| Ertfred1 | 15.11.2016 18:33 |
Cosinus ich raste hier noch aus. Habe seit dem keine Dateien mehr runtergeladen und plötzlich ändert sich die Standartsuchleiste auf amisites.com udn auch die Startseite. bei Malware gibts ne Masse an Funden. Hier kann ich beim Beitrag-Verfassen die ganzen Dinger nicht mehr anklicken. Bspw die Code-Box "#" musst ich jetzt manuell machen Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Suchlaufdatum: 15.11.2016
Suchlaufzeit: 16:57
Protokolldatei: malware.txt
Administrator: Ja
Version: 2.2.1.1043
Malware-Datenbank: v2016.11.15.10
Rootkit-Datenbank: v2016.10.31.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert
Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: Z50-70
Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 306411
Abgelaufene Zeit: 10 Min., 32 Sek.
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert
Prozesse: 2
PUP.Optional.Elex, C:\Program Files (x86)\WinSaber\WinSaber.exe, 8820, , [9ff713adb3e785b109ae0a9751b23ec2]
PUP.Optional.Elex.Generic, C:\Users\Z50-70\AppData\Roaming\ficfi\UvConverter.exe, 4284, , [e1b55a660a906fc7defaf4dff112ba46]
Module: 1
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\_SSpm\ClearLog.dll, , [088ed8e8bcde2d0938ae40739f64af51],
Registrierungsschlüssel: 10
PUP.Optional.Elex, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\winsaber, , [9ff713adb3e785b109ae0a9751b23ec2],
PUP.Optional.Elex.Generic, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UvConv, , [e1b55a660a906fc7defaf4dff112ba46],
PUP.Optional.CornerSunshine, HKLM\SOFTWARE\CLIENTS\Corner Sunshine, , [50462f910e8c95a1cb4b67180300fa06],
PUP.Optional.Amisites.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [197decd4b6e4a4921048b21e30d3da26],
PUP.Optional.Elex, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{F2C05218-D2D5-45CC-B89E-06DB6E20FC93}, , [70265d638c0ed75fd35b4a1ade255fa1],
PUP.Optional.Elex, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\ChelfNotify Task, , [8b0b39873664c472db54263e7b88a55b],
PUP.Optional.Amisites.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\amisitesSoftware, , [593de1dfd5c5fa3c6d6a6f644bb86e92],
PUP.Optional.CornerSunshine, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\Corner Sunshine, , [445268589efc35016babe897ac57ee12],
PUP.Optional.Amisites.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [91053c84ff9b43f3e771e7e922e1857b],
PUP.Optional.Amisites.ShrtCln, HKU\S-1-5-21-3113501232-3420862059-1005930933-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [b9dd516f257575c166edb71914ef9769],
Registrierungswerte: 6
PUP.Optional.Amisites.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, hxxp://www.amisites.com/search/?type=ds&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT&q={searchTerms}, , [197decd4b6e4a4921048b21e30d3da26]
PUP.Optional.Elex, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{F2C05218-D2D5-45CC-B89E-06DB6E20FC93}|Path, \ChelfNotify Task, , [70265d638c0ed75fd35b4a1ade255fa1]
PUP.Optional.Amisites.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, hxxp://www.amisites.com/search/?type=ds&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT&q={searchTerms}, , [91053c84ff9b43f3e771e7e922e1857b]
PUP.Optional.Elex, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UVCONV|ImagePath, "C:\Users\Z50-70\AppData\Roaming\ficfi\UvConverter.exe" {2C8E8C85-942B-451C-8243-97A089265577}, , [bfd7fbc56832ba7c2baa5083b05313ed]
PUP.Optional.Elex, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WINSABER|ImagePath, C:\Program Files (x86)\WinSaber\WinSaber.exe, , [76203e824456a78ffae174d77093cc34]
PUP.Optional.Amisites.ShrtCln, HKU\S-1-5-21-3113501232-3420862059-1005930933-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, hxxp://www.amisites.com/search/?type=ds&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT&q={searchTerms}, , [b9dd516f257575c166edb71914ef9769]
Registrierungsdaten: 19
PUP.Optional.Amisites.ShrtCln, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\FIREFOX.EXE\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" hxxp://www.amisites.com/?type=sc&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT, Gut: (firefox.exe), Schlecht: ("C:\Program Files (x86)\Mozilla Firefox\firefox.exe" hxxp://www.amisites.com/?type=sc&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT),,[32646c547129ea4c1c3d448cdb2849b7]
PUP.Optional.Amisites.ShrtCln, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.amisites.com/?type=sc&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.amisites.com/?type=sc&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT),,[653128982b6f1a1cf75f844cda29629e]
PUP.Optional.Amisites.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.amisites.com/search/?type=ds&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.amisites.com/search/?type=ds&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT&q={searchTerms}),,[880ea9179efcc274f35a24ac6d96c23e]
PUP.Optional.Amisites.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.amisites.com/?type=hp&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT, Gut: (www.google.com), Schlecht: (hxxp://www.amisites.com/?type=hp&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT),,[8c0a417f7723d85efd50a927b0532ed2]
PUP.Optional.Amisites.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.amisites.com/?type=hp&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT, Gut: (www.google.com), Schlecht: (hxxp://www.amisites.com/?type=hp&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT),,[cbcbb40cbae0f0466ae36e6260a304fc]
PUP.Optional.Amisites.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.amisites.com/search/?type=ds&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.amisites.com/search/?type=ds&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT&q={searchTerms}),,[0294a917bae03ef815381fb17a8942be]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[e1b5823e1882181e663432f24fb424dc]
PUP.Optional.Amisites.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\FIREFOX.EXE\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" hxxp://www.amisites.com/?type=sc&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT, Gut: (firefox.exe), Schlecht: ("C:\Program Files (x86)\Mozilla Firefox\firefox.exe" hxxp://www.amisites.com/?type=sc&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT),,[b4e2952b762484b2e475319fd330d22e]
PUP.Optional.Amisites.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.amisites.com/?type=sc&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.amisites.com/?type=sc&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT),,[e4b206ba6337b1857dd9656ba85b4eb2]
PUP.Optional.Amisites.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.amisites.com/?type=hp&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT, Gut: (www.google.com), Schlecht: (hxxp://www.amisites.com/?type=hp&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT),,[c4d2d9e784164aec44097a5657ac27d9]
PUP.Optional.Amisites.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.amisites.com/search/?type=ds&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.amisites.com/search/?type=ds&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT&q={searchTerms}),,[dcbab20ec4d664d2f15c824e7291d12f]
PUP.Optional.Amisites.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.amisites.com/search/?type=ds&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.amisites.com/search/?type=ds&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT&q={searchTerms}),,[5244388823772115ada009c7bc479e62]
PUP.Optional.Amisites.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.amisites.com/?type=hp&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT, Gut: (www.google.com), Schlecht: (hxxp://www.amisites.com/?type=hp&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT),,[7521ead6594130064409b51b748f946c]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[95011ca4495158de6337b272986bd12f]
PUP.Optional.Amisites.ShrtCln, HKU\S-1-5-21-3113501232-3420862059-1005930933-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.amisites.com/?type=hp&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT, Gut: (www.google.com), Schlecht: (hxxp://www.amisites.com/?type=hp&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT),,[c8ce38881585b680d27ee4ec020129d7]
PUP.Optional.Amisites.ShrtCln, HKU\S-1-5-21-3113501232-3420862059-1005930933-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.amisites.com/?type=hp&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT, Gut: (www.google.com), Schlecht: (hxxp://www.amisites.com/?type=hp&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT),,[3a5c04bc3367e45253fda72928db19e7]
PUP.Optional.Amisites.ShrtCln, HKU\S-1-5-21-3113501232-3420862059-1005930933-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.amisites.com/search/?type=ds&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.amisites.com/search/?type=ds&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT&q={searchTerms}),,[5d3930907d1d132384cc1fb13ec5a060]
PUP.Optional.Amisites.ShrtCln, HKU\S-1-5-21-3113501232-3420862059-1005930933-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.amisites.com/search/?type=ds&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.amisites.com/search/?type=ds&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT&q={searchTerms}),,[118505bb603a68cef35d9739aa594fb1]
PUP.Optional.Amisites.ShrtCln, HKU\S-1-5-21-3113501232-3420862059-1005930933-1001_Classes\LOCAL SETTINGS\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APPCONTAINER\STORAGE\MICROSOFT.MICROSOFTEDGE_8WEKYB3D8BBWE\MICROSOFTEDGE\MAIN|HomeButtonPage, hxxp://www.amisites.com/?type=hp&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT, Gut: (hxxp://www.google.com), Schlecht: (hxxp://www.amisites.com/?type=hp&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT),,[781ebd031882a09662db478961a218e8]
Ordner: 4
PUP.Optional.Elex.Generic, C:\Users\Z50-70\AppData\Roaming\ficfi, , [e1b55a660a906fc7defaf4dff112ba46],
PUP.Optional.Elex, C:\Program Files (x86)\WinSaber, , [a6f079479208df570d9ff8bb39ca28d8],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\_SSpm, , [088ed8e8bcde2d0938ae40739f64af51],
Dateien: 39
PUP.Optional.Elex, C:\Program Files (x86)\WinSaber\WinSaber.exe, , [9ff713adb3e785b109ae0a9751b23ec2],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\OLD_FILE2, , [2670912f2a70b680fcd92f8fac57b24e],
PUP.Optional.Elex, C:\Program Files (x86)\Prerpeck\chrome_elf.dll, , [890d14ac277369cdf8dd45795fa4c13f],
PUP.Optional.Elex, C:\Program Files (x86)\Prerpeck\saber.exe, , [e7af3b850496ef477d3ac3deaf546898],
PUP.Optional.Elex, C:\Windows\System32\Tasks\ChelfNotify Task, , [2472d8e8eab0340282ae2e369a69c53b],
PUP.Optional.Amisites.ShrtCln, C:\Users\Z50-70\AppData\Roaming\Mozilla\Firefox\Profiles\a216vyue.default-1471744608087\searchplugins\amisites.xml, , [692db7093763e155ef5c3f910df640c0],
PUP.Optional.Elex.Generic, C:\Users\Z50-70\AppData\Roaming\ficfi\UvConverter.exe, , [e1b55a660a906fc7defaf4dff112ba46],
PUP.Optional.Elex.Generic, C:\Users\Z50-70\AppData\Roaming\ficfi\main, , [e1b55a660a906fc7defaf4dff112ba46],
PUP.Optional.Elex.Generic, C:\Users\Z50-70\AppData\Roaming\ficfi\UniKeyNT.exe, , [e1b55a660a906fc7defaf4dff112ba46],
PUP.Optional.Elex, C:\Program Files (x86)\WinSaber\SaberSvcLog.log, , [a6f079479208df570d9ff8bb39ca28d8],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\9.3.6494.400.manifest, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\BrowserUpdate.exe, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\chrome_elf.dll, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\de5.exe, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\OLD_FILE1, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\OLD_FILE3, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\_SSpm\39.json, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\_SSpm\9.3.6494.400.manifest, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\_SSpm\A2.dll, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\_SSpm\amule.msi, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\_SSpm\BrowserUpdate.exe, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\_SSpm\Chrome_elf.dll, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\_SSpm\ClearLog.dll, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\_SSpm\data.bin, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\_SSpm\DataBase, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\_SSpm\hhhhh.exe, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\_SSpm\QQBrowser.exe, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\_SSpm\QQBrowserFrame.dll, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\_SSpm\regkey.exe, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\_SSpm\ttttt.exe, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\_SSpm\updater_cf3, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Elex, C:\ProgramData\ChelfNotify\_SSpm\uvcSetup.msi, , [088ed8e8bcde2d0938ae40739f64af51],
PUP.Optional.Amisites.ShrtCln, C:\Users\Z50-70\AppData\Roaming\Mozilla\Firefox\Profiles\a216vyue.default-1471744608087\prefs.js, Gut: (user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Schlecht: (user_pref("browser.startup.homepage", "hxxp://www.amisites.com/?type=hp&ts=1479225239&z=e928b872a2e10d350bf61c6g1z7m1tco1o4wdodc5b&from=che0812&uid=TOSHIBAXMQ01ABF050_74JAP1OOTXX74JAP1OOT");), ,[a6f0368abfdbde5875cbb41c16edad53]
PUP.Optional.Trotux, C:\Users\Z50-70\AppData\Roaming\Profiles\Doqaward.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.search.defaultenginename", "trotux");), ,[771f2b955f3b57df5e9a8705a45f718f]
PUP.Optional.Trotux, C:\Users\Z50-70\AppData\Roaming\Profiles\Doqaward.default\prefs.js, Gut: (), Schlecht: (ge toupdate.lastUpdateTime.addon-background-update-timer", 1478722432);
user_pref("app.update.lastUpdateTime.background-update-timer", 1478721509);
user_pref("app.update.last), ,[1c7a3888b5e582b45a9eafdd788b18e8]
PUP.Optional.Trotux, C:\Users\Z50-70\AppData\Roaming\Profiles\Doqaward.default\prefs.js, Gut: (), Schlecht: (2);
user_pref("app.update.lastUpdateTime.background-update-timer", 1478721509);
user_pref("app.update.lastUpdateTime.blocklist-background-update-timer", 1478721629);
user_pref("app.update.lastUpda), ,[1e78f6ca841670c64cac612bd42f56aa]
PUP.Optional.Trotux, C:\Users\Z50-70\AppData\Roaming\Profiles\Doqaward.default\prefs.js, Gut: (), Schlecht: (eTime.blocklist-background-update-timer", 1478721629);
user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 1478724869);
user_pref("app.update.lastUpdateTime.experiments-update-timer", ), ,[5e38e0e09208e2540cec9eeeb152ad53]
PUP.Optional.Trotux, C:\Users\Z50-70\AppData\Roaming\Profiles\Doqaward.default\prefs.js, Gut: (), Schlecht: (ate.lastUpdateTime.background-update-timer", 14787215), ,[0195d3edb8e22016679194f8c241bd43]
PUP.Optional.Trotux, C:\Users\Z50-70\AppData\Roaming\Profiles\Doqaward.default\prefs.js, Gut: (), Schlecht: (pdateTime.browser-cleanup-thumbnails", 1478724869);
user_pref("app.update.lastUpdateTime.experiments-update-timer", 1478721869);
user_pref("app.update.lastUpdateTime.se), ,[573f8d3397035fd7f800c4c8659ee41c]
Physische Sektoren: 0
(keine bösartigen Elemente erkannt)
(end)
adwcleaner
AdwCleaner Logfile: Code:
# AdwCleaner v6.030 - Bericht erstellt am 15/11/2016 um 18:24:47
# Aktualisiert am 19/10/2016 von Malwarebytes
# Datenbank : 2016-11-15.1 [Server]
# Betriebssystem : Windows 10 Home (X64)
# Benutzername : Z50-70 - LENOVO-PC
# Gestartet von : C:\Users\Z50-70\Desktop\AdwCleaner_6.030.exe
# Modus: Löschen
# Unterstützung : hxxps://www.malwarebytes.com/support
***** [ Dienste ] *****
[-] Dienst gelöscht: WinSAPSvc
[-] Dienst gelöscht: Archer
[-] Dienst gelöscht: ed2kidle
***** [ Ordner ] *****
[-] Ordner gelöscht: C:\ProgramData\ChelfNotify
[-] Ordner gelöscht: C:\ProgramData\WinSAPSvc
[-] Ordner gelöscht: C:\Program Files (x86)\WinArcher
[-] Ordner gelöscht: C:\Program Files (x86)\UvConverter
***** [ Dateien ] *****
***** [ DLL ] *****
***** [ WMI ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
***** [ Registrierungsdatenbank ] *****
[-] Schlüssel gelöscht: HKLM\SOFTWARE\ScreenShot
[-] Schlüssel gelöscht: HKLM\SOFTWARE\WinSaberSvc
[-] Schlüssel gelöscht: HKLM\SOFTWARE\WinArcher
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Installer\Features\F39E5917C417B4041A46F88010121C6E
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Installer\Products\F39E5917C417B4041A46F88010121C6E
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F39E5917C417B4041A46F88010121C6E
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F39E5917C417B4041A46F88010121C6E
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\Installer\Features\F39E5917C417B4041A46F88010121C6E
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\Installer\Products\F39E5917C417B4041A46F88010121C6E
***** [ Browser ] *****
*************************
:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht
*************************
C:\AdwCleaner\AdwCleaner[C0].txt - [2131 Bytes] - [15/11/2016 18:24:47]
C:\AdwCleaner\AdwCleaner[S0].txt - [2293 Bytes] - [15/11/2016 18:23:52]
########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [2277 Bytes] ##########
--- --- ---
JRT Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.9 (09.30.2016)
Operating System: Windows 10 Home x64
Ran by Z50-70 (Administrator) on 15.11.2016 at 18:30:15,64
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 0
Registry: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 15.11.2016 at 18:31:48,23
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
TDSSKiller.exe und speichere diese Datei auf dem Desktop
Lesestoff:
AdwCleaner auf deinen Desktop.
Malwarebytes Anti-Malware 
SecurityCheck und:
