mbam.txt Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Suchlaufdatum: 01.08.2015
Suchlaufzeit: 11:55
Protokolldatei: mbam.txt
Administrator: Ja
Version: 2.1.8.1057
Malware-Datenbank: v2015.08.01.02
Rootkit-Datenbank: v2015.07.30.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert
Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: Joe
Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 428652
Abgelaufene Zeit: 7 Min., 54 Sek.
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert
Prozesse: 1
PUP.Optional.Downloader.A, C:\ProgramData\{d9362a14-783c-2b72-d936-62a14783a851}\Download.exe, 5184, Löschen bei Neustart, [83232ed573186cca69dd404e946df30d]
Module: 1
PUP.Optional.MultiPlug.A, C:\Program Files (x86)\PathLighter\PathLighter.dll, Löschen bei Neustart, [f3b3cd36820910264d37ff9e0cf5fe02],
Registrierungsschlüssel: 54
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{28291d71-f8f1-4ddb-b394-a4cbb74aca00}, In Quarantäne, [654137cc7318ab8b7b8710755aa7c040],
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{28291D71-F8F1-4DDB-B394-A4CBB74ACA00}, In Quarantäne, [654137cc7318ab8b7b8710755aa7c040],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{28291D71-F8F1-4DDB-B394-A4CBB74ACA00}, In Quarantäne, [654137cc7318ab8b7b8710755aa7c040],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\P28291d71_f8f1_4ddb_b394_a4cbb74aca00_.P28291d71_f8f1_4ddb_b394_a4cbb74aca00_, In Quarantäne, [654137cc7318ab8b7b8710755aa7c040],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\P28291d71_f8f1_4ddb_b394_a4cbb74aca00_.P28291d71_f8f1_4ddb_b394_a4cbb74aca00_.9, In Quarantäne, [654137cc7318ab8b7b8710755aa7c040],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P28291d71_f8f1_4ddb_b394_a4cbb74aca00_.P28291d71_f8f1_4ddb_b394_a4cbb74aca00_, In Quarantäne, [654137cc7318ab8b7b8710755aa7c040],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P28291d71_f8f1_4ddb_b394_a4cbb74aca00_.P28291d71_f8f1_4ddb_b394_a4cbb74aca00_.9, In Quarantäne, [654137cc7318ab8b7b8710755aa7c040],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P28291d71_f8f1_4ddb_b394_a4cbb74aca00_.P28291d71_f8f1_4ddb_b394_a4cbb74aca00_, In Quarantäne, [654137cc7318ab8b7b8710755aa7c040],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P28291d71_f8f1_4ddb_b394_a4cbb74aca00_.P28291d71_f8f1_4ddb_b394_a4cbb74aca00_.9, In Quarantäne, [654137cc7318ab8b7b8710755aa7c040],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{28291D71-F8F1-4DDB-B394-A4CBB74ACA00}, In Quarantäne, [654137cc7318ab8b7b8710755aa7c040],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{28291d71-f8f1-4ddb-b394-a4cbb74aca00}, In Quarantäne, [654137cc7318ab8b7b8710755aa7c040],
PUP.Optional.Multiplug, HKU\S-1-5-21-388704786-1364687802-1681502730-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{28291D71-F8F1-4DDB-B394-A4CBB74ACA00}, In Quarantäne, [654137cc7318ab8b7b8710755aa7c040],
PUP.Optional.Multiplug, HKU\S-1-5-21-388704786-1364687802-1681502730-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{28291D71-F8F1-4DDB-B394-A4CBB74ACA00}, In Quarantäne, [654137cc7318ab8b7b8710755aa7c040],
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{28291D71-F8F1-4DDB-B394-A4CBB74ACA00}, In Quarantäne, [654137cc7318ab8b7b8710755aa7c040],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{28291D71-F8F1-4DDB-B394-A4CBB74ACA00}, In Quarantäne, [654137cc7318ab8b7b8710755aa7c040],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{28291D71-F8F1-4DDB-B394-A4CBB74ACA00}\INPROCSERVER32, In Quarantäne, [654137cc7318ab8b7b8710755aa7c040],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\CLSID\{a81455b4-60c9-4376-a97d-cbf8ceecbddf}, In Quarantäne, [6e385ca75b308da92ca18517e31e6898],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A81455B4-60C9-4376-A97D-CBF8CEECBDDF}, In Quarantäne, [6e385ca75b308da92ca18517e31e6898],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A81455B4-60C9-4376-A97D-CBF8CEECBDDF}, In Quarantäne, [6e385ca75b308da92ca18517e31e6898],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\Pa81455b4_60c9_4376_a97d_cbf8ceecbddf_.Pa81455b4_60c9_4376_a97d_cbf8ceecbddf_, In Quarantäne, [6e385ca75b308da92ca18517e31e6898],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\Pa81455b4_60c9_4376_a97d_cbf8ceecbddf_.Pa81455b4_60c9_4376_a97d_cbf8ceecbddf_.9, In Quarantäne, [6e385ca75b308da92ca18517e31e6898],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pa81455b4_60c9_4376_a97d_cbf8ceecbddf_.Pa81455b4_60c9_4376_a97d_cbf8ceecbddf_, In Quarantäne, [6e385ca75b308da92ca18517e31e6898],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pa81455b4_60c9_4376_a97d_cbf8ceecbddf_.Pa81455b4_60c9_4376_a97d_cbf8ceecbddf_.9, In Quarantäne, [6e385ca75b308da92ca18517e31e6898],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Pa81455b4_60c9_4376_a97d_cbf8ceecbddf_.Pa81455b4_60c9_4376_a97d_cbf8ceecbddf_, In Quarantäne, [6e385ca75b308da92ca18517e31e6898],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Pa81455b4_60c9_4376_a97d_cbf8ceecbddf_.Pa81455b4_60c9_4376_a97d_cbf8ceecbddf_.9, In Quarantäne, [6e385ca75b308da92ca18517e31e6898],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A81455B4-60C9-4376-A97D-CBF8CEECBDDF}, In Quarantäne, [6e385ca75b308da92ca18517e31e6898],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{a81455b4-60c9-4376-a97d-cbf8ceecbddf}, In Quarantäne, [6e385ca75b308da92ca18517e31e6898],
PUP.Optional.MultiPlug.A, HKU\S-1-5-21-388704786-1364687802-1681502730-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A81455B4-60C9-4376-A97D-CBF8CEECBDDF}, In Quarantäne, [6e385ca75b308da92ca18517e31e6898],
PUP.Optional.MultiPlug.A, HKU\S-1-5-21-388704786-1364687802-1681502730-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A81455B4-60C9-4376-A97D-CBF8CEECBDDF}, In Quarantäne, [6e385ca75b308da92ca18517e31e6898],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{A81455B4-60C9-4376-A97D-CBF8CEECBDDF}, In Quarantäne, [6e385ca75b308da92ca18517e31e6898],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{A81455B4-60C9-4376-A97D-CBF8CEECBDDF}, In Quarantäne, [6e385ca75b308da92ca18517e31e6898],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\CLSID\{A81455B4-60C9-4376-A97D-CBF8CEECBDDF}\INPROCSERVER32, In Quarantäne, [6e385ca75b308da92ca18517e31e6898],
PUP.Optional.Multiplug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{C3A626B5-1AF7-3AE8-5433-2008E15650C2}, In Quarantäne, [327452b1800b45f11138e795a75afd03],
PUP.Optional.Multiplug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{C816B74A-76DD-F936-7C6E-56E2B881B487}, In Quarantäne, [6b3bc83b9eedb5814ffadaa2bd44a65a],
PUP.Optional.WhiteDeals.PrxySvrRST, HKLM\SOFTWARE\CLASSES\TYPELIB\{598DCD74-3F5B-4E16-8749-057F426F232A}, In Quarantäne, [5c4a21e2d9b254e24d2fa96a1ee5f40c],
PUP.Optional.WhiteDeals.PrxySvrRST, HKLM\SOFTWARE\CLASSES\INTERFACE\{09B003D5-0209-4B9E-88DA-6AB5226F04F3}, In Quarantäne, [5c4a21e2d9b254e24d2fa96a1ee5f40c],
PUP.Optional.WhiteDeals.PrxySvrRST, HKLM\SOFTWARE\CLASSES\INTERFACE\{0F127439-A377-4E4E-A876-BC54C7C4F9B8}, In Quarantäne, [5c4a21e2d9b254e24d2fa96a1ee5f40c],
PUP.Optional.WhiteDeals.PrxySvrRST, HKLM\SOFTWARE\CLASSES\INTERFACE\{507C93E2-0D1D-4D4E-BE83-FA90EF8BA7EF}, In Quarantäne, [5c4a21e2d9b254e24d2fa96a1ee5f40c],
PUP.Optional.WhiteDeals.PrxySvrRST, HKLM\SOFTWARE\CLASSES\INTERFACE\{93B6DC2C-CB0A-47F5-9041-2BFB779380C6}, In Quarantäne, [5c4a21e2d9b254e24d2fa96a1ee5f40c],
PUP.Optional.WhiteDeals.PrxySvrRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{09B003D5-0209-4B9E-88DA-6AB5226F04F3}, In Quarantäne, [5c4a21e2d9b254e24d2fa96a1ee5f40c],
PUP.Optional.WhiteDeals.PrxySvrRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0F127439-A377-4E4E-A876-BC54C7C4F9B8}, In Quarantäne, [5c4a21e2d9b254e24d2fa96a1ee5f40c],
PUP.Optional.WhiteDeals.PrxySvrRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{507C93E2-0D1D-4D4E-BE83-FA90EF8BA7EF}, In Quarantäne, [5c4a21e2d9b254e24d2fa96a1ee5f40c],
PUP.Optional.WhiteDeals.PrxySvrRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{93B6DC2C-CB0A-47F5-9041-2BFB779380C6}, In Quarantäne, [5c4a21e2d9b254e24d2fa96a1ee5f40c],
PUP.Optional.WhiteDeals.PrxySvrRST, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{09B003D5-0209-4B9E-88DA-6AB5226F04F3}, In Quarantäne, [5c4a21e2d9b254e24d2fa96a1ee5f40c],
PUP.Optional.WhiteDeals.PrxySvrRST, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{0F127439-A377-4E4E-A876-BC54C7C4F9B8}, In Quarantäne, [5c4a21e2d9b254e24d2fa96a1ee5f40c],
PUP.Optional.WhiteDeals.PrxySvrRST, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{507C93E2-0D1D-4D4E-BE83-FA90EF8BA7EF}, In Quarantäne, [5c4a21e2d9b254e24d2fa96a1ee5f40c],
PUP.Optional.WhiteDeals.PrxySvrRST, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{93B6DC2C-CB0A-47F5-9041-2BFB779380C6}, In Quarantäne, [5c4a21e2d9b254e24d2fa96a1ee5f40c],
PUP.Optional.WhiteDeals.PrxySvrRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{598DCD74-3F5B-4E16-8749-057F426F232A}, In Quarantäne, [5c4a21e2d9b254e24d2fa96a1ee5f40c],
PUP.Optional.WhiteDeals.PrxySvrRST, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{598DCD74-3F5B-4E16-8749-057F426F232A}, In Quarantäne, [5c4a21e2d9b254e24d2fa96a1ee5f40c],
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE, In Quarantäne, [5f4722e15a311b1b3aa405995da724dc],
PUP.Optional.AdGazelle.A, HKLM\SOFTWARE\WOW6432NODE\AdGazelle, In Quarantäne, [129437cc7e0d3501be1c1f0028db6799],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{45c9b3f5}, In Quarantäne, [e2c4b44fc6c556e0de65584539cbb24e],
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE, In Quarantäne, [e3c37e85345780b618c6c8d6bb491fe1],
PUP.Optional.PathLighter.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\45c9b3f5, In Quarantäne, [f6b0986b24676accac07aafcd72d926e],
Registrierungswerte: 2
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, In Quarantäne, [5f4722e15a311b1b3aa405995da724dc]
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, In Quarantäne, [e3c37e85345780b618c6c8d6bb491fe1]
Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)
Ordner: 14
PUP.Optional.WhiteDeals.PrxySvrRST, C:\Program Files (x86)\WhiteDealS, In Quarantäne, [5c4a21e2d9b254e24d2fa96a1ee5f40c],
PUP.Optional.MultiPlug.A, C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphnnghkeaobcchigpcnidickpencfpe\1.1, In Quarantäne, [21853cc7e8a326102d43742244c0ab55],
PUP.Optional.MultiPlug.A, C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphnnghkeaobcchigpcnidickpencfpe, In Quarantäne, [21853cc7e8a326102d43742244c0ab55],
PUP.Optional.MultiPlug.A, C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbmmieigblcbldgdokdjpioljjninaim\225, In Quarantäne, [ced825de3259ad8973fd306620e416ea],
PUP.Optional.MultiPlug.A, C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbmmieigblcbldgdokdjpioljjninaim, In Quarantäne, [ced825de3259ad8973fd306620e416ea],
PUP.Optional.Multiplug.Gen, C:\ProgramData\{d9362a14-783c-2b72-d936-62a14783a851}, Löschen bei Neustart, [ced83fc4f3981b1bf47f44527b890af6],
PUP.Optional.MultiPlug.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\extensions\ta@KrjTHTm.net\content, In Quarantäne, [079fad56048722145a24caccd52f936d],
PUP.Optional.MultiPlug.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\extensions\ta@KrjTHTm.net, In Quarantäne, [079fad56048722145a24caccd52f936d],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\12410414510930946097, In Quarantäne, [3c6a867dddaed066b3c3c3e313f14cb4],
PUP.Optional.SearchProtect.A, C:\Users\Joe\AppData\Local\SearchProtect, In Quarantäne, [7432788b107b88ae6dba30bcfc060af6],
PUP.Optional.SearchProtect.A, C:\Users\Joe\AppData\Local\SearchProtect\SearchProtect, In Quarantäne, [7432788b107b88ae6dba30bcfc060af6],
PUP.Optional.SearchProtect.A, C:\Users\Joe\AppData\Local\SearchProtect\SearchProtect\rep, In Quarantäne, [7432788b107b88ae6dba30bcfc060af6],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main, In Quarantäne, [a9fde71c3c4fce683466728e778c02fe],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\rep, In Quarantäne, [a9fde71c3c4fce683466728e778c02fe],
Dateien: 79
PUP.Optional.Downloader.A, C:\ProgramData\{d9362a14-783c-2b72-d936-62a14783a851}\Download.exe, Löschen bei Neustart, [83232ed573186cca69dd404e946df30d],
PUP.Optional.MultiPlug.A, C:\Program Files (x86)\PathLighter\PathLighter.dll, Löschen bei Neustart, [f3b3cd36820910264d37ff9e0cf5fe02],
PUP.Optional.Multiplug, C:\Program Files (x86)\BoriowsinGCleare\MUtPjrtdNz6csA.x64.dll, Löschen bei Neustart, [654137cc7318ab8b7b8710755aa7c040],
PUP.Optional.Multiplug, C:\Program Files (x86)\BoriowsinGCleare\MUtPjrtdNz6csA.dll, In Quarantäne, [654137cc7318ab8b7b8710755aa7c040],
PUP.Optional.MultiPlug.A, C:\Program Files (x86)\WhiteDealS\iCkN0cRkltbrIF.x64.dll, In Quarantäne, [6e385ca75b308da92ca18517e31e6898],
PUP.Optional.MultiPlug.A, C:\Program Files (x86)\WhiteDealS\iCkN0cRkltbrIF.dll, In Quarantäne, [6e385ca75b308da92ca18517e31e6898],
PUP.Optional.Multiplug.A, C:\Program Files (x86)\BoriowsinGCleare\MUtPjrtdNz6csA.exe, In Quarantäne, [327452b1800b45f11138e795a75afd03],
PUP.Optional.Multiplug.A, C:\Program Files (x86)\Mozilla Firefox\dbghelp.dll, In Quarantäne, [faacb2512d5edf57a67b4c4ad52cb64a],
PUP.Optional.Multiplug.A, C:\Program Files (x86)\Visual Event\Visual Event.exe, In Quarantäne, [6b3bc83b9eedb5814ffadaa2bd44a65a],
PUP.Optional.Multiplug.A, C:\Program Files (x86)\WhiteDealS\iCkN0cRkltbrIF.exe, In Quarantäne, [aafc22e147443402db6e5329679a32ce],
PUP.Optional.MultiPlug.Uns, C:\$Recycle.Bin\S-1-5-21-388704786-1364687802-1681502730-1001\$RBDGNI1\ActiveDiscount.exe, In Quarantäne, [32745ba8d6b532046eff86f8748ef709],
PUP.Optional.Multiplug, C:\Users\Joe\AppData\Local\Temp\__tmp_050fda77, In Quarantäne, [f8aecb38741732049ffe7cff857cb24e],
PUP.Optional.MultiPlug.A, C:\Users\Joe\AppData\Local\Temp\__tmp_1f2cb6fc, In Quarantäne, [8c1a37cca3e84cea2a5a7f1ed03145bb],
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Local\Temp\~nsu.tmp\Au_.exe, In Quarantäne, [1e882dd66c1f102644d85ef23cc5a060],
PUP.Optional.InstallCore, C:\Users\Joe\Downloads\Malavida_Download_Manager.exe, In Quarantäne, [0d99857ed6b59c9acba3591d8e77f60a],
PUP.Optional.BundleInstaller.A, C:\Users\Joe\Downloads\setup.exe, In Quarantäne, [dec8fa09a5e6c076371a8d16ad54b24e],
PUP.Optional.Softonic.A, C:\Users\Joe\Downloads\SoftonicDownloader_fuer_free-screen-to-video.exe, In Quarantäne, [ecbad033eaa1b1853f2826d2a06055ab],
PUP.Optional.Softonic, C:\Users\Joe\Downloads\SoftonicDownloader_fuer_hypercam.exe, In Quarantäne, [d2d4c63dfa9161d52fe25591ce32926e],
PUP.Optional.Softonic, C:\Users\Joe\Downloads\SoftonicDownloader_fuer_race-driver-grid.exe, In Quarantäne, [92148d76fb9083b399ede65845bb2ad6],
PUP.Optional.WhiteDeals.PrxySvrRST, C:\Program Files (x86)\WhiteDealS\iCkN0cRkltbrIF.tlb, In Quarantäne, [5c4a21e2d9b254e24d2fa96a1ee5f40c],
PUP.Optional.WhiteDeals.PrxySvrRST, C:\Program Files (x86)\WhiteDealS\iCkN0cRkltbrIF.dat, In Quarantäne, [5c4a21e2d9b254e24d2fa96a1ee5f40c],
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\searchplugins\softonic.xml, In Quarantäne, [287eb94af79413236c8bb39b6a99a957],
PUP.Optional.MultiPlug.A, C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphnnghkeaobcchigpcnidickpencfpe\1.1\lsdb.js, In Quarantäne, [21853cc7e8a326102d43742244c0ab55],
PUP.Optional.MultiPlug.A, C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphnnghkeaobcchigpcnidickpencfpe\1.1\background.html, In Quarantäne, [21853cc7e8a326102d43742244c0ab55],
PUP.Optional.MultiPlug.A, C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphnnghkeaobcchigpcnidickpencfpe\1.1\content.js, In Quarantäne, [21853cc7e8a326102d43742244c0ab55],
PUP.Optional.MultiPlug.A, C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphnnghkeaobcchigpcnidickpencfpe\1.1\manifest.json, In Quarantäne, [21853cc7e8a326102d43742244c0ab55],
PUP.Optional.MultiPlug.A, C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphnnghkeaobcchigpcnidickpencfpe\1.1\sjCzBMOd.js, In Quarantäne, [21853cc7e8a326102d43742244c0ab55],
PUP.Optional.MultiPlug.A, C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbmmieigblcbldgdokdjpioljjninaim\225\lsdb.js, In Quarantäne, [ced825de3259ad8973fd306620e416ea],
PUP.Optional.MultiPlug.A, C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbmmieigblcbldgdokdjpioljjninaim\225\background.html, In Quarantäne, [ced825de3259ad8973fd306620e416ea],
PUP.Optional.MultiPlug.A, C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbmmieigblcbldgdokdjpioljjninaim\225\content.js, In Quarantäne, [ced825de3259ad8973fd306620e416ea],
PUP.Optional.MultiPlug.A, C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbmmieigblcbldgdokdjpioljjninaim\225\HeIc.js, In Quarantäne, [ced825de3259ad8973fd306620e416ea],
PUP.Optional.MultiPlug.A, C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbmmieigblcbldgdokdjpioljjninaim\225\manifest.json, In Quarantäne, [ced825de3259ad8973fd306620e416ea],
PUP.Optional.Multiplug.Gen, C:\ProgramData\{d9362a14-783c-2b72-d936-62a14783a851}\Download.dat, In Quarantäne, [ced83fc4f3981b1bf47f44527b890af6],
PUP.Optional.Multiplug.Gen, C:\ProgramData\{d9362a14-783c-2b72-d936-62a14783a851}\598cdf7eaf8a2d8f, In Quarantäne, [ced83fc4f3981b1bf47f44527b890af6],
PUP.Optional.Multiplug.Gen, C:\ProgramData\{d9362a14-783c-2b72-d936-62a14783a851}\9471792b885eca5b, Löschen bei Neustart, [ced83fc4f3981b1bf47f44527b890af6],
PUP.Optional.MultiPlug.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\extensions\ta@KrjTHTm.net\content\bg.js, In Quarantäne, [079fad56048722145a24caccd52f936d],
PUP.Optional.MultiPlug.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\extensions\ta@KrjTHTm.net\bootstrap.js, In Quarantäne, [079fad56048722145a24caccd52f936d],
PUP.Optional.MultiPlug.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\extensions\ta@KrjTHTm.net\chrome.manifest, In Quarantäne, [079fad56048722145a24caccd52f936d],
PUP.Optional.MultiPlug.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\extensions\ta@KrjTHTm.net\install.rdf, In Quarantäne, [079fad56048722145a24caccd52f936d],
PUP.Optional.BestPriceNinja.A, C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.bestpriceninja.com_0.localstorage, In Quarantäne, [02a4689b7e0d6acccb7f2581cf35669a],
PUP.Optional.BestPriceNinja.A, C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.bestpriceninja.com_0.localstorage-journal, In Quarantäne, [06a0fc07d2b92d0976d41393e91b4eb2],
PUP.Optional.BestPriceNinja.A, C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.bestpriceninja.com_0.localstorage, In Quarantäne, [80267e852566092d9fabf0b68a7ab64a],
PUP.Optional.BestPriceNinja.A, C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.bestpriceninja.com_0.localstorage-journal, In Quarantäne, [2e7843c0d9b29e9817334a5c00048a76],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\12410414510930946097\3531a75947435f26029e34434b807a16.ini, In Quarantäne, [3c6a867dddaed066b3c3c3e313f14cb4],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\12410414510930946097\5464b3f6c5927013029e34434b807a16.ini, In Quarantäne, [3c6a867dddaed066b3c3c3e313f14cb4],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\12410414510930946097\8dd2075651b9c57d029e34434b807a16.ini, In Quarantäne, [3c6a867dddaed066b3c3c3e313f14cb4],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\12410414510930946097\acf6832311a50275029e34434b807a16.ini, In Quarantäne, [3c6a867dddaed066b3c3c3e313f14cb4],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\12410414510930946097\d9640e13cbc0b46a029e34434b807a16.ini, In Quarantäne, [3c6a867dddaed066b3c3c3e313f14cb4],
PUP.Optional.SearchProtect.A, C:\Users\Joe\AppData\Local\SearchProtect\SearchProtect\rep\UserRepository.dat, In Quarantäne, [7432788b107b88ae6dba30bcfc060af6],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\rep\SystemRepository.dat, In Quarantäne, [a9fde71c3c4fce683466728e778c02fe],
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.admin", false);), Ersetzt,[b8eef70cdfacb97deb9ddca12adbcb35]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (ferences
/* Do not edit this file.
*
), Ersetzt,[64424bb8345757dfd0b8dda0e91c7d83]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (references
/* Do not edit this file.
*
* If you make changes to this file ), Ersetzt,[9016cc377a11dc5ae7a11766a85d54ac]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (e.
*
* If you make changes to this file while t), Ersetzt,[6f37fa09b4d745f14147b2cbae57f907]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
*
* If you), Ersetzt,[951135ce8704063044444934b3527090]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (erences
/* Do not edit this file.
*
* If ), Ersetzt,[a60093706d1eed49b2d6156806ffa759]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (rences
/* Do not edit this file.
*
* If), Ersetzt,[31756d96b5d64de97b0d8af3699c748c]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (ferences
/* Do not edit this file.
*
* If), Ersetzt,[b3f35ba8fb900c2a89ff94e941c46898]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (rences
/* Do not edit this file.
*
* If you m), Ersetzt,[683eb94a692274c2becaccb1d62f32ce]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (es
/* Do not edit this file.
*
* If y), Ersetzt,[8a1cfa09286324128404255812f329d7]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (references
/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be ove), Ersetzt,[c8de63a0711a999d96f2b9c4ec19f010]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (tion is running,
* the changes will be overwritten when the applicatio), Ersetzt,[aff72dd6dbb0d95d78104d30b64f8878]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: ( this file.
*
* If you make changes to this fil), Ersetzt,[ebbb2dd62269ab8b1e6a1f5e3bcac63a]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
*
* If you make c), Ersetzt,[66406a99583379bdacdce895dc297b85]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (
/* Do not edit this file.
*
* If you m), Ersetzt,[525430d32e5dc07681076b129075cd33]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (ferences
/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwrit), Ersetzt,[584e9271414acd694e3a80fdf90c2cd4]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (n is running,
* the changes will be overwritten w), Ersetzt,[d3d32cd74b4038fe7c0c611c64a13cc4]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
*
* If you make ), Ersetzt,[e5c1de25adde6ec836527b0248bdfb05]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (s
/* Do not edit this file.
*
* If you m), Ersetzt,[a5011ae966250432fb8d1e5f986de818]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (erences
/* Do not edit this file.
*
* If y), Ersetzt,[079fe81bd9b240f66f1996e751b430d0]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (ences
/* Do not edit this file.
*
* If you make changes to this f), Ersetzt,[abfbc24125665adc62267805c83d55ab]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: ( this file.
*
* If you make changes to this file while ), Ersetzt,[baec33d02f5c12244b3d5b22c1441ce4]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the app), Ersetzt,[75318f74f7945cda2a5e05787c8906fa]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (s running,
* the changes will be overwritten when), Ersetzt,[862020e3335820161771ed9085809070]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
*
* If you make changes ), Ersetzt,[297d9a69fd8e7bbb91f7a3da2fd6fd03]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (Do not edit this file.
*
* If you make changes t), Ersetzt,[f8aeda290586eb4b6622fb82aa5b7f81]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.hmpgUrl", "hxxp://search.softonic.com/MOY00352/tb_v1?SearchSource=13&cc=&mi=98ae900d000000000000b4b67642a75d");), Ersetzt,[1a8c5fa48605043297f9d8a5ae57a858]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (ity.typeaheadfind.casesensitive", 1);
user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("app.update.auto", false);
user_pref("ap), Ersetzt,[4b5b857e13783105a6eafb82ae57c63a]
PUP.Optional.Softonic.A, C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\prefs.js, Gut: (), Schlecht: (te.auto", false);
user_pref("app.update.enabled", false);
user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1438331993);
user_), Ersetzt,[fbab19ea96f5b6806828601dba4b9f61]
Physische Sektoren: 0
(keine bösartigen Elemente erkannt)
(end)
AdwCleaner Code:
# AdwCleaner v4.208 - Bericht erstellt 01/08/2015 um 12:10:49
# Aktualisiert 09/07/2015 von Xplode
# Datenbank : 2015-07-26.2 [Server]
# Betriebssystem : Windows 8.1 (x64)
# Benutzername : Joe - JOESLAPTOP
# Gestarted von : C:\Users\Joe\Downloads\AdwCleaner_4.208.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\488e7b8000001820
Ordner Gelöscht : C:\ProgramData\{e7485fd7-c9c3-2411-e748-85fd7c9c7f5f}
Ordner Gelöscht : C:\Program Files (x86)\SearchProtect
Ordner Gelöscht : C:\Program Files (x86)\BoriowsinGCleare
Datei Gelöscht : C:\Users\Joe\AppData\Roaming\AdobeWLCMCache.dat
Datei Gelöscht : C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\joslxj0g.default\user.js
***** [ Geplante Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Schlüssel Gelöscht : HKLM\SOFTWARE\5c4a10c3-3eaa-c7ca-89b5-b41c71b1d621
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A0B55F99-F893-4F84-AE82-CAE0E70DFDFA}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
Schlüssel Gelöscht : HKLM\SOFTWARE\SiteSee
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>
***** [ Internetbrowser ] *****
-\\ Internet Explorer v11.0.9600.17840
-\\ Mozilla Firefox v35.0.1 (x86 de)
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.admin", false);
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.aflt", "SD");
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.appId", "{7ABBFE1C-E485-44AA-8F36-353751B4124D}");
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.autoRvrt", "false");
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.dfltLng", "de");
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.dfltSrch", true);
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.dnsErr", true);
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.excTlbr", false);
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.ffxUnstlRst", false);
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.hmpg", true);
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.hmpgUrl", "hxxp://search.softonic.com/MOY00352/tb_v1?SearchSource=13&cc=&mi=98ae900d000000000000b4b67642a75d");
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.id", "98ae900d000000000000b4b67642a75d");
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.instlDay", "15962");
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.instlRef", "MOY00352");
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.newTab", true);
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.newTabUrl", "hxxp://search.softonic.com/MOY00352/tb_v1/?SearchSource=15&cc=&mi=98ae900d000000000000b4b67642a75d");
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.prdct", "Softonic");
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.prtnrId", "softonic");
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.rvrt", "false");
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.smplGrp", "none");
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.srchPrvdr", "Search the web (Softonic)");
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.tlbrId", "2013desingbrand");
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.tlbrSrchUrl", "hxxp://search.softonic.com/MOY00352/tb_v1?SearchSource=1&cc=&mi=98ae900d000000000000b4b67642a75d&q=");
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.vrsn", "1.8.21.14");
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.vrsnTs", "1.8.21.1421:22:53");
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.vrsni", "1.8.21.14");
[joslxj0g.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.vaIaQO5rclangNPr.scode", "(function(){try{if(window.location.href.indexOf(\"rjY5qTn8qTU5rdrErHaHqHg7\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\",\[...]
-\\ Google Chrome v44.0.2403.125
*************************
AdwCleaner[R0].txt - [6317 Bytes] - [01/08/2015 12:09:44]
AdwCleaner[S0].txt - [6464 Bytes] - [01/08/2015 12:10:49]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6523 Bytes] ##########
JRT.txt Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.4 (07.27.2015:1)
OS: Windows 8.1 x64
Ran by Joe on 01.08.2015 at 12:15:49,00
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Tasks
~~~ Registry Values
~~~ Registry Keys
~~~ Files
Successfully deleted: [File] C:\Users\Joe\AppData\Roaming\appdataFr3.bin
Successfully deleted: [File] C:\Users\Joe\Appdata\Local\google\chrome\user data\default\local storage\chrome-extension_ogminpmldncgcmokldnmmapddoccmhfl_0.localstorage
Successfully deleted: [File] C:\Users\Joe\Appdata\Local\google\chrome\user data\default\local storage\chrome-extension_ogminpmldncgcmokldnmmapddoccmhfl_0.localstorage-journal
~~~ Folders
~~~ FireFox
Successfully deleted: [Folder] C:\Users\Joe\AppData\Roaming\mozilla\firefox\profiles\joslxj0g.default\extensions\staged
~~~ Chrome
[C:\Users\Joe\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset
[C:\Users\Joe\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
[C:\Users\Joe\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset
[C:\Users\Joe\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[
bopakagnckmlgajfccecajhnimjiiedh,
ogminpmldncgcmokldnmmapddoccmhfl
]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 01.08.2015 at 12:19:08,23
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
FRST 32-Bit | FRST 64-Bit
Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
SecurityCheck und:
dann auf 
und dann auf 
. 
