoipbm\B3BMYeOvXC.js, In Quarantäne, [0fb773481a7093a39e85d5b2e81dfb05],
PUP.Optional.MultiPlug, C:\ProgramData\hblpajpcplfopmdejeimcpcaemdoipbm\background.html, In Quarantäne, [0fb773481a7093a39e85d5b2e81dfb05],
PUP.Optional.MultiPlug, C:\ProgramData\hblpajpcplfopmdejeimcpcaemdoipbm\content.js, In Quarantäne, [0fb773481a7093a39e85d5b2e81dfb05],
PUP.Optional.MultiPlug, C:\ProgramData\hblpajpcplfopmdejeimcpcaemdoipbm\manifest.json, In Quarantäne, [0fb773481a7093a39e85d5b2e81dfb05],
PUP.Optional.iSaver.A, C:\Program Files (x86)\Iseaavver\IEWb20WjcVLBYi.tlb, In Quarantäne, [953100bb16740234129ec0c73cc9837d],
PUP.Optional.iSaver.A, C:\Program Files (x86)\Iseaavver\IEWb20WjcVLBYi.dat, In Quarantäne, [953100bb16740234129ec0c73cc9837d],
PUP.Optional.OptimizerPro.A, C:\Users\PC\Documents\Optimizer Pro\CookiesException.txt, In Quarantäne, [1fa7e3d8c3c75dd99546791417ee2ed2],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\wajam.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\amazon.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\argos.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\ask.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\bestbuy.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\ebay.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\etsy.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\facebook.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\favicon.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\google.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\homedepot.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\ikea.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\imdb.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\lowes.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\mercado.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\mysearchweb.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\myshopping.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\searchresult.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\sears.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\setting.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\settings.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\shopping.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\target.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\tesco.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\tripadvisor.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\twitter.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\walmart.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\wiki.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\yahoo.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\Logos\zalando.ico, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\uninstall.exe, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\02d3dd9a47a82f8b4c0c896c3a80dd8d, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\032a6f6ce0347ce9e600f5b1d46ff1d9, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\0360f03859a8a7aea31f538c76901b81, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\0769dbf3c5829feec6389faee841348b, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\0948b0975320b89b617953cb740ba27b, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\0bc0ba754a789dfa76270801341dd437, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\0d0ef127344c9f54d6056553b0aa88de, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\197f1bf62170698a4fa1332967889b15, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\1acafaf4069ee86ed2130a8080cae9cb, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\1acb63ef2ae1bbf7d00ae79774c01b86, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\1d175f43988b4c55ece3efdb24dcd5f0, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\21662088bba8bd2582e5ed4cb2cf628a, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\28331e062aecdb63f55e7e7e985b39a7, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\2d44de80c4c7f969923e526527b41e12, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\3509060b8454c96d5a456aafeb7b7db8, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\ecd89565d421e1aebe3931f7045e5c3f, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\ffb514fa8905e2608865f7fe66d4113d, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\FiddlerCore.dll, Löschen bei Neustart, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\HtmlAgilityPack.dll, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\makecert.exe, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\Newtonsoft.Json.dll, Löschen bei Neustart, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\WHttpServer.exe, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\wie, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\WJManifest, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\75c8548a7aae02c6c181bf2f14814d1c, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\790e75663a5d2c922a13f1c859f92fd7, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\7bbfacac1276b5501bdf24ed084e6284, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\87a805fb2dd8c6072ed8ce5b892f9533, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\8d70fe36d84bcfc4d25713b8d77c21dd, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\8e5edf07f5580af79a8d19079031bcac, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\94e911f4133b9f68372b97e468043698, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\9d825beb743a011f998326384784a409, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\a043bb6b8ec565a92ccbebaa8067e246, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\a0bc8633dcf8e568b9d680ad1c00bdbb, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\a45d793f384dff76854d6a79849f3cd7, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\35b4a64c5764de469656b6dd10aee033, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\388de978b8e28e2ba9a218f71baeb80b, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\39f49c94060eac142d3bc1cf7fa2e331, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\41596ca3d0bedfab0a08564d99973d7f, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\41df7a655cd3eb63ae35f3951aa671b2, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\4c6884c7fe8523e31139d3b267531754, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\536bb4d0543ce68ab8049d506fee646d, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\54695d896bacbcedca3ef188aed46d6f, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\54fb9fe7534bec9daa554bab978f6e40, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\5c5b790b48a5722f38a5566718651b17, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\639ae2f47135af835eb10ec17afe13cc, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\72251c8a5b4652f110c94b29b832607a, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\73e1cf899f4f93fa4649349528ba54b1, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\b095128a7e5b06ddc015b71d374dae42, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\b20399f7c7a034fdf64ea239c05eface, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\bab76ea7480251b887509a6fd53d11ec, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\c7a1c16f5cc9f7cab6ded7dd125bbf23, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\cf1f0fef80e4f4c0cbe6742836abfdad, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\cf1fd99b25cdbcdd424cea376087317d, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\d03da99bb0e9334287f9f46aa8e6ece8, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\d34606a8f03ab48f10fb2cbd17f11a36, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\d9a24d826a9bebdc032d6ec540116f81, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\e1cc11567b7039ca716efc7e540f6b75, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\e6fee152b360371b8ae30687011a92de, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\aaedfa8e16b949600f3dff9b62c3bf3a, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\e8b367b9ef66b88f9043ccdf33e2383c, In Quarantäne, [45818635cfbb2511e5927f11b74e28d8],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe, Löschen bei Neustart, [fdc9813a5b2fa09620eaf9f9b251b64a],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe, Löschen bei Neustart, [a22455666a2054e297745b9709faf10f],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\SearchSnacks_1.10.0.1\Service\sssvc.exe, Löschen bei Neustart, [6462d0eb068479bd7284ac62db29e818],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.exe, Löschen bei Neustart, [5670823923673ff709f898be33d2619f],


Why me 17.06.2015 14:24

Sry, der Beitrag hier war ein doppel post :D

Why me 17.06.2015 14:25

Mbam.txt (teil 4)

Code:



PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\0Extension.crx, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\1Extension.crx, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\BrowserHelper.exe, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\BrowserHelper.exe.config, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\MACTrackBarLib.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.Logging.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.Logging.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Microsoft.Practices.ObjectBuilder.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\NDde.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar Automatic Update.exe, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar Automatic Update.exe.config, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.exe.Config, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.Loader.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.EventManager.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.Base.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.ChromeLocalPlugin.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.ShareManagerLocalPlugin.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessEntities.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessLogic.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Personalization.Settings.PersonalizationSettingsManager.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Personalization.Settings.UserSettingsManager.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.AutomaticUpdates.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.BrowserHelperUtils.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.ProcessDownMonitor.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.ProductUninstaller.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.SetBrowsersSettings.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.Common.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.DefaultBrowser.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.SetBrowsersSettingsAutoUpdater.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.SideBySide.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.XmlSerializers.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.Translations.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.UrlHistorySupplier.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Smartbar.Resources.Utilities.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\ar\Smartbar.Resources.LanguageSettings.resources.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Configs\QueryParameters.xml, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\Configs\XmlSideBySideProtocol.xml, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll, Löschen bei Neustart, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\es\Smartbar.Resources.LanguageSettings.resources.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\fr\Smartbar.Resources.LanguageSettings.resources.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\he\Smartbar.Resources.LanguageSettings.resources.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\it\Smartbar.Resources.LanguageSettings.resources.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Application\pt\Smartbar.Resources.LanguageSettings.resources.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\Configs\UserInfo.xml, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00c.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00chover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00cPress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABE.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABEhover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABEpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827Ehover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511Hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511Press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478Hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478Press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089E.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089Ehover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089Epress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1Dhover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307f.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\95ae73f0-9799-46fd-bceb-57efcb7f0537hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\E458493F-867F-4712-A3AF-D9664ED47C19.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\E8584703-6CA5-4351-82CC-09E40938A066press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0E.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0Ehover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0Epress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1D.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1Dpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EC.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EChover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7ECpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307fHover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307fPress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2C.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2Chover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2Cpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6eba.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6ebaHover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6ebaPress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\929407CC-7E48-47E0-A9F9-A4A167AC24D1.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\929407CC-7E48-47E0-A9F9-A4A167AC24D1hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\929407CC-7E48-47E0-A9F9-A4A167AC24D1press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\95ae73f0-9799-46fd-bceb-57efcb7f0537.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\95ae73f0-9799-46fd-bceb-57efcb7f0537press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\A75C6A50-13B0-4704-AA87-8DD113E31310.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\A75C6A50-13B0-4704-AA87-8DD113E31310hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\A75C6A50-13B0-4704-AA87-8DD113E31310press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\a94e6710-6021-4cdc-82de-1c001238bd8f.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\a94e6710-6021-4cdc-82de-1c001238bd8fHover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\a94e6710-6021-4cdc-82de-1c001238bd8fPress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\B1BEF453-913F-4EC4-B057-A2BB21C09DCB.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\B1BEF453-913F-4EC4-B057-A2BB21C09DCBhover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\B1BEF453-913F-4EC4-B057-A2BB21C09DCBpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.ico, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abhover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\c1546a00-e42d-4ce7-aac5-5353a895f3cf.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\c1546a00-e42d-4ce7-aac5-5353a895f3cfhover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\c1546a00-e42d-4ce7-aac5-5353a895f3cfpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\CE1500FE-6F59-421C-8005-3E137AC051A2.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\CE1500FE-6F59-421C-8005-3E137AC051A2hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\CE1500FE-6F59-421C-8005-3E137AC051A2press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\D2B0680C-17C4-492D-85D7-D4CA3E724D50.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\D2B0680C-17C4-492D-85D7-D4CA3E724D50hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\D2B0680C-17C4-492D-85D7-D4CA3E724D50press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\D5113B95-781C-4737-A26F-3ED3A2CB876F.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\D5113B95-781C-4737-A26F-3ED3A2CB876Fhover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\D5113B95-781C-4737-A26F-3ED3A2CB876Fpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\e2870479-a572-412b-8a8f-5604d19b55cd.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\e2870479-a572-412b-8a8f-5604d19b55cdhover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\e2870479-a572-412b-8a8f-5604d19b55cdpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\E3345571-EEF9-4041-8C24-F7F5A9331C23.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\E3345571-EEF9-4041-8C24-F7F5A9331C23hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\E3345571-EEF9-4041-8C24-F7F5A9331C23press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12e.ico, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12e.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12ehover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12epress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\E458493F-867F-4712-A3AF-D9664ED47C19hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\E458493F-867F-4712-A3AF-D9664ED47C19press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\E52BEFE7-6535-439c-B168-A3B105E4212E.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\E52BEFE7-6535-439c-B168-A3B105E4212Ehover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\E52BEFE7-6535-439c-B168-A3B105E4212Epress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\E8584703-6CA5-4351-82CC-09E40938A066.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\E8584703-6CA5-4351-82CC-09E40938A066hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\e8967c62-9ea0-4fde-9832-2c10f1d580de.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\e8967c62-9ea0-4fde-9832-2c10f1d580dehover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\e8967c62-9ea0-4fde-9832-2c10f1d580depress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\EA99E20A-FBBA-4197-954B-E2013280A29B.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\EA99E20A-FBBA-4197-954B-E2013280A29Bhover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\EA99E20A-FBBA-4197-954B-E2013280A29Bpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\f7fd4890-7f89-4c73-8ff2-52105657cbb6.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\f7fd4890-7f89-4c73-8ff2-52105657cbb6Hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\f7fd4890-7f89-4c73-8ff2-52105657cbb6Press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BD.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDhover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\fac5189f-f2c7-4eed-bae8-011eca170d7b.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\fac5189f-f2c7-4eed-bae8-011eca170d7bhover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\icons\fac5189f-f2c7-4eed-bae8-011eca170d7bpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00c.ico, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00c.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00chover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00cpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABE.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABEhover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BC.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BChover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABEpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BCpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089E.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307f.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6.ico, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\47BFF758-9581-4C68-9293-1181A70CDEE8.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\47BFF758-9581-4C68-9293-1181A70CDEE8Hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\47BFF758-9581-4C68-9293-1181A70CDEE8Press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675Hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675Press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511.ico, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511Hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511Press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478.ico, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478Hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478Press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6.ico, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089Ehover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089Epress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0E.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0Ehover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0Epress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1D.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1Dhover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1Dpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EC.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EChover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7ECpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43.ico, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941.ico, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307f.ico, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307fHover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307fPress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2C.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2Chover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2Cpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6eba.ico, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6eba.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6ebaHover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6ebaPress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\929407CC-7E48-47E0-A9F9-A4A167AC24D1.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\929407CC-7E48-47E0-A9F9-A4A167AC24D1hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\929407CC-7E48-47E0-A9F9-A4A167AC24D1press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537.ico, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\A75C6A50-13B0-4704-AA87-8DD113E31310.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\A75C6A50-13B0-4704-AA87-8DD113E31310hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\A75C6A50-13B0-4704-AA87-8DD113E31310press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8f.ico, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8f.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8fHover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8fPress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCB.ico, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCB.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCBhover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCBpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\BC303DD4-37E7-4242-8DDD-8DEE2171066B.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\BC303DD4-37E7-4242-8DDD-8DEE2171066Bpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.ico, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abhover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\BE3608B1-C2D5-4AD3-A382-45635338C6D1.PNG, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\BE3608B1-C2D5-4AD3-A382-45635338C6D1HOVER.PNG, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\BE3608B1-C2D5-4AD3-A382-45635338C6D1PRESS.PNG, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cf.ico, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cf.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cfhover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cfpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\CE1500FE-6F59-421C-8005-3E137AC051A2.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\CE1500FE-6F59-421C-8005-3E137AC051A2hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\CE1500FE-6F59-421C-8005-3E137AC051A2press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\D2B0680C-17C4-492D-85D7-D4CA3E724D50.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\D2B0680C-17C4-492D-85D7-D4CA3E724D50hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\D2B0680C-17C4-492D-85D7-D4CA3E724D50press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\D5113B95-781C-4737-A26F-3ED3A2CB876FHover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\D5113B95-781C-4737-A26F-3ED3A2CB876FPress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0.ico, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\e2870479-a572-412b-8a8f-5604d19b55cd.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\e2870479-a572-412b-8a8f-5604d19b55cdhover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\e2870479-a572-412b-8a8f-5604d19b55cdpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\E3345571-EEF9-4041-8C24-F7F5A9331C23.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\E3345571-EEF9-4041-8C24-F7F5A9331C23hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\E3345571-EEF9-4041-8C24-F7F5A9331C23press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12e.ico, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12e.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12ehover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12epress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\e3c610dc-deed-47cd-acc0-493d71556c16.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\e3c610dc-deed-47cd-acc0-493d71556c16Hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\e3c610dc-deed-47cd-acc0-493d71556c16Press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\E458493F-867F-4712-A3AF-D9664ED47C19hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\E458493F-867F-4712-A3AF-D9664ED47C19press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\E52BEFE7-6535-439c-B168-A3B105E4212E.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\E52BEFE7-6535-439c-B168-A3B105E4212Ehover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\E52BEFE7-6535-439c-B168-A3B105E4212Epress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\E8584703-6CA5-4351-82CC-09E40938A066.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\E8584703-6CA5-4351-82CC-09E40938A066hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580de.ico, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580de.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580dehover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580depress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\EA99E20A-FBBA-4197-954B-E2013280A29B.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\EA99E20A-FBBA-4197-954B-E2013280A29Bhover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\EA99E20A-FBBA-4197-954B-E2013280A29Bpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\BC303DD4-37E7-4242-8DDD-8DEE2171066Bhover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\D5113B95-781C-4737-A26F-3ED3A2CB876F.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\E458493F-867F-4712-A3AF-D9664ED47C19.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\E8584703-6CA5-4351-82CC-09E40938A066press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\f41901a8-2a78-4794-b455-d53a24b37aef.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\f41901a8-2a78-4794-b455-d53a24b37aefHover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\f41901a8-2a78-4794-b455-d53a24b37aefPress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6.ico, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6Hover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6Press.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BD.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDhover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7b.ico, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7b.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7bhover.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7bpress.png, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.DMP.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.MessengerPlugin.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.NotepadPlugin.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.ScreenCapturePlugin.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.UninstallProductsPlugin.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.WordPlugin.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.YoutubeDownloadPlugin.dll, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\DistributionFiles\Configs\IconsSettings.xml, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\DistributionFiles\Configs\LocalMethods.xml, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\DistributionFiles\Configs\ProfileManager.xml, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\DistributionFiles\Configs\PublisherSettings.xml, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\DistributionFiles\Configs\UserSettings.xml, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\DistributionFiles\Profiles\0F18222D-CA7F-4860-BA6D-F0C7E8BD76E1.xml, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Smartbar\Smartbar.exe_StrongName_vuedtbpoockmp1sq45awfxuouevabx0i\1.2.0.0\user.config, In Quarantäne, [90364378cdbd06306cdab30b60a314ec],


Why me 17.06.2015 14:27

Mbam.txt (teil 5):

Code:

PUP.Optional.Iminent.A, C:\Program Files (x86)\IminentToolbar\1.8.28.3\iminentApp.dll, In Quarantäne, [60665f5c593130069db66955788bb14f],
PUP.Optional.Iminent.A, C:\Program Files (x86)\IminentToolbar\1.8.28.3\iminentEng.dll, In Quarantäne, [60665f5c593130069db66955788bb14f],
PUP.Optional.Iminent.A, C:\Program Files (x86)\IminentToolbar\1.8.28.3\iminentsrv.exe, In Quarantäne, [60665f5c593130069db66955788bb14f],
PUP.Optional.Iminent.A, C:\Program Files (x86)\IminentToolbar\1.8.28.3\sqlite3.dll, In Quarantäne, [60665f5c593130069db66955788bb14f],
PUP.Optional.Iminent.A, C:\Program Files (x86)\IminentToolbar\1.8.28.3\uninstall.exe, In Quarantäne, [60665f5c593130069db66955788bb14f],
PUP.Optional.Iminent.A, C:\Users\PC\AppData\Roaming\IminentToolbar\sqlite3.dll, In Quarantäne, [72546f4ceb9f66d04ca1f1ce39ca60a0],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\h.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\1.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\11823.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\15241.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\16233.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\16258.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\17152.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\1728.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\17781.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\2229.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\2260.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\41.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\4488.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\450.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\6595.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\6627.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\6651.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\6738.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\8275.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\8293.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\9514.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\a.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\b.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\c.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\d.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\e.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\f.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\g.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\i.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\j.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\k.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\l.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\m.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\n.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\o.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\p.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\q.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\r.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\s.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\t.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\u.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\v.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\w.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\wlu.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\x.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\y.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.PriceGong.A, C:\Users\PC\AppData\LocalLow\PriceGong\Data\z.txt, In Quarantäne, [9630ad0e4941de58f4767051ae552ad6],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\LocalLow\SweetIM\Toolbars\Internet Explorer\cache\473d5c007e793590a1db512a6ef4eb57.games2.png, In Quarantäne, [cff79d1eb2d857dfbde0fcc541c2da26],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\LocalLow\SweetIM\Toolbars\Internet Explorer\cache\53b597b55d8412d563b720d3585c1af8.facebook.png, In Quarantäne, [cff79d1eb2d857dfbde0fcc541c2da26],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\LocalLow\SweetIM\Toolbars\Internet Explorer\cache\5af11f47db7e11200db081b18faa30a0.options_remote44b.html, In Quarantäne, [cff79d1eb2d857dfbde0fcc541c2da26],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\LocalLow\SweetIM\Toolbars\Internet Explorer\cache\7c1329c14e8f09f2e97e3522bcd7e126.toolbar46.xml, In Quarantäne, [cff79d1eb2d857dfbde0fcc541c2da26],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\LocalLow\SweetIM\Toolbars\Internet Explorer\cache\8d03c0783b1e34c2b403cee25e4f3d73.options_remote44b_no_fb.html, In Quarantäne, [cff79d1eb2d857dfbde0fcc541c2da26],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\LocalLow\SweetIM\Toolbars\Internet Explorer\cache\ccbd8b558f1d599e360b3dc00c89e1b1.facebook2.png, In Quarantäne, [cff79d1eb2d857dfbde0fcc541c2da26],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\LocalLow\SweetIM\Toolbars\Internet Explorer\cache\d7663980840977888075cdf06da9e63d.facebook2_hover.png, In Quarantäne, [cff79d1eb2d857dfbde0fcc541c2da26],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\LocalLow\SweetIM\Toolbars\Internet Explorer\cache\dda5971490977d5465f836a12522f1a1.games3.png, In Quarantäne, [cff79d1eb2d857dfbde0fcc541c2da26],
PUP.Optional.Babylon.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.11_0\BabMaint.x, In Quarantäne, [873f249723678caaacbdcef4bd469b65],
PUP.Optional.Babylon.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.11_0\babylon48.png, In Quarantäne, [873f249723678caaacbdcef4bd469b65],
PUP.Optional.Babylon.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.11_0\BabylonChromeToolBar.dll, In Quarantäne, [873f249723678caaacbdcef4bd469b65],
PUP.Optional.Babylon.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.11_0\bg.html, In Quarantäne, [873f249723678caaacbdcef4bd469b65],
PUP.Optional.Babylon.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.11_0\bg.js, In Quarantäne, [873f249723678caaacbdcef4bd469b65],
PUP.Optional.Babylon.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.11_0\browser_icon_babylon48.png, In Quarantäne, [873f249723678caaacbdcef4bd469b65],
PUP.Optional.Babylon.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.11_0\btns.png, In Quarantäne, [873f249723678caaacbdcef4bd469b65],
PUP.Optional.Babylon.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.11_0\BUSolution.dll, In Quarantäne, [873f249723678caaacbdcef4bd469b65],
PUP.Optional.Babylon.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.11_0\cs.js, In Quarantäne, [873f249723678caaacbdcef4bd469b65],
PUP.Optional.Babylon.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.11_0\manifest.json, In Quarantäne, [873f249723678caaacbdcef4bd469b65],
PUP.Optional.Babylon.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.11_0\popup.html, In Quarantäne, [873f249723678caaacbdcef4bd469b65],
PUP.Optional.Babylon.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.11_0\popup.js, In Quarantäne, [873f249723678caaacbdcef4bd469b65],
PUP.Optional.Babylon.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.11_0\redirect.html, In Quarantäne, [873f249723678caaacbdcef4bd469b65],
PUP.Optional.Babylon.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.11_0\redirect.js, In Quarantäne, [873f249723678caaacbdcef4bd469b65],
PUP.Optional.PriceGong.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong\PriceGong Contact Us.lnk, In Quarantäne, [b1154f6c1b6f90a663b42c98e3206f91],
PUP.Optional.PriceGong.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong\PriceGong Help.lnk, In Quarantäne, [b1154f6c1b6f90a663b42c98e3206f91],
PUP.Optional.PriceGong.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong\PriceGong Homepage.lnk, In Quarantäne, [b1154f6c1b6f90a663b42c98e3206f91],
PUP.Optional.PriceGong.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong\Uninstall PriceGong.lnk, In Quarantäne, [b1154f6c1b6f90a663b42c98e3206f91],
PUP.Optional.SimpleNewTab.A, C:\Users\PC\AppData\Local\simple_new_tab\htmls\index.html, In Quarantäne, [507654678406a393dfa3eedce51ed729],
PUP.Optional.OfferMosquito.A, C:\Users\PC\AppData\Local\ext_offermosquito\atl100.dll, In Quarantäne, [21a57942a0ea81b5c9bb5e6cfc072bd5],
PUP.Optional.OfferMosquito.A, C:\Users\PC\AppData\Local\ext_offermosquito\msvcr100d.dll, In Quarantäne, [21a57942a0ea81b5c9bb5e6cfc072bd5],
PUP.Optional.OfferMosquito.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk\1.2_1\dependencies.js, In Quarantäne, [19adf3c8e0aaeb4b15708b3f7291639d],
PUP.Optional.OfferMosquito.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk\1.2_1\events.js, In Quarantäne, [19adf3c8e0aaeb4b15708b3f7291639d],
PUP.Optional.OfferMosquito.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk\1.2_1\icon.png, In Quarantäne, [19adf3c8e0aaeb4b15708b3f7291639d],
PUP.Optional.OfferMosquito.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk\1.2_1\manifest.json, In Quarantäne, [19adf3c8e0aaeb4b15708b3f7291639d],
PUP.Optional.OfferMosquito.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk\1.2_1\offermosquito.js, In Quarantäne, [19adf3c8e0aaeb4b15708b3f7291639d],
PUP.Optional.OfferMosquito.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\ext_offermosquito\ext_offermosquito.crx, In Quarantäne, [3c8a87341476e84e13738c3e7d867c84],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.2.0.0_0\128.png, In Quarantäne, [63632c8fd1b9d95de99157793fc441bf],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.2.0.0_0\16.png, In Quarantäne, [63632c8fd1b9d95de99157793fc441bf],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.2.0.0_0\48.png, In Quarantäne, [63632c8fd1b9d95de99157793fc441bf],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.2.0.0_0\background.html, In Quarantäne, [63632c8fd1b9d95de99157793fc441bf],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.2.0.0_0\fbsim.js, In Quarantäne, [63632c8fd1b9d95de99157793fc441bf],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.2.0.0_0\logger.js, In Quarantäne, [63632c8fd1b9d95de99157793fc441bf],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.2.0.0_0\main.js, In Quarantäne, [63632c8fd1b9d95de99157793fc441bf],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.2.0.0_0\manifest.json, In Quarantäne, [63632c8fd1b9d95de99157793fc441bf],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.2.0.0_0\messagehandler.js, In Quarantäne, [63632c8fd1b9d95de99157793fc441bf],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.2.0.0_0\mgHelperGCFB.dll, In Quarantäne, [63632c8fd1b9d95de99157793fc441bf],
PUP.Optional.SweetIM.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.2.0.0_0\simapp.js, In Quarantäne, [63632c8fd1b9d95de99157793fc441bf],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleCrashHandler.exe, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdate.exe, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateBroker.exe, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateHelper.msi, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateOnDemand.exe, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdate.dll, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdateres_en.dll, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psmachine.dll, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psuser.dll, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Download\{0C2AF9DC-66D1-48AE-9090-CEBC6474A847}\1.3.25.29\setup.exe, In Quarantäne, [aa1c04b73d4d1f17614f1db500032ad6],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\background.html, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\background.js, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\dvs_freeyoutubedownload.css, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\dvs_freeyoutubedownload.js, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\dvs_logo.ico, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\dvs_logo_128.png, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\dvs_logo_32.png, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\dvs_logo_48.png, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\errorRunProgramm.html, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\manifest.json, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\np_dvs_plugin.dll, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\options.html, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\options.js, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\page_action.html, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\images\backbar.png, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\images\download.png, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\images\fs.png, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\images\headphone.png, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\images\logo.png, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\images\manager.png, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\images\YoutubeDownloader.png, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\images\YoutubeToMp3.png, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\de\messages.json, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\en\messages.json, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\es\messages.json, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\fr\messages.json, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\it\messages.json, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\ja\messages.json, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\nl\messages.json, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\pl\messages.json, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\pt\messages.json, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\ru\messages.json, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\tr\messages.json, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\zh_CN\messages.json, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.DVDVideoSoftTB.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_1\_locales\zh_TW\messages.json, In Quarantäne, [5d695863098182b4099a8c4ed72cc937],
PUP.Optional.SweetPacks.A, C:\Program Files (x86)\SweetPacks\VideoConverter\ffmpeg.exe, In Quarantäne, [a81e813a4a40e84e5d14588526dda060],
PUP.Optional.SweetPacks.A, C:\Program Files (x86)\SweetPacks\VideoConverter\settings.xml, In Quarantäne, [a81e813a4a40e84e5d14588526dda060],
PUP.Optional.SweetPacks.A, C:\Program Files (x86)\SweetPacks\VideoConverter\uninstall.exe, In Quarantäne, [a81e813a4a40e84e5d14588526dda060],
PUP.Optional.SweetPacks.A, C:\Program Files (x86)\SweetPacks\VideoConverter\VideoConverter.exe, In Quarantäne, [a81e813a4a40e84e5d14588526dda060],
PUP.Optional.SweetPacks.A, C:\Program Files (x86)\sweetpacks bundle uninstaller\uninstaller.exe, In Quarantäne, [7155ebd0d0ba0e28304116c7d82b956b],
PUP.Optional.Fun2Save.A, C:\ProgramData\Fun2Save\dj2Ag0.dat, In Quarantäne, [5373bffcb4d6092d5d1e7e5f6e9559a7],
PUP.Optional.Fun2Save.A, C:\ProgramData\Fun2Save\dj2Ag0.tlb, In Quarantäne, [5373bffcb4d6092d5d1e7e5f6e9559a7],
PUP.Optional.SearchSnacks.A, C:\Program Files\SearchSnacks_1.10.0.1\IE\SearchSnacksClientIE.dll, In Quarantäne, [73530ab1b8d2280e56f030ae13f044bc],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\SearchSnacks_1.10.0.1\terms-of-service.rtf, In Quarantäne, [3f8748730e7c280eb98df8e6e81b857b],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\SearchSnacks_1.10.0.1\3rd Party Licenses\buildcrx-license.txt, In Quarantäne, [3f8748730e7c280eb98df8e6e81b857b],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\SearchSnacks_1.10.0.1\3rd Party Licenses\Info-ZIP-license.txt, In Quarantäne, [3f8748730e7c280eb98df8e6e81b857b],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\SearchSnacks_1.10.0.1\3rd Party Licenses\JSON-simple-license.txt, In Quarantäne, [3f8748730e7c280eb98df8e6e81b857b],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\SearchSnacks_1.10.0.1\3rd Party Licenses\nsJSON-license.txt, In Quarantäne, [3f8748730e7c280eb98df8e6e81b857b],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\SearchSnacks_1.10.0.1\3rd Party Licenses\Nustache-license.txt, In Quarantäne, [3f8748730e7c280eb98df8e6e81b857b],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\SearchSnacks_1.10.0.1\3rd Party Licenses\TaskScheduler-license.txt, In Quarantäne, [3f8748730e7c280eb98df8e6e81b857b],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\SearchSnacks_1.10.0.1\3rd Party Licenses\UAC-license.txt, In Quarantäne, [3f8748730e7c280eb98df8e6e81b857b],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\SearchSnacks_1.10.0.1\FireFox\{c0eb055f-057e-4671-95f5-6bba7ba017fa}.xpi, In Quarantäne, [3f8748730e7c280eb98df8e6e81b857b],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\Mozilla Firefox\extensions\{c0eb055f-057e-4671-95f5-6bba7ba017fa}\bootstrap.js, In Quarantäne, [a91d9427345686b0d86f974728db8d73],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\Mozilla Firefox\extensions\{c0eb055f-057e-4671-95f5-6bba7ba017fa}\browser.js, In Quarantäne, [a91d9427345686b0d86f974728db8d73],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\Mozilla Firefox\extensions\{c0eb055f-057e-4671-95f5-6bba7ba017fa}\browser.xul, In Quarantäne, [a91d9427345686b0d86f974728db8d73],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\Mozilla Firefox\extensions\{c0eb055f-057e-4671-95f5-6bba7ba017fa}\chrome.manifest, In Quarantäne, [a91d9427345686b0d86f974728db8d73],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\Mozilla Firefox\extensions\{c0eb055f-057e-4671-95f5-6bba7ba017fa}\icon-48.png, In Quarantäne, [a91d9427345686b0d86f974728db8d73],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\Mozilla Firefox\extensions\{c0eb055f-057e-4671-95f5-6bba7ba017fa}\icon-64.png, In Quarantäne, [a91d9427345686b0d86f974728db8d73],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\Mozilla Firefox\extensions\{c0eb055f-057e-4671-95f5-6bba7ba017fa}\install.rdf, In Quarantäne, [a91d9427345686b0d86f974728db8d73],
PUP.Optional.SearchSnacks.A, C:\Program Files (x86)\Mozilla Firefox\extensions\{c0eb055f-057e-4671-95f5-6bba7ba017fa}\plugin-api.js, In Quarantäne, [a91d9427345686b0d86f974728db8d73],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\bg.html, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\GoogleChromeRemotePlugin.dll, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\manifest.json, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\options.htm, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\popup.html, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\redirect.html, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\CSS\border.css, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\down-1.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\down-2.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\down-3.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\down.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\fb.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\fblike.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\gmail.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\google.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\hide-1.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\hide-2.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\hide-3.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\left.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\maximize-1.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\maximize-2.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\maximize-3.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\mgsplusvideo.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\minimize-1.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\minimize-2.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\minimize-3.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\pinit.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\right.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\show-1.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\show-2.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\show-3.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\twitter.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\up-1.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\up-2.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\up-3.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\images\up.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\JS\defaultBlockList.js, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\JS\documentEvents.js, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\JS\externalJS.js, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\JS\FBImagePreview.js, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\JS\InternalJS.js, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\JS\jquery-1.4.4.min.js, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\JS\PluginWrapper.js, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\JS\publisherDefinitions.js, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\JS\tabReload.js, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\JS\TopFrameJS.js, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\PublisherImages\SweetIM.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\PublisherImages\SweetIM128.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\PublisherImages\SweetIM16.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SmartBar.A, C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_1\PublisherImages\SweetIM_small.png, In Quarantäne, [3492516a7b0ff145694fd50c986b1de3],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Communicator\mgcommon.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Communicator\mgcommunication.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Communicator\mgsimcommon.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Communicator\mgxml_wrapper.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Communicator\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Communicator\Microsoft.VC90.CRT\msvcm90.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Communicator\Microsoft.VC90.CRT\msvcp90.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Communicator\Microsoft.VC90.CRT\msvcr90.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Communicator\resources\sqlite\mgSqlite3.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\mgMediaPlayer.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\ContentPackagesActivationHandler.exe, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\default.xml, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\mgArchive.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\mgcommon.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\mgcommunication.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\mgconfig.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\mgFlashPlayer.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\mghooking.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\mgICQAuto.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\mgICQMessengerAdapter.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\mglogger.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\mgMsnAuto.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\mgMsnMessengerAdapter.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\mgsimcommon.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\mgSweetIM.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\mgUpdateSupport.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\mgxml_wrapper.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\mgYahooAuto.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\mgYahooMessengerAdapter.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\msvcp71.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\msvcr71.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\resources\images\AudibleButton.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\resources\images\DisplayPicturesButton.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\resources\images\EmoticonButton.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\resources\images\GamesButton.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\resources\images\KeyboardButton.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\resources\images\NudgeButton.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\resources\images\SoundFxButton.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\resources\images\WinksButton.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Messenger\resources\sqlite\mgSqlite3.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\ClearHist.exe, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\default.xml, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgcommon.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgconfig.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelper.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mghooking.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mglogger.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgsimcommon.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgxml_wrapper.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\conf\logger.xml, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\msvcm90.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\msvcp90.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\msvcr90.dll, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\eye_icon.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\logo_32x32.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\about.html, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\affid.dat, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\basis.xml, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\bing.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\clear-history.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\content-notifier-anim-over.gif, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\content-notifier-anim.gif, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\content-notifier.js, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\dating.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\dictionary.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\eye_icon_over.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\e_cards.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\find.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\free_stuff.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\games.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\glitter.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\google.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\help.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\highlight.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\locales.xml, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\logo_16x16.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\logo_21x18.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\logo_about.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\MenuExt.html, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\more-search-providers.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\music.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\news.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\options.html, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\photos.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\search-current-site.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\shopping.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\SmileySmile.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\SmileyWink.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\sweetim_text.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\toolbar.xml, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\video.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\web-search.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\web-toolbar.js, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\yahoo.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_bing.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_current.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_dictionary.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_google.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_hover.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_left.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_photo.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_video.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_web.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_yahoo.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_bing.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_current.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_dictionary.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_google.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_hover.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_left.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_photo.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_video.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_web.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_yahoo.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_bing.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_current.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_dictionary.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_google.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_hover.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_left.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_photo.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_video.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_web.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_yahoo.png, In Quarantäne, [7650c4f7acde44f275ac41a612f17c84],
PUP.Optional.GreatSave4U.A, C:\ProgramData\GreatSave4U\7G6cHHIEQ1pSFm.dat, In Quarantäne, [1aac34878efc5fd71dec3dae54af45bb],
PUP.Optional.GreatSave4U.A, C:\ProgramData\GreatSave4U\7G6cHHIEQ1pSFm.exe, In Quarantäne, [1aac34878efc5fd71dec3dae54af45bb],
PUP.Optional.GreatSave4U.A, C:\ProgramData\GreatSave4U\7G6cHHIEQ1pSFm.tlb, In Quarantäne, [1aac34878efc5fd71dec3dae54af45bb],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\CRX\ToolbarCR.crx, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater\Config\Config.31.15.1.0-4.xml, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater\Config\Config.31.10.0.0-3.xml, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater\Config\Config.31.10.1.0-3.xml, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater\Config\Config.31.10.2.0-3.xml, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater\Config\Config.31.10.3.0-3.xml, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater\Config\Config.31.15.1.0-3.xml, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater\Config\Config.31.18.0.0-4.xml, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater\Config\Config.31.18.0.0-5.xml, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater\Config\Config.31.19.1.0-5.xml, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater\Config\Config.31.20.0.0-5.xml, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater\Config\Config.31.6.3.0-2.xml, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater\Config\Config.31.6.3.0-4.xml, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater\Config\Config.31.6.6.0-4.xml, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater\Config\Config.31.9.0.0-2.xml, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater\Config\Config.31.9.0.0-3.xml, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater\Config\Config.31.9.2.0-3.xml, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater\Config\Config.31.9.3.0-3.xml, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater\Response\Response.31.20.0.0-7.xml, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\VDJ-V7\Updater\Response\Response.31.20.0.0-8.xml, In Quarantäne, [a6209922553534026e278d634fb41fe1],
PUP.Optional.APNToolBar.Gen, C:\Users\PC\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IdcLdr.exe, In Quarantäne, [893d447794f666d06333f2fe9f64f40c],
PUP.Optional.APNToolBar.Gen, C:\Users\PC\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IdcLdr_x64.exe, In Quarantäne, [893d447794f666d06333f2fe9f64f40c],
PUP.Optional.APNToolBar.Gen, C:\Users\PC\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IdcSrv.dll, In Quarantäne, [893d447794f666d06333f2fe9f64f40c],
PUP.Optional.APNToolBar.Gen, C:\Users\PC\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IdcSrvStub.dll, In Quarantäne, [893d447794f666d06333f2fe9f64f40c],
PUP.Optional.APNToolBar.Gen, C:\Users\PC\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IdcSrvStub_x64.dll, In Quarantäne, [893d447794f666d06333f2fe9f64f40c],
PUP.Optional.APNToolBar.Gen, C:\Users\PC\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IdcSrv_x64.dll, In Quarantäne, [893d447794f666d06333f2fe9f64f40c],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\ChromeUtils\APNNativeMsgHost.exe, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\ChromeUtils\com.apn.native_messaging_host_aaaajmgokiecajekipolejjhdgijlefj.json, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\APNSetup.exe, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\UpdateManager.exe, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\ask-search.xml, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\VDJ-V7\config.xml, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\AskToolbarInstaller-12.10.6_VDJ-V7.msi, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\1031.mst, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\1033.mst, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\1034.mst, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\1036.mst, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\1040.mst, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\1041.mst, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\1043.mst, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\1045.mst, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\1049.mst, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\2070.mst, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\AskToolbarInstaller-12.10.3_VDJ-V7.msi, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\AskToolbarInstaller-12.15.0_VDJ-V7.msi, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\AskToolbarInstaller-12.15.3_VDJ-V7.msi, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\AskToolbarInstaller-12.15.5_VDJ-V7.msi, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\AskToolbarInstaller-12.16.0_VDJ-V7.msi, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\AskToolbarInstaller-12.16.1_VDJ-V7.msi, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\AskToolbarInstaller-12.17.1_VDJ-V7.msi, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\AskToolbarInstaller-12.18.0_VDJ-V7.msi, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\AskToolbarInstaller-12.19.0_VDJ-V7.msi, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\AskToolbarInstaller-12.24.1_VDJ-V7.msi, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\AskToolbarInstaller-12.27.0_VDJ-V7.msi, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\AskToolbarInstaller-12.28.1_VDJ-V7.msi, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\AskToolbarInstaller-12.29.0_VDJ-V7.msi, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\appdata\Mozilla\Firefox\Profiles\{DefaultProfilesFolder}\extensions\toolbar_VDJ-V7@apn.ask.com.xpi, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\ToolbarCR.crx, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\Update.xml, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\{Crx_Version}\Toolbar.crx, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\ChromeUtils\APNNativeMsgHost.exe, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\ChromeUtils\com.apn.native_messaging_host_aaaajmgokiecajekipolejjhdgijlefj.json, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\apnmcp.exe, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\searchhook.dll, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\ServiceLocator.exe, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\SO.dll, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\toolbar.dll, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\Toolbar.exe, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\ToolbarPS.dll, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\toolbar_x64.dll, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\UpdateManager.exe, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\ask-search.xml, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\IDC\IdcLdr.exe, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\IDC\IdcLdr_x64.exe, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\IDC\IdcSrv.dll, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\IDC\IdcSrvStub.dll, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\IDC\IdcSrvStub_x64.dll, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\IDC\IdcSrv_x64.dll, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\{PartnerID}\config.xml, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}\Passport.dll, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}\Passport_x64.dll, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\VNT\content.zip, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\VNT\vntldr.exe, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\VDJ-V7\Source\program files\VNT\vntsrv.dll, In Quarantäne, [b1156952ed9d8ea884137d73cc374bb5],
PUP.Optional.SupGames.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\622Q6@gmail.com\chrome.manifest, In Quarantäne, [dfe71d9ec7c3ec4a061eadd6b6509a66],
PUP.Optional.SupGames.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\622Q6@gmail.com\install.rdf, In Quarantäne, [dfe71d9ec7c3ec4a061eadd6b6509a66],
PUP.Optional.SupGames.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\622Q6@gmail.com\chrome\content\browser.xul, In Quarantäne, [dfe71d9ec7c3ec4a061eadd6b6509a66],
PUP.Optional.SupGames.A, C:\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\622Q6@gmail.com\chrome\content\main.js, In Quarantäne, [dfe71d9ec7c3ec4a061eadd6b6509a66],

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)


Why me 17.06.2015 14:28

JRT.txt:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 7.0.1 (06.17.2015:2)
OS: Windows 7 Home Premium x64
Ran by PC on 17.06.2015 at 14:47:54,89
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\Users\PC\AppData\Roaming\appdataFr25.bin
Successfully deleted: [File] C:\Users\PC\AppData\Roaming\appdataFr3.bin
Successfully deleted: [File] C:\Users\PC\appdata\local\google\chrome\user data\default\local storage\hxxp_www.superfish.com_0.localstorage-journal
Successfully deleted: [File] C:\Users\PC\appdata\local\google\chrome\user data\default\local storage\hxxps_www.superfish.com_0.localstorage-journal



~~~ Folders

Successfully deleted: [Folder] C:\Users\PC\appdata\local\bcoolapp
Successfully deleted: [Folder] C:\ProgramData\500CoupoNs [BHO.Multiplug]
Successfully deleted: [Folder] C:\ProgramData\AlleSaver [BHO.Multiplug]
Successfully deleted: [Folder] C:\ProgramData\DigiCuoupona [BHO.Multiplug]
Successfully deleted: [Folder] C:\ProgramData\DowwnSavE [BHO.Multiplug]
Successfully deleted: [Folder] C:\ProgramData\GReaatSaevE4U [BHO.Multiplug]
Successfully deleted: [Folder] C:\ProgramData\GreaatSaVe4Ui [BHO.Multiplug]
Successfully deleted: [Folder] C:\ProgramData\ISSaveir [BHO.Multiplug]
Successfully deleted: [Folder] C:\ProgramData\TakeuThaeCoeUpon [BHO.Multiplug]



~~~ FireFox




~~~ Chrome


[C:\Users\PC\appdata\local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\PC\appdata\local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\PC\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\PC\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[
  gbmdkmlcnbapgegninelmjbfibaghdmk
]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 17.06.2015 at 14:53:50,60
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Why me 17.06.2015 14:36

AdwCleaner[S0].txt:

Code:

# AdwCleaner v4.206 - Bericht erstellt 17/06/2015 um 14:42:02
# Aktualisiert 01/06/2015 von Xplode
# Datenbank : 2015-06-17.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : PC - PC-PC
# Gestarted von : C:\Users\PC\Downloads\AdwCleaner_4.206.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : 51cdb72

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\apn
Ordner Gelöscht : C:\ProgramData\Assistant
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\BlockIt Ad remover
Ordner Gelöscht : C:\ProgramData\SweetIM
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\ProgramData\f7b3a8891e1cac96
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Moozy
Ordner Gelöscht : C:\Program Files (x86)\~BabylonToolbar
Ordner Gelöscht : C:\Program Files (x86)\globalUpdate
Ordner Gelöscht : C:\Program Files (x86)\Moozy
Ordner Gelöscht : C:\Program Files (x86)\Red Sky
Ordner Gelöscht : C:\Program Files (x86)\550CouPonS
Ordner Gelöscht : C:\Program Files (x86)\BesttSiavEForYou
Ordner Gelöscht : C:\Program Files (x86)\BitSaveR
Ordner Gelöscht : C:\Program Files (x86)\DeeeaalExprress
Ordner Gelöscht : C:\Program Files (x86)\DiscouuntExxtensi
Ordner Gelöscht : C:\Program Files (x86)\EXstraCCoupOn
Ordner Gelöscht : C:\Program Files (x86)\FunDealS
Ordner Gelöscht : C:\Program Files (x86)\Happyo2SAve
Ordner Gelöscht : C:\Program Files (x86)\RegularDeaals
Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB
Ordner Gelöscht : C:\Program Files (x86)\Common Files\Umbrella
Ordner Gelöscht : C:\Windows\Installer\{7683B745-6060-41FD-AA75-0BBB383FEAD4}
Ordner Gelöscht : C:\Users\PC\AppData\Local\Temp\apn
Ordner Gelöscht : C:\Users\PC\AppData\Local\fbDownloader
Ordner Gelöscht : C:\Users\PC\AppData\Local\globalUpdate
Ordner Gelöscht : C:\Users\PC\AppData\Local\VNT
Ordner Gelöscht : C:\Users\PC\AppData\LocalLow\IminentToolbar
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\BabylonToolbar
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\BrowserCompanion
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\DataMgr
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\fbDownloader
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\HMN
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\Intermediate
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\SCheck
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\SDIV 2.0
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\Seventh
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\Sixth
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\Snz
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\fbDownloader
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\organize-search-engines@maltekraus.de
Ordner Gelöscht : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkcedibhemacmilmkpndpkoidlnmgngg
Datei Gelöscht : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fmlgoencnlndpglbocajlimaikjohmab_0.localstorage
Datei Gelöscht : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pmgkeimkiojpjcoiiipekfjaopchhjga_0.localstorage
Datei Gelöscht : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_llpnaddghmkpkmnghbdpahlgncpieofn_0.localstorage
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Users\PC\Favorites\Startfenster.lnk
Datei Gelöscht : C:\Users\PC\Favorites\Links\Startfenster.lnk
Datei Gelöscht : C:\Program Files (x86)\prefs.js
Datei Gelöscht : C:\Users\PC\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Moozy.lnk
Datei Gelöscht : C:\Users\PC\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Startfenster.lnk
Datei Gelöscht : C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk
Datei Gelöscht : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\foxydeal.sqlite
Datei Gelöscht : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\searchplugins\search.xml
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\user.js
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\my.cfg
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\browser\defaults\preferences\my-prefs.js
Datei Gelöscht : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_de.ask.com_0.localstorage-journal
Datei Gelöscht : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.fbdownloader.com_0.localstorage-journal

***** [ Geplante Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\mkcedibhemacmilmkpndpkoidlnmgngg
Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Intermediate]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [scheck]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Seventh]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Sixth]
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Snoozer]
Schlüssel Gelöscht : HKCU\Software\MozillaPlugins\bebomedia.com/OfferMosquitoIEHelper
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\tdataprotocol.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\updatebho.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\wit4ie.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\FBDownloader.BHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\FBDownloader.BHO.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\FBDownloader.DownloadPhoto
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\FBDownloader.DownloadPhoto.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\sim-packages
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}
Schlüssel Gelöscht : HKLM\SOFTWARE\052ffe09-93fd-62ab-db93-a1eeba87a55c
Schlüssel Gelöscht : HKLM\SOFTWARE\4dc311d6-16a2-455c-88a2-7c5840e6c636
Schlüssel Gelöscht : HKLM\SOFTWARE\6beb9080-304a-4304-a35b-c779e0ed6f34
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{8E9F2D02-6B06-4EBA-92C2-68438EADED28}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{553318DA-D010-469E-84B1-496563CAE1BF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{598B7D72-2C44-4351-BBC8-3DACE2A10CB6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{99E71BF1-5F51-4AF9-830B-67015D59640D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{5563BEFE-3B03-43B1-8041-64A9745DAA56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{671F1846-80F2-4ED8-B183-A921E6A4D5D4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{588BD59D-3E28-483B-8484-164D57F40D62}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{7A6DCEC2-55AB-418F-A903-93D0DF482809}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E0D6077D-7186-48B2-A6C6-2F7C533E8CFF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3BC93E76-92F8-5FDA-B676-5AFEE3735BF1}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{553318DA-D010-469E-84B1-496563CAE1BF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{553318DA-D010-469E-84B1-496563CAE1BF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3BC93E76-92F8-5FDA-B676-5AFEE3735BF1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{553318DA-D010-469E-84B1-496563CAE1BF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{208D4124-3895-4974-B293-A159BD306078}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{4327FABE-3C22-4689-8DBF-D226CF777FE9}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Blabbers
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\FBDownloader
Schlüssel Gelöscht : HKCU\Software\GlobalUpdate
Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions
Schlüssel Gelöscht : HKCU\Software\Microsoft\Babylon
Schlüssel Gelöscht : HKCU\Software\Protector
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Schlüssel Gelöscht : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Schlüssel Gelöscht : HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Schlüssel Gelöscht : HKLM\SOFTWARE\Babylon
Schlüssel Gelöscht : HKLM\SOFTWARE\BrowserCompanion
Schlüssel Gelöscht : HKLM\SOFTWARE\Conduit
Schlüssel Gelöscht : HKLM\SOFTWARE\GlobalUpdate
Schlüssel Gelöscht : HKLM\SOFTWARE\InstalledBrowserExtensions
Schlüssel Gelöscht : HKLM\SOFTWARE\Umbrella
Schlüssel Gelöscht : HKLM\SOFTWARE\Video Converter
Schlüssel Gelöscht : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{739126B3-1B80-4F9F-8D59-312A19633E1A}_is1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7683B745-6060-41FD-AA75-0BBB383FEAD4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{c3e85ee9-5892-4142-b537-bceb3dac4c3d}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ea8fa6be-29be-4af2-9352-841f83215eb0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WInterEnhance
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B1881C3-A40C-4DF3-BFD2-CCD2FEDD7D83}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Installer\Features\547B38670606DF14AA57B0BB83F3AE4D
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Installer\Features\9EE58E3C298524145B73CBBED3CAC4D3
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Installer\Features\EB6AF8AEEB922FA4392548F13812E50B
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Installer\Products\547B38670606DF14AA57B0BB83F3AE4D
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Installer\Products\9EE58E3C298524145B73CBBED3CAC4D3
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Installer\Products\EB6AF8AEEB922FA4392548F13812E50B
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0702826FCAC36EE52AC0441EEEEE2170
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1198E28F40C3E185E9958608554D4253
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15A073601B9AEC3549BE4A9314794615
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F7C80F9CE5CDF44E9AADDC99402534C
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\206AF45B775E3A445B3B2273827DA85F
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\225C3CBCEB850204D860A6C7CC7724AF
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2310FC151CD4F185798FA0996B3524D7
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\28572D2E2DE533256AC6B560EA573C22
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29C79786B109AC443B0DC7BFD61B1896
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2ABB56EABB920EB59B04BDDD26A62083
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2DABA02DFED47E352A2FA2EBDD6F6187
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\311567B4A9A002050BB9423FD73FB880
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\373FCED70D7F84E5FB5F3F7B76BEE024
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3BE992C130B235E53A2937391FDCA35B
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3DA5F64B3483DE549947A9164ACBAD21
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3ED93605BB9B6635E9D0D86615AF31F1
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4759B017032BA185F9BA6F7DBC95A2D4
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4A78ABCBB54E46E5482A3EE0AD66C39E
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B2468513CA2D6943A1A233CD3F88CE7
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4F9E947B6B895EB5A86757FC5D3DB862
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4FEEA83BF72B97E43A2DF0EE4BE4F261
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\509EC7EFB89B7D942997574AB14037A4
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\50A730A9A3A61BF5BA70CA8A3B7C133B
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\51A95A1D4CDE4F958A9451FBB39BF54A
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\536133807DE80465BA6CD0A9742B7DE5
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5E25036E68895D45B95E72D1C3C58C74
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\60ECC80C54085B141A40437A96CA2618
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\60FD8CD5BE007315CA3B5C7E41F24017
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\618E7D05458C4F257909ED9C8CDC0D66
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\621C21014D3C152529E2460FA6304EE3
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6241FF6F317CABD4EBBEE0DE9076BD94
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\636B9C23C79154B57AB561F39A139BFD
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\65AAF0F0CB7F0B45F900FDF19CEAAF2B
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6879A5E348601C45986308CA84958E94
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6A6F3B7A9805E1F5492A1020EEDF2341
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B1F5D204E4EEB342A5AD1D7E60D61BF
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7005A2A4DCF9DD7548137AB17E3A3AF3
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\712EAF07EE73CC65C822CC3BAE3B2483
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7947B301B2446E752A3FE06EAD7D26B5
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7987CE52D13E16258B0E1E3DB1BB0974
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7BEED197C514FDA53901AE8DD8EF0891
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DFDCF03D46C34159BDE29FBDBF1ACF5
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\890F436B85B790A55A582B7307DA12CE
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8C13DA6755F685B529615C8E92B3CA39
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8D07CD9CB3E6BE652872BF06A1CCA782
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\90841B1FC98200349925C88999866F17
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\94194FDD4DF523E53A888D65722A135D
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\95266D07D008D2E4E9B6F8E0DD15432A
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A4223BBC9438CAD49BBE10B4E344B1DD
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A72F23B1D745C27508518132197BC982
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A89E2B6FB14D8275DA63D075171DA184
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A9C43CD4001E9E4518B274AF9A0EFDA9
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AABA081CF7F19915FBB80B3BAF47CE63
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB676B0E1B9EFA049B9F7DDDA9645734
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AC2A0FFD0A1686D53A4E24D6E96949E4
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AE5BDB2750259915D8442D4591A7717B
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B1A79C71D5DC1C150B76B6ED11195DFC
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B31BBB0B825EDEF45AB0FE7099C68C81
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B471D8D7319336B4CA89374ED0D7B806
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B6D497DB33974935488761F7C4C3D755
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B752EF3300008394886C402CC27B474F
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B8C8BCC1206978D51A8B9EECBF806C53
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAD3576CEA646895B962F94754612791
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BB4091512C8F4295E99CE2D061ED2020
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC30043663AA2CA4DA1DAA9CA5FDCC75
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BEE6BBC9A31531F598794A62120B51C7
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C19162788CA4D235E829F88E2F771567
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C71F07DA356B66B5484A8E7F2ADEB7DC
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C96AD15EE8E887B56BAF2136A9088503
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C9E6B66ECC49D155888399C51D05C49E
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA360F24F0B214744BE40657FDA0B727
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB13D869D7D092348847B7481BB59E27
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE85F265816AE2D4E9B73C3E207E679C
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5389AEEA4A1E20428D045E86BCF643B
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5B62BB7BC607FB539585E2B7B6AFD16
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB027F01D4D53765C8E4FBE7DB77E07E
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DC2EB492393411F5ABE8ED13C59FBF20
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDA2534BD056D1F44B6EC96AAA7F1F6E
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDCA763D4C48A105086B4CCCEE78043F
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DEF7558C7CD27EF46AF802AFBE402675
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E05B987540A9E2849AAF9E5B06C27DA8
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E09F4A6B9D2A08B599AE9E38BFC93CD6
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E27B6535D0D94A24E91047C7D86F27BC
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E45D171E075A5425CBACF6631A45FA39
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E513C2076D90AD04F888BD762143F191
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E8F4C985459564F5B8DCFF2B3C7EBD27
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E96E33222BAC06B57A1FA9D72951C945
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EAA46CE9007F70A5CAFA5F26E5DDEBE5
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE43FF091A8714A599F33EF2533FB59A
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE790015CF30DAA569960905FF1651A0
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EEB44C47185BD304D80FDF5A4BBE8F54
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F214EB834D2EC474CA76C1CDE306CF3A
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F25491036D0FA5D5FA6742F5742F151A
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F6704141BAAF6884785EC6843143D6A7
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7507D4D4C310125E9A22BD909A41FB6
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F79C21D785419125595AC59458A6142D
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA15C90F092A60F53A4E0F88CED02968
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA1CF130B3D58B553833ACB6BE8AFAD4
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB0F1A18E4F0DBD509A42F4D4C05C02A
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD17ED194F1C2B457B4F6EF4AE8DEAF3
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDC83385E6C239F4C876A77A37DF581D
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\547B38670606DF14AA57B0BB83F3AE4D
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6207E55EA2FE71A4AA7ABD89AEF31D1B
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EB6AF8AEEB922FA4392548F13812E50B
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F1057DD419AED0B468AD8888429E139A
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - hxxp=127.0.0.1:49727;hxxps=127.0.0.1:49727
Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] - 1
Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17840

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [First Home Page]

-\\ Mozilla Firefox v38.0.5 (x86 de)

[k6cdem5y.default\prefs.js] - Zeile Gelöscht : user_pref("browser.search.defaulturl", "hxxp://search.fbdownloader.com/search.php?channel=fpo&q=");
[k6cdem5y.default\prefs.js] - Zeile Gelöscht : user_pref("browser.search.order.1", "WebSearch");
[k6cdem5y.default\prefs.js] - Zeile Gelöscht : user_pref("browser.search.order.1,S", "WebSearch");
[k6cdem5y.default\prefs.js] - Zeile Gelöscht : user_pref("browser.startup.homepage", "hxxp://search.fbdownloader.com/?channel=fpo&t=41F2714362583E7D");
[k6cdem5y.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.By0bSZLKuN8uAVCk.scode", "(function(){try{if(window.location.href.indexOf(\"qjU8rTgGrHU4rHU4rjU7rTw6pn\")>-1){return;}}catch(e){}try{var d=[[\"cryptogmail.com\",\"bancdebinary.co[...]
[k6cdem5y.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.DfFvJ251GRhBwxoj.scode", "(function(){try{if(window.location.href.indexOf(\"qjU8rTgGrHU4rHU4rjU7rTw6pn\")>-1){return;}}catch(e){}try{var d=[[\"cryptogmail.com\",\"bancdebinary.co[...]

-\\ Google Chrome v43.0.2357.124

[C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.searchplusnetwork.com/?sp=vit4&q={searchTerms}
[C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=17&barid={FF4FD482-C153-4A34-B19A-6B25C7B6153E}
[C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.search.ask.com/web?tpid=VDJ-V7&o=APN10965&l=dis&pf=V7&p2=%5EB2I%5EYYYYYY%5EYY%5EDE&gct=&itbv=12.10.3.4663&doi=2014-03-03&apn_uid=12A7AA94-B2F3-45BB-AEEF-FE4C1EB1A2D7&apn_ptnrs=%5EB2I&apn_dtid=%5EYYYYYY%5EYY%5EDE&apn_dbr=cr_33.0.1750.117&psv=&trgb=CR&tbv=&crxv=&q={searchTerms}
[C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://websearch.searchoholic.info/?l=1&q={searchTerms}&pid=21073&r=2014/12/22&hid=5952623993991962179&lg=EN&cc=DE&unqvl=72
[C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.fbdownloader.com/search.php?channel=fpo&q={searchTerms}&t=41F2714362583E7D

*************************

AdwCleaner[R0].txt - [54824 Bytes] - [17/06/2015 14:39:30]
AdwCleaner[S0].txt - [52211 Bytes] - [17/06/2015 14:42:02]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [52271  Bytes] ##########

FRST.txt:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-06-2015
Ran by PC (administrator) on PC-PC on 17-06-2015 14:56:17
Running from C:\Users\PC\Downloads
Loaded Profiles: PC (Available Profiles: PC)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\Companion for Gamers\companion_for_gamers_helper_service.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-14] (Logitech Inc.)
HKLM-x32\...\Run: [P17RunE] => RunDll32 P17RunE.dll,RunDLLEntry
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-10-08] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Run: [Spotify Web Helper] => C:\Users\PC\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2021944 2015-05-28] (Spotify Ltd)
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8204056 2015-04-23] (Piriform Ltd)
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31280256 2015-04-17] (Skype Technologies S.A.)
Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip [2013-04-23] ()
Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk [2014-01-13]
ShortcutTarget: Xfire.lnk -> C:\Program Files (x86)\Xfire\Xfire.exe (Xfire Inc.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
SearchScopes: HKLM-x32 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1693460017-1945991507-4174054062-1001 -> {06F77479-2CD0-4FDB-896C-C27609545EB2} URL = hxxp://www.bing.com/search?FORM=WLETDF&PC=WLEM&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-1693460017-1945991507-4174054062-1001 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll [2014-02-02] (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default
FF DefaultSearchEngine: Search
FF NetworkProxy: "user_pref("extensions.DfFvJ251GRhBwxoj.url", "hxxp://toolkitcoupon.us/sync2/?q=hfZ9oetNgMgMCyVUojsFrdCHtMqLDe49CNU0mwkMCMlNhd9Fqja8rTaGrdn8qdkMBzqUojw8rdkGrjwHrjYErSh7hfs0pihPBMn0rHY6qjs4qdwErjY4qTa5pdY9rShHC7n0rjs9qdY5rjU4rTUFrHk9rTs8pdwMWy4ZBek0ifqZDMlGtMZPhd98pjkGqTsHpjUHpjUFpjgGrjC4tMl5Aen0rjnFpjsFqja6qjn8rdgEqTs4qGhLC7VUojgErihPBNq9ojgMgNr0rn%3D%3D;hxxp://getjpi.info/sync2/?q=hfZ9oetNgMgMCyVUojsFrdCHtMqLDe49CNU0mwkMCMlNhd9Fqja8rTaGrdn8qdkMBzqUojw8rdkGrjwHrjYErSh7hfs0pihPBMn0rHY6qjs4qdwErjY4qTa5pdY9rShHC7n0rjs9qdY5rjU4rTUFrHk9rTs8pdwMWy4ZBek0ifqZDMlGtMZPhd98pjkGqTsHpjUHpjUFpjgGrjC4tMl5Aen0rjnFpjsFqja6qjn8rdgEqTs4qGhLC7VUojgErihPBNq9ojgMgNr0rn%3D%3D;hxxp://setssun.com/sync2/?q=hftype", 5
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll [2015-05-15] ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\system32\npDeployJava1.dll [2013-05-29] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2012-06-28] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-05-15] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2013-02-20] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-27] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-27] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-06-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-06-14] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1693460017-1945991507-4174054062-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\PC\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-02-20] (Unity Technologies ApS)
FF Extension: antmarkantcom - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\antmark@ant.com [2015-04-18]
FF Extension: Browser AdBlocker - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\izdg_oblculbxoisg@ssgsbhkbxfras.edu [2015-02-10]
FF Extension: Companion for Gamers - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\nupfpEg@gmail.com [2015-05-27]
FF Extension: TheAdBlock - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\_idxmcmutexflypfr@ogunbfnggtbb_sw_jfc.net [2015-04-15]
FF Extension: E10A6337382E4FE696DE936ADC34DD04 - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\{E10A6337-382E-4FE6-96DE-936ADC34DD04} [2015-04-01]
FF Extension: AGSafeBrowsing - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\cm@agsafebrowsing.com.xpi [2015-03-25]
FF Extension: FavGenius - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\fg@favgenius.com.xpi [2015-03-30]
FF Extension: ProxTube - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\ich@maltegoetz.de.xpi [2014-11-03]
FF Extension: ProxMate - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi [2015-04-27]
FF Extension: Reddit Enhancement Suite - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\jid1-xUfzOsOFlzSOXg@jetpack.xpi [2015-04-01]
FF Extension: Adblock Plus - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-08]
FF Extension: No Name - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\snt@simplenewtab.com.xpi [not found]
FF Extension: No Name - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\622Q6@gmail.com [not found]
FF Extension: No Name - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\organize-search-engines@maltekraus.de [not found]
FF Extension: No Name - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com [not found]

Chrome:
=======
CHR Profile: C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-14]
CHR Extension: (Google Docs) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-14]
CHR Extension: (Google Drive) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-06-14]
CHR Extension: (YouTube) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-06-14]
CHR Extension: (Adblock Plus) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-06-14]
CHR Extension: (Google Search) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-06-14]
CHR Extension: (Google Sheets) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-14]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-06-14]
CHR Extension: (Google Wallet) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-27]
CHR Extension: (Gmail) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2012-09-05] (Creative Labs) [File not signed]
S2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [307200 2008-11-18] (Creative Technology Ltd) [File not signed]
S2 HiPatchService; C:\Games\Neuer Ordner (2)\HiPatchService.exe [9216 2013-10-25] (Hi-Rez Studios) [File not signed]
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-01-02] (DT Soft Ltd)
R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-17 14:53 - 2015-06-17 14:53 - 00002219 _____ C:\Users\PC\Desktop\JRT.txt
2015-06-17 14:48 - 2015-06-17 14:48 - 00000207 _____ C:\Windows\tweaking.com-regbackup-PC-PC-Windows-7-Home-Premium-(64-bit).dat
2015-06-17 14:48 - 2015-06-17 14:48 - 00000000 ____D C:\RegBackup
2015-06-17 14:47 - 2015-06-17 14:47 - 02949914 _____ (Thisisu) C:\Users\PC\Downloads\JRT.exe
2015-06-17 14:45 - 2015-06-17 14:45 - 00053288 _____ C:\Users\PC\Desktop\AdwCleaner[S0].txt
2015-06-17 14:37 - 2015-06-17 14:42 - 00000000 ____D C:\AdwCleaner
2015-06-17 14:36 - 2015-06-17 14:37 - 02231296 _____ C:\Users\PC\Downloads\AdwCleaner_4.206.exe
2015-06-17 14:35 - 2015-06-17 14:35 - 00435358 _____ C:\Users\PC\Desktop\Mbam.txt
2015-06-17 13:05 - 2015-06-17 14:34 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-17 13:04 - 2015-06-17 13:04 - 00001106 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-06-17 13:04 - 2015-06-17 13:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-06-17 13:04 - 2015-06-17 13:04 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-06-17 13:04 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-06-17 13:04 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-06-17 13:00 - 2015-06-17 13:01 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\PC\Downloads\mbam-setup-2.1.6.1022 (1).exe
2015-06-16 09:56 - 2015-06-16 09:57 - 00000000 ____D C:\Users\PC\Desktop\openhardwaremonitor
2015-06-16 09:56 - 2015-06-16 09:56 - 00511764 _____ C:\Users\PC\Downloads\openhardwaremonitor-v0.7.1-beta.zip
2015-06-15 01:59 - 2015-06-17 14:43 - 00466534 _____ C:\Windows\PFRO.log
2015-06-14 22:58 - 2015-06-14 22:58 - 00002251 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-06-14 22:58 - 2015-06-14 22:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-06-14 21:57 - 2015-06-14 21:57 - 00053419 _____ C:\ComboFix.txt
2015-06-14 21:34 - 2015-06-14 21:34 - 00000000 ____D C:\Users\PC\AppData\Local\GWX
2015-06-14 18:24 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-06-14 18:24 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-06-14 18:24 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-06-14 18:24 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-06-14 18:24 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-06-14 18:24 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-06-14 18:24 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-06-14 18:24 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-06-14 18:23 - 2015-06-14 21:57 - 00000000 ____D C:\Qoobox
2015-06-14 18:23 - 2015-06-14 18:44 - 00000000 ____D C:\Windows\erdnt
2015-06-14 18:19 - 2015-06-14 18:19 - 00001435 _____ C:\Users\PC\Desktop\ComboFix.exe - Verknüpfung.lnk
2015-06-14 18:17 - 2015-06-14 18:17 - 05628161 ____R (Swearware) C:\Users\PC\Downloads\ComboFix.exe
2015-06-14 18:04 - 2015-06-17 14:23 - 00000000 ____D C:\Program Files (x86)\Fluid UI
2015-06-14 17:40 - 2015-06-17 14:27 - 00000000 ____D C:\Program Files (x86)\PragmaFoobar
2015-06-14 17:29 - 2015-06-14 17:29 - 00001268 _____ C:\Users\PC\Desktop\Revo Uninstaller.lnk
2015-06-14 17:29 - 2015-06-14 17:29 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-06-14 17:28 - 2015-06-14 17:29 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\PC\Downloads\revosetup95.exe
2015-06-13 17:47 - 2015-06-13 17:49 - 00055893 _____ C:\Users\PC\Downloads\Addition.txt
2015-06-13 17:43 - 2015-06-17 14:56 - 00015809 _____ C:\Users\PC\Downloads\FRST.txt
2015-06-13 17:42 - 2015-06-17 14:56 - 00000000 ____D C:\FRST
2015-06-13 17:41 - 2015-06-13 17:41 - 02109952 _____ (Farbar) C:\Users\PC\Downloads\FRST64.exe
2015-06-13 17:08 - 2015-06-13 17:11 - 00186822 _____ C:\Users\PC\Desktop\Trojana.txt
2015-06-10 02:22 - 2015-06-10 02:22 - 00000000 ____D C:\ProgramData\ATI
2015-06-10 02:21 - 2015-06-10 02:21 - 00055617 _____ C:\Windows\SysWOW64\CCCInstall_201506100221264246.log
2015-06-10 02:21 - 2015-06-10 02:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-06-10 02:21 - 2015-06-10 02:21 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2015-06-10 01:50 - 2015-06-10 01:50 - 207468968 _____ (Advanced Micro Devices, Inc.) C:\Users\PC\Downloads\13-9_win7_win8_64_dd_ccc_whql.exe
2015-06-10 01:36 - 2015-06-10 01:37 - 156548224 _____ (Advanced Micro Devices, Inc.) C:\Users\PC\Downloads\13-9_win7_win8_32_dd_ccc_whql.exe
2015-06-10 01:31 - 2015-06-10 02:02 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-10 01:24 - 2015-06-10 01:24 - 05451464 _____ (Advanced Micro Devices, Inc.) C:\Users\PC\Downloads\autodetectutility.exe
2015-06-10 01:23 - 2015-06-10 01:23 - 00052852 _____ C:\Users\PC\Downloads\incomplete.htm
2015-06-10 01:23 - 2015-06-10 01:23 - 00052852 _____ C:\Users\PC\Downloads\incomplete (3).htm
2015-06-10 01:23 - 2015-06-10 01:23 - 00052852 _____ C:\Users\PC\Downloads\incomplete (2).htm
2015-06-10 01:23 - 2015-06-10 01:23 - 00052852 _____ C:\Users\PC\Downloads\incomplete (1).htm
2015-06-09 22:18 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-09 22:18 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-09 22:18 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-09 22:18 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-09 22:18 - 2015-05-25 19:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-09 22:18 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-06-09 22:18 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-09 22:18 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-06-09 22:18 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-06-09 22:18 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-09 22:18 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-06-09 22:18 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-09 22:18 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-06-09 22:18 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-06-09 22:18 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-06-09 22:18 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-09 22:18 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-06-09 22:18 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-09 22:18 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-06-09 22:18 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-09 22:18 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-06-09 22:18 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-09 22:18 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-09 22:18 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-09 22:18 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-09 22:18 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-09 22:18 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-06-09 22:18 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-09 22:18 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-09 22:18 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-09 22:18 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-09 22:18 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-09 22:18 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-09 22:18 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-09 22:18 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-09 22:18 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-09 22:18 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-09 22:18 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-09 22:18 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-09 22:18 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-09 22:18 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-09 22:18 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-09 22:18 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-09 22:18 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-09 22:18 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-09 22:18 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-09 22:18 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-09 22:18 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-09 22:18 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-09 22:18 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-09 22:18 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-09 22:18 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-09 22:18 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-09 22:18 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-09 22:18 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-09 22:18 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-09 22:18 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-09 22:18 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-09 22:18 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-09 22:18 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-09 22:18 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-09 22:17 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-06-09 22:17 - 2015-05-25 20:23 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-09 22:17 - 2015-05-25 20:23 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-06-09 22:17 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-06-09 22:17 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-09 22:17 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-06-09 22:17 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-09 22:17 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-09 22:17 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-06-09 22:17 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-06-09 22:17 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-09 22:17 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-06-09 22:17 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-06-09 22:17 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-06-09 22:17 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-06-09 22:17 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-06-09 22:17 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-09 22:17 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-06-09 22:17 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-09 22:17 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-06-09 22:17 - 2015-05-22 20:18 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-09 22:17 - 2015-05-22 20:18 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-09 22:17 - 2015-05-22 20:18 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-09 22:17 - 2015-05-22 20:18 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-09 22:17 - 2015-05-22 20:18 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-09 22:17 - 2015-05-22 20:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-09 22:17 - 2015-05-22 20:13 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-09 22:17 - 2015-05-21 15:19 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-09 22:17 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-09 22:17 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-09 22:17 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-09 22:17 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-09 22:17 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-09 22:17 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-09 22:17 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-09 22:17 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-09 22:17 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-09 22:17 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-09 22:16 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-09 22:16 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-09 22:16 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-09 22:16 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-06-09 22:16 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-09 22:16 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-09 22:16 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-09 22:16 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-09 22:16 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-09 22:16 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-09 22:16 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-05-27 23:59 - 2015-06-17 14:48 - 00000556 _____ C:\Windows\Tasks\companion_for_gamers_helper_service.job
2015-05-27 23:59 - 2015-05-27 23:59 - 00003500 _____ C:\Windows\System32\Tasks\companion_for_gamers_helper_service
2015-05-27 23:59 - 2015-05-27 23:59 - 00000000 ____D C:\Program Files (x86)\Companion for Gamers
2015-05-23 00:33 - 2015-05-23 00:33 - 00000000 ____D C:\Users\PC\AppData\Local\Blizzard
2015-05-23 00:18 - 2015-05-23 00:18 - 00000860 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2015-05-23 00:18 - 2015-05-23 00:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2015-05-23 00:16 - 2015-06-03 04:18 - 00000000 ____D C:\Users\PC\AppData\Local\Battle.net
2015-05-23 00:16 - 2015-05-28 19:25 - 00000000 ____D C:\Users\PC\AppData\Roaming\Battle.net
2015-05-23 00:16 - 2015-05-23 00:16 - 00001122 _____ C:\Users\Public\Desktop\Battle.net.lnk
2015-05-23 00:16 - 2015-05-23 00:16 - 00000000 ____D C:\Users\PC\AppData\Local\Blizzard Entertainment
2015-05-23 00:15 - 2015-06-03 02:47 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-05-23 00:15 - 2015-05-23 00:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2015-05-23 00:11 - 2015-05-23 00:12 - 03057720 _____ (Blizzard Entertainment) C:\Users\PC\Downloads\Hearthstone-Setup-deDE.exe
2015-05-21 14:40 - 2015-06-17 14:43 - 00006142 _____ C:\Windows\setupact.log
2015-05-21 14:40 - 2015-05-21 14:40 - 00000000 _____ C:\Windows\setuperr.log
2015-05-20 18:51 - 2015-05-20 18:51 - 00031666 _____ C:\Users\PC\Documents\cc_20150520_185130.reg

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-17 14:56 - 2009-07-14 06:45 - 00022432 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-17 14:56 - 2009-07-14 06:45 - 00022432 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-17 14:50 - 2012-09-05 15:10 - 01385154 _____ C:\Windows\WindowsUpdate.log
2015-06-17 14:48 - 2012-09-06 08:49 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-17 14:44 - 2013-12-25 16:46 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-17 14:44 - 2012-09-06 08:57 - 00000000 ____D C:\Users\PC\AppData\Local\Deployment
2015-06-17 14:44 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-17 14:42 - 2012-09-11 18:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-06-17 14:25 - 2012-09-27 18:44 - 00000000 ____D C:\Users\PC\AppData\Roaming\Skype
2015-06-17 14:24 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PLA
2015-06-17 14:23 - 2014-11-26 18:48 - 00000000 ____D C:\Program Files (x86)\455bf313-ae09-4982-a398-d61f4d270bb9
2015-06-17 14:23 - 2013-01-19 00:57 - 00000000 ____D C:\Program Files (x86)\AMD APP
2015-06-17 14:02 - 2013-12-25 16:46 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-17 13:13 - 2015-04-01 19:13 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-06-17 13:04 - 2012-12-17 21:30 - 00000000 ____D C:\Users\PC\AppData\Roaming\Malwarebytes
2015-06-17 13:04 - 2012-12-17 21:30 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-06-17 01:13 - 2014-04-28 10:48 - 00000261 _____ C:\Users\PC\Desktop\Ranked Advices
2015-06-16 23:09 - 2012-11-23 21:34 - 00000000 ____D C:\Users\PC\AppData\Local\Spotify
2015-06-16 23:09 - 2012-11-23 21:32 - 00000000 ____D C:\Users\PC\AppData\Roaming\Spotify
2015-06-16 19:32 - 2012-09-06 08:49 - 00000000 ____D C:\Users\PC\AppData\Roaming\Adobe
2015-06-16 02:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-06-15 02:01 - 2012-09-06 08:57 - 00000000 ____D C:\Users\PC\AppData\Local\Apps\2.0
2015-06-14 22:58 - 2013-12-25 16:46 - 00000000 ____D C:\Program Files (x86)\Google
2015-06-14 22:57 - 2013-12-25 16:46 - 00004098 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-06-14 22:57 - 2013-12-25 16:46 - 00003846 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-06-14 22:54 - 2012-09-06 08:57 - 00000000 ____D C:\Users\PC\AppData\Local\Google
2015-06-14 22:53 - 2014-12-19 14:31 - 00000000 __SHD C:\Users\PC\AppData\Local\EmieBrowserModeList
2015-06-14 22:53 - 2014-10-01 18:13 - 00000000 __SHD C:\Users\PC\AppData\Local\EmieUserList
2015-06-14 22:53 - 2014-10-01 18:13 - 00000000 __SHD C:\Users\PC\AppData\Local\EmieSiteList
2015-06-14 21:57 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2015-06-14 21:53 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2015-06-14 18:38 - 2009-07-14 04:34 - 82575360 _____ C:\Windows\system32\config\SOFTWARE.bak
2015-06-14 18:38 - 2009-07-14 04:34 - 62128128 _____ C:\Windows\system32\config\components.bak
2015-06-14 18:38 - 2009-07-14 04:34 - 17825792 _____ C:\Windows\system32\config\SYSTEM.bak
2015-06-14 18:38 - 2009-07-14 04:34 - 00524288 _____ C:\Windows\system32\config\DEFAULT.bak
2015-06-14 18:38 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak
2015-06-14 18:38 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\SAM.bak
2015-06-14 18:35 - 2013-08-08 00:02 - 00000000 ____D C:\Users\PC\AppData\Roaming\Common
2015-06-14 18:15 - 2014-02-22 04:03 - 00000000 ____D C:\ProgramData\GreatSoft
2015-06-13 16:04 - 2014-09-24 22:05 - 00000000 ____D C:\Users\PC\AppData\Roaming\vlc
2015-06-13 11:09 - 2014-05-13 11:38 - 00000000 ____D C:\Users\PC\AppData\Roaming\TS3Client
2015-06-12 15:06 - 2014-08-14 15:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-12 06:58 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-06-11 08:28 - 2014-04-28 08:33 - 00000695 _____ C:\Users\PC\Desktop\Start in the Day
2015-06-10 03:49 - 2012-09-06 08:49 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-06-10 03:49 - 2012-09-06 08:49 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-10 03:49 - 2012-09-06 08:49 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-06-10 03:12 - 2009-07-14 19:58 - 00699654 _____ C:\Windows\system32\perfh007.dat
2015-06-10 03:12 - 2009-07-14 19:58 - 00149794 _____ C:\Windows\system32\perfc007.dat
2015-06-10 03:12 - 2009-07-14 07:13 - 01621612 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-10 03:07 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-10 03:04 - 2009-07-14 06:45 - 00346080 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-10 03:01 - 2014-12-11 05:56 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-10 03:01 - 2014-07-13 16:31 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-10 03:01 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-10 02:50 - 2012-09-05 17:09 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-10 02:48 - 2014-07-13 14:14 - 00000000 ____D C:\Windows\system32\MRT
2015-06-10 02:27 - 2012-09-05 15:30 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-10 02:21 - 2013-01-19 00:57 - 00000000 ____D C:\ProgramData\AMD
2015-06-10 02:20 - 2012-09-06 08:53 - 00000000 ____D C:\Program Files\ATI Technologies
2015-06-10 01:26 - 2013-01-19 00:49 - 00000000 ____D C:\AMD
2015-05-23 00:18 - 2012-09-06 12:10 - 00000000 ____D C:\Games
2015-05-21 01:24 - 2015-04-05 03:02 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-05-21 01:24 - 2015-04-05 03:02 - 00000000 ___SD C:\Windows\system32\GWX
2015-05-19 14:05 - 2014-10-27 14:48 - 00000000 ____D C:\Users\PC\AppData\Local\Adobe

==================== Files in the root of some directories =======

2014-06-19 12:28 - 2014-06-19 12:28 - 0000024 _____ () C:\Users\PC\AppData\Roaming\temp.ini
2014-12-22 05:16 - 2014-12-22 05:16 - 0000600 _____ () C:\Users\PC\AppData\Roaming\winscp.rnd
2014-01-06 22:53 - 2014-07-16 17:59 - 0007598 _____ () C:\Users\PC\AppData\Local\Resmon.ResmonCfg
2015-06-14 17:37 - 2015-06-14 18:02 - 0000692 _____ () C:\Users\PC\AppData\Local\Temp-log.txt

Some files in TEMP:
====================
C:\Users\PC\AppData\Local\Temp\Quarantine.exe
C:\Users\PC\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-16 02:09

==================== End of log ============================


schrauber 18.06.2015 06:42


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Why me 18.06.2015 13:37

Eset log.txt:

Code:

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=27f30ef13c6e7a468a253a7c2c3d85b0
# end=init
# utc_time=2015-06-18 08:35:32
# local_time=2015-06-18 10:35:32 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 24386
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=27f30ef13c6e7a468a253a7c2c3d85b0
# end=updated
# utc_time=2015-06-18 08:38:25
# local_time=2015-06-18 10:38:25 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=27f30ef13c6e7a468a253a7c2c3d85b0
# engine=24386
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-06-18 12:17:46
# local_time=2015-06-18 02:17:46 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 2232691 105923488 0 0
# scanned=275437
# found=115
# cleaned=0
# scan_time=13160
sh=8992F72873D09212597E582A16F8D9BC60E6A22A ft=1 fh=e21391a34e842ffc vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\DVDVideoSoft\TB\ConduitInstaller.exe.vir"
sh=4CE7276E5506ABB98E195F1512F973C15788A40B ft=1 fh=c71c00113c13a7fc vn="Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\~BabylonToolbar\~BabylonToolbar\~1.6.9.12\~BabylonToolbarApp.dll.vir"
sh=9BFAE3BCE4D9CE827E1B9B1564639A64F48215A9 ft=1 fh=c71c00113b0100ec vn="Variante von Win32/Toolbar.Babylon.AA evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\~BabylonToolbar\~BabylonToolbar\~1.6.9.12\~BabylonToolbarEng.dll.vir"
sh=A871EC7F098548413CA388049D034D1ABD9C33AD ft=1 fh=c71c00111af15543 vn="Variante von Win32/Toolbar.Babylon.AA evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\~BabylonToolbar\~BabylonToolbar\~1.6.9.12\~BabylonToolbarsrv.exe.vir"
sh=C713AEBAC012D367E2819D402ABE8C1CAD660329 ft=1 fh=c71c00115c3de7a7 vn="Variante von Win32/Toolbar.Montiera.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\~BabylonToolbar\~BabylonToolbar\~1.6.9.12\~BabylonToolbarTlbr.dll.vir"
sh=5E3E12E81A4FE62AF371CE04C9D813C868B0FD47 ft=1 fh=31c40c76ac4f9ce7 vn="Win32/Toolbar.Montiera.J evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\~BabylonToolbar\~BabylonToolbar\~1.6.9.12\~escortShld.dll.vir"
sh=A926D4F53F5F88FC341687644C74C2FFB5A9795A ft=1 fh=c71c001150ef7ade vn="Variante von Win32/Toolbar.Escort.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\~BabylonToolbar\~BabylonToolbar\~1.6.9.12\~bh\~BabylonToolbar.dll.vir"
sh=4B0F3C79BAB3B47DAC180CAECB53ED7A294B0B35 ft=1 fh=873e80e27dcd41ab vn="Variante von Win32/Adware.Yontoo.B Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setupx.dll.vir"
sh=4E1E938304F9E13BD19E53D1D1CF65352D356026 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Babylon.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC\AppData\Roaming\BabylonToolbar\CR\BabylonChrome1.crx.vir"
sh=F29288C9E3F170B24DFA81C3D9D18DD62C36FB25 ft=1 fh=c71c0011691e7766 vn="Variante von Win32/Toolbar.Babylon.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC\AppData\Roaming\BabylonToolbar\CR\BUSolution.dll.vir"
sh=F29288C9E3F170B24DFA81C3D9D18DD62C36FB25 ft=1 fh=c71c0011691e7766 vn="Variante von Win32/Toolbar.Babylon.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC\AppData\Roaming\BabylonToolbar\FF\BUSolution.dll.vir"
sh=F29288C9E3F170B24DFA81C3D9D18DD62C36FB25 ft=1 fh=c71c0011691e7766 vn="Variante von Win32/Toolbar.Babylon.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC\AppData\Roaming\BabylonToolbar\IE\BUSolution.dll.vir"
sh=F29288C9E3F170B24DFA81C3D9D18DD62C36FB25 ft=1 fh=c71c0011691e7766 vn="Variante von Win32/Toolbar.Babylon.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC\AppData\Roaming\BabylonToolbar\Shared\BUSolution.dll.vir"
sh=E33473A547B46503C4F7D8D6095F084570496E0F ft=1 fh=3cc725458bf86889 vn="Win32/BrowserCompanion evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC\AppData\Roaming\BrowserCompanion\tbhcn.exe.vir"
sh=564B632811D3E0B9216EF6D598617B469E6172CB ft=1 fh=0aa6a79dce02767d vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC\AppData\Roaming\Intermediate\chunprot.dll.vir"
sh=D18ADEC9402DD028663B6FEB5F9B7A9D87D8A2E0 ft=1 fh=de8bd3b224dbd08d vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC\AppData\Roaming\Intermediate\Intermediate.exe.vir"
sh=A5B18BC1BB4B5A15A920B6B296E91D4B4C1F9F7E ft=1 fh=637e9a458de3601b vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC\AppData\Roaming\Intermediate\userid.dll.vir"
sh=564B632811D3E0B9216EF6D598617B469E6172CB ft=1 fh=0aa6a79dce02767d vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC\AppData\Roaming\SCheck\chunprot.dll.vir"
sh=0B4A39953AEA3A36B93655DADCA418A41EAFD744 ft=1 fh=4289f24648abe38a vn="Variante von Win32/Adware.Snoozer.E.gen Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC\AppData\Roaming\SCheck\ntcrxinst.exe.vir"
sh=B166447F28BB6A3B51B46E3077F596EC032EDC77 ft=1 fh=fed5bb8dd4e1ae20 vn="Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC\AppData\Roaming\SCheck\ntdllinst.exe.vir"
sh=97CF12E5F24E4F20C760C719E5F57C1580BE8FCA ft=1 fh=a35ed9c3237f4560 vn="Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC\AppData\Roaming\SCheck\ntxpiinst.exe.vir"
sh=D18ADEC9402DD028663B6FEB5F9B7A9D87D8A2E0 ft=1 fh=de8bd3b224dbd08d vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC\AppData\Roaming\SCheck\SCheck.exe.vir"
sh=A5B18BC1BB4B5A15A920B6B296E91D4B4C1F9F7E ft=1 fh=637e9a458de3601b vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC\AppData\Roaming\SCheck\userid.dll.vir"
sh=A5B18BC1BB4B5A15A920B6B296E91D4B4C1F9F7E ft=1 fh=637e9a458de3601b vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC\AppData\Roaming\Seventh\userid.dll.vir"
sh=9E9B1BC36F49C190715671447128D52F01AF5514 ft=1 fh=9674886d5f0eb9ff vn="Mehrere Bedrohungen" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC\AppData\Roaming\Sixth\Sixth.exe.vir"
sh=73F7625096A04D9AABBF232A7C554F5E78EEEA31 ft=1 fh=4e2187732b45282f vn="Mehrere Bedrohungen" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC\AppData\Roaming\Snz\Snz.exe.vir"
sh=192D67CD6048350E142D67BABD567C8123DF90E4 ft=1 fh=e80336b6e1aab9c4 vn="Variante von Win32/Toolbar.CrossRider.CR evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\Companion for Gamers\companion_for_gamers_helper_service.exe"
sh=69366B3045B56E1574AFB4CC605BC17327078AAD ft=1 fh=eef413f3d31cb29a vn="Variante von Win32/InstalleRex.U evtl. unerwünschte Anwendung" ac=I fn="C:\ProgramData\InstallMate\{8B1881C3-A40C-4DF3-BFD2-CCD2FEDD7D83}\_Setupx.dll"
sh=F8F6E20CD2AA23010B85EA289C3BC3CBDBC9AE26 ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung" ac=I fn="C:\ProgramData\InstallMate\{8C448957-DE3E-4272-A099-961C57A7ABA1}\Custom.dll"
sh=57F3815D0942E3B0A9BEF621A7B4971F55FC74D7 ft=1 fh=c71c0011d20a434c vn="Win32/Adware.MultiPlug.KG Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\DealEExpress\LtA9irvhRyj3wR.exe.vir"
sh=57F3815D0942E3B0A9BEF621A7B4971F55FC74D7 ft=1 fh=c71c0011d20a434c vn="Win32/Adware.MultiPlug.KG Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\DealEXXpress\rz2F254r3QNGkK.exe.vir"
sh=C409EA906D68D1BC5E3CF9F6C55F92B1A9958E72 ft=1 fh=c71c001190bedb41 vn="Variante von Win32/Adware.MultiPlug.KM Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\EExSTraCouPOn\TWY60xvXdnyz1Z.dll.vir"
sh=57F3815D0942E3B0A9BEF621A7B4971F55FC74D7 ft=1 fh=c71c0011d20a434c vn="Win32/Adware.MultiPlug.KG Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\EExSTraCouPOn\TWY60xvXdnyz1Z.exe.vir"
sh=2826048ADCF11DBF2A6ED637A2563AD0A710FA96 ft=1 fh=ef07f3b72f34fbd5 vn="Variante von Win64/Adware.MultiPlug.H Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\EExSTraCouPOn\TWY60xvXdnyz1Z.x64.dll.vir"
sh=94B2190B2562EB1F96EC36720B5ED4C30829F4E7 ft=1 fh=c71c0011cd98eaf1 vn="Variante von Win32/Adware.MultiPlug.KM Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\EXstraCouponi\ulYG5azwTvdk40.dll.vir"
sh=57F3815D0942E3B0A9BEF621A7B4971F55FC74D7 ft=1 fh=c71c0011d20a434c vn="Win32/Adware.MultiPlug.KG Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\EXstraCouponi\ulYG5azwTvdk40.exe.vir"
sh=078067AA93114ACA4E5F324CD2FAEEA853F20EDC ft=1 fh=ef07f3b7d4524fe2 vn="Variante von Win64/Adware.MultiPlug.H Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\EXstraCouponi\ulYG5azwTvdk40.x64.dll.vir"
sh=D4E42F7F9308A4C44911139F47D205358A83137A ft=1 fh=c42a749d6fcdada0 vn="Win32/Wajam.K evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\Wajam\uninstall.exe.vir"
sh=89F5862F95C8F55A7DE0BB7099C3053823B1EFEB ft=1 fh=c71c0011db6c3fec vn="Variante von Win32/SProtector.P evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\ProgramData\3872871776\BITB844.tmp.vir"
sh=B1A2CE4B9CC1005FE5F754F1E8C8F70C15FAA381 ft=1 fh=d50b6e6bd9599dc9 vn="Variante von Win32/Adware.Snoozer.J Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\PC\AppData\Local\omesuperv.exe.vir"
sh=07AE72DA6895341702722A991E90769EABD3E36E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\Qoobox\Quarantine\C\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\d@s.co.uk\content\bg.js.vir"
sh=63799CD46CE951CC76AC249F88E23290ECAFFA31 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\Qoobox\Quarantine\C\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\m1@ViJj.com\content\bg.js.vir"
sh=F2705CD40EF03A660B6DC37C8BC89D34D608FD87 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\Qoobox\Quarantine\C\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\Mu@b.net\content\bg.js.vir"
sh=B98B6A5B3D56E8835E5A4F74E34874C671B95415 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\Qoobox\Quarantine\C\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\NmG@vw7IBWDt.net\content\bg.js.vir"
sh=7D43B532454D47CD4181D80D2DBB0D93BB202DB1 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\Qoobox\Quarantine\C\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\opp@m6FE.edu\content\bg.js.vir"
sh=B38F074FB87CBFAAC579086FCC23AF971C2F7F6B ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\Qoobox\Quarantine\C\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\q@R4.edu\content\bg.js.vir"
sh=79BCABCB19C6BE780DD1CC5EB230A36A6DD3CE58 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\Qoobox\Quarantine\C\Users\PC\AppData\Roaming\mozilla\firefox\Profiles\k6cdem5y.default\extensions\ySE@ZZ2c.com\content\bg.js.vir"
sh=895943C2B9A44694A3D0FD76DF165DE982FA7156 ft=1 fh=23ff95560be40a61 vn="Variante von Win32/Adware.Snoozer.H Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\PC\AppData\Roaming\Seventh\Seventh.exe.vir"
sh=2F016F395DA134CB240A375BD4AFE67BC4F4AACE ft=1 fh=d29baf39a786373a vn="Win32/Adware.Synatix Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\PC\AppData\Roaming\Windows Net Data\net.exe.vir"
sh=2F016F395DA134CB240A375BD4AFE67BC4F4AACE ft=1 fh=d29baf39a786373a vn="Win32/Adware.Synatix Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\PC\AppData\Roaming\Windows Net Data\uninstaller.exe.vir"
sh=69366B3045B56E1574AFB4CC605BC17327078AAD ft=1 fh=eef413f3d31cb29a vn="Variante von Win32/InstalleRex.U evtl. unerwünschte Anwendung" ac=I fn="C:\Users\All Users\InstallMate\{8B1881C3-A40C-4DF3-BFD2-CCD2FEDD7D83}\_Setupx.dll"
sh=F8F6E20CD2AA23010B85EA289C3BC3CBDBC9AE26 ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung" ac=I fn="C:\Users\All Users\InstallMate\{8C448957-DE3E-4272-A099-961C57A7ABA1}\Custom.dll"
sh=95ADC7925C2BB20FACE637E7031972F8E208FA33 ft=0 fh=0000000000000000 vn="Variante von Win32/SweetIM.L evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx"
sh=A41357F5E5CAB95591D48C602891323C9AFCD3E6 ft=1 fh=9746f5653182c03a vn="Win32/AdWare.1ClickDownload.AT Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\00\00000000"
sh=BFC8C236717357D2E471DCDC755C1FC888C303AB ft=1 fh=c924e3086e6efdfa vn="Win32/AdWare.1ClickDownload.AT Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\00\00000001"
sh=2A2BE4ED2FFE9871B89D9A728CC2556C9FA28C47 ft=1 fh=04cabc5c77d03ea0 vn="Win32/Somoto evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\File System\002\t\00\00000000"
sh=B6E48CBC195374D87F18172EA399DBF57EB362B3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Mozilla\Firefox\Profiles\k6cdem5y.default\cache2\entries\2D164B0BACE92236F640EFDCC789FFA79458B16B"
sh=2DDA3B0EE5E78FAFA2C10F6787E42FBFD170DFB8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Mozilla\Firefox\Profiles\k6cdem5y.default\cache2\entries\4CA3289BA903B8C7BD45177341D0B2FB8CE0D414"
sh=AB830E477F55577B1FD2894D7BE8E8024C0EEFD2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Mozilla\Firefox\Profiles\k6cdem5y.default\cache2\entries\541D4928B3A316CDFFC6C4721FCCDB15B965645F"
sh=55CC765673D9225F606BCB2A810399DE48C80E9F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Mozilla\Firefox\Profiles\k6cdem5y.default\cache2\entries\9DF53734A56D885E8ABA6B5490C6E15F249F77CD"
sh=F369239312DA8A415FECF3D8CA2B4A84ADDC6983 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Mozilla\Firefox\Profiles\k6cdem5y.default\cache2\entries\E696CC487EDA862C3BD0979AE82FA1678F80803C"
sh=0D2343317A8789D0C4EA07AC114F52637FD0C006 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Mozilla\Firefox\Profiles\k6cdem5y.default\cache2\entries\E8586195AB9CE78C175528CE6A4281416F4EEB1C"
sh=DCBEE18A09CD956CC9E066D42D8374EC6DBBB356 ft=1 fh=f5d7fd5ff0863183 vn="Win32/Adware.Snoozer.M Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsa5061.tmp\sdetect.dll"
sh=A5B18BC1BB4B5A15A920B6B296E91D4B4C1F9F7E ft=1 fh=637e9a458de3601b vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsa5061.tmp\userid.dll"
sh=DCBEE18A09CD956CC9E066D42D8374EC6DBBB356 ft=1 fh=f5d7fd5ff0863183 vn="Win32/Adware.Snoozer.M Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsa8D51.tmp\sdetect.dll"
sh=A5B18BC1BB4B5A15A920B6B296E91D4B4C1F9F7E ft=1 fh=637e9a458de3601b vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsa8D51.tmp\userid.dll"
sh=DCBEE18A09CD956CC9E066D42D8374EC6DBBB356 ft=1 fh=f5d7fd5ff0863183 vn="Win32/Adware.Snoozer.M Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsb516A.tmp\sdetect.dll"
sh=A5B18BC1BB4B5A15A920B6B296E91D4B4C1F9F7E ft=1 fh=637e9a458de3601b vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsb516A.tmp\userid.dll"
sh=DCBEE18A09CD956CC9E066D42D8374EC6DBBB356 ft=1 fh=f5d7fd5ff0863183 vn="Win32/Adware.Snoozer.M Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsbD8D2.tmp\sdetect.dll"
sh=A5B18BC1BB4B5A15A920B6B296E91D4B4C1F9F7E ft=1 fh=637e9a458de3601b vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsbD8D2.tmp\userid.dll"
sh=DCBEE18A09CD956CC9E066D42D8374EC6DBBB356 ft=1 fh=f5d7fd5ff0863183 vn="Win32/Adware.Snoozer.M Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsfB7CA.tmp\sdetect.dll"
sh=A5B18BC1BB4B5A15A920B6B296E91D4B4C1F9F7E ft=1 fh=637e9a458de3601b vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsfB7CA.tmp\userid.dll"
sh=DCBEE18A09CD956CC9E066D42D8374EC6DBBB356 ft=1 fh=f5d7fd5ff0863183 vn="Win32/Adware.Snoozer.M Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsfCCD0.tmp\sdetect.dll"
sh=A5B18BC1BB4B5A15A920B6B296E91D4B4C1F9F7E ft=1 fh=637e9a458de3601b vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsfCCD0.tmp\userid.dll"
sh=DCBEE18A09CD956CC9E066D42D8374EC6DBBB356 ft=1 fh=f5d7fd5ff0863183 vn="Win32/Adware.Snoozer.M Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsg77BF.tmp\sdetect.dll"
sh=A5B18BC1BB4B5A15A920B6B296E91D4B4C1F9F7E ft=1 fh=637e9a458de3601b vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsg77BF.tmp\userid.dll"
sh=DCBEE18A09CD956CC9E066D42D8374EC6DBBB356 ft=1 fh=f5d7fd5ff0863183 vn="Win32/Adware.Snoozer.M Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsl1AE0.tmp\sdetect.dll"
sh=A5B18BC1BB4B5A15A920B6B296E91D4B4C1F9F7E ft=1 fh=637e9a458de3601b vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsl1AE0.tmp\userid.dll"
sh=DCBEE18A09CD956CC9E066D42D8374EC6DBBB356 ft=1 fh=f5d7fd5ff0863183 vn="Win32/Adware.Snoozer.M Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsl7EF0.tmp\sdetect.dll"
sh=A5B18BC1BB4B5A15A920B6B296E91D4B4C1F9F7E ft=1 fh=637e9a458de3601b vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsl7EF0.tmp\userid.dll"
sh=DCBEE18A09CD956CC9E066D42D8374EC6DBBB356 ft=1 fh=f5d7fd5ff0863183 vn="Win32/Adware.Snoozer.M Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsq9FA9.tmp\sdetect.dll"
sh=A5B18BC1BB4B5A15A920B6B296E91D4B4C1F9F7E ft=1 fh=637e9a458de3601b vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsq9FA9.tmp\userid.dll"
sh=DCBEE18A09CD956CC9E066D42D8374EC6DBBB356 ft=1 fh=f5d7fd5ff0863183 vn="Win32/Adware.Snoozer.M Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsqF621.tmp\sdetect.dll"
sh=A5B18BC1BB4B5A15A920B6B296E91D4B4C1F9F7E ft=1 fh=637e9a458de3601b vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsqF621.tmp\userid.dll"
sh=DCBEE18A09CD956CC9E066D42D8374EC6DBBB356 ft=1 fh=f5d7fd5ff0863183 vn="Win32/Adware.Snoozer.M Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsrB136.tmp\sdetect.dll"
sh=A5B18BC1BB4B5A15A920B6B296E91D4B4C1F9F7E ft=1 fh=637e9a458de3601b vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsrB136.tmp\userid.dll"
sh=DCBEE18A09CD956CC9E066D42D8374EC6DBBB356 ft=1 fh=f5d7fd5ff0863183 vn="Win32/Adware.Snoozer.M Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsv71B6.tmp\sdetect.dll"
sh=A5B18BC1BB4B5A15A920B6B296E91D4B4C1F9F7E ft=1 fh=637e9a458de3601b vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nsv71B6.tmp\userid.dll"
sh=DCBEE18A09CD956CC9E066D42D8374EC6DBBB356 ft=1 fh=f5d7fd5ff0863183 vn="Win32/Adware.Snoozer.M Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nswBC9B.tmp\sdetect.dll"
sh=A5B18BC1BB4B5A15A920B6B296E91D4B4C1F9F7E ft=1 fh=637e9a458de3601b vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nswBC9B.tmp\userid.dll"
sh=DCBEE18A09CD956CC9E066D42D8374EC6DBBB356 ft=1 fh=f5d7fd5ff0863183 vn="Win32/Adware.Snoozer.M Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nswFCA7.tmp\sdetect.dll"
sh=A5B18BC1BB4B5A15A920B6B296E91D4B4C1F9F7E ft=1 fh=637e9a458de3601b vn="Variante von Win32/Adware.Snoozer.E Anwendung" ac=I fn="C:\Users\PC\AppData\Local\Temp\nswFCA7.tmp\userid.dll"
sh=E8CD33623287C08C7CC3662A042E45522654BB30 ft=1 fh=7cd3b160b0dbd4bd vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC\Downloads\FreeYouTubeToMP3Converter37 (1).exe"
sh=E8CD33623287C08C7CC3662A042E45522654BB30 ft=1 fh=7cd3b160b0dbd4bd vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC\Downloads\FreeYouTubeToMP3Converter37 (2).exe"
sh=E8CD33623287C08C7CC3662A042E45522654BB30 ft=1 fh=7cd3b160b0dbd4bd vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC\Downloads\FreeYouTubeToMP3Converter37.exe"
sh=3A04EDA4E18857A24FEAF7EACBDE7EA374A4B7D2 ft=1 fh=0614725f94de8af6 vn="Variante von Win32/ELEX.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC\Downloads\GoPlayer.exe"
sh=110034823B0B5D2EADEBD5019A3D0EF0B45EAAD1 ft=1 fh=256aa1da348dd238 vn="Win32/WinloadSDA.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC\Downloads\Handbuch-fr-das-Samsung-Galaxy-Ace-Setup.exe"
sh=93F98CFD63EAA3771340F80DB3348C761B8CD88F ft=1 fh=c71c0011b1adf682 vn="Variante von Win32/FreeNew.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC\Downloads\Razer_Game_Booster_downloader (1).exe"
sh=93F98CFD63EAA3771340F80DB3348C761B8CD88F ft=1 fh=c71c0011b1adf682 vn="Variante von Win32/FreeNew.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC\Downloads\Razer_Game_Booster_downloader.exe"
sh=1799B5A23C15BD141AB1178BA90B9F9BEED9D312 ft=1 fh=267fb486b754ce51 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\PC\Downloads\State_of_Play_(2013)_1080p_Documentary(2).exe"
sh=1799B5A23C15BD141AB1178BA90B9F9BEED9D312 ft=1 fh=267fb486b754ce51 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\PC\Downloads\State_of_Play_(2013)_1080p_Documentary.exe"
sh=D1C11D52470ED526C2EC886CD74F48845E9E5782 ft=1 fh=a947244b3d27cc58 vn="Variante von Win32/WinloadSDA.J evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC\Downloads\Surgeon-Simulator-2013-kostenlos-downloaden-Setup.exe"
sh=8598FBAAF61C0A8C4340DD764F653E815958795F ft=1 fh=e5629a3ecf4d82bc vn="Win32/StartPage.OPH Trojaner" ac=I fn="C:\Users\PC\Downloads\vlc-2.0.2-win64.exe"
sh=6A859B87A0320253D474441D76A966AA85F25AE0 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Babylon.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\ce56ce.msi"
sh=75A377CBC3D3354BF0DD7B5F1D26BFFF73744B92 ft=1 fh=8248de016d1d2bbb vn="Variante von Win32/Wajam.D evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\wajam_update[1].005"
sh=01B60BBC33A88F401EF37417CEC2185DF842A376 ft=1 fh=97b1d9cccb26c654 vn="Variante von Win32/Wajam.D evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\wajam_update[1].031"
sh=E1E55409ACA6CB28FAE7E00574E84F20AF171910 ft=1 fh=f7422f18f16fdeb5 vn="Variante von Win32/Wajam.D evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5\wajam_update[1].007"
sh=C2937B7E2619AF42C1CFA13E061C6A0F9133B2BB ft=1 fh=7e032cfc8e1258d7 vn="Variante von Win32/Wajam.D evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5\wajam_update[1].018"
sh=368CF1D82743DEA9535487984406DD6C46D74826 ft=1 fh=1faa9e135822b4ec vn="Variante von Win32/Wajam.G evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5\wajam_update[1].004"
sh=390609DDB717012BB45B2E419792664D920CE392 ft=1 fh=52b8583af5788abb vn="Variante von Win32/Wajam.D evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5\wajam_update[1].023"
sh=5F7FF643BF65EA65D4BD1F5B4127E7936F2CCA5D ft=1 fh=cbe7168a72d2bc77 vn="Variante von Win32/Wajam.D evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5\wajam_update[1].037"
sh=047213D3F6891869703569078B5A2F127F299EBE ft=1 fh=9c2d364d476a9e9d vn="Variante von Win32/Wajam.D evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA\wajam_update[1].004"
sh=C2937B7E2619AF42C1CFA13E061C6A0F9133B2BB ft=1 fh=7e032cfc8e1258d7 vn="Variante von Win32/Wajam.D evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA\wajam_update[1].007"
sh=B0C4AA365CEFDEE85126CC99CC5F82EA1ABFD664 ft=1 fh=495f2201d59c5c4d vn="Variante von Win32/Wajam.D evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA\wajam_update[1].034"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="Variante von Win32/Toolbar.CrossRider.CR evtl. unerwünschte Anwendung" ac=I fn="${Memory}"

Checkup.txt:

Code:

Results of screen317's Security Check version 1.002 
 Windows 7 Service Pack 1 x64 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
Microsoft Security Essentials 
 Antivirus up to date! 
`````````Anti-malware/Other Utilities Check:`````````
 Java 8 Update 31 
 Java version 32-bit out of Date!
 Adobe Flash Player 17.0.0.188 
 Adobe Reader XI 
 Mozilla Firefox (38.0.5)
 Google Chrome (43.0.2357.124)
````````Process Check: objlist.exe by Laurent```````` 
 Microsoft Security Essentials MSMpEng.exe
 Microsoft Security Essentials msseces.exe
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 
````````````````````End of Log``````````````````````

Frst.txt:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-06-2015
Ran by PC (administrator) on PC-PC on 18-06-2015 14:31:51
Running from C:\Users\PC\Downloads
Loaded Profiles: PC (Available Profiles: PC)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Program Files (x86)\Companion for Gamers\companion_for_gamers_helper_service.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(Hi-Rez Studios) C:\Games\Neuer Ordner (2)\HiPatchService.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDCountdown.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPictureViewer.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMovieViewer.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Spotify Ltd) C:\Users\PC\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\PC\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\PC\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\PC\AppData\Roaming\Spotify\Spotify.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-14] (Logitech Inc.)
HKLM-x32\...\Run: [P17RunE] => RunDll32 P17RunE.dll,RunDLLEntry
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-10-08] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Run: [Spotify Web Helper] => C:\Users\PC\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2023480 2015-06-18] (Spotify Ltd)
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8204056 2015-04-23] (Piriform Ltd)
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31280256 2015-04-17] (Skype Technologies S.A.)
Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip [2013-04-23] ()
Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk [2014-01-13]
ShortcutTarget: Xfire.lnk -> C:\Program Files (x86)\Xfire\Xfire.exe (Xfire Inc.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1693460017-1945991507-4174054062-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
SearchScopes: HKLM-x32 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1693460017-1945991507-4174054062-1001 -> {06F77479-2CD0-4FDB-896C-C27609545EB2} URL = hxxp://www.bing.com/search?FORM=WLETDF&PC=WLEM&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-1693460017-1945991507-4174054062-1001 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll [2014-02-02] (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default
FF DefaultSearchEngine: Search
FF NetworkProxy: "user_pref("extensions.DfFvJ251GRhBwxoj.url", "hxxp://toolkitcoupon.us/sync2/?q=hfZ9oetNgMgMCyVUojsFrdCHtMqLDe49CNU0mwkMCMlNhd9Fqja8rTaGrdn8qdkMBzqUojw8rdkGrjwHrjYErSh7hfs0pihPBMn0rHY6qjs4qdwErjY4qTa5pdY9rShHC7n0rjs9qdY5rjU4rTUFrHk9rTs8pdwMWy4ZBek0ifqZDMlGtMZPhd98pjkGqTsHpjUHpjUFpjgGrjC4tMl5Aen0rjnFpjsFqja6qjn8rdgEqTs4qGhLC7VUojgErihPBNq9ojgMgNr0rn%3D%3D;hxxp://getjpi.info/sync2/?q=hfZ9oetNgMgMCyVUojsFrdCHtMqLDe49CNU0mwkMCMlNhd9Fqja8rTaGrdn8qdkMBzqUojw8rdkGrjwHrjYErSh7hfs0pihPBMn0rHY6qjs4qdwErjY4qTa5pdY9rShHC7n0rjs9qdY5rjU4rTUFrHk9rTs8pdwMWy4ZBek0ifqZDMlGtMZPhd98pjkGqTsHpjUHpjUFpjgGrjC4tMl5Aen0rjnFpjsFqja6qjn8rdgEqTs4qGhLC7VUojgErihPBNq9ojgMgNr0rn%3D%3D;hxxp://setssun.com/sync2/?q=hftype", 5
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll [2015-05-15] ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\system32\npDeployJava1.dll [2013-05-29] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2012-06-28] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-05-15] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2013-02-20] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-27] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-27] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-06-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-06-14] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1693460017-1945991507-4174054062-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\PC\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-02-20] (Unity Technologies ApS)
FF Extension: antmarkantcom - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\antmark@ant.com [2015-04-18]
FF Extension: Browser AdBlocker - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\izdg_oblculbxoisg@ssgsbhkbxfras.edu [2015-02-10]
FF Extension: Companion for Gamers - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\nupfpEg@gmail.com [2015-05-27]
FF Extension: TheAdBlock - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\_idxmcmutexflypfr@ogunbfnggtbb_sw_jfc.net [2015-04-15]
FF Extension: E10A6337382E4FE696DE936ADC34DD04 - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\{E10A6337-382E-4FE6-96DE-936ADC34DD04} [2015-04-01]
FF Extension: AGSafeBrowsing - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\cm@agsafebrowsing.com.xpi [2015-03-25]
FF Extension: FavGenius - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\fg@favgenius.com.xpi [2015-03-30]
FF Extension: ProxTube - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\ich@maltegoetz.de.xpi [2014-11-03]
FF Extension: ProxMate - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi [2015-04-27]
FF Extension: Reddit Enhancement Suite - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\jid1-xUfzOsOFlzSOXg@jetpack.xpi [2015-04-01]
FF Extension: Adblock Plus - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-08]
FF Extension: No Name - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\snt@simplenewtab.com.xpi [not found]
FF Extension: No Name - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\622Q6@gmail.com [not found]
FF Extension: No Name - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\organize-search-engines@maltekraus.de [not found]
FF Extension: No Name - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\k6cdem5y.default\extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com [not found]

Chrome:
=======
CHR Profile: C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-14]
CHR Extension: (Google Docs) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-14]
CHR Extension: (Google Drive) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-06-14]
CHR Extension: (YouTube) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-06-14]
CHR Extension: (Adblock Plus) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-06-14]
CHR Extension: (Google Search) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-06-14]
CHR Extension: (Google Sheets) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-14]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-06-14]
CHR Extension: (Google Wallet) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-27]
CHR Extension: (Gmail) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2012-09-05] (Creative Labs) [File not signed]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [307200 2008-11-18] (Creative Technology Ltd) [File not signed]
R2 HiPatchService; C:\Games\Neuer Ordner (2)\HiPatchService.exe [9216 2013-10-25] (Hi-Rez Studios) [File not signed]
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-01-02] (DT Soft Ltd)
R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-18 14:25 - 2015-06-18 14:25 - 00852639 _____ C:\Users\PC\Downloads\SecurityCheck.exe
2015-06-18 10:31 - 2015-06-18 10:32 - 02870984 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_deu.exe
2015-06-17 14:48 - 2015-06-17 14:48 - 00000207 _____ C:\Windows\tweaking.com-regbackup-PC-PC-Windows-7-Home-Premium-(64-bit).dat
2015-06-17 14:48 - 2015-06-17 14:48 - 00000000 ____D C:\RegBackup
2015-06-17 14:47 - 2015-06-17 14:47 - 02949914 _____ (Thisisu) C:\Users\PC\Downloads\JRT.exe
2015-06-17 14:37 - 2015-06-17 14:42 - 00000000 ____D C:\AdwCleaner
2015-06-17 14:36 - 2015-06-17 14:37 - 02231296 _____ C:\Users\PC\Downloads\AdwCleaner_4.206.exe
2015-06-17 13:05 - 2015-06-17 14:34 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-17 13:04 - 2015-06-17 13:04 - 00001106 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-06-17 13:04 - 2015-06-17 13:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-06-17 13:04 - 2015-06-17 13:04 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-06-17 13:04 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-06-17 13:04 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-06-17 13:00 - 2015-06-17 13:01 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\PC\Downloads\mbam-setup-2.1.6.1022 (1).exe
2015-06-16 09:56 - 2015-06-16 09:57 - 00000000 ____D C:\Users\PC\Desktop\openhardwaremonitor
2015-06-16 09:56 - 2015-06-16 09:56 - 00511764 _____ C:\Users\PC\Downloads\openhardwaremonitor-v0.7.1-beta.zip
2015-06-15 01:59 - 2015-06-18 10:21 - 00466890 _____ C:\Windows\PFRO.log
2015-06-14 22:58 - 2015-06-14 22:58 - 00002251 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-06-14 22:58 - 2015-06-14 22:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-06-14 21:57 - 2015-06-14 21:57 - 00053419 _____ C:\ComboFix.txt
2015-06-14 21:34 - 2015-06-14 21:34 - 00000000 ____D C:\Users\PC\AppData\Local\GWX
2015-06-14 18:24 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-06-14 18:24 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-06-14 18:24 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-06-14 18:24 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-06-14 18:24 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-06-14 18:24 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-06-14 18:24 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-06-14 18:24 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-06-14 18:23 - 2015-06-14 21:57 - 00000000 ____D C:\Qoobox
2015-06-14 18:23 - 2015-06-14 18:44 - 00000000 ____D C:\Windows\erdnt
2015-06-14 18:19 - 2015-06-14 18:19 - 00001435 _____ C:\Users\PC\Desktop\ComboFix.exe - Verknüpfung.lnk
2015-06-14 18:17 - 2015-06-14 18:17 - 05628161 ____R (Swearware) C:\Users\PC\Downloads\ComboFix.exe
2015-06-14 18:04 - 2015-06-17 14:23 - 00000000 ____D C:\Program Files (x86)\Fluid UI
2015-06-14 17:40 - 2015-06-17 14:27 - 00000000 ____D C:\Program Files (x86)\PragmaFoobar
2015-06-14 17:29 - 2015-06-14 17:29 - 00001268 _____ C:\Users\PC\Desktop\Revo Uninstaller.lnk
2015-06-14 17:29 - 2015-06-14 17:29 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-06-14 17:28 - 2015-06-14 17:29 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\PC\Downloads\revosetup95.exe
2015-06-13 17:47 - 2015-06-13 17:49 - 00055893 _____ C:\Users\PC\Downloads\Addition.txt
2015-06-13 17:43 - 2015-06-18 14:31 - 00017233 _____ C:\Users\PC\Downloads\FRST.txt
2015-06-13 17:42 - 2015-06-18 14:31 - 00000000 ____D C:\FRST
2015-06-13 17:41 - 2015-06-13 17:41 - 02109952 _____ (Farbar) C:\Users\PC\Downloads\FRST64.exe
2015-06-10 02:22 - 2015-06-10 02:22 - 00000000 ____D C:\ProgramData\ATI
2015-06-10 02:21 - 2015-06-10 02:21 - 00055617 _____ C:\Windows\SysWOW64\CCCInstall_201506100221264246.log
2015-06-10 02:21 - 2015-06-10 02:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-06-10 02:21 - 2015-06-10 02:21 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2015-06-10 01:50 - 2015-06-10 01:50 - 207468968 _____ (Advanced Micro Devices, Inc.) C:\Users\PC\Downloads\13-9_win7_win8_64_dd_ccc_whql.exe
2015-06-10 01:36 - 2015-06-10 01:37 - 156548224 _____ (Advanced Micro Devices, Inc.) C:\Users\PC\Downloads\13-9_win7_win8_32_dd_ccc_whql.exe
2015-06-10 01:31 - 2015-06-10 02:02 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-10 01:24 - 2015-06-10 01:24 - 05451464 _____ (Advanced Micro Devices, Inc.) C:\Users\PC\Downloads\autodetectutility.exe
2015-06-10 01:23 - 2015-06-10 01:23 - 00052852 _____ C:\Users\PC\Downloads\incomplete.htm
2015-06-10 01:23 - 2015-06-10 01:23 - 00052852 _____ C:\Users\PC\Downloads\incomplete (3).htm
2015-06-10 01:23 - 2015-06-10 01:23 - 00052852 _____ C:\Users\PC\Downloads\incomplete (2).htm
2015-06-10 01:23 - 2015-06-10 01:23 - 00052852 _____ C:\Users\PC\Downloads\incomplete (1).htm
2015-06-09 22:18 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-09 22:18 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-09 22:18 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-09 22:18 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-09 22:18 - 2015-05-25 19:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-09 22:18 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-06-09 22:18 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-09 22:18 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-06-09 22:18 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-06-09 22:18 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-09 22:18 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-06-09 22:18 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-09 22:18 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-06-09 22:18 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-06-09 22:18 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-06-09 22:18 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-09 22:18 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-06-09 22:18 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-09 22:18 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-06-09 22:18 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-09 22:18 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-06-09 22:18 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-09 22:18 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-09 22:18 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-09 22:18 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-09 22:18 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-09 22:18 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-06-09 22:18 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-09 22:18 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-09 22:18 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-09 22:18 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-09 22:18 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-09 22:18 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-09 22:18 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-09 22:18 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-09 22:18 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-09 22:18 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-09 22:18 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-09 22:18 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-09 22:18 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-09 22:18 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-09 22:18 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-09 22:18 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-09 22:18 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-09 22:18 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-09 22:18 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-09 22:18 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-09 22:18 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-09 22:18 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-09 22:18 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-09 22:18 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-09 22:18 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-09 22:18 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-09 22:18 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-09 22:18 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-09 22:18 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-09 22:18 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-09 22:18 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-09 22:18 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-09 22:18 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-09 22:18 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-09 22:17 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-06-09 22:17 - 2015-05-25 20:23 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-09 22:17 - 2015-05-25 20:23 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-06-09 22:17 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-06-09 22:17 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-06-09 22:17 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-09 22:17 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-06-09 22:17 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-09 22:17 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-09 22:17 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-09 22:17 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-06-09 22:17 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-06-09 22:17 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-06-09 22:17 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-09 22:17 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-06-09 22:17 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-06-09 22:17 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-06-09 22:17 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-06-09 22:17 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-06-09 22:17 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-09 22:17 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-06-09 22:17 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-09 22:17 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-06-09 22:17 - 2015-05-22 20:18 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-09 22:17 - 2015-05-22 20:18 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-09 22:17 - 2015-05-22 20:18 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-09 22:17 - 2015-05-22 20:18 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-09 22:17 - 2015-05-22 20:18 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-09 22:17 - 2015-05-22 20:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-09 22:17 - 2015-05-22 20:13 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-09 22:17 - 2015-05-21 15:19 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-09 22:17 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-09 22:17 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-09 22:17 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-09 22:17 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-09 22:17 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-09 22:17 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-09 22:17 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-09 22:17 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-09 22:17 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-09 22:17 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-09 22:16 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-09 22:16 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-09 22:16 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-09 22:16 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-06-09 22:16 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-09 22:16 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-09 22:16 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-09 22:16 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-09 22:16 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-09 22:16 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-09 22:16 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-09 22:16 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-05-27 23:59 - 2015-06-18 11:59 - 00000556 _____ C:\Windows\Tasks\companion_for_gamers_helper_service.job
2015-05-27 23:59 - 2015-05-27 23:59 - 00003500 _____ C:\Windows\System32\Tasks\companion_for_gamers_helper_service
2015-05-27 23:59 - 2015-05-27 23:59 - 00000000 ____D C:\Program Files (x86)\Companion for Gamers
2015-05-23 00:33 - 2015-05-23 00:33 - 00000000 ____D C:\Users\PC\AppData\Local\Blizzard
2015-05-23 00:18 - 2015-05-23 00:18 - 00000860 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2015-05-23 00:18 - 2015-05-23 00:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2015-05-23 00:16 - 2015-06-03 04:18 - 00000000 ____D C:\Users\PC\AppData\Local\Battle.net
2015-05-23 00:16 - 2015-05-28 19:25 - 00000000 ____D C:\Users\PC\AppData\Roaming\Battle.net
2015-05-23 00:16 - 2015-05-23 00:16 - 00001122 _____ C:\Users\Public\Desktop\Battle.net.lnk
2015-05-23 00:16 - 2015-05-23 00:16 - 00000000 ____D C:\Users\PC\AppData\Local\Blizzard Entertainment
2015-05-23 00:15 - 2015-06-03 02:47 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-05-23 00:15 - 2015-05-23 00:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2015-05-23 00:11 - 2015-05-23 00:12 - 03057720 _____ (Blizzard Entertainment) C:\Users\PC\Downloads\Hearthstone-Setup-deDE.exe
2015-05-21 14:40 - 2015-06-18 10:22 - 00006254 _____ C:\Windows\setupact.log
2015-05-21 14:40 - 2015-05-21 14:40 - 00000000 _____ C:\Windows\setuperr.log
2015-05-20 18:51 - 2015-05-20 18:51 - 00031666 _____ C:\Users\PC\Documents\cc_20150520_185130.reg

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-18 14:06 - 2012-09-05 15:10 - 01440085 _____ C:\Windows\WindowsUpdate.log
2015-06-18 14:02 - 2013-12-25 16:46 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-18 13:48 - 2012-09-06 08:49 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-18 13:06 - 2012-11-23 21:32 - 00000000 ____D C:\Users\PC\AppData\Roaming\Spotify
2015-06-18 11:01 - 2012-11-23 21:34 - 00000000 ____D C:\Users\PC\AppData\Local\Spotify
2015-06-18 10:30 - 2009-07-14 06:45 - 00022432 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-18 10:30 - 2009-07-14 06:45 - 00022432 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-18 10:23 - 2012-09-06 08:57 - 00000000 ____D C:\Users\PC\AppData\Local\Deployment
2015-06-18 10:22 - 2013-12-25 16:46 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-18 10:22 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-18 02:45 - 2012-09-27 18:44 - 00000000 ____D C:\Users\PC\AppData\Roaming\Skype
2015-06-17 14:42 - 2012-09-11 18:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-06-17 14:27 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PLA
2015-06-17 14:23 - 2014-11-26 18:48 - 00000000 ____D C:\Program Files (x86)\455bf313-ae09-4982-a398-d61f4d270bb9
2015-06-17 14:23 - 2013-01-19 00:57 - 00000000 ____D C:\Program Files (x86)\AMD APP
2015-06-17 13:13 - 2015-04-01 19:13 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-06-17 13:04 - 2012-12-17 21:30 - 00000000 ____D C:\Users\PC\AppData\Roaming\Malwarebytes
2015-06-17 13:04 - 2012-12-17 21:30 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-06-17 01:13 - 2014-04-28 10:48 - 00000261 _____ C:\Users\PC\Desktop\Ranked Advices
2015-06-16 19:32 - 2012-09-06 08:49 - 00000000 ____D C:\Users\PC\AppData\Roaming\Adobe
2015-06-16 02:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-06-15 02:01 - 2012-09-06 08:57 - 00000000 ____D C:\Users\PC\AppData\Local\Apps\2.0
2015-06-14 22:58 - 2013-12-25 16:46 - 00000000 ____D C:\Program Files (x86)\Google
2015-06-14 22:57 - 2013-12-25 16:46 - 00004098 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-06-14 22:57 - 2013-12-25 16:46 - 00003846 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-06-14 22:54 - 2012-09-06 08:57 - 00000000 ____D C:\Users\PC\AppData\Local\Google
2015-06-14 22:53 - 2014-12-19 14:31 - 00000000 __SHD C:\Users\PC\AppData\Local\EmieBrowserModeList
2015-06-14 22:53 - 2014-10-01 18:13 - 00000000 __SHD C:\Users\PC\AppData\Local\EmieUserList
2015-06-14 22:53 - 2014-10-01 18:13 - 00000000 __SHD C:\Users\PC\AppData\Local\EmieSiteList
2015-06-14 21:57 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2015-06-14 21:53 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2015-06-14 18:38 - 2009-07-14 04:34 - 82575360 _____ C:\Windows\system32\config\SOFTWARE.bak
2015-06-14 18:38 - 2009-07-14 04:34 - 62128128 _____ C:\Windows\system32\config\components.bak
2015-06-14 18:38 - 2009-07-14 04:34 - 17825792 _____ C:\Windows\system32\config\SYSTEM.bak
2015-06-14 18:38 - 2009-07-14 04:34 - 00524288 _____ C:\Windows\system32\config\DEFAULT.bak
2015-06-14 18:38 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak
2015-06-14 18:38 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\SAM.bak
2015-06-14 18:35 - 2013-08-08 00:02 - 00000000 ____D C:\Users\PC\AppData\Roaming\Common
2015-06-14 18:15 - 2014-02-22 04:03 - 00000000 ____D C:\ProgramData\GreatSoft
2015-06-13 16:04 - 2014-09-24 22:05 - 00000000 ____D C:\Users\PC\AppData\Roaming\vlc
2015-06-13 11:09 - 2014-05-13 11:38 - 00000000 ____D C:\Users\PC\AppData\Roaming\TS3Client
2015-06-12 15:06 - 2014-08-14 15:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-12 06:58 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-06-11 08:28 - 2014-04-28 08:33 - 00000695 _____ C:\Users\PC\Desktop\Start in the Day
2015-06-10 03:49 - 2012-09-06 08:49 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-06-10 03:49 - 2012-09-06 08:49 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-10 03:49 - 2012-09-06 08:49 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-06-10 03:12 - 2009-07-14 19:58 - 00699654 _____ C:\Windows\system32\perfh007.dat
2015-06-10 03:12 - 2009-07-14 19:58 - 00149794 _____ C:\Windows\system32\perfc007.dat
2015-06-10 03:12 - 2009-07-14 07:13 - 01621612 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-10 03:07 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-10 03:04 - 2009-07-14 06:45 - 00346080 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-10 03:01 - 2014-12-11 05:56 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-10 03:01 - 2014-07-13 16:31 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-10 03:01 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-10 02:50 - 2012-09-05 17:09 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-10 02:48 - 2014-07-13 14:14 - 00000000 ____D C:\Windows\system32\MRT
2015-06-10 02:27 - 2012-09-05 15:30 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-10 02:21 - 2013-01-19 00:57 - 00000000 ____D C:\ProgramData\AMD
2015-06-10 02:20 - 2012-09-06 08:53 - 00000000 ____D C:\Program Files\ATI Technologies
2015-06-10 01:26 - 2013-01-19 00:49 - 00000000 ____D C:\AMD
2015-05-23 00:18 - 2012-09-06 12:10 - 00000000 ____D C:\Games
2015-05-21 01:24 - 2015-04-05 03:02 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-05-21 01:24 - 2015-04-05 03:02 - 00000000 ___SD C:\Windows\system32\GWX
2015-05-19 14:05 - 2014-10-27 14:48 - 00000000 ____D C:\Users\PC\AppData\Local\Adobe

==================== Files in the root of some directories =======

2014-06-19 12:28 - 2014-06-19 12:28 - 0000024 _____ () C:\Users\PC\AppData\Roaming\temp.ini
2014-12-22 05:16 - 2014-12-22 05:16 - 0000600 _____ () C:\Users\PC\AppData\Roaming\winscp.rnd
2014-01-06 22:53 - 2014-07-16 17:59 - 0007598 _____ () C:\Users\PC\AppData\Local\Resmon.ResmonCfg
2015-06-14 17:37 - 2015-06-14 18:02 - 0000692 _____ () C:\Users\PC\AppData\Local\Temp-log.txt

Some files in TEMP:
====================
C:\Users\PC\AppData\Local\Temp\Quarantine.exe
C:\Users\PC\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-16 02:09

==================== End of log ============================

Läuft wieder alles flüssig, hatte nicht mal mehr einen Crash, nehme an die Graka zu säubern hat doch was gebracht :D
Besten dank für alles, weiß eure arbeit wirklich zu schätzen :)

Gruß Why me

schrauber 19.06.2015 07:15

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

C:\Program Files (x86)\Companion for Gamers\companion_for_gamers_helper_service.exe

C:\ProgramData\InstallMate

C:\Users\PC\Downloads\FreeYouTubeToMP3Converter37 (1).exe

C:\Users\PC\Downloads\FreeYouTubeToMP3Converter37 (2).exe

C:\Users\PC\Downloads\FreeYouTubeToMP3Converter37.exe

C:\Users\PC\Downloads\GoPlayer.exe

C:\Users\PC\Downloads\Handbuch-fr-das-Samsung-Galaxy-Ace-Setup.exe

C:\Users\PC\Downloads\Razer_Game_Booster_downloader (1).exe

C:\Users\PC\Downloads\Razer_Game_Booster_downloader.exe

C:\Users\PC\Downloads\State_of_Play_(2013)_1080p_Documentary(2).exe

C:\Users\PC\Downloads\State_of_Play_(2013)_1080p_Documentary.exe

C:\Users\PC\Downloads\Surgeon-Simulator-2013-kostenlos-downloaden-Setup.exe

C:\Users\PC\Downloads\vlc-2.0.2-win64.exe

C:\Windows\Installer\ce56ce.msi

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\wajam_update[1].005

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\wajam_update[1].031

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5\wajam_update[1].007

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5\wajam_update[1].018

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5\wajam_update[1].004

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5\wajam_update[1].023

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5\wajam_update[1].037

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA\wajam_update[1].004

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA\wajam_update[1].007

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA\wajam_update[1].034
Emptytemp:


Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.





Revo Uninstaller - Download - Filepony
damit Firefox deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.mozilla.org/de/kb/fi...einfach-loesen




Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
http://deeprybka.trojaner-board.de/b.../combofix2.pngCombofix deinstallieren .
  • Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
  • Drücke bitte die http://deeprybka.trojaner-board.de/b...ne/revo/w7.png + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
  • Klicke auf OK.
    Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
  • Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:

http://deeprybka.trojaner-board.de/b...ast/schild.pngAbsicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank.
Meine Empfehlung:
http://filepony.de/icon/emsisoft_anti_malware.png
Emsisoft

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
http://filepony.de/icon/noscript.png NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
http://filepony.de/icon/malwarebytes_anti_exploit.pngMalwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.


Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwarecleaner .


Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Why me 19.06.2015 10:38

Fixlist.txt:

Code:

Fix result of Farbar Recovery Scan Tool (x64) Version:13-06-2015
Ran by PC at 2015-06-19 11:26:12 Run:1
Running from C:\Users\PC\Downloads
Loaded Profiles: PC (Available Profiles: PC)
Boot Mode: Normal
==============================================

fixlist content:
*****************
C:\Program Files (x86)\Companion for Gamers\companion_for_gamers_helper_service.exe

C:\ProgramData\InstallMate

C:\Users\PC\Downloads\FreeYouTubeToMP3Converter37 (1).exe

C:\Users\PC\Downloads\FreeYouTubeToMP3Converter37 (2).exe

C:\Users\PC\Downloads\FreeYouTubeToMP3Converter37.exe

C:\Users\PC\Downloads\GoPlayer.exe

C:\Users\PC\Downloads\Handbuch-fr-das-Samsung-Galaxy-Ace-Setup.exe

C:\Users\PC\Downloads\Razer_Game_Booster_downloader (1).exe

C:\Users\PC\Downloads\Razer_Game_Booster_downloader.exe

C:\Users\PC\Downloads\State_of_Play_(2013)_1080p_Documentary(2).exe

C:\Users\PC\Downloads\State_of_Play_(2013)_1080p_Documentary.exe

C:\Users\PC\Downloads\Surgeon-Simulator-2013-kostenlos-downloaden-Setup.exe

C:\Users\PC\Downloads\vlc-2.0.2-win64.exe

C:\Windows\Installer\ce56ce.msi

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\wajam_update[1].005

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\wajam_update[1].031

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5\wajam_update[1].007

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5\wajam_update[1].018

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5\wajam_update[1].004

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5\wajam_update[1].023

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5\wajam_update[1].037

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA\wajam_update[1].004

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA\wajam_update[1].007

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA\wajam_update[1].034
Emptytemp:
       
*****************

C:\Program Files (x86)\Companion for Gamers\companion_for_gamers_helper_service.exe => moved successfully.
C:\ProgramData\InstallMate => moved successfully.
C:\Users\PC\Downloads\FreeYouTubeToMP3Converter37 (1).exe => moved successfully.
C:\Users\PC\Downloads\FreeYouTubeToMP3Converter37 (2).exe => moved successfully.
C:\Users\PC\Downloads\FreeYouTubeToMP3Converter37.exe => moved successfully.
C:\Users\PC\Downloads\GoPlayer.exe => moved successfully.
C:\Users\PC\Downloads\Handbuch-fr-das-Samsung-Galaxy-Ace-Setup.exe => moved successfully.
C:\Users\PC\Downloads\Razer_Game_Booster_downloader (1).exe => moved successfully.
C:\Users\PC\Downloads\Razer_Game_Booster_downloader.exe => moved successfully.
C:\Users\PC\Downloads\State_of_Play_(2013)_1080p_Documentary(2).exe => moved successfully.
C:\Users\PC\Downloads\State_of_Play_(2013)_1080p_Documentary.exe => moved successfully.
C:\Users\PC\Downloads\Surgeon-Simulator-2013-kostenlos-downloaden-Setup.exe => moved successfully.
C:\Users\PC\Downloads\vlc-2.0.2-win64.exe => moved successfully.
C:\Windows\Installer\ce56ce.msi => moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\wajam_update[1].005 => moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\wajam_update[1].031 => moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5\wajam_update[1].007 => moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5\wajam_update[1].018 => moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5\wajam_update[1].004 => moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5\wajam_update[1].023 => moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5\wajam_update[1].037 => moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA\wajam_update[1].004 => moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA\wajam_update[1].007 => moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA\wajam_update[1].034 => moved successfully.
EmptyTemp: => 1.3 GB temporary data Removed.


The system needed a reboot..

==== End of Fixlog 11:28:44 ====


schrauber 20.06.2015 07:16

fertig :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 14:03 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131