Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Wörter im Internet werden zu Links (blau unterstrichen und mit grünen Pfeilen versehen) (https://www.trojaner-board.de/169639-woerter-internet-links-blau-unterstrichen-gruenen-pfeilen-versehen.html)

sunrise_77 12.08.2015 11:51
Wörter im Internet werden zu Links (blau unterstrichen und mit grünen Pfeilen versehen)
 
Hallo,

ich habe seit einiger Zeit das Problem, dass willkürlich Wörter die in einem Text im Internet (ich benutze Firefox als Browser) vorkommen zu Links werden. Diese sind dann blau unterstrichen und haben einen grünen Pfeil. Es poppen auch immer wieder Werbewebsites auf, obwohl ich Adblock Plus aktiviert habe. Beide Probleme haben zur gleichen Zeit angefangen und seitdem geht mein Browser auch nicht mehr so schnell. Mein Betriebssystem ist Windows 8.1.

Ich freue mich auf Hilfe und möchte mich schon einmal im Voraus bedanken! :)

LG sunrise_77

schrauber 12.08.2015 12:05
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


schrauber 12.08.2015 12:05
:p.

M-K-D-B 12.08.2015 12:10
Zitat:
Zitat von schrauber (Beitrag 1500209)
:p.
Ich mag dich auch :lach:

sunrise_77 12.08.2015 12:54
Danke für die schnelle Antwort :D

Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:11-08-2015 02
durchgeführt von Selina (Administrator) auf SUNRISE (12-08-2015 13:40:04)
Gestartet von C:\Users\Selina\Downloads
Geladene Profile: Selina & Anja (Verfügbare Profile: Selina & Anja)
Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

() C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Windows SysTool) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe
(Preventon Technologies Limited) C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVScanningService.exe
(Preventon Technologies Limited) C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVWatchService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(SPAMfighter ApS) C:\Program Files (x86)\Fighters\FighterSuiteService.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\ToolbarUpdater.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\loggingserver.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(hxxp://www.aobo-porn-filter.com) C:\Windows\SysWOW64\drivers\sysfilter\sysfilter.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(McAfee, Inc.) C:\Program Files\mcafee\vul\McVulCtr.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_209.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_209.exe


==================== Registry (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-20] (NVIDIA Corporation)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [111976 2013-09-11] (Intel Corporation)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [1080992 2014-05-15] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\ASUSWSLoader.exe [63296 2014-02-25] ()
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\mcafee\platform\McUICnt.exe [642040 2014-08-05] (McAfee, Inc.)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [110144 2013-03-06] (CyberLink)
HKLM-x32\...\Run: [PixelPlanet PdfPrinter-Monitor] => C:\Program Files (x86)\Common Files\PixelPlanet\PdfPrinter 7\PdfPrinterMonitor.exe [3786880 2013-07-12] (PixelPlanet)
HKLM-x32\...\Run: [CommonToolkitTray] => C:\Program Files (x86)\Fighters\Tray\FightersTray.exe [1696288 2014-10-10] (SPAMfighter ApS)
HKLM-x32\...\Run: [SWPROguard] => C:\Program Files (x86)\Fighters\SPYWAREfighter\swprotray.exe
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [3175312 2015-08-06] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [AoboAutoRun32] => rundll32.exe "C:\Windows\SysWOW64\drivers\sysfilter\WinSock.dll",OK
HKLM\...\Policies\Explorer\Run: [AoboAutoRun64] => rundll32.exe "C:\Windows\SysWOW64\drivers\sysfilter\WinSock64.dll",OK
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Run: [Power2GoExpress] => C:\Program Files (x86)\CyberLink\Power2Go\Power2GoExpress.exe [2649664 2014-01-15] (CyberLink Corp.)
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Run: [Infigo] => C:\Program Files (x86)\Infigo\Infigo.exe onrun
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Run: [BingSvc] => C:\Users\Selina\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe  --extensions-on-chrome-urls --test-type --load-extension="c:\Program Files\Google\Chrome\Application\Extensions\chrome\app\37.1329.15.30" - (Der Dateneintrag hat 107 mehr Zeichen).
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\...\Run: [Power2GoExpress] => C:\Program Files (x86)\CyberLink\Power2Go\Power2GoExpress.exe [2649664 2014-01-15] (CyberLink Corp.)
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\...\Run: [Optimizer Pro] => C:\Program Files (x86)\Optimizer Pro 3.16\OptProLauncher.exe
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\...\Run: [Infigo] => C:\Program Files (x86)\Infigo\Infigo.exe onrun
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe  --extensions-on-chrome-urls --test-type --load-extension="c:\Program Files\Google\Chrome\Application\Extensions\chrome\app\37.1329.15.30" - (Der Dateneintrag hat 107 mehr Zeichen).
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-06-10]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\simplicheck.lnk [2015-03-05]
ShortcutTarget: simplicheck.lnk -> C:\Program Files (x86)\simplitec\simplicheck\simplicheck.exe (Keine Datei)
Startup: C:\Users\Selina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sparkol VideoScribe 2.1 PRO Full Crack.lnk [2015-04-15]
ShortcutTarget: Sparkol VideoScribe 2.1 PRO Full Crack.lnk -> C:\ProgramData\{bdf56971-599d-e834-bdf5-56971599a5c5}\Sparkol VideoScribe 2.1 PRO Full Crack.exe (Keine Datei)
Startup: C:\Users\Selina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sparkol VideoScribe Professional 2.1.0 Full(1).lnk [2015-04-15]
ShortcutTarget: Sparkol VideoScribe Professional 2.1.0 Full(1).lnk -> C:\ProgramData\{1de678b8-9deb-0e0c-1de6-678b89dee2e2}\Sparkol VideoScribe Professional 2.1.0 Full(1).exe (Keine Datei)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
GroupPolicy: Gruppenrichtline auf Chrome erkannt <======= ACHTUNG
CHR HKLM\SOFTWARE\Policies\Google: Richtlinienbeschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.delta-homes.com/?type=hp&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.delta-homes.com/?type=hp&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.delta-homes.com/web/?type=ds&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.delta-homes.com/?type=hp&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.delta-homes.com/web/?type=ds&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-AT&Src=WD8&Tid=000328B0&OHP=http%3A%2F%2Fwww.delta%2Dhomes.com%2F%3Ftype%3Dhp%26ts%3D1431679656%26z%3D4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z%26from%3Dwpm05153%26uid%3DST1000LM024XHN%2DM101MBB%5FS32XJ9DF708772&OSP=http%3A%2F%2Fdo%2Dsearch.com%2Fweb%2F%3Futm%5Fsource%3Db%26utm%5Fmedium%3D%26utm%5Fcampaign%3Dinstall%5Fie%26utm%5Fcontent%3Dds%26from%3D%26uid%3DST500DM002%2D1BC142%5FW2A27G6AXXXXW2A27G6A%26ts%3D1420373293%26type%3Ddefault%26q%3D%7BsearchTerms%7D
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-AT&Src=WD8&Tid=000328B0&OHP=http%3A%2F%2Fasus13.msn.com%2F%3Fpc%3DASJB&OSP=
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-2923131921-1963989444-91532992-1001 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-2923131921-1963989444-91532992-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2923131921-1963989444-91532992-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-2923131921-1963989444-91532992-1001 -> {27EA1DCC-C1CD-4AEB-BE5E-53F35C5DA2AF} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2923131921-1963989444-91532992-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2923131921-1963989444-91532992-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2923131921-1963989444-91532992-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2923131921-1963989444-91532992-1005 -> {27EA1DCC-C1CD-4AEB-BE5E-53F35C5DA2AF} URL = hxxp://rts.dsrlte.com/?affID=na&q={searchTerms}&r=835
SearchScopes: HKU\S-1-5-21-2923131921-1963989444-91532992-1005 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2923131921-1963989444-91532992-1005 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://mysearch.avg.com/search?cid={8573D089-44C2-4049-8061-B257EBA8639E}&mid=29af043fca0147cda13e85e9164ab315-bb32dc00a59fbaf3ddd9f6aa4ef7d70985822c06&lang=de&ds=AVG&coid=avgtbavg&cmpid=0215pit&pr=fr&d=2015-03-29 21:38:44&v=4.1.0.411&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO: SalePlus -> {0d5b8aad-5e9d-46bd-a6a9-b98c883b23f4} -> C:\Program Files (x86)\SalePlus\kJEzufod2hPs3c.x64.dll Keine Datei
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)
BHO: bestadblocker -> {8ffb2166-b719-4f1e-b522-b691255401c4} -> C:\Program Files (x86)\bestadblocker\PYMYWRFbYh7Fwk.x64.dll Keine Datei
BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.1.5.143\AVG Web TuneUp.dll [2015-08-06] (AVG)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: SalePlus -> {ba254a32-0efe-4ce1-9c79-f2ba7a1490f7} -> C:\Program Files (x86)\SalePlus\VUJpPdpWzowSHb.x64.dll Keine Datei
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2015-04-15] (DVDVideoSoft Ltd.)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)
BHO-x32: LuckyTab Class -> {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} -> C:\Program Files (x86)\XTab\SupTab.dll [2015-05-20] (Thinknice Co. Limited)
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.1.5.143\AVG Web TuneUp.dll [2015-08-06] (AVG)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2015-04-15] (DVDVideoSoft Ltd.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2014-09-04] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2014-09-04] (McAfee, Inc.)
Winsock: Catalog9 08 C:\Windows\SysWOW64\drivers\sysfilter\sysWebFilter32.dll [607744 2015-03-14] ()
Winsock: Catalog9 10 C:\Windows\SysWOW64\drivers\sysfilter\sysWebFilter32.dll [607744 2015-03-14] ()
Winsock: Catalog9-x64 08 C:\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll [998400 2015-03-14] ()
Winsock: Catalog9-x64 10 C:\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll [998400 2015-03-14] ()
Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{03D1BF89-D118-4E4F-812A-97EEF06B483E}: [DhcpNameServer] 192.168.8.1 192.168.8.1
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.delta-homes.com/?type=sc&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772

FireFox:
========
FF ProfilePath: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: delta-homes
FF SearchEngineOrder.3: Bing
FF SelectedSearchEngine: delta-homes
FF Homepage: google.at
FF Keyword.URL: hxxp://www.bing.com/search?FORM=SK2MDF&PC=SK2M&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-14] ()
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2014-09-04] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.8.0\\npsitesafety.dll [Keine Datei]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2014-09-04] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-05-22] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-11-22] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-20] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-20] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll [2014-12-28] ()
FF SearchPlugin: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\avg-secure-search.xml [2015-08-11]
FF SearchPlugin: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\delta-homes.xml [2015-08-12]
FF SearchPlugin: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\dsrlte.xml [2015-03-10]
FF SearchPlugin: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\google-images.xml [2015-07-04]
FF SearchPlugin: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\google-maps.xml [2015-07-04]
FF SearchPlugin: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\search-simple.xml [2015-03-19]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2015-08-06]
FF Extension: SAlePlUS - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\2u@EgTVxea.net [2015-04-15]
FF Extension: AVG Web TuneUp - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\avg@toolbar [2015-03-29]
FF Extension: Bing Search - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\bingsearch.full@microsoft.com [2015-05-14]
FF Extension: Default NewTab - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\default_newtabff@gmail.com [2015-07-25]
FF Extension: SalePLius - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\J@C9jg.com [2015-04-15]
FF Extension: QueieenCouupOn - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\JQzw@H.com [2015-03-19]
FF Extension: SaleePlous - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\LFE@Ba.edu [2015-04-15]
FF Extension: bestadblocker - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\r@L.co.uk [2015-04-15]
FF Extension: SSalePlUUs - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\Yl6lAIg@1.com [2015-04-15]
FF Extension: bestadblocker - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\Yvj@q.net [2015-04-15]
FF Extension: Cliqz - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\cliqz@cliqz.com.xpi [2015-07-25]
FF Extension: Default SearchProtected  - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\defsearchp@gmail.com.xpi [2015-07-25]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2015-05-02]
FF Extension: Adblock Plus - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-03-14]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-05-01]
FF HKLM-x32\...\Firefox\Extensions: [quick_searchff@gmail.com] - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\quick_searchff@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [sweetsearch@gmail.com] - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\sweetsearch@gmail.com
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-07-31]
FF HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: Kein Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\cliqz@cliqz.com

Chrome:
=======
CHR dev: Chrome dev build erkannt! <======= ACHTUNG
CHR HomePage: Default -> hxxp://www.delta-homes.com/?type=hp&ts=1432145919&z=b90eddd36164fc51f5cea57g9zdccocg5z4watbg0m&from=wpm05203&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772
CHR StartupUrls: Default -> "hxxp://www.delta-homes.com/?type=hp&ts=1432145919&z=b90eddd36164fc51f5cea57g9zdccocg5z4watbg0m&from=wpm05203&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772"
CHR DefaultSearchKeyword: Default -> delta-homes
CHR DefaultSearchURL: Default -> hxxp://search.delta-homes.com/web/?type=ds&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}
CHR Profile: C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-05]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-05]
CHR Extension: (YouTube) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-05]
CHR Extension: (One Last Pass Password Manager ) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo [2015-02-17]
CHR Extension: (Google Search) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-05]
CHR Extension: (Mozilla Gecko Tab) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm [2015-03-19]
CHR Extension: (World weather online) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk [2015-04-15]
CHR Extension: (Faster Light) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpjaeedhlmcojmmhngnbankkodcdlenh [2015-02-07]
CHR Extension: (Mavenlink Project Manager) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami [2015-02-17]
CHR Extension: (Google Wallet) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-05]
CHR Extension: (Gmail) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-05]
CHR Extension: (SalePLius) - C:\ProgramData\aaegpibphpehghjbadcjpmfmcfpddjim\ []
CHR Extension: (SaleePlous) - C:\ProgramData\gfnkloieabjhkochmlabmabgpncnkdbj\ []
CHR Extension: (SAlePlUS) - C:\ProgramData\jjgpigijceopgppohlmendhooepjphna\ []
CHR Extension: (SSalePlUUs) - C:\ProgramData\jjhlcnaaggekoebfjhcbnpdhcadnbnle\ []
CHR HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.delta-homes.com/?type=sc&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe [71680 2014-02-25] (ASUS Cloud Corporation) [Datei ist nicht signiert]
R2 AV Engine Scanning Service; C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVScanningService.exe [2009912 2014-02-10] (Preventon Technologies Limited)
R2 AV Watch Service; C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVWatchService.exe [400528 2014-02-10] (Preventon Technologies Limited)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation)
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [115632 2013-09-11] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116656 2013-09-11] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148688 2013-09-11] (Intel Corporation)
R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [124880 2013-09-11] (Intel Corporation)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [347200 2014-12-28] (WildTangent)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [Datei ist nicht signiert]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2014-09-04] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-29] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2014-08-01] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1041192 2014-07-24] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-07-18] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-07-18] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-20] (NVIDIA Corporation)
R2 Suite Service; C:\Program Files (x86)\Fighters\FighterSuiteService.exe [1282592 2014-11-02] (SPAMfighter ApS)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2145080 2014-07-16] (TuneUp Software)
R2 vToolbarUpdater18.8.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\ToolbarUpdater.exe [1874320 2015-08-06] (AVG Secure Search)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [602112 2015-05-20] (Windows SysTool) [Datei ist nicht signiert] <==== ACHTUNG
R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [1195920 2015-08-06] ()

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3892224 2014-03-06] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [71952 2014-03-31] (ASUS Corporation)
R3 AVFSFilter; C:\Windows\system32\DRIVERS\avfsfilter.sys [13720 2014-02-10] ()
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-07-18] (McAfee, Inc.)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [143568 2013-09-11] (Intel Corporation)
R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [114680 2013-09-11] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [287160 2013-09-11] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494272 2013-09-11] (Intel Corporation)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-10-23] (Intel Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-07-18] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313800 2014-07-18] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-07-18] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526352 2014-07-18] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-07-18] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [444720 2014-07-24] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96592 2014-07-24] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-07-18] (McAfee, Inc.)
R2 plctrl; C:\Program Files\ASUS\P4G\plctrl.sys [14136 2014-02-11] (Windows (R) Win 7 DDK provider)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [827096 2015-03-12] (Realsil Semiconductor Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [X]
U0 msahci; system32\drivers\msahci.sys [X]
U3 NPF; kein ImagePath
S3 TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-12 13:40 - 2015-08-12 13:41 - 00040263 _____ C:\Users\Selina\Downloads\FRST.txt
2015-08-12 11:31 - 2015-08-12 13:40 - 00000000 ____D C:\FRST
2015-08-12 11:30 - 2015-08-12 11:30 - 02172928 _____ (Farbar) C:\Users\Selina\Downloads\FRST64.exe
2015-08-11 14:57 - 2015-08-11 14:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2015-08-05 20:25 - 2015-08-06 21:44 - 00000000 ____D C:\Users\Selina\Desktop\Youtube channel
2015-08-05 19:47 - 2015-07-14 16:14 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-08-05 19:47 - 2015-07-14 16:14 - 00301056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-08-05 19:47 - 2015-07-14 16:14 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-08-05 19:47 - 2015-07-14 16:13 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-14 21:55 - 2015-06-16 01:01 - 24894464 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-14 21:55 - 2015-06-16 00:39 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-14 21:55 - 2015-06-16 00:38 - 06024704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-14 21:55 - 2015-06-16 00:38 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-14 21:55 - 2015-06-16 00:38 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-14 21:55 - 2015-06-16 00:26 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-14 21:55 - 2015-06-16 00:24 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-14 21:55 - 2015-06-16 00:02 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2015-07-14 21:55 - 2015-06-15 23:58 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-14 21:55 - 2015-06-15 23:57 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-14 21:55 - 2015-06-15 23:56 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-07-14 21:55 - 2015-06-15 23:55 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-14 21:55 - 2015-06-15 23:49 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-07-14 21:55 - 2015-06-15 23:41 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-07-14 21:55 - 2015-06-15 23:38 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-14 21:55 - 2015-06-15 23:36 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-14 21:55 - 2015-06-15 23:32 - 19597824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-14 21:55 - 2015-06-15 23:32 - 14404608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-14 21:55 - 2015-06-15 23:17 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-07-14 21:55 - 2015-06-15 23:16 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-14 21:55 - 2015-06-15 23:15 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-14 21:55 - 2015-06-15 23:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-14 21:55 - 2015-06-15 23:09 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-14 21:55 - 2015-06-15 23:04 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-14 21:55 - 2015-06-15 23:04 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-14 21:55 - 2015-06-15 23:03 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-14 21:55 - 2015-06-15 22:52 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-14 21:55 - 2015-06-15 22:47 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2015-07-14 21:55 - 2015-06-15 22:44 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-14 21:55 - 2015-06-15 22:43 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-14 21:55 - 2015-06-15 22:42 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-07-14 21:55 - 2015-06-15 22:41 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-14 21:55 - 2015-06-15 22:37 - 04304896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-14 21:55 - 2015-06-15 22:37 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-07-14 21:55 - 2015-06-15 22:32 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-07-14 21:55 - 2015-06-15 22:31 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-14 21:55 - 2015-06-15 22:30 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-14 21:55 - 2015-06-15 22:30 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-14 21:55 - 2015-06-15 22:23 - 12830208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-14 21:55 - 2015-06-15 22:17 - 01048576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2015-07-14 21:55 - 2015-06-15 22:07 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-14 21:55 - 2015-06-15 22:03 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-14 21:55 - 2015-06-15 22:02 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-14 21:46 - 2015-06-11 05:49 - 01380600 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-14 21:46 - 2015-06-10 18:13 - 01097216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-14 21:46 - 2015-05-11 18:34 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll
2015-07-14 21:46 - 2015-04-28 15:13 - 00513480 _____ C:\Windows\SysWOW64\locale.nls
2015-07-14 21:46 - 2015-04-28 15:13 - 00513480 _____ C:\Windows\system32\locale.nls
2015-07-14 21:45 - 2015-06-16 07:36 - 01661576 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-14 21:45 - 2015-06-16 07:36 - 01212248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-14 21:45 - 2015-05-12 15:19 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2015-07-14 21:45 - 2015-05-07 18:47 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-07-14 21:45 - 2015-05-02 01:33 - 00410739 _____ C:\Windows\system32\ApnDatabase.xml
2015-07-14 21:45 - 2015-04-23 17:47 - 03084288 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2015-07-14 21:45 - 2015-04-23 17:16 - 02471424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2015-07-14 21:43 - 2015-05-03 17:07 - 07784448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2015-07-14 21:43 - 2015-05-03 16:57 - 05264384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2015-07-14 21:09 - 2015-07-14 21:09 - 00012099 _____ C:\Users\Selina\Documents\Wochenplan_Smileys_Psy.xlsx

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-12 13:35 - 2015-06-10 19:03 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-12 13:24 - 2014-10-05 10:06 - 00001134 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-12 13:23 - 2014-07-31 19:27 - 01236160 _____ C:\Windows\WindowsUpdate.log
2015-08-12 13:00 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru
2015-08-12 12:00 - 2015-05-14 11:08 - 00003474 _____ C:\Windows\System32\Tasks\ASUS Live Update1
2015-08-12 12:00 - 2015-05-14 11:08 - 00003464 _____ C:\Windows\System32\Tasks\ASUS Live Update2
2015-08-12 11:43 - 2013-08-22 16:46 - 00096946 _____ C:\Windows\setupact.log
2015-08-12 11:34 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2015-08-12 11:08 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2015-08-12 09:39 - 2014-09-30 03:18 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2923131921-1963989444-91532992-1001
2015-08-12 09:24 - 2014-09-30 02:27 - 00000000 ____D C:\Users\Selina\AppData\Local\Packages
2015-08-12 09:20 - 2014-09-30 03:49 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{924A399C-D8A5-42C9-8053-6DBF492001E4}
2015-08-11 14:58 - 2014-10-05 10:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-08-11 14:54 - 2014-09-30 03:13 - 00000000 ___DO C:\Users\Selina\OneDrive
2015-08-11 14:54 - 2014-09-30 02:28 - 00000074 _____ C:\Users\Selina\AppData\Roaming\sp_data.sys
2015-08-11 14:52 - 2014-10-05 10:06 - 00001130 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-11 14:52 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2015-08-11 14:51 - 2015-05-05 08:22 - 00000435 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2015-08-11 14:51 - 2014-07-31 19:50 - 00000000 ____D C:\Program Files (x86)\McAfee
2015-08-11 14:51 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-11 14:51 - 2013-08-22 16:44 - 00485720 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-11 14:50 - 2015-04-15 18:49 - 00000000 ____D C:\Program Files (x86)\SaleePlous
2015-08-11 14:50 - 2014-03-18 10:16 - 00036968 _____ C:\Windows\PFRO.log
2015-08-06 21:47 - 2013-08-22 15:25 - 00524288 ___SH C:\Windows\system32\config\BBI
2015-08-06 21:24 - 2015-03-29 21:38 - 00000000 ____D C:\Program Files\AVG Web TuneUp
2015-08-06 21:24 - 2015-03-29 21:38 - 00000000 ____D C:\Program Files (x86)\AVG Web TuneUp
2015-08-06 20:00 - 2015-04-15 18:27 - 00000000 ____D C:\Program Files (x86)\SalePlus
2015-08-06 19:41 - 2015-04-15 18:28 - 00000000 ____D C:\Program Files (x86)\bestadblocker
2015-08-06 14:20 - 2014-07-31 19:50 - 00000000 ____D C:\ProgramData\McAfee
2015-08-06 14:14 - 2015-05-18 22:08 - 00000000 ____D C:\Users\Selina\AppData\Local\CrashDumps
2015-08-05 21:10 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2015-08-05 20:03 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\NDF
2015-08-05 20:02 - 2014-05-16 01:45 - 00773008 _____ C:\Windows\system32\perfh007.dat
2015-08-05 20:02 - 2014-05-16 01:45 - 00162310 _____ C:\Windows\system32\perfc007.dat
2015-08-05 20:02 - 2014-03-18 17:26 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-26 15:51 - 2015-04-23 23:31 - 00000000 ____D C:\Users\Selina\Desktop\USB Stick
2015-07-26 11:37 - 2014-09-30 22:28 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-07-25 19:18 - 2015-06-17 08:02 - 00000000 ____D C:\Program Files\Common Files\AV
2015-07-25 19:16 - 2015-03-29 21:39 - 00000000 ____D C:\Users\Selina\AppData\Local\AVG Web TuneUp
2015-07-14 21:54 - 2014-10-20 18:24 - 00000000 ____D C:\Windows\system32\MRT
2015-07-14 21:49 - 2015-03-29 21:38 - 00000000 ____D C:\ProgramData\AVG Web TuneUp
2015-07-14 21:35 - 2015-06-10 19:03 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-13 23:10 - 2015-05-17 12:53 - 00792568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-13 23:10 - 2015-05-17 12:53 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-02-05 16:01 - 2015-05-05 08:28 - 0000020 _____ () C:\Users\Selina\AppData\Roaming\appdataFr3.bin
2014-09-30 02:28 - 2015-08-11 14:54 - 0000074 _____ () C:\Users\Selina\AppData\Roaming\sp_data.sys
2015-03-18 19:08 - 2015-03-29 15:42 - 0000020 _____ () C:\Users\Selina\AppData\Local\appdataFr3.bin
2014-07-31 19:41 - 2014-07-31 19:41 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-03-14 14:02 - 2015-03-14 14:02 - 0000199 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2014-05-15 17:58 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2014-05-15 17:58 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2014-05-15 17:58 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS
2014-10-05 10:49 - 2014-10-05 10:51 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2014-10-05 10:48 - 2014-10-05 10:49 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\SetStretch.VBS


Einige Dateien in TEMP:
====================
C:\Users\Selina\AppData\Local\Temp\BSvcProcessor.exe
C:\Users\Selina\AppData\Local\Temp\BSvcUpdater.exe
C:\Users\Selina\AppData\Local\Temp\JMC_WM.exe
C:\Users\Selina\AppData\Local\Temp\oi_{B8811E58-D5AA-4DBA-9149-2F98DB59161D}.exe
C:\Users\Selina\AppData\Local\Temp\optprosetup.exe
C:\Users\Selina\AppData\Local\Temp\PixelPlanetpdrv7.dll
C:\Users\Selina\AppData\Local\Temp\PixelPlanetpdui7.dll
C:\Users\Selina\AppData\Local\Temp\regini.exe
C:\Users\Selina\AppData\Local\Temp\ReimagePackage.exe
C:\Users\Selina\AppData\Local\Temp\ReiSysUpdate.exe
C:\Users\Selina\AppData\Local\Temp\SetupProPlusRetail.x86.de-DE_ProPlusRetail_36PJN-VMKQD-9PCVW-VW84P-D67T3_act_1_.exe
C:\Users\Selina\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Selina\AppData\Local\Temp\sqlite3.exe


==================== Bamital & volsnap Check =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-08-05 20:40

==================== Ende von Ergebnis ============================
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:11-08-2015 02
durchgeführt von Selina (2015-08-12 13:46:59)
Gestartet von C:\Users\Selina\Downloads
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2923131921-1963989444-91532992-500 - Administrator - Disabled)
Anja (S-1-5-21-2923131921-1963989444-91532992-1005 - Limited - Enabled) => C:\Users\Anja
Gast (S-1-5-21-2923131921-1963989444-91532992-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2923131921-1963989444-91532992-1003 - Limited - Enabled)
Selina (S-1-5-21-2923131921-1963989444-91532992-1001 - Administrator - Enabled) => C:\Users\Selina

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Disabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.4 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 3.0.8 - ASUS)
ASUS Screen Saver (HKLM-x32\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 1.0.3 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 2.01.0021 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 3.1.9 - ASUS)
AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.1.5.143 - AVG Technologies)
bestadblocker (HKLM-x32\...\{4820778D-AB0D-6D18-C316-52A6A0E1D507}) (Version:  - ) <==== ACHTUNG
Camtasia Studio 8 (HKLM-x32\...\{A0FC961E-DC6D-4144-9277-ECDBB99D0AB9}) (Version: 8.5.1.1962 - TechSmith Corporation)
CLIQZ (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 1.0.0 - CLIQZ.com)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0.0.8517 - CyberLink Corp.)
DriverIdentifier 4.2.8 (HKLM-x32\...\{40A3E5DB-5EF8-4F04-BF3E-7AB87C4AE85A}_is1) (Version:  - DriverIdentifier)
Ethereal 0.99.0 (HKLM-x32\...\Ethereal) (Version: 0.99.0 - The Ethereal developer community, hxxp://www.ethereal.com)
EZDownloader (HKLM-x32\...\{0F44DC3A-6E62-4961-A14B-95323C512F9B}_is1) (Version: 1.0 - EZDownloader) <==== ACHTUNG
Fighters (x32 Version: 4.5.146 - SPAMFIGHTER ApS) Hidden
Free YouTube to MP3 Converter version 3.12.59.415 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.59.415 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
HyperCam 2 (HKLM-x32\...\HyperCam 2) (Version: 2.28.01 - Hyperionics Technology LLC)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C) (Version: 7.1.0.2103 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.6.0.1038 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation)
Jeyo Mobile Companion 2.1 (HKLM-x32\...\Jeyo Mobile Companion 2.1_is1) (Version: 2.1 - Jeyo, Inc.)
MAGIX Foto Designer 7 (HKLM-x32\...\MAGIX_{2DCD52EE-1AE1-4128-9819-A79F7D09B6B3}) (Version: 7.0.1.1 - MAGIX AG)
MAGIX Foto Designer 7 (Version: 7.0.1.1 - MAGIX AG) Hidden
McAfee LiveSafe – Internet Security (HKLM-x32\...\MSC) (Version: 13.6.1248 - McAfee, Inc.)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft Office Professional Plus 2013 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 15.0.4737.1003 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
NVIDIA Graphics Driver 332.85 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 332.85 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.0927 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0927 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Open-Sankoré (HKLM-x32\...\{E63D17F8-D9DA-479D-B9B5-0D101A03703B}_is1) (Version:  - Open-Sankore)
Opera Stable 30.0.1835.88 (HKLM-x32\...\Opera 30.0.1835.88) (Version: 30.0.1835.88 - Opera Software)
Picexa (HKLM-x32\...\Picexa) (Version:  - Taiwan Shui Mu Chih Ching Technology Limited)
PixelPlanet PdfPrinter 7 (64bit) (HKLM\...\{000F58F3-A544-4BB5-AF1B-761EA1C8595C}) (Version: 7.0.60 - PixelPlanet)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.29.314.2014 - Realtek)
Reimage Repair (HKLM\...\Reimage Repair) (Version: 1.8.1.4 - Reimage) <==== ACHTUNG
SaleePlous (HKLM-x32\...\{B696F285-F54E-2524-58B1-E06A70ABE6BE}) (Version:  - ) <==== ACHTUNG
SharkManCoupon (HKLM-x32\...\{37476589-E48E-439E-A706-56189E2ED4C4}_is1) (Version:  - SharkManCoupon) <==== ACHTUNG
simplitec simplicheck (HKLM-x32\...\{DF103EDA-7937-4966-8EFB-5EF5C38301F2}) (Version: 1.3.9.0 - simplitec GmbH)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Sparkol VideoScribe (HKLM-x32\...\Sparkol VideoScribe 2.2.81) (Version: 2.2.81 - Sparkol)
Sparkol VideoScribe (x32 Version: 2.2.81 - Sparkol) Hidden
SPYWAREfighter (HKLM-x32\...\SPYWAREfighter) (Version: 4.5.146 - SPAMFIGHTER ApS)
ToolSupport (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{1f7a5585}) (Version:  - Software Publisher) <==== ACHTUNG
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.340 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.340 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.340 - TuneUp Software) Hidden
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
vi-view uninstall (HKLM-x32\...\vi-view uninstall) (Version:  - vi-view) <==== ACHTUNG
Watchtower Library 2012 - Deutsch (HKLM-x32\...\{CFDF0961-77C7-4392-96EE-624DFE81C3C2}) (Version: 14.0 - Watchtower Bible and Tract Society of Pennsylvania, Inc.)
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.2.301 - ASUS Cloud Corporation)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.11.2 - WildTangent)
Windows-Treiberpaket - ASUS (ATP) Mouse  (03/17/2014 1.0.0.207) (HKLM\...\AA2CC56D4BBEE037DC99871F5F6551133D2A0CC3) (Version: 03/17/2014 1.0.0.207 - ASUS)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
World weather online (HKLM-x32\...\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}) (Version:  - ) <==== ACHTUNG
Yahoo! Search (HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Yahoo! Search) (Version:  - Pay-By-Ads) <==== ACHTUNG
Yahoo! Search (HKU\S-1-5-21-2923131921-1963989444-91532992-1005\...\Yahoo! Search) (Version:  - Pay-By-Ads) <==== ACHTUNG

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2923131921-1963989444-91532992-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> "C:\Windows\system32\igfxEM.exe" Keine Datei

==================== Wiederherstellungspunkte =========================

14-07-2015 21:41:41 Windows Update
05-08-2015 19:45:56 Windows Update
12-08-2015 09:39:32 Windows Update

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {00A5A4E4-617E-4888-8DCB-4E87774F43CA} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {02554177-D27A-4093-8467-1296F3541CFE} - System32\Tasks\Yahoo! Search => C:\Users\Selina\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\dsrlte.exe <==== ACHTUNG
Task: {0E652D1A-7586-45A9-85F9-87FFD53E236D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-05] (Google Inc.)
Task: {1C092132-88FB-41DC-8364-824E30BFAD4D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-05-12] (Microsoft Corporation)
Task: {1D77BDEF-A383-44E5-A8D5-3CF4D8699796} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-05-12] (Microsoft Corporation)
Task: {1E768371-E7A3-4DD8-B3A3-32588522E349} - System32\Tasks\Reimage Reminder => C:\Program Files\Reimage\Reimage Repair\ReimageReminder.exe [2015-03-16] (Reimage ltd.) <==== ACHTUNG
Task: {2761783C-2564-4D71-BD14-08A3EF337853} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-14] (Adobe Systems Incorporated)
Task: {2E93A9E0-3BEC-496C-9434-8021BDF4962C} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {350480DB-4EAA-402F-B4C0-AD7A46E7689B} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2014-03-27] (ASUSTek Computer Inc.)
Task: {36661282-5128-41DB-B456-6949DCA00027} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe
Task: {3B0A9D92-6D5C-4FBC-BAE6-01190DCA6424} - System32\Tasks\Yahoo! Search Updater => C:\Users\Selina\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\dsrsetup.exe <==== ACHTUNG
Task: {4089616E-EDDD-4DA5-9E0D-DAB1EF6EA32D} - System32\Tasks\ReimageUpdater => C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [2015-01-14] (Reimage®) <==== ACHTUNG
Task: {4403BF88-01C8-46DC-83FD-E33097700E87} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2015-02-12] ()
Task: {555E4B6D-40E1-43F1-B4F2-DC65CB4FC170} - System32\Tasks\{D4ED4DD4-E6F7-407F-8C09-B3EAACAFCBA5} => pcalua.exe -a C:\Users\Selina\AppData\Roaming\vi-view\UninstallManager.exe -c  -ptid=cor
Task: {5E1D91C1-AC00-4421-867F-D6CAEAB30CA7} - System32\Tasks\P4GIntlCtrl => C:\Program Files\ASUS\P4G\IntlDPST.exe [2014-02-11] ()
Task: {70B6E66B-4FCC-4761-A0EC-52A2430F1657} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-05] (Google Inc.)
Task: {744CE80B-F1BF-4F2E-8B11-8BB8381A7604} - System32\Tasks\{86E86F40-51C2-4AB3-87B4-A0C0DF4F4D34} => pcalua.exe -a "C:\Program Files (x86)\Intel\Intel(R) Dynamic Platform and Thermal Framework\Uninstall\setup.exe" -c -uninstall
Task: {945D81A6-4C2B-4F64-BF0A-E2ECDCC9FA81} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {B1E44976-AF85-4658-A49B-143F9E4BD2AB} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2013-10-07] (ASUSTeK Computer Inc.)
Task: {B5071EA8-5F27-410E-8B09-1A83A624CE75} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2013-10-07] (ASUS)
Task: {BEE2AECA-9FCF-4017-8090-72038D5B6DAF} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-07-03] (Microsoft Corporation)
Task: {D66BAD24-C3F6-4B58-82EF-74086BA96BA0} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {DD929979-D7D4-4DA4-8CB3-B333EEB553B6} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2014-02-11] (ASUS)
Task: {EA858E9F-4743-42FC-BD69-BD3A731EEF91} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {FD4022ED-7434-4DD9-B0AF-4BEA35891F08} - System32\Tasks\Opera scheduled Autoupdate 1419616129 => C:\Program Files (x86)\Opera\launcher.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-03-29 21:38 - 2015-08-06 21:22 - 01195920 _____ () C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
2014-07-31 19:38 - 2014-03-13 21:26 - 00117536 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-09-30 22:28 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-07-16 11:24 - 2014-07-16 11:24 - 00699704 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll
2015-08-06 21:24 - 2015-08-06 21:22 - 00168336 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\loggingserver.exe
2015-07-04 12:47 - 2015-07-26 11:39 - 03992360 _____ () C:\ProgramData\Common Toolkit Suite\AVEngine\Defs\vdb\SAVI.DLL
2015-07-04 12:47 - 2015-07-26 11:40 - 00227624 _____ () C:\ProgramData\Common Toolkit Suite\AVEngine\Defs\vdb\OSDP.DLL
2015-07-04 12:47 - 2015-07-26 11:40 - 04986152 _____ () C:\ProgramData\Common Toolkit Suite\AVEngine\Defs\vdb\VEEX.DLL
2015-08-06 21:24 - 2015-08-06 21:23 - 00528272 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\log4cplusU.dll
2013-10-08 21:41 - 2013-10-08 21:41 - 00037968 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2013-09-09 19:23 - 2013-09-09 19:23 - 00162816 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2014-07-31 19:33 - 2013-10-23 14:44 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2013-04-27 10:24 - 2013-04-27 10:24 - 00071680 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\checkmetro.dll
2015-08-06 21:24 - 2015-08-06 21:22 - 01792400 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.8.0\avgtbr.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\Selina\OneDrive:ms-properties

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Selina\AppData\Roaming\Microsoft\Windows Photo Viewer\Hintergrundbild der Windows-Fotoanzeige.jpg
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\Control Panel\Desktop\\Wallpaper -> C:\Windows\asus\wallpapers\asus.jpg
DNS Servers: 192.168.8.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\StartupFolder: => "simplicheck.lnk"
HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"
HKLM\...\StartupApproved\Run: => "DptfPolicyLpmServiceHelper"
HKLM\...\StartupApproved\Run: => "NvBackend"
HKLM\...\StartupApproved\Run: => "IgfxTray"
HKLM\...\StartupApproved\Run: => "HotKeysCmds"
HKLM\...\StartupApproved\Run: => "Persistence"
HKLM\...\StartupApproved\Run32: => "CLMLServer"
HKLM\...\StartupApproved\Run32: => "mcpltui_exe"
HKLM\...\StartupApproved\Run32: => "PixelPlanet PdfPrinter-Monitor"
HKLM\...\StartupApproved\Run32: => "AVG_UI"
HKLM\...\StartupApproved\Run32: => "CommonToolkitTray"
HKLM\...\StartupApproved\Run32: => "SWPROguard"
HKLM\...\StartupApproved\Run32: => "vProt"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\StartupFolder: => "Sparkol VideoScribe 2.1 PRO Full Crack.lnk"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\StartupFolder: => "Sparkol VideoScribe Professional 2.1.0 Full(1).lnk"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Yahoo! Search"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Power2GoExpress"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Infigo"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "BingSvc"
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\...\StartupApproved\Run: => "Yahoo! Search"
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\...\StartupApproved\Run: => "Power2GoExpress"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{107B701F-D6F2-4125-989D-013EBE4114C2}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{4756372F-1DBA-4E0D-88D4-10D9CBE588DE}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{701A95DF-EB9C-41A2-9DB7-7FCB240568EE}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{C24A835C-861A-49D8-A2CC-9053C11552DB}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{A34F36B9-4BB2-40D4-BEAC-72D3B6A7D7B8}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{DA8C5E14-1AF3-4680-8A78-32EA772C239B}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{32FC1979-2D76-4947-8C75-8ED839D364EB}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{ACE879F9-CD19-4F10-827D-839AB752C818}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{9DEDC08A-4AAD-4EFE-A264-D914813E7650}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{FDA1092F-154E-4FB1-B71A-84412016E944}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{DF970333-2791-4A78-B77A-7DFD953F58EA}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{650C856D-3797-48AE-B0EF-00F36AAF1043}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{1D872238-8039-4BF5-826A-5B4040368753}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{077BF549-8F4A-4C61-BE12-C4D9936F6F7C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{69571B03-E475-4EAD-8620-E2BE564EB6AB}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{C6C0290D-DDE8-48B3-B84D-B3E8DC693DC3}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{4DECD748-EF63-4CCC-BAC0-E39A79EEB77F}] => (Allow) LPort=8317
FirewallRules: [{00BE4382-D8C9-44D7-A3C3-A74A01E42A93}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{8842BE8D-197C-4EE5-9A67-8B063359D6D7}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{E26CC15F-1C7F-440C-9A34-6096EEF8893D}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [TCP Query User{DEAC4C18-96F4-4E24-95F6-F605DA5C46FA}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{7015D2E8-D017-459F-BC17-45373052CDDC}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (08/06/2015 06:52:42 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (08/06/2015 02:14:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GWXUX.exe, Version: 6.3.9600.17813, Zeitstempel: 0x554a15f3
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.17736, Zeitstempel: 0x550f4336
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000003d85e
ID des fehlerhaften Prozesses: 0x11f8
Startzeit der fehlerhaften Anwendung: 0xGWXUX.exe0
Pfad der fehlerhaften Anwendung: GWXUX.exe1
Pfad des fehlerhaften Moduls: GWXUX.exe2
Berichtskennung: GWXUX.exe3
Vollständiger Name des fehlerhaften Pakets: GWXUX.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: GWXUX.exe5

Error: (07/25/2015 08:14:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ScriptHelper.exe, Version: 4.1.4.948, Zeitstempel: 0x5592bb4e
Name des fehlerhaften Moduls: ScriptHelper.exe, Version: 4.1.4.948, Zeitstempel: 0x5592bb4e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002bf58
ID des fehlerhaften Prozesses: 0x1184
Startzeit der fehlerhaften Anwendung: 0xScriptHelper.exe0
Pfad der fehlerhaften Anwendung: ScriptHelper.exe1
Pfad des fehlerhaften Moduls: ScriptHelper.exe2
Berichtskennung: ScriptHelper.exe3
Vollständiger Name des fehlerhaften Pakets: ScriptHelper.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ScriptHelper.exe5

Error: (07/25/2015 07:13:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: UpdateChecker.exe, Version: 0.0.0.0, Zeitstempel: 0x54dc4378
Name des fehlerhaften Moduls: alvupdt.dll, Version: 1.0.0.10, Zeitstempel: 0x5510b8fc
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00016eb6
ID des fehlerhaften Prozesses: 0x34c
Startzeit der fehlerhaften Anwendung: 0xUpdateChecker.exe0
Pfad der fehlerhaften Anwendung: UpdateChecker.exe1
Pfad des fehlerhaften Moduls: UpdateChecker.exe2
Berichtskennung: UpdateChecker.exe3
Vollständiger Name des fehlerhaften Pakets: UpdateChecker.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: UpdateChecker.exe5

Error: (07/25/2015 07:13:30 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm USBChargerPlus.exe, Version 3.1.9.4 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 32c

Startzeit: 01d0be67614cc6a9

Endzeit: 22

Anwendungspfad: C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe

Berichts-ID: 6657e70b-32f0-11e5-829d-54a050ae5ae6

Vollständiger Name des fehlerhaften Pakets:

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (07/25/2015 07:12:48 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20911 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1c24

Startzeit: 01d0be88996b8bd9

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: ddc9673c-2a7b-11e5-829d-54a050ae5ae6

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1

Error: (07/15/2015 12:58:36 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SUNRISE)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Calendar“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (07/14/2015 09:41:01 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1". Fehler in Manifest- oder Richtliniendatei "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" in Zeile  UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (07/14/2015 09:18:31 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1". Fehler in Manifest- oder Richtliniendatei "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" in Zeile  UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (07/04/2015 07:02:57 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1". Fehler in Manifest- oder Richtliniendatei "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" in Zeile  UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.


Systemfehler:
=============
Error: (08/11/2015 03:41:40 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (08/11/2015 02:51:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "TuneUpUtilitiesDrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (08/06/2015 08:42:31 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.43.220
registriert werden. Der Computer mit IP-Adresse 169.254.248.64 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (08/06/2015 08:42:15 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: Der Name "SUNRISE        :20" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.43.220
registriert werden. Der Computer mit IP-Adresse 169.254.248.64 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (08/06/2015 08:42:15 PM) (Source: Server) (EventID: 2505) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{03D1BF89-D118-4E4F-812A-97EEF06B483E} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.

Error: (08/06/2015 08:33:35 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246013 fehlgeschlagen: Update für Windows 8.1 für x64-Systeme (KB3065988)

Error: (08/06/2015 08:33:35 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246013 fehlgeschlagen: Update für Windows 8.1 für x64-Systeme (KB3053863)

Error: (08/06/2015 08:33:35 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246013 fehlgeschlagen: Update für Windows 8.1 für x64-Systeme (KB3029438)

Error: (08/06/2015 08:33:35 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246013 fehlgeschlagen: Update für Windows 8.1 für x64-Systeme (KB3056347)

Error: (08/06/2015 08:33:35 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246013 fehlgeschlagen: Update für Windows 8.1 für x64-Systeme (KB3018467)


Microsoft Office:
=========================
Error: (08/06/2015 06:52:42 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (08/06/2015 02:14:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: GWXUX.exe6.3.9600.17813554a15f3ntdll.dll6.3.9600.17736550f4336c0000005000000000003d85e11f801d0d041801d9aabC:\Windows\System32\GWX\GWXUX.exeC:\Windows\SYSTEM32\ntdll.dllbfd9159a-3c34-11e5-829e-54a050ae5ae6

Error: (07/25/2015 08:14:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: ScriptHelper.exe4.1.4.9485592bb4eScriptHelper.exe4.1.4.9485592bb4ec00000050002bf58118401d0c705b5769044C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.7.0\ScriptHelper.exeC:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.7.0\ScriptHelper.exef54cd6ec-32f8-11e5-829d-54a050ae5ae6

Error: (07/25/2015 07:13:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: UpdateChecker.exe0.0.0.054dc4378alvupdt.dll1.0.0.105510b8fcc000000500016eb634c01d0be8898fb42ceC:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exeC:\Program Files (x86)\ASUS\ASUS Live Update\alvupdt.dll8167e08d-32f0-11e5-829d-54a050ae5ae6

Error: (07/25/2015 07:13:30 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: USBChargerPlus.exe3.1.9.432c01d0be67614cc6a922C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe6657e70b-32f0-11e5-829d-54a050ae5ae6

Error: (07/25/2015 07:12:48 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.209111c2401d0be88996b8bd94294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exeddc9673c-2a7b-11e5-829d-54a050ae5ae6microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (07/15/2015 12:58:36 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SUNRISE)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Calendar-2147023170

Error: (07/14/2015 09:41:01 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0"C:\Program Files\Microsoft Office 15\root\office15\lync.exe.ManifestC:\Program Files\Microsoft Office 15\root\office15\UccApi.DLL1

Error: (07/14/2015 09:18:31 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0"C:\Program Files\Microsoft Office 15\root\office15\lync.exe.ManifestC:\Program Files\Microsoft Office 15\root\office15\UccApi.DLL1

Error: (07/04/2015 07:02:57 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0"C:\Program Files\Microsoft Office 15\root\office15\lync.exe.ManifestC:\Program Files\Microsoft Office 15\root\office15\UccApi.DLL1


CodeIntegrity:
===================================
  Date: 2015-08-05 20:43:49.737
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-07-14 21:18:19.693
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-07-04 15:39:01.005
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-07-04 15:05:01.032
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-03-25 17:57:13.618
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll that did not meet the Windows signing level requirements.

  Date: 2015-03-21 16:02:51.020
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-03-19 17:02:04.404
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll that did not meet the Windows signing level requirements.

  Date: 2015-03-19 15:55:58.598
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll that did not meet the Windows signing level requirements.

  Date: 2015-03-13 18:51:57.167
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-03-05 20:26:19.320
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen ===========================

Processor: Intel(R) Core(TM) i7-4510U CPU @ 2.00GHz
Prozentuale Nutzung des RAM: 32%
Installierter physikalischer RAM: 8075.27 MB
Verfügbarer physikalischer RAM: 5421.5 MB
Summe virtueller Speicher: 9355.27 MB
Verfügbarer virtueller Speicher: 6491.05 MB

==================== Laufwerke ================================

Drive c: (OS) (Fixed) (Total:372.6 GB) (Free:302.73 GB) NTFS ==>[System mit Startkomponenten (eingeholt von lesen Laufwerk)]
Drive d: (Data) (Fixed) (Total:537.8 GB) (Free:537.62 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 3483A440)

Partition: GPT.

==================== Ende von Ergebnis ============================

schrauber 13.08.2015 08:20
Lade Dir bitte von hier Revo Uninstaller Download Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
  • Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
  • Klicke auf Optionen und wähle als Sprache Deutsch.
  • Suche im Uninstallerfeld nach den Programmen:

    bestadblocker

    EZDownloader

    Reimage Repair

    SaleePlous

    SharkManCoupon

    ToolSupport

    vi-view uninstall

    World weather online

    Yahoo! Search

    Yahoo! Search


  • Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
  • Wähle anschließend den Modus "Moderat" aus.
  • Reste löschen:
    Klicke auf dann auf und dann auf .

 





Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

sunrise_77 14.08.2015 16:59
So, hab jetzt alles ausgeführt. Hatte anfangs ein paar Probleme, da ich den Windows Defender ganz vergessen hatte. :)
Oh Junge, der Laptop rennt viel schneller!!! :D :D

mbam
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlaufdatum: 13.08.2015
Suchlaufzeit: 10:13
Protokolldatei: mbam.txt
Administrator: Ja

Version: 2.1.8.1057
Malware-Datenbank: v2015.08.13.02
Rootkit-Datenbank: v2015.08.06.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: Selina

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 417821
Abgelaufene Zeit: 52 Min., 15 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 2
PUP.Optional.BrowseFox.A, C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe, 3128, Löschen bei Neustart, [164061a7325985b1cae6fcd182800ff1]
PUP.Optional.WindowsMangerProtect.A, C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe, 1380, Löschen bei Neustart, [8ccabd4b52391a1c499f43ecc83b2ed2]

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 146
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, In Quarantäne, [164061a7325985b1cae6fcd182800ff1],
PUP.Optional.BrowseFox.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\GamesAppIntegrationService, In Quarantäne, [164061a7325985b1cae6fcd182800ff1],
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, In Quarantäne, [164061a7325985b1cae6fcd182800ff1],
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, In Quarantäne, [164061a7325985b1cae6fcd182800ff1],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [6beb95738506cc6a76c6a0f93bc7b24e],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, In Quarantäne, [6beb95738506cc6a76c6a0f93bc7b24e],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, In Quarantäne, [6beb95738506cc6a76c6a0f93bc7b24e],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, In Quarantäne, [6beb95738506cc6a76c6a0f93bc7b24e],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [6beb95738506cc6a76c6a0f93bc7b24e],
PUP.Optional.SupTab.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [6beb95738506cc6a76c6a0f93bc7b24e],
PUP.Optional.SupTab.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [6beb95738506cc6a76c6a0f93bc7b24e],
PUP.Optional.SupTab.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [6beb95738506cc6a76c6a0f93bc7b24e],
PUP.Optional.SupTab.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [6beb95738506cc6a76c6a0f93bc7b24e],
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82],
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82],
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82],
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82],
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82],
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82],
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82],
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82],
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82],
PUP.Optional.LuckyTab.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82],
PUP.Optional.FasterLight.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{950ef4df-b9dd-4b97-9e34-5c7d25a5eb88}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86],
PUP.Optional.FasterLight.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{b03eb020-8a0b-431d-ae85-3600a2c9df68}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86],
PUP.Optional.FasterLight.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{567E42F2-33AD-4CF6-BB6D-03C450A52D7D}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86],
PUP.Optional.FasterLight.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{567E42F2-33AD-4CF6-BB6D-03C450A52D7D}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86],
PUP.Optional.FasterLight.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{567E42F2-33AD-4CF6-BB6D-03C450A52D7D}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86],
PUP.Optional.FasterLight.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{b03eb020-8a0b-431d-ae85-3600a2c9df68}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86],
PUP.Optional.FasterLight.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{b03eb020-8a0b-431d-ae85-3600a2c9df68}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86],
PUP.Optional.FasterLight.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{950EF4DF-B9DD-4B97-9E34-5C7D25A5EB88}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86],
PUP.Optional.FasterLight.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{950EF4DF-B9DD-4B97-9E34-5C7D25A5EB88}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86],
PUP.Optional.FasterLight.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{950EF4DF-B9DD-4B97-9E34-5C7D25A5EB88}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86],
PUP.Optional.FasterLight.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{950EF4DF-B9DD-4B97-9E34-5C7D25A5EB88}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86],
PUP.Optional.FasterLight.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{950EF4DF-B9DD-4B97-9E34-5C7D25A5EB88}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86],
PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{41F978F3-431A-4464-A789-5C0692D562FB}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3],
PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{138E44EF-8988-4DC7-8F48-FBC4FCEF83D1}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3],
PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{BB50CC62-09E1-4DD9-912C-F1DA4D6D71D8}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3],
PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E481A870-86C7-44E1-97DF-E759FC147CBE}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3],
PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FE332809-93C1-48DF-929F-AEC0BC4BFCFE}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3],
PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{138E44EF-8988-4DC7-8F48-FBC4FCEF83D1}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3],
PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{BB50CC62-09E1-4DD9-912C-F1DA4D6D71D8}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3],
PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E481A870-86C7-44E1-97DF-E759FC147CBE}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3],
PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FE332809-93C1-48DF-929F-AEC0BC4BFCFE}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3],
PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{138E44EF-8988-4DC7-8F48-FBC4FCEF83D1}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3],
PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{BB50CC62-09E1-4DD9-912C-F1DA4D6D71D8}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3],
PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{E481A870-86C7-44E1-97DF-E759FC147CBE}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3],
PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{FE332809-93C1-48DF-929F-AEC0BC4BFCFE}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3],
PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{41F978F3-431A-4464-A789-5C0692D562FB}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3],
PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{41F978F3-431A-4464-A789-5C0692D562FB}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3],
PUP.Optional.SalePlus.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{C1EC170E-C5ED-4100-9078-559C31AFDBF5}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05],
PUP.Optional.SalePlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{0079F2AC-4B9D-47BB-845C-752AC0708644}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05],
PUP.Optional.SalePlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{154FDDA9-A1AE-43C9-87D3-A0090EB8F50B}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05],
PUP.Optional.SalePlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{9EEC5519-591B-4F67-9E22-2C18C01E0699}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05],
PUP.Optional.SalePlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C7CA0368-A12C-4575-AC50-CE1734049FF2}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05],
PUP.Optional.SalePlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0079F2AC-4B9D-47BB-845C-752AC0708644}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05],
PUP.Optional.SalePlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{154FDDA9-A1AE-43C9-87D3-A0090EB8F50B}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05],
PUP.Optional.SalePlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{9EEC5519-591B-4F67-9E22-2C18C01E0699}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05],
PUP.Optional.SalePlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C7CA0368-A12C-4575-AC50-CE1734049FF2}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05],
PUP.Optional.SalePlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{0079F2AC-4B9D-47BB-845C-752AC0708644}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05],
PUP.Optional.SalePlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{154FDDA9-A1AE-43C9-87D3-A0090EB8F50B}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05],
PUP.Optional.SalePlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{9EEC5519-591B-4F67-9E22-2C18C01E0699}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05],
PUP.Optional.SalePlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{C7CA0368-A12C-4575-AC50-CE1734049FF2}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05],
PUP.Optional.SalePlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{C1EC170E-C5ED-4100-9078-559C31AFDBF5}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05],
PUP.Optional.SalePlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{C1EC170E-C5ED-4100-9078-559C31AFDBF5}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05],
PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{C7405EEB-2E16-40FE-9E27-1F48CAAB15E1}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1],
PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{0416BDB0-AFB0-4464-952D-1EAB5047B8E6}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1],
PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{3F97FDF1-DA2B-4579-AD3E-E46641F9DBAB}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1],
PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{A220BAB5-C335-48BA-8A01-309FDA37446F}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1],
PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0416BDB0-AFB0-4464-952D-1EAB5047B8E6}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1],
PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3F97FDF1-DA2B-4579-AD3E-E46641F9DBAB}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1],
PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A220BAB5-C335-48BA-8A01-309FDA37446F}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1],
PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{0416BDB0-AFB0-4464-952D-1EAB5047B8E6}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1],
PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{3F97FDF1-DA2B-4579-AD3E-E46641F9DBAB}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1],
PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{A220BAB5-C335-48BA-8A01-309FDA37446F}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1],
PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{C7405EEB-2E16-40FE-9E27-1F48CAAB15E1}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1],
PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{C7405EEB-2E16-40FE-9E27-1F48CAAB15E1}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1],
PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{230332DF-D235-47EE-BC42-60860EF144CD}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858],
PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{7D7DC692-982E-45B7-A6BF-17FCC4116652}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858],
PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{8F9CF0DE-24F7-4C18-907F-B4040F311E63}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858],
PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B022C8F0-0147-458C-BEC6-708E525402ED}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858],
PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7D7DC692-982E-45B7-A6BF-17FCC4116652}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858],
PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{8F9CF0DE-24F7-4C18-907F-B4040F311E63}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858],
PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B022C8F0-0147-458C-BEC6-708E525402ED}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858],
PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{7D7DC692-982E-45B7-A6BF-17FCC4116652}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858],
PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{8F9CF0DE-24F7-4C18-907F-B4040F311E63}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858],
PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{B022C8F0-0147-458C-BEC6-708E525402ED}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858],
PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{230332DF-D235-47EE-BC42-60860EF144CD}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858],
PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{230332DF-D235-47EE-BC42-60860EF144CD}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858],
PUP.Optional.SaverBox.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{57B0DCF0-8B40-4449-8AA4-E297D6E779D4}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc],
PUP.Optional.SaverBox.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{002FF249-4A02-44F8-BD0F-7389AC5F3E70}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc],
PUP.Optional.SaverBox.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{8F99377E-3B52-45E7-AC41-ACCAA945F8B1}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc],
PUP.Optional.SaverBox.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{9B2BBEAD-1A03-4927-8EB7-AC8292E4EB2F}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc],
PUP.Optional.SaverBox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{002FF249-4A02-44F8-BD0F-7389AC5F3E70}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc],
PUP.Optional.SaverBox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{8F99377E-3B52-45E7-AC41-ACCAA945F8B1}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc],
PUP.Optional.SaverBox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{9B2BBEAD-1A03-4927-8EB7-AC8292E4EB2F}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc],
PUP.Optional.SaverBox.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{002FF249-4A02-44F8-BD0F-7389AC5F3E70}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc],
PUP.Optional.SaverBox.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{8F99377E-3B52-45E7-AC41-ACCAA945F8B1}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc],
PUP.Optional.SaverBox.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{9B2BBEAD-1A03-4927-8EB7-AC8292E4EB2F}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc],
PUP.Optional.SaverBox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{57B0DCF0-8B40-4449-8AA4-E297D6E779D4}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc],
PUP.Optional.SaverBox.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{57B0DCF0-8B40-4449-8AA4-E297D6E779D4}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc],
PUP.Optional.YahooSearch.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Yahoo! Search, Löschen bei Neustart, [20363bcd6328f64062e344d3996a827e],
PUP.Optional.YahooSearch.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Yahoo! Search Updater, Löschen bei Neustart, [cc8ab15753389c9ab59046d145be3fc1],
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE, In Quarantäne, [2b2bb850bccfbc7a58eea0067e86ef11],
PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\delta-homesSoftware, In Quarantäne, [6ee88583d0bbec4ab8e678cbe320fc04],
PUP.Optional.FasterLight.A, HKLM\SOFTWARE\WOW6432NODE\Faster Light, In Quarantäne, [b6a075937615b185b196af824eb5f709],
PUP.Optional.FFPluginHp.A, HKLM\SOFTWARE\WOW6432NODE\FFPluginHp, In Quarantäne, [66f025e3f794d5611433ab716b98f40c],
PUP.Optional.IHProtect.A, HKLM\SOFTWARE\WOW6432NODE\IHProtect, In Quarantäne, [10468880fa9191a58730d95344bf718f],
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\Mindspark, In Quarantäne, [a9adcf3958339e9831c471247e8608f8],
PUP.Optional.Picexa.A, HKLM\SOFTWARE\WOW6432NODE\Picexa, In Quarantäne, [223480885b3070c66c96e6bf2ed6f60a],
PUP.Optional.Picexa.A, HKLM\SOFTWARE\WOW6432NODE\PicexaSvc, In Quarantäne, [92c45eaae2a90a2c53b07f263bc9837d],
PUP.Optional.WPM.A, HKLM\SOFTWARE\WOW6432NODE\supWindowsMangerProtect, In Quarantäne, [6ceaec1cf695a98d625a3b54d0345ca4],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\supWPM, In Quarantäne, [f95dc93fc8c350e606712817e51eb050],
PUP.Optional.ViView.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\vi-viewSoftware, In Quarantäne, [c4926c9c0e7d6bcb7eab1519649f8080],
PUP.Optional.SuperOptimizer.C, HKLM\SOFTWARE\WOW6432NODE\{1146AC44-2F03-4431-B4FD-889BC837521F}, In Quarantäne, [9db926e20c7fcd69ec32d6d28d770ef2],
PUP.Optional.SuperOptimizer.C, HKLM\SOFTWARE\WOW6432NODE\{6791A2F3-FC80-475C-A002-C014AF797E9C}, In Quarantäne, [aaac77912b60db5b8d92f4b44cb809f7],
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE, In Quarantäne, [7adccd3bddae42f4cb7b406643c1936d],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, In Quarantäne, [2c2ab157cac11f175323eb547e854fb1],
PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WindowsMangerProtect, In Quarantäne, [8ccabd4b52391a1c499f43ecc83b2ed2],
PUP.Optional.IEPluginServices.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\IePluginServices, In Quarantäne, [263016f2d7b48aac0d4440f65ba86c94],
PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WindowsMangerProtect, In Quarantäne, [ce88b553286380b6cd8594a2ed16b14f],
PUP.Optional.SuperOptimizer.C, HKU\S-1-5-18\SOFTWARE\APPDATALOW\{1146AC44-2F03-4431-B4FD-889BC837521F}, In Quarantäne, [c88e8583375482b48f8e198f6b99c13f],
PUP.Optional.FasterLight.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\Faster Light, In Quarantäne, [6aece0281d6e7cba0a3c1b165ea54db3],
PUP.Optional.InstallCore.C, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\InstallCore, In Quarantäne, [5006ce3ad3b879bd1dfc33750afaa25e],
PUP.Optional.SuperOptimizer.C, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\APPDATALOW\{1146AC44-2F03-4431-B4FD-889BC837521F}, In Quarantäne, [5ef8947426657eb8af6eceda2bd9847c],
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, In Quarantäne, [292d16f21c6fea4c1f9f39e55da6b64a],
PUP.Optional.Dsrlte.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{27EA1DCC-C1CD-4AEB-BE5E-53F35C5DA2AF}, In Quarantäne, [90c6bc4c5536af877fae0f961fe54fb1],
PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [56003eca3853df57a59d809f9f64a55b],
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{95B7759C-8C7F-4BF1-B163-73684A933233}, In Quarantäne, [e2749f69f09b9b9bb20c829cfc07bc44],
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E733165D-CBCF-4FDA-883E-ADEF965B476C}, In Quarantäne, [90c60206236868cecaf4f7275da64cb4],
PUP.Optional.QuickSearch.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MOZILLA\EXTENDS, In Quarantäne, [d28426e2a4e775c1ce8eb5680df6d729],
PUP.Optional.OptimizerPro.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\OPTIMIZER PRO, In Quarantäne, [31253eca13786cca4cad5055ba4ab64a],
PUP.Optional.KeepMySearch.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001_Classes\keepmysearch, In Quarantäne, [f26474944c3ffb3b342caa87bd4653ad],
PUP.Optional.FasterLight.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\Faster Light, In Quarantäne, [d58123e50289a49254f20829857eff01],
PUP.Optional.SuperOptimizer.C, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\APPDATALOW\{1146AC44-2F03-4431-B4FD-889BC837521F}, In Quarantäne, [f165a95f16753cfa3ce10f9991731be5],
PUP.Optional.Dsrlte.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{27EA1DCC-C1CD-4AEB-BE5E-53F35C5DA2AF}, In Quarantäne, [223452b67d0e082ef33aedb87c887789],
PUP.Optional.ViView.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [85d1f315e4a78fa7947cd7d0ab590ef2],
PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{8ffb2166-b719-4f1e-b522-b691255401c4}, In Quarantäne, [9bbbf117513a91a576e7d582f21318e8],
PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\CLASSES\CLSID\{8FFB2166-B719-4F1E-B522-B691255401C4}, In Quarantäne, [9bbbf117513a91a576e7d582f21318e8],
PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\CLASSES\P8ffb2166_b719_4f1e_b522_b691255401c4_.P8ffb2166_b719_4f1e_b522_b691255401c4_, In Quarantäne, [9bbbf117513a91a576e7d582f21318e8],
PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\CLASSES\P8ffb2166_b719_4f1e_b522_b691255401c4_.P8ffb2166_b719_4f1e_b522_b691255401c4_.9, In Quarantäne, [9bbbf117513a91a576e7d582f21318e8],
PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P8ffb2166_b719_4f1e_b522_b691255401c4_.P8ffb2166_b719_4f1e_b522_b691255401c4_, In Quarantäne, [9bbbf117513a91a576e7d582f21318e8],
PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P8ffb2166_b719_4f1e_b522_b691255401c4_.P8ffb2166_b719_4f1e_b522_b691255401c4_.9, In Quarantäne, [9bbbf117513a91a576e7d582f21318e8],
PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P8ffb2166_b719_4f1e_b522_b691255401c4_.P8ffb2166_b719_4f1e_b522_b691255401c4_, In Quarantäne, [9bbbf117513a91a576e7d582f21318e8],
PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P8ffb2166_b719_4f1e_b522_b691255401c4_.P8ffb2166_b719_4f1e_b522_b691255401c4_.9, In Quarantäne, [9bbbf117513a91a576e7d582f21318e8],
PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{8FFB2166-B719-4F1E-B522-B691255401C4}, In Quarantäne, [9bbbf117513a91a576e7d582f21318e8],

Registrierungswerte: 20
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, In Quarantäne, [2b2bb850bccfbc7a58eea0067e86ef11]
PUP.Optional.QuickSearch.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|quick_searchff@gmail.com, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\quick_searchff@gmail.com, In Quarantäne, [d97dd533e2a902347db7f72622e1f30d]
PUP.Optional.SweetSearch.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|sweetsearch@gmail.com, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\sweetsearch@gmail.com, In Quarantäne, [56000206503b8fa792a3a37a71928c74]
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, In Quarantäne, [7adccd3bddae42f4cb7b406643c1936d]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, cor, In Quarantäne, [2c2ab157cac11f175323eb547e854fb1]
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}, In Quarantäne, [292d16f21c6fea4c1f9f39e55da6b64a]
PUP.Optional.Dsrlte.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{27EA1DCC-C1CD-4AEB-BE5E-53F35C5DA2AF}|FaviconURL, hxxp://rts.dsrlte.com/favicon.ico, In Quarantäne, [90c6bc4c5536af877fae0f961fe54fb1]
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{27EA1DCC-C1CD-4AEB-BE5E-53F35C5DA2AF}|URL, hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}, In Quarantäne, [cf87a95f424986b0ab13f42a6f946e92]
PUP.Optional.Dsrlte.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{27EA1DCC-C1CD-4AEB-BE5E-53F35C5DA2AF}|TopResultURL, hxxp://rts.dsrlte.com/?affID=na&q={searchTerms}&r=835, In Quarantäne, [193de127c3c8b284a786119433d1e11f]
PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DisplayName, delta-homes, In Quarantäne, [56003eca3853df57a59d809f9f64a55b]
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}, In Quarantäne, [f561bf496c1fd85e932b5ac444bf38c8]
PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|TopResultURL, hxxp://search.delta-homes.com/web/?type=ds&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}, In Quarantäne, [f26453b5f893340256ec42dd8e757987]
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{95B7759C-8C7F-4BF1-B163-73684A933233}|URL, hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}, In Quarantäne, [e2749f69f09b9b9bb20c829cfc07bc44]
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E733165D-CBCF-4FDA-883E-ADEF965B476C}|URL, hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}, In Quarantäne, [90c60206236868cecaf4f7275da64cb4]
PUP.Optional.QuickSearch.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MOZILLA\EXTENDS|appid, quick_searchff@gmail.com, In Quarantäne, [d28426e2a4e775c1ce8eb5680df6d729]
PUP.Optional.OptimizerPro.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\OPTIMIZER PRO|AdsBuyNowURL, hxxp://www.safeshopgate.com/r?s=121000600&g=50907621-D5D7-B54F-AFF0-2DED8B057C94, In Quarantäne, [31253eca13786cca4cad5055ba4ab64a]
PUP.Optional.Dsrlte.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{27EA1DCC-C1CD-4AEB-BE5E-53F35C5DA2AF}|FaviconURL, hxxp://rts.dsrlte.com/favicon.ico, In Quarantäne, [223452b67d0e082ef33aedb87c887789]
PUP.Optional.Dsrlte.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{27EA1DCC-C1CD-4AEB-BE5E-53F35C5DA2AF}|URL, hxxp://rts.dsrlte.com/?affID=na&q={searchTerms}&r=835, In Quarantäne, [89cd97715f2c04327ab3e8bd2adaae52]
PUP.Optional.ViView.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}, In Quarantäne, [85d1f315e4a78fa7947cd7d0ab590ef2]
PUP.Optional.OptimizerPro.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Optimizer Pro, C:\Program Files (x86)\Optimizer Pro 3.16\OptProLauncher.exe, In Quarantäne, [93c30afe92f98fa76197fea7b74d8878]

Registrierungsdaten: 15
PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\GOOGLE CHROME\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.delta-homes.com/?type=sc&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772, Gut: (Chrome.exe), Schlecht: ("C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.delta-homes.com/?type=sc&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772),Ersetzt,[a1b57e8ac0cbc17599413b15b055bc44]
PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.delta-homes.com/?type=sc&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.delta-homes.com/?type=sc&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772),Ersetzt,[fd5926e212797bbba137fa567d88c63a]
PUP.Optional.ViView.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}),Ersetzt,[5afc59af33588da92bcb49fb3acb5aa6]
PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.delta-homes.com/?type=hp&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772, Gut: (www.google.com), Schlecht: (hxxp://www.delta-homes.com/?type=hp&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772),Ersetzt,[73e3cd3b256695a1cc079cb415f0b54b]
PUP.Optional.ViView.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}),Ersetzt,[11450ff91477ba7caa4cb29251b41fe1]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[97bf77918506a393f52b341c57ae08f8]
PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\GOOGLE CHROME\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.delta-homes.com/?type=sc&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772, Gut: (Chrome.exe), Schlecht: ("C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.delta-homes.com/?type=sc&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772),Ersetzt,[7ed84eba622981b525b53d13ea1b758b]
PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.delta-homes.com/?type=sc&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.delta-homes.com/?type=sc&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772),Ersetzt,[55017e8ac4c77cbacb0d71df36cfbf41]
PUP.Optional.ViView.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}),Ersetzt,[8fc74bbda1ea3ef801f5f45060a52dd3]
PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.delta-homes.com/?type=hp&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772, Gut: (www.google.com), Schlecht: (hxxp://www.delta-homes.com/?type=hp&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772),Ersetzt,[b89ef810e5a64ee8b221b49c36cf758b]
PUP.Optional.ViView.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}),Ersetzt,[d68075934447c47235c1bc88c144b54b]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[b4a2ec1c0a81a3930d133e12739205fb]
PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://search.delta-homes.com/web/?type=ds&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://search.delta-homes.com/web/?type=ds&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}),Ersetzt,[45117593ed9ed0669e36a8a8d1340000]
PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.delta-homes.com/?type=hp&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772, Gut: (www.google.com), Schlecht: (hxxp://www.delta-homes.com/?type=hp&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772),Ersetzt,[ed698088018a1b1b468e410f04015aa6]
PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://search.delta-homes.com/web/?type=ds&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://search.delta-homes.com/web/?type=ds&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}),Ersetzt,[b79fde2a2a618da99a3a054be4218977]

Ordner: 149
PUP.Optional.QueenCoupon.A, C:\Program Files (x86)\QueoEnCCoupon, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3],
PUP.Optional.SalePlus.A, C:\Program Files (x86)\SaleePlous, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05],
PUP.Optional.SalePlus.A, C:\Program Files (x86)\SalePlus, In Quarantäne, [e76f7d8bbbd0f5412a40e33a3cc7ea16],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\image, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\en-US, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-419, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-ES, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-BE, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CA, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CH, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-FR, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-LU, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-CH, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-IT, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pl, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt-BR, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru-MO, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\tr-TR, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\vi-VI, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-CN, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-TW, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156, In Quarantäne, [c690ba4e157648ee1cc1603d37cdad53],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo, In Quarantäne, [c690ba4e157648ee1cc1603d37cdad53],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjaicoojlfoococemdcaollmhaiolole\236, In Quarantäne, [8bcb23e5761592a4b32a66376f95ea16],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjaicoojlfoococemdcaollmhaiolole, In Quarantäne, [8bcb23e5761592a4b32a66376f95ea16],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212, In Quarantäne, [20367296d8b3a69000dd1b828282ee12],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm, In Quarantäne, [20367296d8b3a69000dd1b828282ee12],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158, In Quarantäne, [76e0e4246c1f96a01fbefe9fab59669a],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk, In Quarantäne, [76e0e4246c1f96a01fbefe9fab59669a],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\kajfghlhfkcocafkcjlajldicbikpgnp\144, In Quarantäne, [8fc738d09bf03204f7e66637709403fd],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\kajfghlhfkcocafkcjlajldicbikpgnp, In Quarantäne, [8fc738d09bf03204f7e66637709403fd],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230, In Quarantäne, [c19519ef4e3dbc7ad10ca5f851b3e020],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami, In Quarantäne, [c19519ef4e3dbc7ad10ca5f851b3e020],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156, In Quarantäne, [3521907817745ed88954ff9e0ef64cb4],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo, In Quarantäne, [3521907817745ed88954ff9e0ef64cb4],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212, In Quarantäne, [272f0701127957df18c589147f8504fc],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm, In Quarantäne, [272f0701127957df18c589147f8504fc],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158, In Quarantäne, [164021e73d4e7eb8c21b98050bf98e72],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk, In Quarantäne, [164021e73d4e7eb8c21b98050bf98e72],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230, In Quarantäne, [1b3be226800b2c0ab429c9d4986c2ad6],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami, In Quarantäne, [1b3be226800b2c0ab429c9d4986c2ad6],
PUP.Optional.Multiplug.Gen, C:\ProgramData\{b24c6d34-3e05-9102-b24c-c6d343e0b4d0}, In Quarantäne, [9bbbdf29850675c126ba633a1be9867a],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\2u@EgTVxea.net\content, In Quarantäne, [fd5940c848433ef862892c7135cf17e9],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\2u@EgTVxea.net, In Quarantäne, [fd5940c848433ef862892c7135cf17e9],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\J@C9jg.com\content, In Quarantäne, [74e2a36552394ee839b29b023aca5aa6],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\J@C9jg.com, In Quarantäne, [74e2a36552394ee839b29b023aca5aa6],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\JQzw@H.com\content, In Quarantäne, [70e622e6b0dbb87e3bb0c7d6fd079070],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\JQzw@H.com, In Quarantäne, [70e622e6b0dbb87e3bb0c7d6fd079070],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\LFE@Ba.edu\content, In Quarantäne, [f85eca3e8407fd3934b72a73e61e4eb2],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\LFE@Ba.edu, In Quarantäne, [f85eca3e8407fd3934b72a73e61e4eb2],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\r@L.co.uk\content, In Quarantäne, [3c1aed1b8cff01358467fda0917337c9],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\r@L.co.uk, In Quarantäne, [3c1aed1b8cff01358467fda0917337c9],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yl6lAIg@1.com\content, In Quarantäne, [fb5bed1b1378a59123c86a3301036799],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yl6lAIg@1.com, In Quarantäne, [fb5bed1b1378a59123c86a3301036799],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yvj@q.net\content, In Quarantäne, [3422de2a24671c1a88636e2f8381d42c],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yvj@q.net, In Quarantäne, [3422de2a24671c1a88636e2f8381d42c],
PUP.Optional.ClickForSale.A, C:\Program Files (x86)\CCleicckoForSuale, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1],
PUP.Optional.ClickForSale.A, C:\Program Files (x86)\CllickFooRSaLe, In Quarantäne, [80d6ac5cfc8fcf675ef9c8d6fd07db25],
PUP.Optional.LuckyShopper.A, C:\Program Files (x86)\LucckySHoppErr, In Quarantäne, [6aec2eda1f6c82b4aad7039b23e13fc1],
PUP.Optional.PerfectCoupon.A, C:\Program Files (x86)\tperfectcoouepon, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858],
PUP.Optional.SaverBox.A, C:\Program Files (x86)\Suaverabbox, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc],
PUP.Optional.MultiPlug, C:\ProgramData\aaegpibphpehghjbadcjpmfmcfpddjim, In Quarantäne, [9cba7a8e82095bdb44e4504fd82c926e],
PUP.Optional.MultiPlug, C:\ProgramData\fjcjkgkjcfakpeiojmljigibblfagdja, In Quarantäne, [82d4bc4c8407e6500127fba4ef159e62],
PUP.Optional.MultiPlug, C:\ProgramData\gfnkloieabjhkochmlabmabgpncnkdbj, In Quarantäne, [8ccae820adde02342008326da262738d],
PUP.Optional.MultiPlug, C:\ProgramData\jjgpigijceopgppohlmendhooepjphna, In Quarantäne, [0056c840fe8d9e98d553c4dbe0248e72],
PUP.Optional.MultiPlug, C:\ProgramData\jjhlcnaaggekoebfjhcbnpdhcadnbnle, In Quarantäne, [fd591deb3853d16553d50e91f80c11ef],
PUP.Optional.BestAdBlocker.A, C:\Program Files (x86)\bestadblocker, In Quarantäne, [65f121e707842016f77dfca3f01401ff],
PUP.Optional.Picexa.A, C:\Users\Selina\AppData\Roaming\Picexa Viewer\log, In Quarantäne, [0f470206d4b7bc7a6b93485cb351c33d],
PUP.Optional.Picexa.A, C:\Users\Selina\AppData\Roaming\Picexa Viewer, In Quarantäne, [0f470206d4b7bc7a6b93485cb351c33d],
PUP.Optional.Picexa.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picexa, In Quarantäne, [e5713ecaf794e84e738ea104828207f9],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719],
Rogue.Multiple, C:\ProgramData\1078601655, In Quarantäne, [ed690cfc5f2c1026a3cc22b1ed1529d7],
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices, In Quarantäne, [ada9a95fb2d984b2436c6a88729060a0],
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update, In Quarantäne, [ada9a95fb2d984b2436c6a88729060a0],
PUP.Optional.PayByAds.A, C:\Users\Selina\AppData\Local\Pay-By-Ads, In Quarantäne, [2630080089023cfa3fda6193cc36b24e],
PUP.Optional.PayByAds.A, C:\Users\Selina\AppData\Local\Pay-By-Ads\Yahoo! Search, In Quarantäne, [2630080089023cfa3fda6193cc36b24e],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect, Löschen bei Neustart, [67eff315a4e7191d5cfa7f7580827987],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update, In Quarantäne, [67eff315a4e7191d5cfa7f7580827987],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.EzDownloader.A, C:\Users\Selina\AppData\Roaming\EZDownloader, In Quarantäne, [2a2c16f2afdc2115d33f9d6b4bb8619f],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate, In Quarantäne, [36201deb7615b3831831b94fdf248c74],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update, In Quarantäne, [36201deb7615b3831831b94fdf248c74],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\include, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\include\tools, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\lib, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\module, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\pack, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\en, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\en-US, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\es, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\es-419, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\fr, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-BE, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-CA, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-CH, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-LU, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\it, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\it-CH, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\pl, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\pt-BR, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\ru, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\ru-MO, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\tr, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\vi, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\zh-CN, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\zh-TW, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\defaults, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\defaults\preferences, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.FasterLight.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpjaeedhlmcojmmhngnbankkodcdlenh\1.0.1_0, In Quarantäne, [76e07692dbb044f25d27a0e5e91c3bc5],
PUP.Optional.FasterLight.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpjaeedhlmcojmmhngnbankkodcdlenh, In Quarantäne, [76e07692dbb044f25d27a0e5e91c3bc5],

Dateien: 346
PUP.Optional.BrowseFox.A, C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe, Löschen bei Neustart, [164061a7325985b1cae6fcd182800ff1],
PUP.Optional.LuckyTab.A, C:\Program Files (x86)\XTab\SupTab.dll, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82],
PUP.Optional.Mindspark.A, C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$R1KXAQH.exe, In Quarantäne, [1a3c25e3117ac076e6080d7623e238c8],
Spyware.KGBSpy, C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$R81LU9P.crdownload, In Quarantäne, [30266c9c2d5e50e6e70e530e31d4857b],
PUP.Optional.MultiPlug.Uns, C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$RT1U4UU\SharkManCoupon.exe, In Quarantäne, [d4820701f89383b36e9e94edc33fca36],
PUP.Optional.PayByAds.A, C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$RC8TOZ5.2\res.dll, In Quarantäne, [5402050391fab28465b13b42b84da15f],
PUP.Optional.OpenCandy, C:\Users\Selina\AppData\Local\Temp\is-SAK4S.tmp\OCSetupHlp.dll, In Quarantäne, [a8aed632602b8aac5ea6611509fc5aa6],
PUP.Optional.EZDownloader.A, C:\Users\Selina\AppData\Local\Temp\5A00\temp\EzDownloader_setup.exe, In Quarantäne, [58fe2bddd4b7fc3a68bf32ef6f9130d0],
PUP.Optional.PCMechanic, C:\Users\Selina\AppData\Local\Temp\is-4EM59.tmp\pm-standalone-setup.exe, In Quarantäne, [aea8bd4b18733cfaa0df53737889f60a],
PUP.Optional.EZDownloader.A, C:\Users\Selina\AppData\Local\Temp\BF80\temp\EzDownloader_setup.exe, In Quarantäne, [c3938d7b0f7c2c0a69be0f1227d9c739],
PUP.Optional.DefaultSearchProtected.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\defsearchp@gmail.com.xpi, In Quarantäne, [f85e15f3454613231a12041531d2ee12],
PUP.Optional.Ask.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mppnoffgpafgpgbaigljliadgbnhljfl_0.localstorage, In Quarantäne, [d680ee1acac1e254da654bd0e91afb05],
PUP.Optional.Ask.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mppnoffgpafgpgbaigljliadgbnhljfl_0.localstorage-journal, In Quarantäne, [69ed38d00586b284e758b665768da45c],
PUP.Optional.Dsrlte.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\dsrlte.xml, In Quarantäne, [82d4cc3c444735018525889326dddd23],
PUP.Optional.QueenCoupon.A, C:\Program Files (x86)\QueoEnCCoupon\shQpdAFCnAZ1ea.tlb, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3],
PUP.Optional.QueenCoupon.A, C:\Program Files (x86)\QueoEnCCoupon\shQpdAFCnAZ1ea.dat, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3],
PUP.Optional.SalePlus.A, C:\Program Files (x86)\SaleePlous\u2CXcXDCFuf2ZD.tlb, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05],
PUP.Optional.SalePlus.A, C:\Program Files (x86)\SaleePlous\u2CXcXDCFuf2ZD.dat, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05],
PUP.Optional.SalePlus.A, C:\Program Files (x86)\SalePlus\kJEzufod2hPs3c.tlb, In Quarantäne, [e76f7d8bbbd0f5412a40e33a3cc7ea16],
PUP.Optional.SalePlus.A, C:\Program Files (x86)\SalePlus\kJEzufod2hPs3c.dat, In Quarantäne, [e76f7d8bbbd0f5412a40e33a3cc7ea16],
PUP.Optional.SalePlus.A, C:\Program Files (x86)\SalePlus\SAlePlUS.dat, In Quarantäne, [e76f7d8bbbd0f5412a40e33a3cc7ea16],
PUP.Optional.SalePlus.A, C:\Program Files (x86)\SalePlus\uzmcwZ9ouEEihR.dat, In Quarantäne, [e76f7d8bbbd0f5412a40e33a3cc7ea16],
PUP.Optional.SalePlus.A, C:\Program Files (x86)\SalePlus\uzmcwZ9ouEEihR.tlb, In Quarantäne, [e76f7d8bbbd0f5412a40e33a3cc7ea16],
PUP.Optional.SalePlus.A, C:\Program Files (x86)\SalePlus\VUJpPdpWzowSHb.dat, In Quarantäne, [e76f7d8bbbd0f5412a40e33a3cc7ea16],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\uninstall.exe, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\ffsearch_toolbar!1.0.0.1031.xpi, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\install.data, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcp110.dll, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcr110.dll, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\searchProvider.xml, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\about.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\about_bk.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\btn.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\btn_apply.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\close.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\conf.xml, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\conf_back.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\input_bk.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\logo.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\main.xml, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\radio_1.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\radio_2.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\rigth_arrow.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\settings.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\data.html, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\indexIE.html, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\indexIE8.html, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\main.css, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\ver.txt, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\google_trends.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\icon128.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\icon16.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\icon48.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\loading.gif, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\logo32.ico, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\common.js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\ga.js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\jquery-1.11.0.min.js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\jquery.autocomplete.js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\jquery.xdomainrequest.min.js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\js.js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\library.js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\xagainit-ie8.js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\xagainit2.0.js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\xdomain.min.js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\en-US\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-419\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-ES\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-BE\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CA\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CH\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-FR\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-LU\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-CH\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-IT\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pl\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt-BR\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru-MO\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\tr-TR\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\vi-VI\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-CN\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-TW\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7],
PUP.Optional.BoostSaves.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.boostsaves.com_0.localstorage, In Quarantäne, [db7b17f1cdbe91a51ac643ecb54e17e9],
PUP.Optional.BoostSaves.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.boostsaves.com_0.localstorage-journal, In Quarantäne, [41157f899fecd4625789b17e14ef8080],
PUP.Optional.Delta.ShrtCln, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\delta-homes.xml, In Quarantäne, [bf977f896d1ee155d162ee5d7192ce32],
PUP.Optional.YahooSearch.A, C:\Windows\System32\Tasks\Yahoo! Search, In Quarantäne, [b89e7593ddaeca6cca5c65323cc8d42c],
PUP.Optional.YahooSearch.A, C:\Windows\System32\Tasks\Yahoo! Search Updater, In Quarantäne, [213523e567243ef827ff187f6e96a759],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156\lsdb.js, In Quarantäne, [c690ba4e157648ee1cc1603d37cdad53],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156\background.html, In Quarantäne, [c690ba4e157648ee1cc1603d37cdad53],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156\content.js, In Quarantäne, [c690ba4e157648ee1cc1603d37cdad53],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156\jM93kRbtV.js, In Quarantäne, [c690ba4e157648ee1cc1603d37cdad53],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156\manifest.json, In Quarantäne, [c690ba4e157648ee1cc1603d37cdad53],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjaicoojlfoococemdcaollmhaiolole\236\lsdb.js, In Quarantäne, [8bcb23e5761592a4b32a66376f95ea16],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjaicoojlfoococemdcaollmhaiolole\236\background.html, In Quarantäne, [8bcb23e5761592a4b32a66376f95ea16],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjaicoojlfoococemdcaollmhaiolole\236\content.js, In Quarantäne, [8bcb23e5761592a4b32a66376f95ea16],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjaicoojlfoococemdcaollmhaiolole\236\manifest.json, In Quarantäne, [8bcb23e5761592a4b32a66376f95ea16],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212\lsdb.js, In Quarantäne, [20367296d8b3a69000dd1b828282ee12],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212\background.html, In Quarantäne, [20367296d8b3a69000dd1b828282ee12],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212\C.js, In Quarantäne, [20367296d8b3a69000dd1b828282ee12],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212\content.js, In Quarantäne, [20367296d8b3a69000dd1b828282ee12],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212\manifest.json, In Quarantäne, [20367296d8b3a69000dd1b828282ee12],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158\lsdb.js, In Quarantäne, [76e0e4246c1f96a01fbefe9fab59669a],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158\background.html, In Quarantäne, [76e0e4246c1f96a01fbefe9fab59669a],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158\content.js, In Quarantäne, [76e0e4246c1f96a01fbefe9fab59669a],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158\CXd5xraYuF.js, In Quarantäne, [76e0e4246c1f96a01fbefe9fab59669a],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158\manifest.json, In Quarantäne, [76e0e4246c1f96a01fbefe9fab59669a],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\kajfghlhfkcocafkcjlajldicbikpgnp\144\lsdb.js, In Quarantäne, [8fc738d09bf03204f7e66637709403fd],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\kajfghlhfkcocafkcjlajldicbikpgnp\144\background.html, In Quarantäne, [8fc738d09bf03204f7e66637709403fd],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\kajfghlhfkcocafkcjlajldicbikpgnp\144\content.js, In Quarantäne, [8fc738d09bf03204f7e66637709403fd],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\kajfghlhfkcocafkcjlajldicbikpgnp\144\manifest.json, In Quarantäne, [8fc738d09bf03204f7e66637709403fd],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230\lsdb.js, In Quarantäne, [c19519ef4e3dbc7ad10ca5f851b3e020],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230\background.html, In Quarantäne, [c19519ef4e3dbc7ad10ca5f851b3e020],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230\content.js, In Quarantäne, [c19519ef4e3dbc7ad10ca5f851b3e020],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230\IAH0.js, In Quarantäne, [c19519ef4e3dbc7ad10ca5f851b3e020],
PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230\manifest.json, In Quarantäne, [c19519ef4e3dbc7ad10ca5f851b3e020],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156\lsdb.js, In Quarantäne, [3521907817745ed88954ff9e0ef64cb4],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156\background.html, In Quarantäne, [3521907817745ed88954ff9e0ef64cb4],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156\content.js, In Quarantäne, [3521907817745ed88954ff9e0ef64cb4],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156\jM93kRbtV.js, In Quarantäne, [3521907817745ed88954ff9e0ef64cb4],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156\manifest.json, In Quarantäne, [3521907817745ed88954ff9e0ef64cb4],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212\lsdb.js, In Quarantäne, [272f0701127957df18c589147f8504fc],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212\background.html, In Quarantäne, [272f0701127957df18c589147f8504fc],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212\C.js, In Quarantäne, [272f0701127957df18c589147f8504fc],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212\content.js, In Quarantäne, [272f0701127957df18c589147f8504fc],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212\manifest.json, In Quarantäne, [272f0701127957df18c589147f8504fc],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158\lsdb.js, In Quarantäne, [164021e73d4e7eb8c21b98050bf98e72],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158\background.html, In Quarantäne, [164021e73d4e7eb8c21b98050bf98e72],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158\content.js, In Quarantäne, [164021e73d4e7eb8c21b98050bf98e72],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158\CXd5xraYuF.js, In Quarantäne, [164021e73d4e7eb8c21b98050bf98e72],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158\manifest.json, In Quarantäne, [164021e73d4e7eb8c21b98050bf98e72],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230\lsdb.js, In Quarantäne, [1b3be226800b2c0ab429c9d4986c2ad6],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230\background.html, In Quarantäne, [1b3be226800b2c0ab429c9d4986c2ad6],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230\content.js, In Quarantäne, [1b3be226800b2c0ab429c9d4986c2ad6],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230\IAH0.js, In Quarantäne, [1b3be226800b2c0ab429c9d4986c2ad6],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230\manifest.json, In Quarantäne, [1b3be226800b2c0ab429c9d4986c2ad6],
PUP.Optional.Multiplug.Gen, C:\ProgramData\{b24c6d34-3e05-9102-b24c-c6d343e0b4d0}\Download.dat, In Quarantäne, [9bbbdf29850675c126ba633a1be9867a],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\2u@EgTVxea.net\content\bg.js, In Quarantäne, [fd5940c848433ef862892c7135cf17e9],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\2u@EgTVxea.net\bootstrap.js, In Quarantäne, [fd5940c848433ef862892c7135cf17e9],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\2u@EgTVxea.net\chrome.manifest, In Quarantäne, [fd5940c848433ef862892c7135cf17e9],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\2u@EgTVxea.net\install.rdf, In Quarantäne, [fd5940c848433ef862892c7135cf17e9],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\J@C9jg.com\content\bg.js, In Quarantäne, [74e2a36552394ee839b29b023aca5aa6],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\J@C9jg.com\bootstrap.js, In Quarantäne, [74e2a36552394ee839b29b023aca5aa6],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\J@C9jg.com\chrome.manifest, In Quarantäne, [74e2a36552394ee839b29b023aca5aa6],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\J@C9jg.com\install.rdf, In Quarantäne, [74e2a36552394ee839b29b023aca5aa6],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\JQzw@H.com\content\bg.js, In Quarantäne, [70e622e6b0dbb87e3bb0c7d6fd079070],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\JQzw@H.com\bootstrap.js, In Quarantäne, [70e622e6b0dbb87e3bb0c7d6fd079070],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\JQzw@H.com\chrome.manifest, In Quarantäne, [70e622e6b0dbb87e3bb0c7d6fd079070],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\JQzw@H.com\install.rdf, In Quarantäne, [70e622e6b0dbb87e3bb0c7d6fd079070],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\LFE@Ba.edu\content\bg.js, In Quarantäne, [f85eca3e8407fd3934b72a73e61e4eb2],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\LFE@Ba.edu\bootstrap.js, In Quarantäne, [f85eca3e8407fd3934b72a73e61e4eb2],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\LFE@Ba.edu\chrome.manifest, In Quarantäne, [f85eca3e8407fd3934b72a73e61e4eb2],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\LFE@Ba.edu\install.rdf, In Quarantäne, [f85eca3e8407fd3934b72a73e61e4eb2],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\r@L.co.uk\content\bg.js, In Quarantäne, [3c1aed1b8cff01358467fda0917337c9],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\r@L.co.uk\bootstrap.js, In Quarantäne, [3c1aed1b8cff01358467fda0917337c9],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\r@L.co.uk\chrome.manifest, In Quarantäne, [3c1aed1b8cff01358467fda0917337c9],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\r@L.co.uk\install.rdf, In Quarantäne, [3c1aed1b8cff01358467fda0917337c9],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yl6lAIg@1.com\content\bg.js, In Quarantäne, [fb5bed1b1378a59123c86a3301036799],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yl6lAIg@1.com\bootstrap.js, In Quarantäne, [fb5bed1b1378a59123c86a3301036799],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yl6lAIg@1.com\chrome.manifest, In Quarantäne, [fb5bed1b1378a59123c86a3301036799],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yl6lAIg@1.com\install.rdf, In Quarantäne, [fb5bed1b1378a59123c86a3301036799],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yvj@q.net\content\bg.js, In Quarantäne, [3422de2a24671c1a88636e2f8381d42c],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yvj@q.net\bootstrap.js, In Quarantäne, [3422de2a24671c1a88636e2f8381d42c],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yvj@q.net\chrome.manifest, In Quarantäne, [3422de2a24671c1a88636e2f8381d42c],
PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yvj@q.net\install.rdf, In Quarantäne, [3422de2a24671c1a88636e2f8381d42c],
PUP.Optional.ClickForSale.A, C:\Program Files (x86)\CCleicckoForSuale\1CFwcCZax6aCph.tlb, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1],
PUP.Optional.ClickForSale.A, C:\Program Files (x86)\CCleicckoForSuale\1CFwcCZax6aCph.dat, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1],
PUP.Optional.ClickForSale.A, C:\Program Files (x86)\CllickFooRSaLe\yJGRXsrRdPAxq9.tlb, In Quarantäne, [80d6ac5cfc8fcf675ef9c8d6fd07db25],
PUP.Optional.ClickForSale.A, C:\Program Files (x86)\CllickFooRSaLe\yJGRXsrRdPAxq9.dat, In Quarantäne, [80d6ac5cfc8fcf675ef9c8d6fd07db25],
PUP.Optional.LuckyShopper.A, C:\Program Files (x86)\LucckySHoppErr\JOhaNEmOo3P6cj.tlb, In Quarantäne, [6aec2eda1f6c82b4aad7039b23e13fc1],
PUP.Optional.LuckyShopper.A, C:\Program Files (x86)\LucckySHoppErr\JOhaNEmOo3P6cj.dat, In Quarantäne, [6aec2eda1f6c82b4aad7039b23e13fc1],
PUP.Optional.PerfectCoupon.A, C:\Program Files (x86)\tperfectcoouepon\WV0zUTPFPSX3oa.tlb, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858],
PUP.Optional.PerfectCoupon.A, C:\Program Files (x86)\tperfectcoouepon\WV0zUTPFPSX3oa.dat, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858],
PUP.Optional.SaverBox.A, C:\Program Files (x86)\Suaverabbox\Rw31RrITanFDDC.tlb, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc],
PUP.Optional.SaverBox.A, C:\Program Files (x86)\Suaverabbox\Rw31RrITanFDDC.dat, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc],
PUP.Optional.MultiPlug, C:\ProgramData\aaegpibphpehghjbadcjpmfmcfpddjim\lsdb.js, In Quarantäne, [9cba7a8e82095bdb44e4504fd82c926e],
PUP.Optional.MultiPlug, C:\ProgramData\aaegpibphpehghjbadcjpmfmcfpddjim\background.html, In Quarantäne, [9cba7a8e82095bdb44e4504fd82c926e],
PUP.Optional.MultiPlug, C:\ProgramData\aaegpibphpehghjbadcjpmfmcfpddjim\content.js, In Quarantäne, [9cba7a8e82095bdb44e4504fd82c926e],
PUP.Optional.MultiPlug, C:\ProgramData\aaegpibphpehghjbadcjpmfmcfpddjim\manifest.json, In Quarantäne, [9cba7a8e82095bdb44e4504fd82c926e],
PUP.Optional.MultiPlug, C:\ProgramData\aaegpibphpehghjbadcjpmfmcfpddjim\S.js, In Quarantäne, [9cba7a8e82095bdb44e4504fd82c926e],
PUP.Optional.MultiPlug, C:\ProgramData\fjcjkgkjcfakpeiojmljigibblfagdja\lsdb.js, In Quarantäne, [82d4bc4c8407e6500127fba4ef159e62],
PUP.Optional.MultiPlug, C:\ProgramData\fjcjkgkjcfakpeiojmljigibblfagdja\background.html, In Quarantäne, [82d4bc4c8407e6500127fba4ef159e62],
PUP.Optional.MultiPlug, C:\ProgramData\fjcjkgkjcfakpeiojmljigibblfagdja\content.js, In Quarantäne, [82d4bc4c8407e6500127fba4ef159e62],
PUP.Optional.MultiPlug, C:\ProgramData\fjcjkgkjcfakpeiojmljigibblfagdja\manifest.json, In Quarantäne, [82d4bc4c8407e6500127fba4ef159e62],
PUP.Optional.MultiPlug, C:\ProgramData\gfnkloieabjhkochmlabmabgpncnkdbj\lsdb.js, In Quarantäne, [8ccae820adde02342008326da262738d],
PUP.Optional.MultiPlug, C:\ProgramData\gfnkloieabjhkochmlabmabgpncnkdbj\background.html, In Quarantäne, [8ccae820adde02342008326da262738d],
PUP.Optional.MultiPlug, C:\ProgramData\gfnkloieabjhkochmlabmabgpncnkdbj\content.js, In Quarantäne, [8ccae820adde02342008326da262738d],
PUP.Optional.MultiPlug, C:\ProgramData\gfnkloieabjhkochmlabmabgpncnkdbj\manifest.json, In Quarantäne, [8ccae820adde02342008326da262738d],
PUP.Optional.MultiPlug, C:\ProgramData\gfnkloieabjhkochmlabmabgpncnkdbj\ZvfK7UncxV.js, In Quarantäne, [8ccae820adde02342008326da262738d],
PUP.Optional.MultiPlug, C:\ProgramData\jjgpigijceopgppohlmendhooepjphna\lsdb.js, In Quarantäne, [0056c840fe8d9e98d553c4dbe0248e72],
PUP.Optional.MultiPlug, C:\ProgramData\jjgpigijceopgppohlmendhooepjphna\background.html, In Quarantäne, [0056c840fe8d9e98d553c4dbe0248e72],
PUP.Optional.MultiPlug, C:\ProgramData\jjgpigijceopgppohlmendhooepjphna\content.js, In Quarantäne, [0056c840fe8d9e98d553c4dbe0248e72],
PUP.Optional.MultiPlug, C:\ProgramData\jjgpigijceopgppohlmendhooepjphna\manifest.json, In Quarantäne, [0056c840fe8d9e98d553c4dbe0248e72],
PUP.Optional.MultiPlug, C:\ProgramData\jjgpigijceopgppohlmendhooepjphna\onpoQ.js, In Quarantäne, [0056c840fe8d9e98d553c4dbe0248e72],
PUP.Optional.MultiPlug, C:\ProgramData\jjhlcnaaggekoebfjhcbnpdhcadnbnle\lsdb.js, In Quarantäne, [fd591deb3853d16553d50e91f80c11ef],
PUP.Optional.MultiPlug, C:\ProgramData\jjhlcnaaggekoebfjhcbnpdhcadnbnle\background.html, In Quarantäne, [fd591deb3853d16553d50e91f80c11ef],
PUP.Optional.MultiPlug, C:\ProgramData\jjhlcnaaggekoebfjhcbnpdhcadnbnle\content.js, In Quarantäne, [fd591deb3853d16553d50e91f80c11ef],
PUP.Optional.MultiPlug, C:\ProgramData\jjhlcnaaggekoebfjhcbnpdhcadnbnle\EaSVrE9.js, In Quarantäne, [fd591deb3853d16553d50e91f80c11ef],
PUP.Optional.MultiPlug, C:\ProgramData\jjhlcnaaggekoebfjhcbnpdhcadnbnle\manifest.json, In Quarantäne, [fd591deb3853d16553d50e91f80c11ef],
PUP.Optional.BestAdBlocker.A, C:\Program Files (x86)\bestadblocker\pBvkDFx6EE6rgd.tlb, In Quarantäne, [65f121e707842016f77dfca3f01401ff],
PUP.Optional.BestAdBlocker.A, C:\Program Files (x86)\bestadblocker\pBvkDFx6EE6rgd.dat, In Quarantäne, [65f121e707842016f77dfca3f01401ff],
PUP.Optional.BestAdBlocker.A, C:\Program Files (x86)\bestadblocker\PYMYWRFbYh7Fwk.dat, In Quarantäne, [65f121e707842016f77dfca3f01401ff],
PUP.Optional.Picexa.A, C:\Users\Selina\AppData\Roaming\Picexa Viewer\log\install.log, In Quarantäne, [0f470206d4b7bc7a6b93485cb351c33d],
PUP.Optional.Picexa.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picexa\Picexa.lnk, In Quarantäne, [e5713ecaf794e84e738ea104828207f9],
PUP.Optional.Picexa.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picexa\uninstall.lnk, In Quarantäne, [e5713ecaf794e84e738ea104828207f9],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\093e84014faeb6d2aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\76c6371ecd7d090faa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\1878c1afe37a6843aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\242c2fd4536773faaa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\2b262019a8e6c4cdaa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\2dd11d7d55568f75aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\3ed03cfb56800283aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\5175a0130ed5b449aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\677e21cb1851e9baaa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\8465c1fdfb127aa3aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\87b1cffeb795e9ffaa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\88ca0666a8bc42bcaa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\9bec11cdd23aeb05aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\c295e559d046ad1eaa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\cd5b15e575e1c3d0aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\cf529e7074de5586aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\d236748b2ecd3b60aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\d5fe86451e44dffcaa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\dd4a2c5f72b1804baa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\e7a261f5c12d8405aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719],
PUP.Optional.WindowsMangerProtect.A, C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe, Löschen bei Neustart, [8ccabd4b52391a1c499f43ecc83b2ed2],
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update\conf, In Quarantäne, [ada9a95fb2d984b2436c6a88729060a0],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update\conf, In Quarantäne, [67eff315a4e7191d5cfa7f7580827987],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update\update.exe, In Quarantäne, [67eff315a4e7191d5cfa7f7580827987],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\install.data, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\msvcp110.dll, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\msvcr110.dll, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\btn.png, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\close.png, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\main.xml, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\data.html, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE.html, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE8.html, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\main.css, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\ver.txt, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\google_trends.png, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon128.png, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon16.png, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon48.png, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\loading.gif, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\logo32.ico, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\common.js, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ga.js, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery-1.11.0.min.js, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\js.js, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\library.js, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit-ie8.js, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit2.0.js, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome.manifest, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\install.rdf, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\awesome.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\awesome.xul, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\index.html, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\quick_start.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\quick_start.xul, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\include\speed_dial.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\include\tools\about_blank_hook.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\include\tools\misc.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\include\tools\popup_image_helper.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\include\tools\urlrequestor.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\lib\doT.min.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\lib\jquery-2.1.0.min.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\lib\jquery.autocomplete.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\module\hotSearch.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\module\mostgrid.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\module\search.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\module\stat.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\pack\common.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\pack\ga.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\pack\xagainit.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\en\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\en-US\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\es\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\es-419\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\fr\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-BE\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-CA\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-CH\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-LU\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\it\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\it-CH\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\pl\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\pt-BR\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\ru\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\ru-MO\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\tr\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\vi\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\zh-CN\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\zh-TW\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin\default_logo.png, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin\googlelogo.png, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin\google_trends.png, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin\icon.png, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin\loading.gif, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin\logo.png, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin\luck.png, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin\newtab.ico, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin\simple.css, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin\style.css, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\defaults\preferences\fvd.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\defaults\preferences\preferences.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules\addonmanager.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules\aes.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules\config.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules\dialogs.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules\last_tab.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules\misc.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules\properties.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules\remoterequest.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules\restoreprefs.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules\settings.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030],
PUP.Optional.FasterLight.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpjaeedhlmcojmmhngnbankkodcdlenh\1.0.1_0\manifest.json, In Quarantäne, [76e07692dbb044f25d27a0e5e91c3bc5],
PUP.Optional.FasterLight.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpjaeedhlmcojmmhngnbankkodcdlenh\1.0.1_0\background.js, In Quarantäne, [76e07692dbb044f25d27a0e5e91c3bc5],
PUP.Optional.FasterLight.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpjaeedhlmcojmmhngnbankkodcdlenh\1.0.1_0\content.js, In Quarantäne, [76e07692dbb044f25d27a0e5e91c3bc5],
PUP.Optional.FasterLight.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpjaeedhlmcojmmhngnbankkodcdlenh\1.0.1_0\icon.png, In Quarantäne, [76e07692dbb044f25d27a0e5e91c3bc5],
PUP.Optional.QuickStart.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");), Ersetzt,[104644c4fa91f244d51f1276f80d9c64]
PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\prefs.js, Gut: (), Schlecht: (default_newtabff@gmail.com), Ersetzt,[59fd0cfc86052a0c2a7e9fee41c40df3]
PUP.Optional.DefaultProtectedSearch.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\prefs.js, Gut: (), Schlecht: (defsearchp@gmail.com), Ersetzt,[5006cc3cb4d755e1545586075fa654ac]
PUP.Optional.SweetSearch.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\prefs.js, Gut: (), Schlecht: (sweetsearch@gmail.com), Ersetzt,[2a2c38d06229989e7e33cbc23cc98080]
PUP.Optional.ResultsHub.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\search-simple.xml, In Quarantäne, [bc9a24e4aedd73c3e4da107ba263748c],

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)

sunrise_77 14.08.2015 17:02
adw
Code:
# AdwCleaner v4.208 - Bericht erstellt 14/08/2015 um 17:15:58
# Aktualisiert 09/07/2015 von Xplode
# Datenbank : 2015-08-12.1 [Server]
# Betriebssystem : Windows 8.1  (x64)
# Benutzername : Selina - SUNRISE
# Gestarted von : C:\Users\Selina\Downloads\AdwCleaner_4.208.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\rei
Ordner Gelöscht : C:\ProgramData\AVG Security Toolbar
Ordner Gelöscht : C:\ProgramData\simplitec
Ordner Gelöscht : C:\ProgramData\Fighters
Ordner Gelöscht : C:\ProgramData\{1de678b8-9deb-0e0c-1de6-678b89dee2e2}
Ordner Gelöscht : C:\ProgramData\{61d13d49-e262-aacb-61d1-13d49e26f527}
Ordner Gelöscht : C:\ProgramData\{6ecd4daa-dab7-5f51-6ecd-d4daadab36ab}
Ordner Gelöscht : C:\ProgramData\{83e52cc3-e98f-db14-83e5-52cc3e98b30f}
Ordner Gelöscht : C:\ProgramData\{bdf56971-599d-e834-bdf5-56971599a5c5}
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fighters
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\reimage repair
Ordner Gelöscht : C:\Program Files (x86)\FFlexibleShopper
Ordner Gelöscht : C:\Program Files (x86)\LLuckyoShopuper
Ordner Gelöscht : C:\Program Files (x86)\QueieenCouupOn
Ordner Gelöscht : C:\Program Files (x86)\SalePLius
Ordner Gelöscht : C:\Program Files (x86)\SaverAdDona
Ordner Gelöscht : C:\Program Files (x86)\SSalePlUUs
Ordner Gelöscht : C:\Program Files (x86)\TiocTaCoUPOn
Ordner Gelöscht : C:\Program Files (x86)\topDieeal
Ordner Gelöscht : C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Fighters
Ordner Gelöscht : C:\Program Files\Reimage
Ordner Gelöscht : C:\Users\Anja\AppData\Roaming\simplitec
Ordner Gelöscht : C:\Users\Selina\AppData\Local\Mindspark_Interactive_Net
Ordner Gelöscht : C:\Users\Selina\AppData\Roaming\simplitec
Ordner Gelöscht : C:\Users\Selina\AppData\Roaming\Fighters
Ordner Gelöscht : C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd
Datei Gelöscht : C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ffjcmnpnoopgilmnfhloocdcbnimmmea_0.localstorage
Datei Gelöscht : C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ffjcmnpnoopgilmnfhloocdcbnimmmea_0.localstorage-journal
Datei Gelöscht : C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_nafaimnnclfjfedmmabolbppcngeolgf_0.localstorage
Datei Gelöscht : C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_nafaimnnclfjfedmmabolbppcngeolgf_0.localstorage-journal
Datei Gelöscht : C:\Windows\Reimage.ini
Datei Gelöscht : C:\Users\Selina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Goodgame Empire.lnk
Datei Gelöscht : C:\Users\Selina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Goodgame Empire.lnk
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml
Datei Gelöscht : C:\Users\Selina\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_www.delta-homes.com_0.localstorage
Datei Gelöscht : C:\Users\Selina\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_www.delta-homes.com_0.localstorage-journal

***** [ Geplante Tasks ] *****

Task Gelöscht : Reimage Reminder
Task Gelöscht : ReimageUpdater

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Schlüssel Gelöscht : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\REI_AxControl.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Reimage.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\pc-mechanic
Schlüssel Gelöscht : HKLM\SOFTWARE\4f8e54c5-276f-4db6-0ff9-7e23cbe8abeb
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A07E5BFF-B16C-4ABA-A30F-514213A945E6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10ECCE17-29B5-4880-A8F5-EAD298611484}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{10ECCE17-29B5-4880-A8F5-EAD298611484}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A07E5BFF-B16C-4ABA-A30F-514213A945E6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Reimage
Schlüssel Gelöscht : HKCU\Software\reimagerepair
Schlüssel Gelöscht : HKCU\Software\Avg Secure Update
Schlüssel Gelöscht : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\AVG SafeGuard toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\hdcode
Schlüssel Gelöscht : HKLM\SOFTWARE\SupDp
Schlüssel Gelöscht : HKLM\SOFTWARE\Uniblue
Schlüssel Gelöscht : HKLM\SOFTWARE\Fighters
Schlüssel Gelöscht : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
Schlüssel Gelöscht : HKU\.DEFAULT\Software\Avg Secure Update
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\AVG Secure Search
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Reimage
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Reimage Repair
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\delta-homes.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\vi-view.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.delta-homes.com

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17840


-\\ Mozilla Firefox v38.0.5 (x86 de)

[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("browser.search.searchengine.iconURL", "hxxp://search.delta-homes.com/favicon.ico");
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("browser.search.searchengine.url", "hxxp://search.delta-homes.com/web/?type=ds&ts=1432145919&z=b90eddd36164fc51f5cea57g9zdccocg5z4watbg0m&from=wpm05203&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708[...]
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Fo8ypww4LXcTefwb.scode", "(function(){try{if(window.location.href.indexOf(\"rjsGqHY6qjk7pdkFrjUEpjY5qTa\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\[...]
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.MoaCzqFv1H0kqxwv.scode", "(function(){try{if(window.location.href.indexOf(\"rjsGqHY6qjk7pdkFrjUEpjY5qTa\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\[...]
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.T1H729OMT8gQgO4s.scode", "(function(){try{if(window.location.href.indexOf(\"rjsGqHY6qjk7pdkFrjUEpjY5qTa\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\[...]
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.eXCrwMSmKQEjPlTQ.scode", "(function(){try{if(window.location.href.indexOf(\"rjsGqHY6qjk7pdkFrjUEpjY5qTa\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\[...]
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.gSiOiY5M8tE2YN5e.scode", "(function(){try{if(window.location.href.indexOf(\"rjsGqHY6qjk7pdkFrjUEpjY5qTa\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\[...]
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.pm8I7IOBxrZdHp9o.scode", "(function(){try{if(window.location.href.indexOf(\"rjsGqHY6qjk7pdkFrjUEpjY5qTa\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\[...]
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.quick_start.enable_search1", false);
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.tUy0xVOGMHswu9j4.scode", "(function(){try{if(window.location.href.indexOf(\"rjsGqHY6qjk7pdkFrjUEpjY5qTa\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\[...]

-\\ Google Chrome v

[C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Preferences] - Gelöscht [Extension] : jkpahjicmehopmlkbenbkmckcedlcmhk
[C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}
[C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}
[C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Startup_URLs] : E99AFE4F3468CFEC0C2891AD6F9996390F20CDD9983503FEDDF86C9C7D69B7C2"},"software_reporter":{"prompt_reason":"435CAFFE84F8E81536E5FF97F4AD3339210F3871EC20ABA68FC074184EF80F3C","prompt_seed":"C159244793EF19D00E070124A61834E914F1463C113271B77BEABFB03A4A62A6","prompt_version":"C0B08D1424D593A0CA963274B975E92B3B3BBA8018844CCC63DA34A5264A6FC5"},"sync":{"remaining_rollback_tries":"CB4B71268EE10464C146ACCEB9F097A68D6F4B5596BFAD4A4ED2FAE3E118A29C"}},"super_mac":"0E62C076E5481250C44E3259FBD5660AA912133EABF993E3BA48E24B27FB3AAB"},"safebrowsing":{"incidents_sent":{"1":{"extensions.settings":"1542131244"},"2":{"chrome.dll":"3774509266","chrome_child.dll":"3743713718"}}},"session":{"restore_on_startup":4,"startup_urls":["hxxp://www.delta-homes.com/?type=hp&ts=1432145919&z=b90eddd36164fc51f5cea57g9zdccocg5z4watbg0m&from=wpm05203&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772

-\\ Opera v0.0.0.0


*************************

AdwCleaner[R0].txt - [13146 Bytes] - [14/08/2015 17:13:22]
AdwCleaner[S0].txt - [12905 Bytes] - [14/08/2015 17:15:58]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [12965  Bytes] ##########
JRT
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.6 (08.10.2015:1)
OS: Windows 8.1 x64
Ran by Selina on 14.08.2015 at 17:24:47,66
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully deleted: [Service] suite service [Reboot required]



~~~ Tasks

Successfully deleted: [Task] C:\Windows\system32\tasks\TuneUpUtilities_Task_BkGndMaintenance2013



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shellex\ContextMenuHandlers\TuneUp Shredder Shell Extension
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Update Faster Light
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Util Faster Light



~~~ Files

Successfully deleted: [File] C:\Users\Selina\AppData\Roaming\appdataFr3.bin
Successfully deleted: [File] C:\Users\Selina\Appdata\Local\google\chrome\user data\default\local storage\chrome-extension_ogminpmldncgcmokldnmmapddoccmhfl_0.localstorage
Successfully deleted: [File] C:\Users\Selina\Appdata\Local\google\chrome\user data\default\local storage\chrome-extension_ogminpmldncgcmokldnmmapddoccmhfl_0.localstorage-journal
Successfully deleted: [File] C:\Users\Selina\Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.superfish.com_0.localstorage
Successfully deleted: [File] C:\Users\Selina\Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.superfish.com_0.localstorage-journal



~~~ Folders

Successfully deleted: [Folder] C:\Windows\SysWOW64\ai_recyclebin
Successfully deleted: [Folder] C:\Windows\SysWOW64\amd64
Successfully deleted: [Folder] C:\Windows\SysWOW64\x86



~~~ FireFox

Successfully deleted the following from C:\Users\Selina\AppData\Roaming\mozilla\firefox\profiles\8cmuviq6.default\prefs.js

user_pref(browser.search.searchengine.alias, delta-homes);
user_pref(browser.search.searchengine.desc, this is my first firefox searchEngine);
user_pref(browser.search.searchengine.name, delta-homes);
user_pref(browser.search.searchengine.ptid, wpm05203);
user_pref(browser.search.searchengine.uid, ST1000LM024XHN-M101MBB_S32XJ9DF708772);
user_pref(browser.search.selectedEngine, delta-homes);
user_pref(extensions.sweetsearch@gmail.com.install-event-fired, true);



~~~ Chrome


[C:\Users\Selina\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\Selina\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\Selina\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\Selina\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 14.08.2015 at 17:32:49,52
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:13-08-2015
durchgeführt von Selina (Administrator) auf SUNRISE (14-08-2015 17:37:03)
Gestartet von C:\Users\Selina\Desktop
Geladene Profile: Selina (Verfügbare Profile: Selina & Anja)
Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser nicht gefunden!)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.4.9926.17994_x64__8wekyb3d8bbwe\glcnd.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-20] (NVIDIA Corporation)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [111976 2013-09-11] (Intel Corporation)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [1080992 2014-05-15] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\ASUSWSLoader.exe [63296 2014-02-25] ()
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\mcafee\platform\McUICnt.exe [642040 2014-08-05] (McAfee, Inc.)
HKLM-x32\...\Run: [PixelPlanet PdfPrinter-Monitor] => C:\Program Files (x86)\Common Files\PixelPlanet\PdfPrinter 7\PdfPrinterMonitor.exe [3786880 2013-07-12] (PixelPlanet)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [AoboAutoRun32] => rundll32.exe "C:\Windows\SysWOW64\drivers\sysfilter\WinSock.dll",OK
HKLM\...\Policies\Explorer\Run: [AoboAutoRun64] => rundll32.exe "C:\Windows\SysWOW64\drivers\sysfilter\WinSock64.dll",OK
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Run: [Infigo] => C:\Program Files (x86)\Infigo\Infigo.exe onrun
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Run: [BingSvc] => C:\Users\Selina\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe  --extensions-on-chrome-urls --test-type --load-extension="c:\Program Files\Google\Chrome\Application\Extensions\chrome\app\37.1329.15.30" - (Der Dateneintrag hat 107 mehr Zeichen).
IFEO: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\fighterlauncher.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-06-10]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Selina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sparkol VideoScribe 2.1 PRO Full Crack.lnk [2015-04-15]
ShortcutTarget: Sparkol VideoScribe 2.1 PRO Full Crack.lnk -> C:\ProgramData\{bdf56971-599d-e834-bdf5-56971599a5c5}\Sparkol VideoScribe 2.1 PRO Full Crack.exe (Keine Datei)
Startup: C:\Users\Selina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sparkol VideoScribe Professional 2.1.0 Full(1).lnk [2015-04-15]
ShortcutTarget: Sparkol VideoScribe Professional 2.1.0 Full(1).lnk -> C:\ProgramData\{1de678b8-9deb-0e0c-1de6-678b89dee2e2}\Sparkol VideoScribe Professional 2.1.0 Full(1).exe (Keine Datei)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
GroupPolicy: Gruppenrichtline auf Chrome erkannt <======= ACHTUNG
CHR HKLM\SOFTWARE\Policies\Google: Richtlinienbeschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-AT&Src=WD8&Tid=000328B0&OHP=http%3A%2F%2Fwww.delta%2Dhomes.com%2F%3Ftype%3Dhp%26ts%3D1431679656%26z%3D4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z%26from%3Dwpm05153%26uid%3DST1000LM024XHN%2DM101MBB%5FS32XJ9DF708772&OSP=http%3A%2F%2Fdo%2Dsearch.com%2Fweb%2F%3Futm%5Fsource%3Db%26utm%5Fmedium%3D%26utm%5Fcampaign%3Dinstall%5Fie%26utm%5Fcontent%3Dds%26from%3D%26uid%3DST500DM002%2D1BC142%5FW2A27G6AXXXXW2A27G6A%26ts%3D1420373293%26type%3Ddefault%26q%3D%7BsearchTerms%7D
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: SalePlus -> {0d5b8aad-5e9d-46bd-a6a9-b98c883b23f4} -> C:\Program Files (x86)\SalePlus\kJEzufod2hPs3c.x64.dll Keine Datei
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)
BHO: SalePlus -> {ba254a32-0efe-4ce1-9c79-f2ba7a1490f7} -> C:\Program Files (x86)\SalePlus\VUJpPdpWzowSHb.x64.dll Keine Datei
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2014-09-04] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2014-09-04] (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{517FD05F-0702-4F6F-BB2C-247A2CEFCC94}: [DhcpNameServer] 192.168.8.1 192.168.8.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default
FF SearchEngineOrder.3: Bing
FF Homepage: hxxp://www.google.at/
FF Keyword.URL: hxxp://www.bing.com/search?FORM=SK2MDF&PC=SK2M&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-13] ()
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2014-09-04] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-13] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2014-09-04] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-05-22] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-11-22] (Microsoft Corporation)
FF SearchPlugin: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\google-images.xml [2015-07-04]
FF SearchPlugin: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\google-maps.xml [2015-07-04]
FF Extension: Bing Search - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\bingsearch.full@microsoft.com [2015-05-14]
FF Extension: Cliqz - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\cliqz@cliqz.com.xpi [2015-07-25]
FF Extension: Adblock Plus - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-03-14]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-07-31]
FF HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\cliqz@cliqz.com

Chrome:
=======
CHR Profile: C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-05]
CHR Extension: (YouTube) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-05]
CHR Extension: (Google Search) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-05]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-08-13]
CHR Extension: (Google Wallet) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-05]
CHR Extension: (Gmail) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-05]
StartMenuInternet: Google Chrome - Chrome.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe [71680 2014-02-25] (ASUS Cloud Corporation) [Datei ist nicht signiert]
S4 AV Engine Scanning Service; C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVScanningService.exe [2009912 2014-02-10] (Preventon Technologies Limited)
S4 AV Watch Service; C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVWatchService.exe [400528 2014-02-10] (Preventon Technologies Limited)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation)
S2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [115632 2013-09-11] (Intel Corporation)
S2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116656 2013-09-11] (Intel Corporation)
S2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148688 2013-09-11] (Intel Corporation)
S2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [124880 2013-09-11] (Intel Corporation)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [Datei ist nicht signiert]
S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2014-09-04] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-29] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2014-08-01] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1041192 2014-07-24] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-07-18] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-07-18] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-20] (NVIDIA Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
S2 TuneUp.UtilitiesSvc; "C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [71952 2014-03-31] (ASUS Corporation)
S3 AVFSFilter; C:\Windows\system32\DRIVERS\avfsfilter.sys [13720 2014-02-10] ()
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-07-18] (McAfee, Inc.)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [143568 2013-09-11] (Intel Corporation)
R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [114680 2013-09-11] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [287160 2013-09-11] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494272 2013-09-11] (Intel Corporation)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-08-14] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-10-23] (Intel Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-07-18] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313800 2014-07-18] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-07-18] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526352 2014-07-18] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-07-18] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [444720 2014-07-24] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96592 2014-07-24] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-07-18] (McAfee, Inc.)
R2 plctrl; C:\Program Files\ASUS\P4G\plctrl.sys [14136 2014-02-11] (Windows (R) Win 7 DDK provider)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [827096 2015-03-12] (Realsil Semiconductor Corporation)
S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [X]
U0 msahci; system32\drivers\msahci.sys [X]
U3 NPF; kein ImagePath
S3 TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-14 17:37 - 2015-08-14 17:37 - 00021722 _____ C:\Users\Selina\Desktop\FRST.txt
2015-08-14 17:32 - 2015-08-14 17:36 - 00003171 _____ C:\Users\Selina\Desktop\JRT.txt
2015-08-14 17:24 - 2015-08-14 17:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2015-08-14 17:23 - 2015-08-14 17:23 - 01791580 _____ (Malwarebytes Corporation) C:\Users\Selina\Downloads\JRT.exe
2015-08-14 17:20 - 2015-08-14 17:20 - 00013102 _____ C:\Users\Selina\Desktop\AdwCleaner[S0].txt
2015-08-14 17:13 - 2015-08-14 17:16 - 00000000 ____D C:\AdwCleaner
2015-08-14 17:12 - 2015-08-14 17:12 - 02248704 _____ C:\Users\Selina\Downloads\AdwCleaner_4.208.exe
2015-08-14 15:56 - 2015-07-16 23:14 - 25192448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-08-14 15:56 - 2015-07-16 22:36 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-08-14 15:56 - 2015-07-16 22:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-08-14 15:56 - 2015-07-16 22:35 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-08-14 15:56 - 2015-07-16 22:26 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-08-14 15:56 - 2015-07-16 22:23 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-08-14 15:56 - 2015-07-16 22:21 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-08-14 15:56 - 2015-07-16 22:20 - 19870208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-08-14 15:56 - 2015-07-16 21:53 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-08-14 15:56 - 2015-07-16 21:51 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-08-14 15:56 - 2015-07-16 21:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-08-14 15:56 - 2015-07-16 21:45 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-08-14 15:56 - 2015-07-16 21:45 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-08-14 15:56 - 2015-07-16 21:41 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-08-14 15:56 - 2015-07-16 21:39 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-08-14 15:56 - 2015-07-16 21:38 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-08-14 15:56 - 2015-07-16 21:36 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-08-14 15:56 - 2015-07-16 21:34 - 14451200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-08-14 15:56 - 2015-07-16 21:32 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-08-14 15:56 - 2015-07-16 21:14 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-08-14 15:56 - 2015-07-16 21:13 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-08-14 15:56 - 2015-07-16 21:12 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-08-14 15:56 - 2015-07-16 21:12 - 02427904 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-08-14 15:56 - 2015-07-16 21:10 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-08-14 15:56 - 2015-07-16 21:06 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-08-14 15:56 - 2015-07-16 21:01 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-08-14 15:56 - 2015-07-16 20:52 - 01048576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2015-08-14 15:56 - 2015-07-16 20:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-08-14 15:56 - 2015-07-16 20:42 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-08-14 15:56 - 2015-07-16 20:38 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-08-14 15:56 - 2015-07-16 20:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-08-14 15:55 - 2015-07-16 02:29 - 07458648 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-14 15:55 - 2015-07-16 02:29 - 01735000 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-14 15:55 - 2015-07-16 02:29 - 00101720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-08-14 15:55 - 2015-07-16 02:28 - 01499920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-08-14 15:55 - 2015-07-10 19:54 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-08-14 15:53 - 2015-06-12 19:03 - 18823680 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2015-08-14 15:53 - 2015-06-12 18:36 - 15159296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-08-14 15:52 - 2015-07-07 11:40 - 00270168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2015-08-14 15:52 - 2015-07-07 11:40 - 00114520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2015-08-14 15:52 - 2015-07-07 11:40 - 00044560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2015-08-14 15:51 - 2015-07-02 00:19 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-08-14 15:51 - 2015-07-02 00:16 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-08-14 15:51 - 2015-07-01 23:37 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-08-14 15:51 - 2015-07-01 23:35 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-08-14 15:50 - 2015-07-29 01:24 - 00025776 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-08-14 15:50 - 2015-07-28 16:24 - 01148416 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-08-14 15:50 - 2015-07-28 16:24 - 01116160 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-08-14 15:50 - 2015-07-28 16:24 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-08-14 15:50 - 2015-07-28 16:24 - 00743424 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-08-14 15:50 - 2015-07-28 16:24 - 00437248 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-08-14 15:50 - 2015-07-28 16:24 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-08-14 15:48 - 2015-07-13 21:46 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-14 15:48 - 2015-07-13 21:45 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2015-08-14 15:47 - 2015-07-14 23:59 - 01113944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-08-14 15:47 - 2015-07-14 23:59 - 00487256 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2015-08-14 15:47 - 2015-07-14 23:59 - 00393560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2015-08-14 15:47 - 2015-07-09 19:13 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-08-14 15:47 - 2015-07-09 19:13 - 00221184 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-08-14 15:47 - 2015-07-09 18:30 - 00212992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2015-08-14 15:46 - 2015-07-14 05:22 - 02529880 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-08-14 15:46 - 2015-07-14 05:21 - 01901776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-08-14 15:46 - 2015-07-10 19:42 - 02345472 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-08-14 15:46 - 2015-07-10 18:47 - 01556992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-08-14 15:46 - 2015-06-11 22:12 - 02476376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-08-14 15:46 - 2015-06-11 22:12 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-08-14 15:46 - 2015-05-12 02:24 - 00536920 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-08-14 15:45 - 2015-07-29 16:37 - 01994752 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-08-14 15:45 - 2015-07-29 16:30 - 01381888 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-08-14 15:45 - 2015-07-29 16:23 - 01559552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-08-14 15:45 - 2015-07-24 20:57 - 04177408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-08-14 15:45 - 2015-07-24 20:57 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-08-14 15:45 - 2015-07-24 20:52 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-08-14 15:45 - 2015-07-24 19:27 - 00301568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-08-14 15:45 - 2015-07-24 19:23 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-08-14 15:45 - 2015-07-10 20:19 - 01101824 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-08-14 15:45 - 2015-07-10 19:14 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-08-14 15:45 - 2015-07-10 19:13 - 07032320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-08-14 15:45 - 2015-07-10 18:31 - 06213120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-08-14 00:16 - 2015-08-14 00:16 - 00000032 _____ C:\ProgramData\Temp.log
2015-08-13 23:04 - 2015-08-13 23:04 - 02248704 _____ C:\Users\Selina\Downloads\AdwCleaner_4.208.exe.part
2015-08-13 23:03 - 2015-08-13 23:03 - 02173952 _____ (Farbar) C:\Users\Selina\Downloads\FRST64(1).exe
2015-08-13 22:58 - 2015-08-13 22:58 - 00000000 ____D C:\Users\Selina\Desktop\FRST-OlderVersion
2015-08-13 22:05 - 2015-08-13 22:05 - 00120116 _____ C:\Users\Selina\Desktop\mbam.txt
2015-08-13 10:12 - 2015-08-14 17:18 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-08-13 10:12 - 2015-08-13 10:12 - 00001116 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-08-13 10:12 - 2015-08-13 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-08-13 10:11 - 2015-08-13 10:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-08-13 10:11 - 2015-08-13 10:11 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-13 10:11 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-08-13 10:11 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-08-13 10:11 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-08-13 10:07 - 2015-08-13 10:07 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Selina\Downloads\mbam-setup-2.1.8.1057.exe
2015-08-13 09:35 - 2015-08-13 09:35 - 00000750 _____ C:\Users\Selina\Desktop\Revo Uninstaller.lnk
2015-08-13 09:34 - 2015-08-13 09:34 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Selina\Downloads\revosetup95.exe
2015-08-12 13:51 - 2015-08-12 13:51 - 00055142 _____ C:\Users\Selina\Desktop\FRST1.txt
2015-08-12 13:51 - 2015-08-12 13:51 - 00041332 _____ C:\Users\Selina\Desktop\Addition1.txt
2015-08-12 11:31 - 2015-08-14 17:37 - 00000000 ____D C:\FRST
2015-08-12 11:30 - 2015-08-13 22:58 - 02173952 _____ (Farbar) C:\Users\Selina\Desktop\FRST64.exe
2015-08-05 20:25 - 2015-08-06 21:44 - 00000000 ____D C:\Users\Selina\Desktop\Youtube channel
2015-07-25 19:38 - 2015-06-28 07:07 - 00442712 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-25 19:38 - 2015-06-28 07:07 - 00178008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-25 19:38 - 2015-06-28 07:06 - 01311960 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-25 19:38 - 2015-06-28 07:06 - 00332120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-25 19:38 - 2015-06-27 18:42 - 00747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-25 19:38 - 2015-06-27 05:13 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-25 19:38 - 2015-06-27 05:12 - 00401408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-25 19:38 - 2015-06-27 05:12 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-25 19:38 - 2015-06-27 04:40 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-07-25 19:38 - 2015-06-27 04:05 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-25 19:38 - 2015-06-27 04:00 - 00989184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-25 19:38 - 2015-06-27 03:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-07-25 19:38 - 2015-06-27 03:26 - 00802816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-25 19:35 - 2015-05-30 23:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2015-07-25 19:35 - 2015-05-30 21:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2015-07-25 19:35 - 2015-05-30 21:35 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-07-25 19:32 - 2015-05-03 02:39 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-07-25 19:30 - 2015-06-16 00:41 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-25 19:30 - 2015-06-16 00:24 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-25 19:30 - 2015-06-15 23:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-25 19:30 - 2015-06-15 23:09 - 03607552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-25 19:30 - 2015-06-15 22:50 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-25 19:30 - 2015-06-15 21:57 - 02460160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-25 19:28 - 2015-05-07 17:21 - 00522240 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll
2015-07-25 19:28 - 2015-05-07 17:05 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll
2015-07-25 19:26 - 2015-05-07 19:50 - 22292672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-07-25 19:26 - 2015-05-07 19:00 - 03109376 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2015-07-25 19:26 - 2015-05-07 18:53 - 19734960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-07-25 19:26 - 2015-05-07 18:12 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2015-07-25 19:23 - 2015-05-11 20:17 - 01201664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2015-07-25 19:22 - 2014-11-04 21:25 - 00059712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdclass.sys
2015-07-25 19:22 - 2014-11-04 21:25 - 00051008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouclass.sys
2015-07-25 19:22 - 2014-11-04 08:55 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sermouse.sys
2015-07-25 19:22 - 2014-11-04 08:54 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\i8042prt.sys
2015-07-25 19:22 - 2014-11-04 08:54 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2015-07-25 19:22 - 2014-11-04 08:54 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouhid.sys
2015-07-25 19:20 - 2015-04-25 04:25 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2015-07-25 19:18 - 2015-06-27 01:21 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-25 19:16 - 2015-05-03 17:09 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-07-25 19:16 - 2015-05-03 16:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-07-25 19:16 - 2015-05-03 16:55 - 00971776 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2015-07-25 19:16 - 2015-05-03 16:49 - 00811008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-14 17:35 - 2015-06-10 19:03 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-14 17:29 - 2014-09-30 03:18 - 00003594 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2923131921-1963989444-91532992-1001
2015-08-14 17:19 - 2014-09-30 03:13 - 00000000 ___DO C:\Users\Selina\OneDrive
2015-08-14 17:19 - 2014-07-31 19:27 - 01269707 _____ C:\Windows\WindowsUpdate.log
2015-08-14 17:17 - 2013-08-22 16:46 - 00097526 _____ C:\Windows\setupact.log
2015-08-14 17:17 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-14 17:11 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2015-08-14 17:00 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru
2015-08-14 16:51 - 2015-03-26 23:57 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014
2015-08-14 16:51 - 2014-03-18 10:16 - 00191386 _____ C:\Windows\PFRO.log
2015-08-14 16:49 - 2014-05-15 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2015-08-14 16:48 - 2014-05-15 17:58 - 00000000 ____D C:\Program Files (x86)\ASUS
2015-08-14 16:22 - 2014-07-31 19:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-08-14 16:22 - 2014-05-16 01:45 - 00773008 _____ C:\Windows\system32\perfh007.dat
2015-08-14 16:22 - 2014-05-16 01:45 - 00162310 _____ C:\Windows\system32\perfc007.dat
2015-08-14 16:22 - 2014-03-18 17:26 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-14 16:17 - 2015-04-10 18:56 - 00000000 ___SD C:\Windows\system32\GWX
2015-08-14 16:15 - 2015-05-05 08:22 - 00000435 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2015-08-14 16:15 - 2013-08-22 16:44 - 00485720 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-14 16:12 - 2015-04-10 18:57 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-08-14 16:12 - 2014-12-28 01:09 - 00000000 ____D C:\Windows\system32\appraiser
2015-08-14 16:12 - 2014-10-10 16:01 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\WinStore
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Defender
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-08-14 16:12 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2015-08-14 16:10 - 2014-10-20 18:24 - 00000000 ____D C:\Windows\system32\MRT
2015-08-14 16:02 - 2014-10-20 18:24 - 132483416 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-08-14 15:56 - 2015-03-27 00:00 - 00000000 ____D C:\Users\Selina\AppData\Roaming\Skype
2015-08-14 15:52 - 2014-09-30 03:49 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{924A399C-D8A5-42C9-8053-6DBF492001E4}
2015-08-14 15:52 - 2014-09-30 03:42 - 00000000 ____D C:\Users\Selina\AppData\Roaming\WildTangent
2015-08-14 15:52 - 2014-05-15 17:59 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-08-14 15:52 - 2014-05-15 17:59 - 00000000 ____D C:\ProgramData\WildTangent
2015-08-14 00:19 - 2014-10-05 10:48 - 00000000 ____D C:\ProgramData\CLSK
2015-08-13 23:45 - 2015-07-04 13:14 - 00000000 ____D C:\Users\Selina\AppData\Roaming\Ethereal
2015-08-13 23:25 - 2015-03-29 23:06 - 00000000 __SHD C:\Users\Selina\AppData\Local\EmieUserList
2015-08-13 23:25 - 2015-03-29 23:06 - 00000000 __SHD C:\Users\Selina\AppData\Local\EmieSiteList
2015-08-13 23:25 - 2015-03-29 23:06 - 00000000 __SHD C:\Users\Selina\AppData\Local\EmieBrowserModeList
2015-08-13 23:25 - 2014-10-05 10:06 - 00000000 ____D C:\Program Files (x86)\Google
2015-08-13 23:24 - 2015-04-08 00:00 - 00000000 ____D C:\Program Files (x86)\TechSmith
2015-08-13 23:21 - 2014-12-26 19:39 - 00000000 ____D C:\Users\Selina\AppData\Roaming\DVDVideoSoft
2015-08-13 23:17 - 2015-03-27 00:00 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-08-13 11:40 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2015-08-13 11:38 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\PLA
2015-08-13 11:38 - 2013-08-22 15:25 - 00524288 ___SH C:\Windows\system32\config\BBI
2015-08-13 09:45 - 2014-12-31 23:49 - 00026624 ___SH C:\Users\Selina\Documents\Thumbs.db
2015-08-13 09:35 - 2015-06-10 19:03 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-08-13 09:23 - 2014-09-30 02:27 - 00000000 ____D C:\Users\Selina\AppData\Local\Packages
2015-08-12 14:26 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2015-08-11 14:51 - 2014-07-31 19:50 - 00000000 ____D C:\Program Files (x86)\McAfee
2015-08-08 15:55 - 2015-05-17 12:53 - 00794088 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-08-08 15:55 - 2015-05-17 12:53 - 00179688 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-08-06 14:20 - 2014-07-31 19:50 - 00000000 ____D C:\ProgramData\McAfee
2015-08-06 14:14 - 2015-05-18 22:08 - 00000000 ____D C:\Users\Selina\AppData\Local\CrashDumps
2015-08-05 20:03 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\NDF
2015-07-26 15:51 - 2015-04-23 23:31 - 00000000 ____D C:\Users\Selina\Desktop\USB Stick
2015-07-26 11:37 - 2014-09-30 22:28 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-07-25 19:18 - 2015-06-17 08:02 - 00000000 ____D C:\Program Files\Common Files\AV

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-03-18 19:08 - 2015-03-29 15:42 - 0000020 _____ () C:\Users\Selina\AppData\Local\appdataFr3.bin
2014-07-31 19:41 - 2014-07-31 19:41 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-03-14 14:02 - 2015-03-14 14:02 - 0000199 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2014-05-15 17:58 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2014-05-15 17:58 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2014-05-15 17:58 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS
2015-08-14 00:16 - 2015-08-14 00:16 - 0000032 _____ () C:\ProgramData\Temp.log
2014-10-05 10:49 - 2014-10-05 10:51 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2014-10-05 10:48 - 2014-10-05 10:49 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\SetStretch.VBS


Einige Dateien in TEMP:
====================
C:\Users\Selina\AppData\Local\Temp\BSvcProcessor.exe
C:\Users\Selina\AppData\Local\Temp\BSvcUpdater.exe
C:\Users\Selina\AppData\Local\Temp\JMC_WM.exe
C:\Users\Selina\AppData\Local\Temp\oi_{B8811E58-D5AA-4DBA-9149-2F98DB59161D}.exe
C:\Users\Selina\AppData\Local\Temp\optprosetup.exe
C:\Users\Selina\AppData\Local\Temp\PixelPlanetpdrv7.dll
C:\Users\Selina\AppData\Local\Temp\PixelPlanetpdui7.dll
C:\Users\Selina\AppData\Local\Temp\Quarantine.exe
C:\Users\Selina\AppData\Local\Temp\regini.exe
C:\Users\Selina\AppData\Local\Temp\ReimagePackage.exe
C:\Users\Selina\AppData\Local\Temp\ReiSysUpdate.exe
C:\Users\Selina\AppData\Local\Temp\SetupProPlusRetail.x86.de-DE_ProPlusRetail_36PJN-VMKQD-9PCVW-VW84P-D67T3_act_1_.exe
C:\Users\Selina\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Selina\AppData\Local\Temp\sqlite3.dll
C:\Users\Selina\AppData\Local\Temp\sqlite3.exe
C:\Users\Selina\AppData\Local\Temp\UNINSTALL.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-08-05 20:40

==================== Ende von Ergebnis ============================
Addition
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:13-08-2015
durchgeführt von Selina (2015-08-14 17:38:05)
Gestartet von C:\Users\Selina\Desktop
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2923131921-1963989444-91532992-500 - Administrator - Disabled)
Anja (S-1-5-21-2923131921-1963989444-91532992-1005 - Limited - Enabled) => C:\Users\Anja
Gast (S-1-5-21-2923131921-1963989444-91532992-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2923131921-1963989444-91532992-1003 - Limited - Enabled)
Selina (S-1-5-21-2923131921-1963989444-91532992-1001 - Administrator - Enabled) => C:\Users\Selina

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Disabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 3.0.8 - ASUS)
CLIQZ (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 1.0.0 - CLIQZ.com)
Fighters (x32 Version: 4.5.146 - SPAMFIGHTER ApS) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C) (Version: 7.1.0.2103 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.6.0.1038 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation)
MAGIX Foto Designer 7 (HKLM-x32\...\MAGIX_{2DCD52EE-1AE1-4128-9819-A79F7D09B6B3}) (Version: 7.0.1.1 - MAGIX AG)
MAGIX Foto Designer 7 (Version: 7.0.1.1 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft Office Professional Plus 2013 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 15.0.4737.1003 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
NVIDIA Graphics Driver 332.85 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 332.85 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.0927 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0927 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
PixelPlanet PdfPrinter 7 (64bit) (HKLM\...\{000F58F3-A544-4BB5-AF1B-761EA1C8595C}) (Version: 7.0.60 - PixelPlanet)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.29.314.2014 - Realtek)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Sparkol VideoScribe (HKLM-x32\...\Sparkol VideoScribe 2.2.81) (Version: 2.2.81 - Sparkol)
Sparkol VideoScribe (x32 Version: 2.2.81 - Sparkol) Hidden
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.340 - TuneUp Software) Hidden
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Watchtower Library 2012 - Deutsch (HKLM-x32\...\{CFDF0961-77C7-4392-96EE-624DFE81C3C2}) (Version: 14.0 - Watchtower Bible and Tract Society of Pennsylvania, Inc.)
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.2.301 - ASUS Cloud Corporation)
Windows-Treiberpaket - ASUS (ATP) Mouse  (03/17/2014 1.0.0.207) (HKLM\...\AA2CC56D4BBEE037DC99871F5F6551133D2A0CC3) (Version: 03/17/2014 1.0.0.207 - ASUS)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2923131921-1963989444-91532992-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> "C:\Windows\system32\igfxEM.exe" Keine Datei

==================== Wiederherstellungspunkte =========================

13-08-2015 23:09:56 Revo Uninstaller's restore point - McAfee LiveSafe – Internet Security

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {02554177-D27A-4093-8467-1296F3541CFE} - \Yahoo! Search -> Keine Datei <==== ACHTUNG
Task: {1C092132-88FB-41DC-8364-824E30BFAD4D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-05-12] (Microsoft Corporation)
Task: {1D77BDEF-A383-44E5-A8D5-3CF4D8699796} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-05-12] (Microsoft Corporation)
Task: {2761783C-2564-4D71-BD14-08A3EF337853} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-13] (Adobe Systems Incorporated)
Task: {2E93A9E0-3BEC-496C-9434-8021BDF4962C} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {3544FBEC-1A3C-457E-80A6-84D5FE4775A2} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-08-14] (Microsoft Corporation)
Task: {3B0A9D92-6D5C-4FBC-BAE6-01190DCA6424} - \Yahoo! Search Updater -> Keine Datei <==== ACHTUNG
Task: {555E4B6D-40E1-43F1-B4F2-DC65CB4FC170} - System32\Tasks\{D4ED4DD4-E6F7-407F-8C09-B3EAACAFCBA5} => pcalua.exe -a C:\Users\Selina\AppData\Roaming\vi-view\UninstallManager.exe -c  -ptid=cor
Task: {5E1D91C1-AC00-4421-867F-D6CAEAB30CA7} - System32\Tasks\P4GIntlCtrl => C:\Program Files\ASUS\P4G\IntlDPST.exe [2014-02-11] ()
Task: {649DAAEE-F738-41E9-9EF5-F4669CF3A588} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {744CE80B-F1BF-4F2E-8B11-8BB8381A7604} - System32\Tasks\{86E86F40-51C2-4AB3-87B4-A0C0DF4F4D34} => pcalua.exe -a "C:\Program Files (x86)\Intel\Intel(R) Dynamic Platform and Thermal Framework\Uninstall\setup.exe" -c -uninstall
Task: {945D81A6-4C2B-4F64-BF0A-E2ECDCC9FA81} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {DD929979-D7D4-4DA4-8CB3-B333EEB553B6} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2014-02-11] (ASUS)
Task: {EA858E9F-4743-42FC-BD69-BD3A731EEF91} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {FD4022ED-7434-4DD9-B0AF-4BEA35891F08} - System32\Tasks\Opera scheduled Autoupdate 1419616129 => C:\Program Files (x86)\Opera\launcher.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2014-09-30 22:28 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-07-31 19:33 - 2013-10-23 14:44 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\Selina\OneDrive:ms-properties

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Selina\AppData\Roaming\Microsoft\Windows Photo Viewer\Hintergrundbild der Windows-Fotoanzeige.jpg
DNS Servers: 192.168.8.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\StartupFolder: => "simplicheck.lnk"
HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"
HKLM\...\StartupApproved\Run: => "DptfPolicyLpmServiceHelper"
HKLM\...\StartupApproved\Run: => "NvBackend"
HKLM\...\StartupApproved\Run: => "IgfxTray"
HKLM\...\StartupApproved\Run: => "HotKeysCmds"
HKLM\...\StartupApproved\Run: => "Persistence"
HKLM\...\StartupApproved\Run32: => "CLMLServer"
HKLM\...\StartupApproved\Run32: => "mcpltui_exe"
HKLM\...\StartupApproved\Run32: => "PixelPlanet PdfPrinter-Monitor"
HKLM\...\StartupApproved\Run32: => "AVG_UI"
HKLM\...\StartupApproved\Run32: => "CommonToolkitTray"
HKLM\...\StartupApproved\Run32: => "SWPROguard"
HKLM\...\StartupApproved\Run32: => "vProt"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\StartupFolder: => "Sparkol VideoScribe 2.1 PRO Full Crack.lnk"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\StartupFolder: => "Sparkol VideoScribe Professional 2.1.0 Full(1).lnk"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Yahoo! Search"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Power2GoExpress"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Infigo"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "BingSvc"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{107B701F-D6F2-4125-989D-013EBE4114C2}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{4756372F-1DBA-4E0D-88D4-10D9CBE588DE}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{701A95DF-EB9C-41A2-9DB7-7FCB240568EE}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{C24A835C-861A-49D8-A2CC-9053C11552DB}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{A34F36B9-4BB2-40D4-BEAC-72D3B6A7D7B8}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{DA8C5E14-1AF3-4680-8A78-32EA772C239B}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{32FC1979-2D76-4947-8C75-8ED839D364EB}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{9DEDC08A-4AAD-4EFE-A264-D914813E7650}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{FDA1092F-154E-4FB1-B71A-84412016E944}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{DF970333-2791-4A78-B77A-7DFD953F58EA}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{650C856D-3797-48AE-B0EF-00F36AAF1043}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{1D872238-8039-4BF5-826A-5B4040368753}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{077BF549-8F4A-4C61-BE12-C4D9936F6F7C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{69571B03-E475-4EAD-8620-E2BE564EB6AB}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{C6C0290D-DDE8-48B3-B84D-B3E8DC693DC3}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{4DECD748-EF63-4CCC-BAC0-E39A79EEB77F}] => (Allow) LPort=8317
FirewallRules: [{00BE4382-D8C9-44D7-A3C3-A74A01E42A93}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{8842BE8D-197C-4EE5-9A67-8B063359D6D7}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{E26CC15F-1C7F-440C-9A34-6096EEF8893D}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [TCP Query User{DEAC4C18-96F4-4E24-95F6-F605DA5C46FA}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{7015D2E8-D017-459F-BC17-45373052CDDC}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: High Definition Audio-Gerät
Description: High Definition Audio-Gerät
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: HdAudAddService
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (08/14/2015 03:57:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SUNRISE)
Description: Bei der Aktivierung der App „Microsoft.SkypeApp_kzf8qxf38zg5c!App“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (08/13/2015 11:27:06 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm ScriptHelper.exe, Version 4.1.5.143 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1db0

Startzeit: 01d0d60e947912fc

Endzeit: 0

Anwendungspfad: C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.8.0\ScriptHelper.exe

Berichts-ID: 078a3f85-4202-11e5-82a1-54a050ae5ae6

Vollständiger Name des fehlerhaften Pakets:

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (08/13/2015 09:43:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: FighterSuiteService.exe, Version: 3.1.291.0, Zeitstempel: 0x5456a937
Name des fehlerhaften Moduls: MachineIdGateway.dll, Version: 1.0.13.0, Zeitstempel: 0x4f966d0c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000026f6
ID des fehlerhaften Prozesses: 0x8d8
Startzeit der fehlerhaften Anwendung: 0xFighterSuiteService.exe0
Pfad der fehlerhaften Anwendung: FighterSuiteService.exe1
Pfad des fehlerhaften Moduls: FighterSuiteService.exe2
Berichtskennung: FighterSuiteService.exe3
Vollständiger Name des fehlerhaften Pakets: FighterSuiteService.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FighterSuiteService.exe5

Error: (08/13/2015 11:40:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: FighterSuiteService.exe, Version: 3.1.291.0, Zeitstempel: 0x5456a937
Name des fehlerhaften Moduls: MachineIdGateway.dll, Version: 1.0.13.0, Zeitstempel: 0x4f966d0c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000026f6
ID des fehlerhaften Prozesses: 0x980
Startzeit der fehlerhaften Anwendung: 0xFighterSuiteService.exe0
Pfad der fehlerhaften Anwendung: FighterSuiteService.exe1
Pfad des fehlerhaften Moduls: FighterSuiteService.exe2
Berichtskennung: FighterSuiteService.exe3
Vollständiger Name des fehlerhaften Pakets: FighterSuiteService.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FighterSuiteService.exe5

Error: (08/13/2015 10:08:03 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (08/13/2015 09:23:51 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20911 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1b6c

Startzeit: 01d0d51b04a4dd4b

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: 30708c24-418c-11e5-829f-54a050ae5ae6

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1

Error: (08/06/2015 06:52:42 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (08/06/2015 02:14:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GWXUX.exe, Version: 6.3.9600.17813, Zeitstempel: 0x554a15f3
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.17736, Zeitstempel: 0x550f4336
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000003d85e
ID des fehlerhaften Prozesses: 0x11f8
Startzeit der fehlerhaften Anwendung: 0xGWXUX.exe0
Pfad der fehlerhaften Anwendung: GWXUX.exe1
Pfad des fehlerhaften Moduls: GWXUX.exe2
Berichtskennung: GWXUX.exe3
Vollständiger Name des fehlerhaften Pakets: GWXUX.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: GWXUX.exe5

Error: (07/25/2015 08:14:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ScriptHelper.exe, Version: 4.1.4.948, Zeitstempel: 0x5592bb4e
Name des fehlerhaften Moduls: ScriptHelper.exe, Version: 4.1.4.948, Zeitstempel: 0x5592bb4e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002bf58
ID des fehlerhaften Prozesses: 0x1184
Startzeit der fehlerhaften Anwendung: 0xScriptHelper.exe0
Pfad der fehlerhaften Anwendung: ScriptHelper.exe1
Pfad des fehlerhaften Moduls: ScriptHelper.exe2
Berichtskennung: ScriptHelper.exe3
Vollständiger Name des fehlerhaften Pakets: ScriptHelper.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ScriptHelper.exe5

Error: (07/25/2015 07:13:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: UpdateChecker.exe, Version: 0.0.0.0, Zeitstempel: 0x54dc4378
Name des fehlerhaften Moduls: alvupdt.dll, Version: 1.0.0.10, Zeitstempel: 0x5510b8fc
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00016eb6
ID des fehlerhaften Prozesses: 0x34c
Startzeit der fehlerhaften Anwendung: 0xUpdateChecker.exe0
Pfad der fehlerhaften Anwendung: UpdateChecker.exe1
Pfad des fehlerhaften Moduls: UpdateChecker.exe2
Berichtskennung: UpdateChecker.exe3
Vollständiger Name des fehlerhaften Pakets: UpdateChecker.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: UpdateChecker.exe5


Systemfehler:
=============
Error: (08/14/2015 05:26:33 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/14/2015 05:26:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/14/2015 05:26:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) ME Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/14/2015 05:26:31 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Network Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/14/2015 05:26:30 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MBAMService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/14/2015 05:26:30 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MBAMScheduler" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/14/2015 05:26:30 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Platform and Thermal Framework Low Power Mode Service Application" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/14/2015 05:26:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Platform and Thermal Framework Critical Service Application" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/14/2015 05:26:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Platform and Thermal Framework Config TDP Service Application" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/14/2015 05:26:28 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Platform and Thermal Framework Processor Participant Service Application" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office:
=========================
Error: (08/14/2015 03:57:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SUNRISE)
Description: Microsoft.SkypeApp_kzf8qxf38zg5c!App-2144927142

Error: (08/13/2015 11:27:06 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: ScriptHelper.exe4.1.5.1431db001d0d60e947912fc0C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.8.0\ScriptHelper.exe078a3f85-4202-11e5-82a1-54a050ae5ae6

Error: (08/13/2015 09:43:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: FighterSuiteService.exe3.1.291.05456a937MachineIdGateway.dll1.0.13.04f966d0cc0000005000026f68d801d0d600345e7d5eC:\Program Files (x86)\Fighters\FighterSuiteService.exeC:\Program Files (x86)\Fighters\MachineIdGateway.dll82a3dc7d-41f3-11e5-82a1-54a050ae5ae6

Error: (08/13/2015 11:40:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: FighterSuiteService.exe3.1.291.05456a937MachineIdGateway.dll1.0.13.04f966d0cc0000005000026f698001d0d5ac1a3d7764C:\Program Files (x86)\Fighters\FighterSuiteService.exeC:\Program Files (x86)\Fighters\MachineIdGateway.dll5c0f06fc-419f-11e5-82a0-54a050ae5ae6

Error: (08/13/2015 10:08:03 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (08/13/2015 09:23:51 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.209111b6c01d0d51b04a4dd4b4294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe30708c24-418c-11e5-829f-54a050ae5ae6microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (08/06/2015 06:52:42 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (08/06/2015 02:14:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: GWXUX.exe6.3.9600.17813554a15f3ntdll.dll6.3.9600.17736550f4336c0000005000000000003d85e11f801d0d041801d9aabC:\Windows\System32\GWX\GWXUX.exeC:\Windows\SYSTEM32\ntdll.dllbfd9159a-3c34-11e5-829e-54a050ae5ae6

Error: (07/25/2015 08:14:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: ScriptHelper.exe4.1.4.9485592bb4eScriptHelper.exe4.1.4.9485592bb4ec00000050002bf58118401d0c705b5769044C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.7.0\ScriptHelper.exeC:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.7.0\ScriptHelper.exef54cd6ec-32f8-11e5-829d-54a050ae5ae6

Error: (07/25/2015 07:13:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: UpdateChecker.exe0.0.0.054dc4378alvupdt.dll1.0.0.105510b8fcc000000500016eb634c01d0be8898fb42ceC:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exeC:\Program Files (x86)\ASUS\ASUS Live Update\alvupdt.dll8167e08d-32f0-11e5-829d-54a050ae5ae6


CodeIntegrity:
===================================
  Date: 2015-08-13 22:29:01.226
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-08-05 20:43:49.737
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-07-14 21:18:19.693
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-07-04 15:39:01.005
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-07-04 15:05:01.032
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-03-25 17:57:13.618
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll that did not meet the Windows signing level requirements.

  Date: 2015-03-21 16:02:51.020
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-03-19 17:02:04.404
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll that did not meet the Windows signing level requirements.

  Date: 2015-03-19 15:55:58.598
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll that did not meet the Windows signing level requirements.

  Date: 2015-03-13 18:51:57.167
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen ===========================

Processor: Intel(R) Core(TM) i7-4510U CPU @ 2.00GHz
Prozentuale Nutzung des RAM: 17%
Installierter physikalischer RAM: 8075.27 MB
Verfügbarer physikalischer RAM: 6692.03 MB
Summe virtueller Speicher: 9355.27 MB
Verfügbarer virtueller Speicher: 7979.89 MB

==================== Laufwerke ================================

Drive c: (OS) (Fixed) (Total:372.6 GB) (Free:306.51 GB) NTFS ==>[System mit Startkomponenten (eingeholt von lesen Laufwerk)]
Drive d: (Data) (Fixed) (Total:537.8 GB) (Free:537.62 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 3483A440)

Partition: GPT.

==================== Ende von Ergebnis ============================

schrauber 15.08.2015 09:52

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

sunrise_77 15.08.2015 13:10
Nein, alle Probleme weg. Fantastisch! Danke!! :D :taenzer:

ESET/ log.txt
Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=49843758b4771b47a4adc397b1e6122b
# end=init
# utc_time=2015-08-15 09:58:01
# local_time=2015-08-15 11:58:01 (+0100, Mitteleuropäische Sommerzeit)
# country="Austria"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 25289
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=49843758b4771b47a4adc397b1e6122b
# end=updated
# utc_time=2015-08-15 10:01:08
# local_time=2015-08-15 12:01:08 (+0100, Mitteleuropäische Sommerzeit)
# country="Austria"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=49843758b4771b47a4adc397b1e6122b
# engine=25289
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-08-15 11:23:47
# local_time=2015-08-15 01:23:47 (+0100, Mitteleuropäische Sommerzeit)
# country="Austria"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='McAfee Anti-Virus and Anti-Spyware'
# compatibility_mode=5122 16777214 66 62 24253159 66882113 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 76270 3427397 0 0
# scanned=276358
# found=21
# cleaned=0
# scan_time=4958
sh=C388C92E15C7DCB2F5B45307CD648DEE791D655E ft=1 fh=3bea13f6124cd671 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$R131J7D.exe"
sh=8066ABC1B8881F376BD25A0B48707308F4CBE226 ft=1 fh=d16f19749fff4b2b vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$R33D3EG.exe"
sh=08131ADF7C15E801A902E72ADA9DBA8EF81AD101 ft=1 fh=0e19461b6ef503f8 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$RK86MUT.exe"
sh=749B1D6251254E564F7053514A9702EDBDD8F355 ft=1 fh=9dd9c3b39db0cff1 vn="Win64/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$RC8TOZ5.2\chromext64.dll"
sh=85F18CC63AC304675FA721F9615529F6D6D2BB37 ft=1 fh=873d229cea4aad3e vn="Win64/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$RC8TOZ5.2\hlpr64.exe"
sh=B4F79E8F443904CD3CFD136B467BD0747F63AF1B ft=1 fh=c71c0011f598f3ae vn="Win32/Toolbar.Montiera.AA evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$RC8TOZ5.2\niOkdJk1.dll"
sh=07A10DA2DCAC72FF3D8F351CBA70BBC376DB7943 ft=1 fh=c71c001179dde76e vn="Variante von Win32/Toolbar.Montiera.Y evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$RC8TOZ5.2\Pgimngnk.dll"
sh=E6C12BAF802645C892778036ABBB02A97C9617C0 ft=1 fh=8b6ff701d7b4f813 vn="Variante von Win32/Toolbar.Montiera.AE evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$RC8TOZ5.2\downloads\newVrsn.exe"
sh=4CF9EF4D739C2F8A1F3909A2720274527EC29E1F ft=1 fh=c71c001143f2d9bd vn="Variante von Win32/ELEX.CP evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$RQ4F296\UninstallManager.exe"
sh=06AEEE97A8E40D82E97A0945E61C9EF1C0E7DDE7 ft=1 fh=8c61c410b53542e1 vn="Variante von Win32/SlowPCfighter.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Selina\AppData\Roaming\Fighters\Tray\AutoInstall\DM.exe.vir"
sh=06AEEE97A8E40D82E97A0945E61C9EF1C0E7DDE7 ft=1 fh=8c61c410b53542e1 vn="Variante von Win32/SlowPCfighter.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Selina\AppData\Roaming\Fighters\Tray\Updates\TKTRAY-DM\DM.exe.vir"
sh=92314BAF1F51EDC490E6A4E7CDB007EC4F9C26A8 ft=0 fh=0000000000000000 vn="Win32/Toolbar.TNT2.I evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Selina\AppData\Local\Mozilla\Firefox\Profiles\8cmuviq6.default\cache2\entries\D5A001714A9C63336522CB1636D870B32656047C"
sh=D9995018BDE42788979278B773D8CD23FD3450B4 ft=1 fh=49e05e3cdc9dd7c3 vn="Variante von Win32/OptimizerEliteMax.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Selina\AppData\Local\Temp\optprosetup.exe"
sh=705E50A9C0CF91A10DDF2AF8179FDA4EEE9EF65B ft=1 fh=c71c001109968fb9 vn="Variante von Win32/Adware.MultiPlug.LI Anwendung" ac=I fn="C:\Users\Selina\AppData\Local\Temp\5A00\temp\Preserver.xyz"
sh=EEC1979AE8F7A6F4F1F9B85E7380E777E687613A ft=1 fh=77287e3fce6a6904 vn="MSIL/MyPCBackup.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Selina\AppData\Local\Temp\BF80\temp\MyPCBackup.exe.tmp"
sh=25BB895121015E5AA74C6B91E5848C6E067DB283 ft=1 fh=c71c00113729331f vn="Variante von Win32/Adware.MultiPlug.LI Anwendung" ac=I fn="C:\Users\Selina\AppData\Local\Temp\BF80\temp\SystemAdvance.xyz"
sh=4E5E8B54DDA603D7E83F3EDE2BCDD8064D4EDF22 ft=1 fh=895bb0fee970ac49 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Selina\AppData\Local\Temp\DMR\dmr_72.exe"
sh=FE44754A5BB31CFFA64D0C0E5ACA8E3A592FB396 ft=1 fh=75d9014c39501564 vn="Variante von Win32/AdWare.SpeedingUpMyPC.N Anwendung" ac=I fn="C:\Users\Selina\AppData\Local\Temp\is1948636036\049F5D20_stp\OptimizerPro.exe"
sh=D3E60E30EFB1525CEF3A1D375D1124556C0D96CC ft=1 fh=1ba5cde6a47fc5cd vn="Win32/ELEX.CK evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Selina\AppData\Local\Temp\stF476.tmp\PicexaSvc.exe"
sh=24F2D80708A35F88188D52FFDD81FC0A71C7D6C9 ft=1 fh=6ec999985f609117 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Selina\Downloads\HSS-3.42-install-hss-600-conduit.exe"
sh=91F90B8E11C9E29B0B39C2CFAF0BE54A01F8B96C ft=1 fh=6592c8a43b708321 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Selina\Downloads\Synaptics TouchPad Treiber - CHIP-Installer.exe"
checkup
Code:
Results of screen317's Security Check version 1.006 
  x64 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
Windows Defender 
 WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
 TuneUp Utilities 2014 (de-DE) 
 Adobe Flash Player        18.0.0.232 
 Mozilla Firefox 38.0.5 Firefox out of Date! 
````````Process Check: objlist.exe by Laurent```````` 
 Malwarebytes Anti-Malware mbamservice.exe 
 Malwarebytes Anti-Malware mbam.exe 
 Malwarebytes Anti-Malware mbamscheduler.exe 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C:  %
````````````````````End of Log``````````````````````
FRST
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:13-08-2015
durchgeführt von Selina (Administrator) auf SUNRISE (15-08-2015 14:01:54)
Gestartet von C:\Users\Selina\Desktop
Geladene Profile: Selina (Verfügbare Profile: Selina & Anja)
Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser nicht gefunden!)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(hxxp://www.aobo-porn-filter.com) C:\Windows\SysWOW64\drivers\sysfilter\sysfilter.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-20] (NVIDIA Corporation)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [111976 2013-09-11] (Intel Corporation)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [1080992 2014-05-15] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\ASUSWSLoader.exe [63296 2014-02-25] ()
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\mcafee\platform\McUICnt.exe [642040 2014-08-05] (McAfee, Inc.)
HKLM-x32\...\Run: [PixelPlanet PdfPrinter-Monitor] => C:\Program Files (x86)\Common Files\PixelPlanet\PdfPrinter 7\PdfPrinterMonitor.exe [3786880 2013-07-12] (PixelPlanet)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [AoboAutoRun32] => rundll32.exe "C:\Windows\SysWOW64\drivers\sysfilter\WinSock.dll",OK
HKLM\...\Policies\Explorer\Run: [AoboAutoRun64] => rundll32.exe "C:\Windows\SysWOW64\drivers\sysfilter\WinSock64.dll",OK
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Run: [Infigo] => C:\Program Files (x86)\Infigo\Infigo.exe onrun
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Run: [BingSvc] => C:\Users\Selina\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe  --extensions-on-chrome-urls --test-type --load-extension="c:\Program Files\Google\Chrome\Application\Extensions\chrome\app\37.1329.15.30" - (Der Dateneintrag hat 107 mehr Zeichen).
IFEO: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\fighterlauncher.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-06-10]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Selina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sparkol VideoScribe 2.1 PRO Full Crack.lnk [2015-04-15]
ShortcutTarget: Sparkol VideoScribe 2.1 PRO Full Crack.lnk -> C:\ProgramData\{bdf56971-599d-e834-bdf5-56971599a5c5}\Sparkol VideoScribe 2.1 PRO Full Crack.exe (Keine Datei)
Startup: C:\Users\Selina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sparkol VideoScribe Professional 2.1.0 Full(1).lnk [2015-04-15]
ShortcutTarget: Sparkol VideoScribe Professional 2.1.0 Full(1).lnk -> C:\ProgramData\{1de678b8-9deb-0e0c-1de6-678b89dee2e2}\Sparkol VideoScribe Professional 2.1.0 Full(1).exe (Keine Datei)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
GroupPolicy: Gruppenrichtline auf Chrome erkannt <======= ACHTUNG
CHR HKLM\SOFTWARE\Policies\Google: Richtlinienbeschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-AT&Src=WD8&Tid=000328B0&OHP=http%3A%2F%2Fwww.delta%2Dhomes.com%2F%3Ftype%3Dhp%26ts%3D1431679656%26z%3D4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z%26from%3Dwpm05153%26uid%3DST1000LM024XHN%2DM101MBB%5FS32XJ9DF708772&OSP=http%3A%2F%2Fdo%2Dsearch.com%2Fweb%2F%3Futm%5Fsource%3Db%26utm%5Fmedium%3D%26utm%5Fcampaign%3Dinstall%5Fie%26utm%5Fcontent%3Dds%26from%3D%26uid%3DST500DM002%2D1BC142%5FW2A27G6AXXXXW2A27G6A%26ts%3D1420373293%26type%3Ddefault%26q%3D%7BsearchTerms%7D
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: SalePlus -> {0d5b8aad-5e9d-46bd-a6a9-b98c883b23f4} -> C:\Program Files (x86)\SalePlus\kJEzufod2hPs3c.x64.dll Keine Datei
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)
BHO: SalePlus -> {ba254a32-0efe-4ce1-9c79-f2ba7a1490f7} -> C:\Program Files (x86)\SalePlus\VUJpPdpWzowSHb.x64.dll Keine Datei
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2014-09-04] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2014-09-04] (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{517FD05F-0702-4F6F-BB2C-247A2CEFCC94}: [DhcpNameServer] 192.168.8.1 192.168.8.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default
FF SearchEngineOrder.3: Bing
FF Homepage: hxxp://www.google.at/
FF Keyword.URL: hxxp://www.bing.com/search?FORM=SK2MDF&PC=SK2M&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-13] ()
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2014-09-04] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-13] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2014-09-04] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-05-22] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-11-22] (Microsoft Corporation)
FF SearchPlugin: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\google-images.xml [2015-07-04]
FF SearchPlugin: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\google-maps.xml [2015-07-04]
FF Extension: Bing Search - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\bingsearch.full@microsoft.com [2015-05-14]
FF Extension: Cliqz - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\cliqz@cliqz.com.xpi [2015-07-25]
FF Extension: Adblock Plus - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-03-14]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-07-31]
FF HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\cliqz@cliqz.com

Chrome:
=======
CHR Profile: C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-05]
CHR Extension: (YouTube) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-05]
CHR Extension: (Google Search) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-05]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-08-13]
CHR Extension: (Google Wallet) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-05]
CHR Extension: (Gmail) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-05]
StartMenuInternet: Google Chrome - Chrome.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe [71680 2014-02-25] (ASUS Cloud Corporation) [Datei ist nicht signiert]
S4 AV Engine Scanning Service; C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVScanningService.exe [2009912 2014-02-10] (Preventon Technologies Limited)
S4 AV Watch Service; C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVWatchService.exe [400528 2014-02-10] (Preventon Technologies Limited)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation)
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [115632 2013-09-11] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116656 2013-09-11] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148688 2013-09-11] (Intel Corporation)
R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [124880 2013-09-11] (Intel Corporation)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [Datei ist nicht signiert]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2014-09-04] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-29] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2014-08-01] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1041192 2014-07-24] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-07-18] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-07-18] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-20] (NVIDIA Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
S2 TuneUp.UtilitiesSvc; "C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [71952 2014-03-31] (ASUS Corporation)
S3 AVFSFilter; C:\Windows\system32\DRIVERS\avfsfilter.sys [13720 2014-02-10] ()
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-07-18] (McAfee, Inc.)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [143568 2013-09-11] (Intel Corporation)
R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [114680 2013-09-11] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [287160 2013-09-11] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494272 2013-09-11] (Intel Corporation)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-08-15] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-10-23] (Intel Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-07-18] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313800 2014-07-18] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-07-18] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526352 2014-07-18] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-07-18] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [444720 2014-07-24] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96592 2014-07-24] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-07-18] (McAfee, Inc.)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [827096 2015-03-12] (Realsil Semiconductor Corporation)
S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [X]
U0 msahci; system32\drivers\msahci.sys [X]
U3 NPF; kein ImagePath
S2 plctrl; \??\C:\Program Files\ASUS\P4G\plctrl.sys [X]
S3 TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-15 14:01 - 2015-08-15 14:02 - 00023007 _____ C:\Users\Selina\Desktop\FRST.txt
2015-08-15 13:57 - 2015-08-15 13:57 - 00852684 _____ C:\Users\Selina\Downloads\SecurityCheck.exe
2015-08-15 11:57 - 2015-08-15 11:57 - 02870984 _____ (ESET) C:\Users\Selina\Downloads\esetsmartinstaller_deu.exe
2015-08-14 19:16 - 2015-08-14 19:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2015-08-14 18:15 - 2015-07-30 16:04 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-14 18:15 - 2015-07-30 15:48 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-14 18:15 - 2015-07-19 03:58 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-08-14 18:15 - 2015-07-18 20:51 - 03704320 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-08-14 18:15 - 2015-07-18 20:31 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-08-14 18:15 - 2015-07-18 20:31 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-08-14 18:15 - 2015-07-18 20:31 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-08-14 18:15 - 2015-07-18 20:29 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-08-14 18:15 - 2015-07-18 20:29 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-08-14 18:15 - 2015-07-18 20:29 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-08-14 18:15 - 2015-07-18 20:28 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-08-14 18:15 - 2015-07-18 20:12 - 02228736 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-08-14 18:15 - 2015-07-18 20:10 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-08-14 18:15 - 2015-07-18 20:09 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-08-14 18:15 - 2015-06-09 20:27 - 00411133 _____ C:\Windows\system32\ApnDatabase.xml
2015-08-14 17:38 - 2015-08-14 17:38 - 00032440 _____ C:\Users\Selina\Desktop\Addition2.txt
2015-08-14 17:37 - 2015-08-14 17:38 - 00047690 _____ C:\Users\Selina\Desktop\FRST2.txt
2015-08-14 17:32 - 2015-08-14 17:36 - 00003171 _____ C:\Users\Selina\Desktop\JRT.txt
2015-08-14 17:23 - 2015-08-14 17:23 - 01791580 _____ (Malwarebytes Corporation) C:\Users\Selina\Downloads\JRT.exe
2015-08-14 17:20 - 2015-08-14 17:20 - 00013102 _____ C:\Users\Selina\Desktop\AdwCleaner[S0].txt
2015-08-14 17:13 - 2015-08-14 17:16 - 00000000 ____D C:\AdwCleaner
2015-08-14 17:12 - 2015-08-14 17:12 - 02248704 _____ C:\Users\Selina\Downloads\AdwCleaner_4.208.exe
2015-08-14 15:56 - 2015-07-16 23:14 - 25192448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-08-14 15:56 - 2015-07-16 22:36 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-08-14 15:56 - 2015-07-16 22:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-08-14 15:56 - 2015-07-16 22:35 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-08-14 15:56 - 2015-07-16 22:26 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-08-14 15:56 - 2015-07-16 22:23 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-08-14 15:56 - 2015-07-16 22:21 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-08-14 15:56 - 2015-07-16 22:20 - 19870208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-08-14 15:56 - 2015-07-16 21:53 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-08-14 15:56 - 2015-07-16 21:51 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-08-14 15:56 - 2015-07-16 21:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-08-14 15:56 - 2015-07-16 21:45 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-08-14 15:56 - 2015-07-16 21:45 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-08-14 15:56 - 2015-07-16 21:41 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-08-14 15:56 - 2015-07-16 21:39 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-08-14 15:56 - 2015-07-16 21:38 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-08-14 15:56 - 2015-07-16 21:36 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-08-14 15:56 - 2015-07-16 21:34 - 14451200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-08-14 15:56 - 2015-07-16 21:32 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-08-14 15:56 - 2015-07-16 21:14 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-08-14 15:56 - 2015-07-16 21:13 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-08-14 15:56 - 2015-07-16 21:12 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-08-14 15:56 - 2015-07-16 21:12 - 02427904 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-08-14 15:56 - 2015-07-16 21:10 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-08-14 15:56 - 2015-07-16 21:06 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-08-14 15:56 - 2015-07-16 21:01 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-08-14 15:56 - 2015-07-16 20:52 - 01048576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2015-08-14 15:56 - 2015-07-16 20:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-08-14 15:56 - 2015-07-16 20:42 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-08-14 15:56 - 2015-07-16 20:38 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-08-14 15:56 - 2015-07-16 20:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-08-14 15:55 - 2015-07-16 02:29 - 07458648 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-14 15:55 - 2015-07-16 02:29 - 01735000 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-14 15:55 - 2015-07-16 02:29 - 00101720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-08-14 15:55 - 2015-07-16 02:28 - 01499920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-08-14 15:55 - 2015-07-10 19:54 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-08-14 15:53 - 2015-06-12 19:03 - 18823680 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2015-08-14 15:53 - 2015-06-12 18:36 - 15159296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-08-14 15:52 - 2015-07-07 11:40 - 00270168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2015-08-14 15:52 - 2015-07-07 11:40 - 00114520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2015-08-14 15:52 - 2015-07-07 11:40 - 00044560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2015-08-14 15:51 - 2015-07-02 00:19 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-08-14 15:51 - 2015-07-02 00:16 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-08-14 15:51 - 2015-07-01 23:37 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-08-14 15:51 - 2015-07-01 23:35 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-08-14 15:50 - 2015-07-29 01:24 - 00025776 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-08-14 15:50 - 2015-07-28 16:24 - 01148416 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-08-14 15:50 - 2015-07-28 16:24 - 01116160 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-08-14 15:50 - 2015-07-28 16:24 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-08-14 15:50 - 2015-07-28 16:24 - 00743424 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-08-14 15:50 - 2015-07-28 16:24 - 00437248 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-08-14 15:50 - 2015-07-28 16:24 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-08-14 15:48 - 2015-07-13 21:46 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-14 15:48 - 2015-07-13 21:45 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2015-08-14 15:47 - 2015-07-14 23:59 - 01113944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-08-14 15:47 - 2015-07-14 23:59 - 00487256 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2015-08-14 15:47 - 2015-07-14 23:59 - 00393560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2015-08-14 15:47 - 2015-07-09 19:13 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-08-14 15:47 - 2015-07-09 19:13 - 00221184 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-08-14 15:47 - 2015-07-09 18:30 - 00212992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2015-08-14 15:46 - 2015-07-14 05:22 - 02529880 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-08-14 15:46 - 2015-07-14 05:21 - 01901776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-08-14 15:46 - 2015-07-10 19:42 - 02345472 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-08-14 15:46 - 2015-07-10 18:47 - 01556992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-08-14 15:46 - 2015-06-11 22:12 - 02476376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-08-14 15:46 - 2015-06-11 22:12 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-08-14 15:46 - 2015-05-12 02:24 - 00536920 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-08-14 15:45 - 2015-07-29 16:37 - 01994752 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-08-14 15:45 - 2015-07-29 16:30 - 01381888 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-08-14 15:45 - 2015-07-29 16:23 - 01559552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-08-14 15:45 - 2015-07-24 20:57 - 04177408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-08-14 15:45 - 2015-07-24 20:57 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-08-14 15:45 - 2015-07-24 20:52 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-08-14 15:45 - 2015-07-24 19:27 - 00301568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-08-14 15:45 - 2015-07-24 19:23 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-08-14 15:45 - 2015-07-10 20:19 - 01101824 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-08-14 15:45 - 2015-07-10 19:14 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-08-14 15:45 - 2015-07-10 19:13 - 07032320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-08-14 15:45 - 2015-07-10 18:31 - 06213120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-08-14 00:16 - 2015-08-14 00:16 - 00000032 _____ C:\ProgramData\Temp.log
2015-08-13 23:04 - 2015-08-13 23:04 - 02248704 _____ C:\Users\Selina\Downloads\AdwCleaner_4.208.exe.part
2015-08-13 23:03 - 2015-08-13 23:03 - 02173952 _____ (Farbar) C:\Users\Selina\Downloads\FRST64(1).exe
2015-08-13 22:58 - 2015-08-13 22:58 - 00000000 ____D C:\Users\Selina\Desktop\FRST-OlderVersion
2015-08-13 22:05 - 2015-08-13 22:05 - 00120116 _____ C:\Users\Selina\Desktop\mbam.txt
2015-08-13 10:12 - 2015-08-15 11:45 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-08-13 10:12 - 2015-08-13 10:12 - 00001116 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-08-13 10:12 - 2015-08-13 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-08-13 10:11 - 2015-08-13 10:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-08-13 10:11 - 2015-08-13 10:11 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-13 10:11 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-08-13 10:11 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-08-13 10:11 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-08-13 10:07 - 2015-08-13 10:07 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Selina\Downloads\mbam-setup-2.1.8.1057.exe
2015-08-13 09:35 - 2015-08-13 09:35 - 00000750 _____ C:\Users\Selina\Desktop\Revo Uninstaller.lnk
2015-08-13 09:34 - 2015-08-13 09:34 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Selina\Downloads\revosetup95.exe
2015-08-12 13:51 - 2015-08-12 13:51 - 00055142 _____ C:\Users\Selina\Desktop\FRST1.txt
2015-08-12 13:51 - 2015-08-12 13:51 - 00041332 _____ C:\Users\Selina\Desktop\Addition1.txt
2015-08-12 11:31 - 2015-08-15 14:01 - 00000000 ____D C:\FRST
2015-08-12 11:30 - 2015-08-13 22:58 - 02173952 _____ (Farbar) C:\Users\Selina\Desktop\FRST64.exe
2015-08-05 20:25 - 2015-08-06 21:44 - 00000000 ____D C:\Users\Selina\Desktop\Youtube channel
2015-07-25 19:44 - 2015-07-09 20:40 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-25 19:44 - 2015-06-27 05:08 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-25 19:44 - 2015-06-27 05:08 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-25 19:44 - 2015-06-27 04:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-25 19:42 - 2015-04-30 01:22 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2015-07-25 19:38 - 2015-06-28 07:07 - 00442712 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-25 19:38 - 2015-06-28 07:07 - 00178008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-25 19:38 - 2015-06-28 07:06 - 01311960 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-25 19:38 - 2015-06-28 07:06 - 00332120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-25 19:38 - 2015-06-27 18:42 - 00747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-25 19:38 - 2015-06-27 05:13 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-25 19:38 - 2015-06-27 05:12 - 00401408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-25 19:38 - 2015-06-27 05:12 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-25 19:38 - 2015-06-27 04:40 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-07-25 19:38 - 2015-06-27 04:05 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-25 19:38 - 2015-06-27 04:00 - 00989184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-25 19:38 - 2015-06-27 03:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-07-25 19:38 - 2015-06-27 03:26 - 00802816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-25 19:35 - 2015-05-30 23:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2015-07-25 19:35 - 2015-05-30 21:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2015-07-25 19:35 - 2015-05-30 21:35 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-07-25 19:32 - 2015-05-03 02:39 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-07-25 19:30 - 2015-06-16 00:41 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-25 19:30 - 2015-06-16 00:24 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-25 19:30 - 2015-06-15 23:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-25 19:30 - 2015-06-15 23:09 - 03607552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-25 19:30 - 2015-06-15 22:50 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-25 19:30 - 2015-06-15 21:57 - 02460160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-25 19:28 - 2015-05-07 17:21 - 00522240 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll
2015-07-25 19:28 - 2015-05-07 17:05 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll
2015-07-25 19:26 - 2015-05-07 19:50 - 22292672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-07-25 19:26 - 2015-05-07 19:00 - 03109376 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2015-07-25 19:26 - 2015-05-07 18:53 - 19734960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-07-25 19:26 - 2015-05-07 18:12 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2015-07-25 19:23 - 2015-05-11 20:17 - 01201664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2015-07-25 19:22 - 2014-11-04 21:25 - 00059712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdclass.sys
2015-07-25 19:22 - 2014-11-04 21:25 - 00051008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouclass.sys
2015-07-25 19:22 - 2014-11-04 08:55 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sermouse.sys
2015-07-25 19:22 - 2014-11-04 08:54 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\i8042prt.sys
2015-07-25 19:22 - 2014-11-04 08:54 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2015-07-25 19:22 - 2014-11-04 08:54 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouhid.sys
2015-07-25 19:20 - 2015-04-25 04:25 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2015-07-25 19:18 - 2015-06-27 01:21 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-25 19:16 - 2015-05-03 17:09 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-07-25 19:16 - 2015-05-03 16:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-07-25 19:16 - 2015-05-03 16:55 - 00971776 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2015-07-25 19:16 - 2015-05-03 16:49 - 00811008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-15 14:00 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru
2015-08-15 13:31 - 2014-07-31 19:27 - 01610674 _____ C:\Windows\WindowsUpdate.log
2015-08-15 12:00 - 2014-05-16 01:45 - 00773008 _____ C:\Windows\system32\perfh007.dat
2015-08-15 12:00 - 2014-05-16 01:45 - 00162310 _____ C:\Windows\system32\perfc007.dat
2015-08-15 12:00 - 2014-03-18 17:26 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-15 11:55 - 2013-08-22 16:46 - 00099232 _____ C:\Windows\setupact.log
2015-08-15 11:49 - 2014-09-30 03:49 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{924A399C-D8A5-42C9-8053-6DBF492001E4}
2015-08-14 19:35 - 2015-06-10 19:03 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-14 19:20 - 2014-09-30 03:18 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2923131921-1963989444-91532992-1001
2015-08-14 19:10 - 2014-09-30 03:13 - 00000000 __RDO C:\Users\Selina\OneDrive
2015-08-14 19:09 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-14 19:08 - 2014-09-30 02:28 - 00000000 ____D C:\Users\Selina\AppData\Local\ASUS
2015-08-14 19:08 - 2014-05-15 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2015-08-14 19:08 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\en-GB
2015-08-14 18:17 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2015-08-14 17:11 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2015-08-14 16:51 - 2015-03-26 23:57 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014
2015-08-14 16:51 - 2014-03-18 10:16 - 00191386 _____ C:\Windows\PFRO.log
2015-08-14 16:48 - 2014-05-15 17:58 - 00000000 ____D C:\Program Files (x86)\ASUS
2015-08-14 16:22 - 2014-07-31 19:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-08-14 16:17 - 2015-04-10 18:56 - 00000000 ___SD C:\Windows\system32\GWX
2015-08-14 16:15 - 2015-05-05 08:22 - 00000435 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2015-08-14 16:15 - 2013-08-22 16:44 - 00485720 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-14 16:12 - 2015-04-10 18:57 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-08-14 16:12 - 2014-12-28 01:09 - 00000000 ____D C:\Windows\system32\appraiser
2015-08-14 16:12 - 2014-10-10 16:01 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\WinStore
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Defender
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-08-14 16:10 - 2014-10-20 18:24 - 00000000 ____D C:\Windows\system32\MRT
2015-08-14 16:02 - 2014-10-20 18:24 - 132483416 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-08-14 15:56 - 2015-03-27 00:00 - 00000000 ____D C:\Users\Selina\AppData\Roaming\Skype
2015-08-14 15:52 - 2014-09-30 03:42 - 00000000 ____D C:\Users\Selina\AppData\Roaming\WildTangent
2015-08-14 15:52 - 2014-05-15 17:59 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-08-14 15:52 - 2014-05-15 17:59 - 00000000 ____D C:\ProgramData\WildTangent
2015-08-14 00:19 - 2014-10-05 10:48 - 00000000 ____D C:\ProgramData\CLSK
2015-08-13 23:45 - 2015-07-04 13:14 - 00000000 ____D C:\Users\Selina\AppData\Roaming\Ethereal
2015-08-13 23:25 - 2015-03-29 23:06 - 00000000 __SHD C:\Users\Selina\AppData\Local\EmieUserList
2015-08-13 23:25 - 2015-03-29 23:06 - 00000000 __SHD C:\Users\Selina\AppData\Local\EmieSiteList
2015-08-13 23:25 - 2015-03-29 23:06 - 00000000 __SHD C:\Users\Selina\AppData\Local\EmieBrowserModeList
2015-08-13 23:25 - 2014-10-05 10:06 - 00000000 ____D C:\Program Files (x86)\Google
2015-08-13 23:24 - 2015-04-08 00:00 - 00000000 ____D C:\Program Files (x86)\TechSmith
2015-08-13 23:21 - 2014-12-26 19:39 - 00000000 ____D C:\Users\Selina\AppData\Roaming\DVDVideoSoft
2015-08-13 23:17 - 2015-03-27 00:00 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-08-13 11:40 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2015-08-13 11:38 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\PLA
2015-08-13 11:38 - 2013-08-22 15:25 - 00524288 ___SH C:\Windows\system32\config\BBI
2015-08-13 09:45 - 2014-12-31 23:49 - 00026624 ___SH C:\Users\Selina\Documents\Thumbs.db
2015-08-13 09:35 - 2015-06-10 19:03 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-08-13 09:23 - 2014-09-30 02:27 - 00000000 ____D C:\Users\Selina\AppData\Local\Packages
2015-08-12 14:26 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2015-08-11 14:51 - 2014-07-31 19:50 - 00000000 ____D C:\Program Files (x86)\McAfee
2015-08-08 15:55 - 2015-05-17 12:53 - 00794088 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-08-08 15:55 - 2015-05-17 12:53 - 00179688 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-08-06 14:20 - 2014-07-31 19:50 - 00000000 ____D C:\ProgramData\McAfee
2015-08-06 14:14 - 2015-05-18 22:08 - 00000000 ____D C:\Users\Selina\AppData\Local\CrashDumps
2015-08-05 20:03 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\NDF
2015-07-26 15:51 - 2015-04-23 23:31 - 00000000 ____D C:\Users\Selina\Desktop\USB Stick
2015-07-26 11:37 - 2014-09-30 22:28 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-07-25 19:18 - 2015-06-17 08:02 - 00000000 ____D C:\Program Files\Common Files\AV

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-03-18 19:08 - 2015-03-29 15:42 - 0000020 _____ () C:\Users\Selina\AppData\Local\appdataFr3.bin
2014-07-31 19:41 - 2014-07-31 19:41 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-03-14 14:02 - 2015-03-14 14:02 - 0000199 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2014-05-15 17:58 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2014-05-15 17:58 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2014-05-15 17:58 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS
2015-08-14 00:16 - 2015-08-14 00:16 - 0000032 _____ () C:\ProgramData\Temp.log
2014-10-05 10:49 - 2014-10-05 10:51 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2014-10-05 10:48 - 2014-10-05 10:49 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\SetStretch.VBS


Einige Dateien in TEMP:
====================
C:\Users\Selina\AppData\Local\Temp\BSvcProcessor.exe
C:\Users\Selina\AppData\Local\Temp\BSvcUpdater.exe
C:\Users\Selina\AppData\Local\Temp\JMC_WM.exe
C:\Users\Selina\AppData\Local\Temp\oi_{B8811E58-D5AA-4DBA-9149-2F98DB59161D}.exe
C:\Users\Selina\AppData\Local\Temp\optprosetup.exe
C:\Users\Selina\AppData\Local\Temp\PixelPlanetpdrv7.dll
C:\Users\Selina\AppData\Local\Temp\PixelPlanetpdui7.dll
C:\Users\Selina\AppData\Local\Temp\Quarantine.exe
C:\Users\Selina\AppData\Local\Temp\regini.exe
C:\Users\Selina\AppData\Local\Temp\ReimagePackage.exe
C:\Users\Selina\AppData\Local\Temp\ReiSysUpdate.exe
C:\Users\Selina\AppData\Local\Temp\SetupProPlusRetail.x86.de-DE_ProPlusRetail_36PJN-VMKQD-9PCVW-VW84P-D67T3_act_1_.exe
C:\Users\Selina\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Selina\AppData\Local\Temp\sqlite3.dll
C:\Users\Selina\AppData\Local\Temp\sqlite3.exe
C:\Users\Selina\AppData\Local\Temp\UNINSTALL.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-08-05 20:40

==================== Ende von Ergebnis ============================
Addition
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:13-08-2015
durchgeführt von Selina (2015-08-15 14:02:35)
Gestartet von C:\Users\Selina\Desktop
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2923131921-1963989444-91532992-500 - Administrator - Disabled)
Anja (S-1-5-21-2923131921-1963989444-91532992-1005 - Limited - Enabled) => C:\Users\Anja
Gast (S-1-5-21-2923131921-1963989444-91532992-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2923131921-1963989444-91532992-1003 - Limited - Enabled)
Selina (S-1-5-21-2923131921-1963989444-91532992-1001 - Administrator - Enabled) => C:\Users\Selina

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Disabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
CLIQZ (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 1.0.0 - CLIQZ.com)
Fighters (x32 Version: 4.5.146 - SPAMFIGHTER ApS) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C) (Version: 7.1.0.2103 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.6.0.1038 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation)
MAGIX Foto Designer 7 (HKLM-x32\...\MAGIX_{2DCD52EE-1AE1-4128-9819-A79F7D09B6B3}) (Version: 7.0.1.1 - MAGIX AG)
MAGIX Foto Designer 7 (Version: 7.0.1.1 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft Office Professional Plus 2013 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 15.0.4737.1003 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
NVIDIA Graphics Driver 332.85 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 332.85 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.0927 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0927 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
PixelPlanet PdfPrinter 7 (64bit) (HKLM\...\{000F58F3-A544-4BB5-AF1B-761EA1C8595C}) (Version: 7.0.60 - PixelPlanet)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.29.314.2014 - Realtek)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Sparkol VideoScribe (HKLM-x32\...\Sparkol VideoScribe 2.2.81) (Version: 2.2.81 - Sparkol)
Sparkol VideoScribe (x32 Version: 2.2.81 - Sparkol) Hidden
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.340 - TuneUp Software) Hidden
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Watchtower Library 2012 - Deutsch (HKLM-x32\...\{CFDF0961-77C7-4392-96EE-624DFE81C3C2}) (Version: 14.0 - Watchtower Bible and Tract Society of Pennsylvania, Inc.)
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.2.301 - ASUS Cloud Corporation)
Windows-Treiberpaket - ASUS (ATP) Mouse  (03/17/2014 1.0.0.207) (HKLM\...\AA2CC56D4BBEE037DC99871F5F6551133D2A0CC3) (Version: 03/17/2014 1.0.0.207 - ASUS)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2923131921-1963989444-91532992-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> "C:\Windows\system32\igfxEM.exe" Keine Datei

==================== Wiederherstellungspunkte =========================

13-08-2015 23:09:56 Revo Uninstaller's restore point - McAfee LiveSafe – Internet Security

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {02554177-D27A-4093-8467-1296F3541CFE} - \Yahoo! Search -> Keine Datei <==== ACHTUNG
Task: {1C092132-88FB-41DC-8364-824E30BFAD4D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-05-12] (Microsoft Corporation)
Task: {1D77BDEF-A383-44E5-A8D5-3CF4D8699796} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-05-12] (Microsoft Corporation)
Task: {2761783C-2564-4D71-BD14-08A3EF337853} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-13] (Adobe Systems Incorporated)
Task: {2E93A9E0-3BEC-496C-9434-8021BDF4962C} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {3B0A9D92-6D5C-4FBC-BAE6-01190DCA6424} - \Yahoo! Search Updater -> Keine Datei <==== ACHTUNG
Task: {555E4B6D-40E1-43F1-B4F2-DC65CB4FC170} - System32\Tasks\{D4ED4DD4-E6F7-407F-8C09-B3EAACAFCBA5} => pcalua.exe -a C:\Users\Selina\AppData\Roaming\vi-view\UninstallManager.exe -c  -ptid=cor
Task: {649DAAEE-F738-41E9-9EF5-F4669CF3A588} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {744CE80B-F1BF-4F2E-8B11-8BB8381A7604} - System32\Tasks\{86E86F40-51C2-4AB3-87B4-A0C0DF4F4D34} => pcalua.exe -a "C:\Program Files (x86)\Intel\Intel(R) Dynamic Platform and Thermal Framework\Uninstall\setup.exe" -c -uninstall
Task: {945D81A6-4C2B-4F64-BF0A-E2ECDCC9FA81} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {EA858E9F-4743-42FC-BD69-BD3A731EEF91} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {FD4022ED-7434-4DD9-B0AF-4BEA35891F08} - System32\Tasks\Opera scheduled Autoupdate 1419616129 => C:\Program Files (x86)\Opera\launcher.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2014-07-31 19:38 - 2014-03-13 21:26 - 00117536 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-09-30 22:28 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-07-31 19:33 - 2013-10-23 14:44 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\Selina\OneDrive:ms-properties

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Selina\AppData\Roaming\Microsoft\Windows Photo Viewer\Hintergrundbild der Windows-Fotoanzeige.jpg
DNS Servers: 192.168.8.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\StartupFolder: => "simplicheck.lnk"
HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"
HKLM\...\StartupApproved\Run: => "DptfPolicyLpmServiceHelper"
HKLM\...\StartupApproved\Run: => "NvBackend"
HKLM\...\StartupApproved\Run: => "IgfxTray"
HKLM\...\StartupApproved\Run: => "HotKeysCmds"
HKLM\...\StartupApproved\Run: => "Persistence"
HKLM\...\StartupApproved\Run32: => "CLMLServer"
HKLM\...\StartupApproved\Run32: => "mcpltui_exe"
HKLM\...\StartupApproved\Run32: => "PixelPlanet PdfPrinter-Monitor"
HKLM\...\StartupApproved\Run32: => "AVG_UI"
HKLM\...\StartupApproved\Run32: => "CommonToolkitTray"
HKLM\...\StartupApproved\Run32: => "SWPROguard"
HKLM\...\StartupApproved\Run32: => "vProt"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\StartupFolder: => "Sparkol VideoScribe 2.1 PRO Full Crack.lnk"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\StartupFolder: => "Sparkol VideoScribe Professional 2.1.0 Full(1).lnk"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Yahoo! Search"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Power2GoExpress"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Infigo"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "BingSvc"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{107B701F-D6F2-4125-989D-013EBE4114C2}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{4756372F-1DBA-4E0D-88D4-10D9CBE588DE}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{701A95DF-EB9C-41A2-9DB7-7FCB240568EE}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{C24A835C-861A-49D8-A2CC-9053C11552DB}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{A34F36B9-4BB2-40D4-BEAC-72D3B6A7D7B8}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{DA8C5E14-1AF3-4680-8A78-32EA772C239B}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{32FC1979-2D76-4947-8C75-8ED839D364EB}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{9DEDC08A-4AAD-4EFE-A264-D914813E7650}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{FDA1092F-154E-4FB1-B71A-84412016E944}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{DF970333-2791-4A78-B77A-7DFD953F58EA}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{650C856D-3797-48AE-B0EF-00F36AAF1043}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{1D872238-8039-4BF5-826A-5B4040368753}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{077BF549-8F4A-4C61-BE12-C4D9936F6F7C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{69571B03-E475-4EAD-8620-E2BE564EB6AB}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{C6C0290D-DDE8-48B3-B84D-B3E8DC693DC3}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{4DECD748-EF63-4CCC-BAC0-E39A79EEB77F}] => (Allow) LPort=8317
FirewallRules: [{00BE4382-D8C9-44D7-A3C3-A74A01E42A93}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{8842BE8D-197C-4EE5-9A67-8B063359D6D7}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{E26CC15F-1C7F-440C-9A34-6096EEF8893D}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [TCP Query User{DEAC4C18-96F4-4E24-95F6-F605DA5C46FA}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{7015D2E8-D017-459F-BC17-45373052CDDC}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (08/15/2015 01:53:21 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.

Error: (08/15/2015 12:47:47 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (08/15/2015 11:57:39 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.

Error: (08/15/2015 11:57:36 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.

Error: (08/15/2015 11:57:14 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.

Error: (08/15/2015 11:57:14 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.

Error: (08/14/2015 03:57:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SUNRISE)
Description: Bei der Aktivierung der App „Microsoft.SkypeApp_kzf8qxf38zg5c!App“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (08/13/2015 11:27:06 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm ScriptHelper.exe, Version 4.1.5.143 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1db0

Startzeit: 01d0d60e947912fc

Endzeit: 0

Anwendungspfad: C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.8.0\ScriptHelper.exe

Berichts-ID: 078a3f85-4202-11e5-82a1-54a050ae5ae6

Vollständiger Name des fehlerhaften Pakets:

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (08/13/2015 09:43:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: FighterSuiteService.exe, Version: 3.1.291.0, Zeitstempel: 0x5456a937
Name des fehlerhaften Moduls: MachineIdGateway.dll, Version: 1.0.13.0, Zeitstempel: 0x4f966d0c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000026f6
ID des fehlerhaften Prozesses: 0x8d8
Startzeit der fehlerhaften Anwendung: 0xFighterSuiteService.exe0
Pfad der fehlerhaften Anwendung: FighterSuiteService.exe1
Pfad des fehlerhaften Moduls: FighterSuiteService.exe2
Berichtskennung: FighterSuiteService.exe3
Vollständiger Name des fehlerhaften Pakets: FighterSuiteService.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FighterSuiteService.exe5

Error: (08/13/2015 11:40:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: FighterSuiteService.exe, Version: 3.1.291.0, Zeitstempel: 0x5456a937
Name des fehlerhaften Moduls: MachineIdGateway.dll, Version: 1.0.13.0, Zeitstempel: 0x4f966d0c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000026f6
ID des fehlerhaften Prozesses: 0x980
Startzeit der fehlerhaften Anwendung: 0xFighterSuiteService.exe0
Pfad der fehlerhaften Anwendung: FighterSuiteService.exe1
Pfad des fehlerhaften Moduls: FighterSuiteService.exe2
Berichtskennung: FighterSuiteService.exe3
Vollständiger Name des fehlerhaften Pakets: FighterSuiteService.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FighterSuiteService.exe5


Systemfehler:
=============
Error: (08/15/2015 11:59:11 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (08/15/2015 11:59:11 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Selina\AppData\Local\Temp\ehdrv.sys

Error: (08/15/2015 11:59:10 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (08/15/2015 11:59:10 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Selina\AppData\Local\Temp\ehdrv.sys

Error: (08/15/2015 11:59:10 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (08/15/2015 11:59:10 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Selina\AppData\Local\Temp\ehdrv.sys

Error: (08/14/2015 07:47:08 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (08/14/2015 07:09:38 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description:

Error: (08/14/2015 07:09:38 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description:

Error: (08/14/2015 07:09:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "TuneUp Utilities Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2


Microsoft Office:
=========================
Error: (08/15/2015 01:53:21 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (08/15/2015 12:47:47 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (08/15/2015 11:57:39 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\Users\Selina\Downloads\esetsmartinstaller_deu.exe

Error: (08/15/2015 11:57:36 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\Users\Selina\Downloads\esetsmartinstaller_deu.exe

Error: (08/15/2015 11:57:14 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\Users\Selina\Downloads\esetsmartinstaller_deu.exe

Error: (08/15/2015 11:57:14 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\Users\Selina\Downloads\esetsmartinstaller_deu.exe

Error: (08/14/2015 03:57:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SUNRISE)
Description: Microsoft.SkypeApp_kzf8qxf38zg5c!App-2144927142

Error: (08/13/2015 11:27:06 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: ScriptHelper.exe4.1.5.1431db001d0d60e947912fc0C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.8.0\ScriptHelper.exe078a3f85-4202-11e5-82a1-54a050ae5ae6

Error: (08/13/2015 09:43:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: FighterSuiteService.exe3.1.291.05456a937MachineIdGateway.dll1.0.13.04f966d0cc0000005000026f68d801d0d600345e7d5eC:\Program Files (x86)\Fighters\FighterSuiteService.exeC:\Program Files (x86)\Fighters\MachineIdGateway.dll82a3dc7d-41f3-11e5-82a1-54a050ae5ae6

Error: (08/13/2015 11:40:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: FighterSuiteService.exe3.1.291.05456a937MachineIdGateway.dll1.0.13.04f966d0cc0000005000026f698001d0d5ac1a3d7764C:\Program Files (x86)\Fighters\FighterSuiteService.exeC:\Program Files (x86)\Fighters\MachineIdGateway.dll5c0f06fc-419f-11e5-82a0-54a050ae5ae6


CodeIntegrity:
===================================
  Date: 2015-08-13 22:29:01.226
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-08-05 20:43:49.737
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-07-14 21:18:19.693
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-07-04 15:39:01.005
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-07-04 15:05:01.032
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-03-25 17:57:13.618
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll that did not meet the Windows signing level requirements.

  Date: 2015-03-21 16:02:51.020
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-03-19 17:02:04.404
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll that did not meet the Windows signing level requirements.

  Date: 2015-03-19 15:55:58.598
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll that did not meet the Windows signing level requirements.

  Date: 2015-03-13 18:51:57.167
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen ===========================

Processor: Intel(R) Core(TM) i7-4510U CPU @ 2.00GHz
Prozentuale Nutzung des RAM: 36%
Installierter physikalischer RAM: 8075.27 MB
Verfügbarer physikalischer RAM: 5166.18 MB
Summe virtueller Speicher: 9355.27 MB
Verfügbarer virtueller Speicher: 6382.87 MB

==================== Laufwerke ================================

Drive c: (OS) (Fixed) (Total:372.6 GB) (Free:305.95 GB) NTFS ==>[System mit Startkomponenten (eingeholt von lesen Laufwerk)]
Drive d: (Data) (Fixed) (Total:537.8 GB) (Free:537.62 GB) NTFS
Drive f: () (Removable) (Total:3.72 GB) (Free:3.58 GB) FAT32
Drive g: (INTENSO) (Removable) (Total:14.83 GB) (Free:14.83 GB) FAT32

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 3483A440)

Partition: GPT.

========================================================
Disk: 1 (Size: 3.7 GB) (Disk ID: 6D2B7FB9)
Partition 1: (Not Active) - (Size=3.7 GB) - (Type=0B)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 14.8 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=14.8 GB) - (Type=0C)

==================== Ende von Ergebnis ============================

schrauber 16.08.2015 06:28
Papierkorb leeren.


Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
C:\Users\Selina\AppData\Local\Mozilla\Firefox\Profiles\8cmuviq6.default\cache2\entries\D5A001714A9C63336522CB1636D870B32656047C

C:\Users\Selina\AppData\Local\Temp\optprosetup.exe

C:\Users\Selina\AppData\Local\Temp\5A00\temp\Preserver.xyz

C:\Users\Selina\AppData\Local\Temp\BF80\temp\MyPCBackup.exe.tmp

C:\Users\Selina\AppData\Local\Temp\BF80\temp\SystemAdvance.xyz

C:\Users\Selina\AppData\Local\Temp\DMR\dmr_72.exe

C:\Users\Selina\AppData\Local\Temp\is1948636036\049F5D20_stp\OptimizerPro.exe

C:\Users\Selina\AppData\Local\Temp\stF476.tmp\PicexaSvc.exe

C:\Users\Selina\Downloads\HSS-3.42-install-hss-600-conduit.exe

C:\Users\Selina\Downloads\Synaptics TouchPad Treiber - CHIP-Installer.exe
Task: {02554177-D27A-4093-8467-1296F3541CFE} - \Yahoo! Search -> Keine Datei <==== ACHTUNG

Task: {3B0A9D92-6D5C-4FBC-BAE6-01190DCA6424} - \Yahoo! Search Updater -> Keine Datei <==== ACHTUNG
Emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.





Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
http://deeprybka.trojaner-board.de/b.../combofix2.pngCombofix deinstallieren .
  • Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
  • Drücke bitte die http://deeprybka.trojaner-board.de/b...ne/revo/w7.png + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
  • Klicke auf OK.
    Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
  • Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:

http://deeprybka.trojaner-board.de/b...ast/schild.pngAbsicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
 Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank.
Meine Empfehlung:
http://filepony.de/icon/emsisoft_anti_malware.png
Emsisoft

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
http://filepony.de/icon/noscript.png NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
http://filepony.de/icon/malwarebytes_anti_exploit.pngMalwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.


Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwarecleaner .


Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

sunrise_77 17.08.2015 22:57
Danke für die großartige Hilfe schrauber!:dankeschoen:

So, Papierkorb ist leer und da ist noch das Fixlog :)
Code:
Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:17-08-2015
durchgeführt von Selina (2015-08-17 23:19:32) Run:1
Gestartet von C:\Users\Selina\Desktop
Geladene Profile: Selina (Verfügbare Profile: Selina & Anja & mama)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
C:\Users\Selina\AppData\Local\Mozilla\Firefox\Profiles\8cmuviq6.default\cache2\entries\D5A001714A9C63336522CB1636D870B32656047C

C:\Users\Selina\AppData\Local\Temp\optprosetup.exe

C:\Users\Selina\AppData\Local\Temp\5A00\temp\Preserver.xyz

C:\Users\Selina\AppData\Local\Temp\BF80\temp\MyPCBackup.exe.tmp

C:\Users\Selina\AppData\Local\Temp\BF80\temp\SystemAdvance.xyz

C:\Users\Selina\AppData\Local\Temp\DMR\dmr_72.exe

C:\Users\Selina\AppData\Local\Temp\is1948636036\049F5D20_stp\OptimizerPro.exe

C:\Users\Selina\AppData\Local\Temp\stF476.tmp\PicexaSvc.exe

C:\Users\Selina\Downloads\HSS-3.42-install-hss-600-conduit.exe

C:\Users\Selina\Downloads\Synaptics TouchPad Treiber - CHIP-Installer.exe

Emptytemp:
*****************

"C:\Users\Selina\AppData\Local\Mozilla\Firefox\Profiles\8cmuviq6.default\cache2\entries\D5A001714A9C63336522CB1636D870B32656047C" => Datei/Ordner nicht gefunden.
"C:\Users\Selina\AppData\Local\Temp\optprosetup.exe" => Datei/Ordner nicht gefunden.
"C:\Users\Selina\AppData\Local\Temp\5A00\temp\Preserver.xyz" => Datei/Ordner nicht gefunden.
"C:\Users\Selina\AppData\Local\Temp\BF80\temp\MyPCBackup.exe.tmp" => Datei/Ordner nicht gefunden.
"C:\Users\Selina\AppData\Local\Temp\BF80\temp\SystemAdvance.xyz" => Datei/Ordner nicht gefunden.
"C:\Users\Selina\AppData\Local\Temp\DMR\dmr_72.exe" => Datei/Ordner nicht gefunden.
"C:\Users\Selina\AppData\Local\Temp\is1948636036\049F5D20_stp\OptimizerPro.exe" => Datei/Ordner nicht gefunden.
"C:\Users\Selina\AppData\Local\Temp\stF476.tmp\PicexaSvc.exe" => Datei/Ordner nicht gefunden.
"C:\Users\Selina\Downloads\HSS-3.42-install-hss-600-conduit.exe" => Datei/Ordner nicht gefunden.
"C:\Users\Selina\Downloads\Synaptics TouchPad Treiber - CHIP-Installer.exe" => Datei/Ordner nicht gefunden.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{02554177-D27A-4093-8467-1296F3541CFE} => Schlüssel nicht gefunden.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Yahoo! Search => Schlüssel nicht gefunden.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0A9D92-6D5C-4FBC-BAE6-01190DCA6424} => Schlüssel nicht gefunden.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Yahoo! Search Updater => Schlüssel nicht gefunden.
EmptyTemp: => 184.1 MB temporäre Dateien entfernt.


Das System musste neu gestartet werden..

==== Ende von Fixlog 23:19:46 ====

schrauber 18.08.2015 18:42
Gern Geschehen :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 23:01 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131