Jump to content

Frokeh

Members
  • Content Count

    16
  • Joined

  • Last visited

Everything posted by Frokeh

  1. I did the scan result and it says "the compute is clean" Number of threats found: 0
  2. RogueKiller V12.12.9.0 (x64) [Mar 19 2018] (Free) von Adlice Software Mail : http://www.adlice.com/contact/ Feedback : https://forum.adlice.com Website : http://www.adlice.com/download/roguekiller/ Blog : http://www.adlice.com Betriebssystem : Windows 10 (10.0.16299) 64 bits version Gestartet in : Normalmodus User : windo [Administrator] Gestartet von : C:\Users\windo\Downloads\RogueKiller_portable64.exe Modus : Löschen -- Datum : 03/22/2018 17:12:02 (Dauer : 00:28:17) ¤¤¤ Prozesse : 0 ¤¤¤ ¤¤¤ Registry : 8 ¤¤¤ [PUP.Gen1] (X64) HKEY_USERS\.DEFAULT\Software\OCS -> Nicht ausgewählt [PUP.Gen1] (X86) HKEY_USERS\.DEFAULT\Software\OCS -> Nicht ausgewählt [PUP.Gen1] (X64) HKEY_USERS\S-1-5-21-3588683990-385766964-3662382246-1001\Software\OCS -> Nicht ausgewählt [PUP.Gen1] (X86) HKEY_USERS\S-1-5-21-3588683990-385766964-3662382246-1001\Software\OCS -> Nicht ausgewählt [PUP.Gen1] (X64) HKEY_USERS\S-1-5-18\Software\OCS -> Nicht ausgewählt [PUP.Gen1] (X86) HKEY_USERS\S-1-5-18\Software\OCS -> Nicht ausgewählt [PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-3588683990-385766964-3662382246-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://dell15.msn.com/?pc=DCTE -> Nicht ausgewählt [PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-3588683990-385766964-3662382246-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://dell15.msn.com/?pc=DCTE -> Nicht ausgewählt ¤¤¤ Tasks : 0 ¤¤¤ ¤¤¤ Dateien : 9 ¤¤¤ [PUP.Gen1][Datei] C:\Users\Public\Desktop\Driver Easy.lnk [LNK@] C:\PROGRA~1\Easeware\DRIVER~1\DRIVER~1.EXE -> Gelöscht [Hj.Shortcut][Datei] C:\Users\windo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\World of Tanks.lnk [LNK@] C:\PROGRA~1\INTERN~1\iexplore.exe http://cpm.wargaming.net/avo6ki14/?pub_id=100 -> Shortcut bereinigt [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\0wbkiyxx.3z4\rscricon.dll -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\0wbkiyxx.3z4\rtsper.inf -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\0wbkiyxx.3z4\rtsper.sys -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\0wbkiyxx.3z4\rtsper64.cat -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\0wbkiyxx.3z4 -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\3ebcspvw.4su\sunrisepoint-h.cat -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\3ebcspvw.4su\sunrisepoint-hsystem.inf -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\3ebcspvw.4su -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\3g3c4ln4.pvo\heci.cat -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\3g3c4ln4.pvo\heci.inf -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\3g3c4ln4.pvo\x64\teedriverw8x64.sys -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\3g3c4ln4.pvo\x64 -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\3g3c4ln4.pvo\x86\teedriverw8.sys -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\3g3c4ln4.pvo\x86 -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\3g3c4ln4.pvo -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\5ikl4bev.zcw\lfhidusb.cat -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\5ikl4bev.zcw\lfhidusb.inf -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\5ikl4bev.zcw\lkmdfcoinst.dll -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\5ikl4bev.zcw\lusbfilt.sys -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\5ikl4bev.zcw -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\cqmmkw0t.icu\dptf_cpu.cat -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\cqmmkw0t.icu\dptf_cpu.inf -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\cqmmkw0t.icu\dptf_cpu.sys -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\cqmmkw0t.icu -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\dmcrwtc4.jb0\dellrbtn.cat -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\dmcrwtc4.jb0\dellrbtn.inf -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\dmcrwtc4.jb0\dellrbtn.sys -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\dmcrwtc4.jb0 -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\Drivers.data -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\fxs5yktx.dov -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\haepamym.wd4\skylake.cat -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\haepamym.wd4\skylakesystem.inf -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\haepamym.wd4 -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\kgdtqgdi.bgw\ialpss2_i2c.sys -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\kgdtqgdi.bgw\ialpss2_i2c_skl.cat -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\kgdtqgdi.bgw\ialpss2_i2c_skl.inf -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\kgdtqgdi.bgw -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\kspy4wos.3xj\ialpss2_gpio2.sys -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\kspy4wos.3xj\ialpss2_gpio2_skl.cat -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\kspy4wos.3xj\ialpss2_gpio2_skl.inf -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\kspy4wos.3xj -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\lgaiaib4.wi3\hdxrt.cat -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\lgaiaib4.wi3\hdxrt.inf -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\lgaiaib4.wi3\rtaiodat.dat -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\lgaiaib4.wi3\rtkvhd64.sys -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\lgaiaib4.wi3 -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\lvtgd4kw.jnz\ibtfw.dat -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\lvtgd4kw.jnz\ibtproppage.dll -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\lvtgd4kw.jnz\ibtsiva.exe -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\lvtgd4kw.jnz\ibtusb.cat -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\lvtgd4kw.jnz\ibtusb.inf -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\lvtgd4kw.jnz\ibtusb.sys -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\lvtgd4kw.jnz -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\asgesture.dll -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\callmaincpl.exe -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\dell.framework.library.dll -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\delldevices.exe -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\etd.cat -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\etd.inf -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\etd.sys -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\etdapi.dll -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\etdapi32.dll -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\etdapix.dll -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\etdcmds.dll -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\etdcoinstaller01000.dll -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\etdctrl.exe -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\etdctrlhelper.exe -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\etddeviceinformation.exe -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\etdfavorite.dll -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\etdgesture_dell.exe -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\etdmcpl.dll -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\etdservice.exe -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\etdsetup.ini -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\etduninst.dll -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\etdun_inst.exe -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\etd_dll.dll -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy\wdfcoinstaller01009.dll -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\m0drm5xm.ehy -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\mugan2hm.qeb\lfmouhid.cat -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\mugan2hm.qeb\lfmouhid.inf -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\mugan2hm.qeb\lhidfilt.sys -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\mugan2hm.qeb\lkmdfcoinst.dll -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\mugan2hm.qeb\lmoufilt.sys -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\mugan2hm.qeb\lmoufiltcoinst.dll -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\mugan2hm.qeb -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\psh4utdd.d2z\rt640x64.cat -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\psh4utdd.d2z\rt640x64.inf -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\psh4utdd.d2z\rt640x64.sys -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\psh4utdd.d2z -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\qtmlmhm5.z5q\intelwifiihv04.dll -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\qtmlmhm5.z5q\netwfw04.dat -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\qtmlmhm5.z5q\netwtw04.cat -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\qtmlmhm5.z5q\netwtw04.inf -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\qtmlmhm5.z5q\netwtw04.sys -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\qtmlmhm5.z5q -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\rwbghknn.3d0\intcdaud.cat -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\rwbghknn.3d0\intcdaud.inf -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\rwbghknn.3d0\intcdaud.sys -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\rwbghknn.3d0 -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\rzzeshzh.url\iccwdt.cat -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\rzzeshzh.url\iccwdt.inf -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\rzzeshzh.url\iccwdt.sys -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\rzzeshzh.url\wdfcoinstaller01009.dll -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\rzzeshzh.url\x64\iccwdt.sys -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\rzzeshzh.url\x64\wdfcoinstaller01009.dll -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\rzzeshzh.url\x64 -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\rzzeshzh.url -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\uykqr4qo.i10\iaahcic.cat -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\uykqr4qo.i10\iaahcic.inf -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\uykqr4qo.i10\iastora.sys -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\uykqr4qo.i10\iastorf.sys -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers\uykqr4qo.i10 -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\drivers -> Gelöscht [PUP.Gen1][Datei] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy\settings.dat -> Gelöscht [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware\DriverEasy -> Gelöscht [PUP.uTorrentAds][Datei] C:\Users\windo\AppData\Roaming\uTorrent\updates\3.4.9_43295\utorrentie.exe -> Gelöscht [PUP.Gen1][Datei] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Easy\Driver Easy entfernen.lnk [LNK@] C:\PROGRA~1\Easeware\DRIVER~1\unins000.exe -> Gelöscht [PUP.Gen1][Datei] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Easy\Driver Easy.lnk [LNK@] C:\PROGRA~1\Easeware\DRIVER~1\DRIVER~1.EXE -> Gelöscht [PUP.Gen1][Ordner] C:\Program Files\Easeware -> Gelöscht [PUP.Gen1][Datei] C:\Program Files\Easeware\DriverEasy\7z\7z.dll -> Gelöscht [PUP.Gen1][Datei] C:\Program Files\Easeware\DriverEasy\7z\7z86.dll -> Gelöscht [PUP.Gen1][Ordner] C:\Program Files\Easeware\DriverEasy\7z -> Gelöscht [PUP.Gen1][Datei] C:\Program Files\Easeware\DriverEasy\7zip_license.txt -> Gelöscht [PUP.Gen1][Datei] C:\Program Files\Easeware\DriverEasy\DriverEasy.exe -> Gelöscht [PUP.Gen1][Datei] C:\Program Files\Easeware\DriverEasy\DriverEasy.exe.config -> Gelöscht [PUP.Gen1][Datei] C:\Program Files\Easeware\DriverEasy\Easeware.CheckScheduledScan.exe -> Gelöscht [PUP.Gen1][Datei] C:\Program Files\Easeware\DriverEasy\Easeware.CheckScheduledScan.exe.config -> Gelöscht [PUP.Gen1][Datei] C:\Program Files\Easeware\DriverEasy\Easeware.ConfigLanguageFromSetup.exe -> Gelöscht [PUP.Gen1][Datei] C:\Program Files\Easeware\DriverEasy\Easeware.ConfigLanguageFromSetup.exe.config -> Gelöscht [PUP.Gen1][Datei] C:\Program Files\Easeware\DriverEasy\Easeware.Driver.Backup.dll -> Gelöscht [PUP.Gen1][Datei] C:\Program Files\Easeware\DriverEasy\Easeware.Driver.Core.dll -> Gelöscht [PUP.Gen1][Datei] C:\Program Files\Easeware\DriverEasy\HardwareInfo\HardwareInfo.dll -> Gelöscht [PUP.Gen1][Datei] C:\Program Files\Easeware\DriverEasy\HardwareInfo\HardwareInfo64.dll -> Gelöscht [PUP.Gen1][Ordner] C:\Program Files\Easeware\DriverEasy\HardwareInfo -> Gelöscht [PUP.Gen1][Datei] C:\Program Files\Easeware\DriverEasy\Interop.WUApiLib.dll -> Gelöscht [PUP.Gen1][Datei] C:\Program Files\Easeware\DriverEasy\Map.xml -> Gelöscht [PUP.Gen1][Datei] C:\Program Files\Easeware\DriverEasy\SevenZipSharp.dll -> Gelöscht [PUP.Gen1][Datei] C:\Program Files\Easeware\DriverEasy\unins000.dat -> Gelöscht [PUP.Gen1][Datei] C:\Program Files\Easeware\DriverEasy\unins000.exe -> Gelöscht [PUP.Gen1][Datei] C:\Program Files\Easeware\DriverEasy\unins000.msg -> Gelöscht [PUP.Gen1][Ordner] C:\Program Files\Easeware\DriverEasy -> Gelöscht [PUP.Gen1][Datei] C:\Users\Public\Desktop\Driver Easy.lnk [LNK@] C:\PROGRA~1\Easeware\DRIVER~1\DRIVER~1.EXE -> Entfernt bei Neustart [2] [PUP.AutoIt.Gen][Datei] C:\Users\windo\Desktop\HRC.exe -> Gelöscht ¤¤¤ WMI : 0 ¤¤¤ ¤¤¤ Hosts-Datei : 0 ¤¤¤ ¤¤¤ Anti-Rootkit : 0 (Driver: Geladen) ¤¤¤ ¤¤¤ Webbrowser : 0 ¤¤¤ ¤¤¤ MBR-Übeprüfung : ¤¤¤ +++++ PhysicalDrive0: Samsung SSD 850 EVO M.2 250GB +++++ Error reading User MBR! NOT VALID! Error reading LL1 MBR! NOT VALID! Error reading LL2 MBR! NOT VALID! +++++ PhysicalDrive1: TOSHIBA MQ02ABD100H +++++ --- User --- [MBR] 00387be23c3a6b0b27bbc7af4ad12c2b [BSP] 421697c9c49666e0f4f7ad1b4b97c04e : Empty|VT.Unknown MBR Code Partition table: 0 - [MAN-MOUNT] EFI system partition | Offset (sectors): 2048 | Size: 500 MB 1 - [MAN-MOUNT] Microsoft reserved partition | Offset (sectors): 1026048 | Size: 128 MB 2 - Basic data partition | Offset (sectors): 1288192 | Size: 940092 MB 3 - [SYSTEM][MAN-MOUNT] | Offset (sectors): 1926596608 | Size: 450 MB 4 - [SYSTEM][MAN-MOUNT] | Offset (sectors): 1927518208 | Size: 12698 MB User = LL1 ... OK User = LL2 ... OK RogueKiller V12.12.9.0 (x64) [Mar 19 2018] (Free) von Adlice Software Mail : http://www.adlice.com/contact/ Feedback : https://forum.adlice.com Website : http://www.adlice.com/download/roguekiller/ Blog : http://www.adlice.com Betriebssystem : Windows 10 (10.0.16299) 64 bits version Gestartet in : Normalmodus User : windo [Administrator] Gestartet von : C:\Users\windo\Downloads\RogueKiller_portable64.exe Modus : Scannen -- Datum : 03/21/2018 21:53:47 (Dauer : 00:30:51) ¤¤¤ Prozesse : 0 ¤¤¤ ¤¤¤ Registry : 8 ¤¤¤ [PUP.Gen1] (X64) HKEY_USERS\.DEFAULT\Software\OCS -> Gefunden [PUP.Gen1] (X86) HKEY_USERS\.DEFAULT\Software\OCS -> Gefunden [PUP.Gen1] (X64) HKEY_USERS\S-1-5-21-3588683990-385766964-3662382246-1001\Software\OCS -> Gefunden [PUP.Gen1] (X86) HKEY_USERS\S-1-5-21-3588683990-385766964-3662382246-1001\Software\OCS -> Gefunden [PUP.Gen1] (X64) HKEY_USERS\S-1-5-18\Software\OCS -> Gefunden [PUP.Gen1] (X86) HKEY_USERS\S-1-5-18\Software\OCS -> Gefunden [PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-3588683990-385766964-3662382246-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://dell15.msn.com/?pc=DCTE -> Gefunden [PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-3588683990-385766964-3662382246-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://dell15.msn.com/?pc=DCTE -> Gefunden ¤¤¤ Tasks : 0 ¤¤¤ ¤¤¤ Dateien : 9 ¤¤¤ [PUP.Gen1][Datei] C:\Users\Public\Desktop\Driver Easy.lnk [LNK@] C:\PROGRA~1\Easeware\DRIVER~1\DRIVER~1.EXE -> Gefunden [Hj.Shortcut][Datei] C:\Users\windo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\World of Tanks.lnk [LNK@] C:\PROGRA~1\INTERN~1\iexplore.exe http://cpm.wargaming.net/avo6ki14/?pub_id=100 -> Gefunden [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware -> Gefunden [PUP.uTorrentAds][Datei] C:\Users\windo\AppData\Roaming\uTorrent\updates\3.4.9_43295\utorrentie.exe -> Gefunden [PUP.Gen1][Datei] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Easy\Driver Easy entfernen.lnk [LNK@] C:\PROGRA~1\Easeware\DRIVER~1\unins000.exe -> Gefunden [PUP.Gen1][Datei] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Easy\Driver Easy.lnk [LNK@] C:\PROGRA~1\Easeware\DRIVER~1\DRIVER~1.EXE -> Gefunden [PUP.Gen1][Ordner] C:\Program Files\Easeware -> Gefunden [PUP.Gen1][Datei] C:\Users\Public\Desktop\Driver Easy.lnk [LNK@] C:\PROGRA~1\Easeware\DRIVER~1\DRIVER~1.EXE -> Gefunden [PUP.AutoIt.Gen][Datei] C:\Users\windo\Desktop\HRC.exe -> Gefunden ¤¤¤ WMI : 0 ¤¤¤ ¤¤¤ Hosts-Datei : 0 ¤¤¤ ¤¤¤ Anti-Rootkit : 0 (Driver: Geladen) ¤¤¤ ¤¤¤ Webbrowser : 0 ¤¤¤ ¤¤¤ MBR-Übeprüfung : ¤¤¤ +++++ PhysicalDrive0: Samsung SSD 850 EVO M.2 250GB +++++ Error reading User MBR! NOT VALID! Error reading LL1 MBR! NOT VALID! Error reading LL2 MBR! NOT VALID! +++++ PhysicalDrive1: TOSHIBA MQ02ABD100H +++++ --- User --- [MBR] 00387be23c3a6b0b27bbc7af4ad12c2b [BSP] 421697c9c49666e0f4f7ad1b4b97c04e : Empty|VT.Unknown MBR Code Partition table: 0 - [MAN-MOUNT] EFI system partition | Offset (sectors): 2048 | Size: 500 MB 1 - [MAN-MOUNT] Microsoft reserved partition | Offset (sectors): 1026048 | Size: 128 MB 2 - Basic data partition | Offset (sectors): 1288192 | Size: 940092 MB 3 - [SYSTEM][MAN-MOUNT] | Offset (sectors): 1926596608 | Size: 450 MB 4 - [SYSTEM][MAN-MOUNT] | Offset (sectors): 1927518208 | Size: 12698 MB User = LL1 ... OK User = LL2 ... OK The Sophos Free Virus Removal Tool "log"will come later thank you
  3. RogueKiller V12.12.9.0 (x64) [Mar 19 2018] (Free) von Adlice Software Mail : http://www.adlice.com/contact/ Feedback : https://forum.adlice.com Website : http://www.adlice.com/download/roguekiller/ Blog : http://www.adlice.com Betriebssystem : Windows 10 (10.0.16299) 64 bits version Gestartet in : Normalmodus User : windo [Administrator] Gestartet von : C:\Users\windo\Downloads\RogueKiller_portable64.exe Modus : Scannen -- Datum : 03/21/2018 21:53:47 (Dauer : 00:30:51) ¤¤¤ Prozesse : 0 ¤¤¤ ¤¤¤ Registry : 8 ¤¤¤ [PUP.Gen1] (X64) HKEY_USERS\.DEFAULT\Software\OCS -> Gefunden [PUP.Gen1] (X86) HKEY_USERS\.DEFAULT\Software\OCS -> Gefunden [PUP.Gen1] (X64) HKEY_USERS\S-1-5-21-3588683990-385766964-3662382246-1001\Software\OCS -> Gefunden [PUP.Gen1] (X86) HKEY_USERS\S-1-5-21-3588683990-385766964-3662382246-1001\Software\OCS -> Gefunden [PUP.Gen1] (X64) HKEY_USERS\S-1-5-18\Software\OCS -> Gefunden [PUP.Gen1] (X86) HKEY_USERS\S-1-5-18\Software\OCS -> Gefunden [PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-3588683990-385766964-3662382246-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://dell15.msn.com/?pc=DCTE -> Gefunden [PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-3588683990-385766964-3662382246-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://dell15.msn.com/?pc=DCTE -> Gefunden ¤¤¤ Tasks : 0 ¤¤¤ ¤¤¤ Dateien : 9 ¤¤¤ [PUP.Gen1][Datei] C:\Users\Public\Desktop\Driver Easy.lnk [LNK@] C:\PROGRA~1\Easeware\DRIVER~1\DRIVER~1.EXE -> Gefunden [Hj.Shortcut][Datei] C:\Users\windo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\World of Tanks.lnk [LNK@] C:\PROGRA~1\INTERN~1\iexplore.exe http://cpm.wargaming.net/avo6ki14/?pub_id=100 -> Gefunden [PUP.Gen1][Ordner] C:\Users\windo\AppData\Roaming\Easeware -> Gefunden [PUP.uTorrentAds][Datei] C:\Users\windo\AppData\Roaming\uTorrent\updates\3.4.9_43295\utorrentie.exe -> Gefunden [PUP.Gen1][Datei] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Easy\Driver Easy entfernen.lnk [LNK@] C:\PROGRA~1\Easeware\DRIVER~1\unins000.exe -> Gefunden [PUP.Gen1][Datei] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Easy\Driver Easy.lnk [LNK@] C:\PROGRA~1\Easeware\DRIVER~1\DRIVER~1.EXE -> Gefunden [PUP.Gen1][Ordner] C:\Program Files\Easeware -> Gefunden [PUP.Gen1][Datei] C:\Users\Public\Desktop\Driver Easy.lnk [LNK@] C:\PROGRA~1\Easeware\DRIVER~1\DRIVER~1.EXE -> Gefunden [PUP.AutoIt.Gen][Datei] C:\Users\windo\Desktop\HRC.exe -> Gefunden ¤¤¤ WMI : 0 ¤¤¤ ¤¤¤ Hosts-Datei : 0 ¤¤¤ ¤¤¤ Anti-Rootkit : 0 (Driver: Geladen) ¤¤¤ ¤¤¤ Webbrowser : 0 ¤¤¤ ¤¤¤ MBR-Übeprüfung : ¤¤¤ +++++ PhysicalDrive0: Samsung SSD 850 EVO M.2 250GB +++++ Error reading User MBR! NOT VALID! Error reading LL1 MBR! NOT VALID! Error reading LL2 MBR! NOT VALID! +++++ PhysicalDrive1: TOSHIBA MQ02ABD100H +++++ --- User --- [MBR] 00387be23c3a6b0b27bbc7af4ad12c2b [BSP] 421697c9c49666e0f4f7ad1b4b97c04e : Empty|VT.Unknown MBR Code Partition table: 0 - [MAN-MOUNT] EFI system partition | Offset (sectors): 2048 | Size: 500 MB 1 - [MAN-MOUNT] Microsoft reserved partition | Offset (sectors): 1026048 | Size: 128 MB 2 - Basic data partition | Offset (sectors): 1288192 | Size: 940092 MB 3 - [SYSTEM][MAN-MOUNT] | Offset (sectors): 1926596608 | Size: 450 MB 4 - [SYSTEM][MAN-MOUNT] | Offset (sectors): 1927518208 | Size: 12698 MB User = LL1 ... OK User = LL2 ... OK
  4. well i dont feel much a difference. What i dont get is that i have high ping problems. But thank you for your help, i had some trojan virus and i hope they are deleted.
  5. I didnt get an fixlog.txt from which program u get the log?
  6. 1. Hey, i have still svchost on the system32. 2. If i do nothing then i have over 50 procent working memory 3. on "details" i have still plenty of svchost (i know few of them u need) but im not sure if i rly do need everything Hope you can answer my questions
  7. The log from malicious-software-removal-tool : it did gave me nothing and here is from the "run" --------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v5.58, March 2018 (build 5.58.14622.1) Started On Tue Mar 20 19:25:06 2018 Engine: 1.1.14600.4 Signatures: 1.263.2.0 Run Mode: Interactive Graphical Mode Results Summary: ---------------- No infection found. Successfully Submitted MAPS Report Successfully Submitted Heartbeat Report Microsoft Windows Malicious Software Removal Tool Finished On Tue Mar 20 19:36:00 2018 Return code: 0 (0x0)
  8. This is from Adwcleaner : # AdwCleaner 7.0.8.0 - Logfile created on Tue Mar 20 18:20:36 2018 # Updated on 2018/08/02 by Malwarebytes # Running on Windows 10 Home (X64) # Mode: clean # Support: https://www.malwarebytes.com/support ***** [ Services ] ***** No malicious services deleted. ***** [ Folders ] ***** Deleted: C:\Users\windo\AppData\Local\Downloaded Installations\{DAD82379-C684-4D04-83D5-2B9934A9C362} ***** [ Files ] ***** No malicious files deleted. ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** No malicious tasks deleted. ***** [ Registry ] ***** Deleted: [Key] - HKU\S-1-5-21-3588683990-385766964-3662382246-1001\Software\SecuredDownload Deleted: [Key] - HKCU\Software\SecuredDownload Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4} Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546} Deleted: [Key] - HKLM\SOFTWARE\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36} Deleted: [Key] - HKLM\SOFTWARE\Reimage Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services Deleted: [Key] - HKLM\SYSTEM\Setup\FirstBoot\Services\chip1click Deleted: [Key] - HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Reason\ReasonByteFence ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries deleted. ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries deleted. ************************* ::Tracing keys deleted ::Winsock settings cleared ::Additional Actions: 0 ************************* C:/AdwCleaner/AdwCleaner[S0].txt - [1777 B] - [2018/3/20 18:18:53] ########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########
  9. This is from the malwarebyte : Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 3/20/18 Scan Time: 6:37 PM Log File: 5f147f6e-2c65-11e8-bd70-f48e38e9a306.json Administrator: Yes -Software Information- Version: 3.4.4.2398 Components Version: 1.0.322 Update Package Version: 1.0.4426 License: Trial -System Information- OS: Windows 10 (Build 16299.309) CPU: x64 File System: NTFS User: DESKTOP-J1KE0E4\windo -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 323536 Threats Detected: 90 Threats Quarantined: 90 Time Elapsed: 9 min, 46 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 20 PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2F23AB71-4AC6-41F2-A955-EA576E553146}, Quarantined, [58], [182757],1.0.4426 PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2F23AB71-4AC6-41F2-A955-EA576E553146}, Quarantined, [58], [182757],1.0.4426 PUP.Optional.WinYahoo, HKU\S-1-5-21-3588683990-385766964-3662382246-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2f23ab71-4ac6-41f2-a955-ea576e553146}, Quarantined, [58], [182757],1.0.4426 PUP.Optional.Reimage, HKU\S-1-5-21-3588683990-385766964-3662382246-1001\SOFTWARE\LOCAL APPWIZARD-GENERATED APPLICATIONS\Reimage - Windows Problem Relief., Quarantined, [1104], [327203],1.0.4426 PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\REI_AxControl.DLL, Quarantined, [1104], [327193],1.0.4426 PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\REI_AxControl.DLL, Quarantined, [1104], [327193],1.0.4426 PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{51BB725E-19E7-4386-8260-5E4E5E816595}, Quarantined, [58], [182758],1.0.4426 PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{51BB725E-19E7-4386-8260-5E4E5E816595}, Quarantined, [58], [182758],1.0.4426 PUP.Optional.InstallCore, HKU\S-1-5-21-3588683990-385766964-3662382246-1001\SOFTWARE\csastats, Quarantined, [2], [260986],1.0.4426 PUP.Optional.Reimage, HKU\S-1-5-21-3588683990-385766964-3662382246-1001\SOFTWARE\Reimage, Quarantined, [1104], [357494],1.0.4426 PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\APPID\REI_AxControl.DLL, Quarantined, [1104], [327193],1.0.4426 PUP.Optional.Reimage, HKLM\SOFTWARE\REIMAGE\Reimage Repair, Quarantined, [1104], [336077],1.0.4426 PUP.Optional.InstallCore, HKU\S-1-5-21-3588683990-385766964-3662382246-1001\SOFTWARE\PRODUCTSETUP, Quarantined, [2], [481004],1.0.4426 PUP.Optional.Reimage, HKU\S-1-5-21-3588683990-385766964-3662382246-1001\SOFTWARE\REIMAGE\PC REPAIR, Quarantined, [1104], [327204],1.0.4426 PUP.Optional.ChipDe, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\chip 1-click download service, Quarantined, [8560], [463412],1.0.4426 PUP.Optional.WinZipMalwareProtector, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WinZip Malware Protector, Quarantined, [2105], [255428],1.0.4426 PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\APPID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}, Quarantined, [1104], [332494],1.0.4426 PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}, Quarantined, [1104], [332494],1.0.4426 PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}, Quarantined, [1104], [332494],1.0.4426 PUP.Optional.Reimage, HKU\S-1-5-21-3588683990-385766964-3662382246-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{10ECCE17-29B5-4880-A8F5-EAD298611484}, Quarantined, [1104], [327205],1.0.4426 Registry Value: 5 PUP.Optional.WinYahoo, HKU\S-1-5-21-3588683990-385766964-3662382246-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2f23ab71-4ac6-41f2-a955-ea576e553146}|URL, Quarantined, [58], [182757],1.0.4426 PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{51BB725E-19E7-4386-8260-5E4E5E816595}|URL, Quarantined, [58], [182758],1.0.4426 PUP.Optional.InstallCore, HKU\S-1-5-21-3588683990-385766964-3662382246-1001\SOFTWARE\PRODUCTSETUP|TB, Quarantined, [2], [481004],1.0.4426 PUP.Optional.Reimage, HKU\S-1-5-21-3588683990-385766964-3662382246-1001\SOFTWARE\REIMAGE\PC REPAIR|QUITMESSAGE, Quarantined, [1104], [327204],1.0.4426 PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{51BB725E-19E7-4386-8260-5E4E5E816595}|URL, Quarantined, [58], [182758],1.0.4426 Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 10 Trojan.StolenData.D.Generic, C:\USERS\WINDO\APPDATA\ROAMING\MONITOR\SCREENSHOTS\02-18-2017, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\USERS\WINDO\APPDATA\ROAMING\MONITOR\SCREENSHOTS\02-19-2017, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\USERS\WINDO\APPDATA\ROAMING\MONITOR\SCREENSHOTS\02-20-2017, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\USERS\WINDO\APPDATA\ROAMING\MONITOR\SCREENSHOTS\02-24-2017, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\USERS\WINDO\APPDATA\ROAMING\MONITOR\SCREENSHOTS\02-25-2017, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\USERS\WINDO\APPDATA\ROAMING\MONITOR\SCREENSHOTS\02-26-2017, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\USERS\WINDO\APPDATA\ROAMING\MONITOR\SCREENSHOTS\02-27-2017, Quarantined, [4780], [374526],1.0.4426 PUP.Optional.YSearchTab, C:\Users\windo\AppData\Roaming\Mozilla\Firefox\Profiles\5bx0i31c.default-1469531983726\storage\default\http+++imdownloader.ysearchtab.com\idb\301792106ttes.files, Quarantined, [7740], [395234],1.0.4426 PUP.Optional.YSearchTab, C:\Users\windo\AppData\Roaming\Mozilla\Firefox\Profiles\5bx0i31c.default-1469531983726\storage\default\http+++imdownloader.ysearchtab.com\idb, Quarantined, [7740], [395234],1.0.4426 PUP.Optional.YSearchTab, C:\USERS\WINDO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5BX0I31C.DEFAULT-1469531983726\STORAGE\DEFAULT\http+++imdownloader.ysearchtab.com, Quarantined, [7740], [395234],1.0.4426 File: 55 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-18-2017\14.22, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-18-2017\17.06, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-18-2017\17.16, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-19-2017\12.34, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-20-2017\09.57, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-20-2017\10.07, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-20-2017\10.17, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-20-2017\10.37, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-20-2017\10.47, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-20-2017\10.57, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-20-2017\11.07, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-20-2017\11.27, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-20-2017\13.10, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-20-2017\13.20, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-20-2017\13.30, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-20-2017\13.40, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-20-2017\13.50, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-20-2017\14.00, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-20-2017\14.10, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-20-2017\14.20, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-20-2017\14.30, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-20-2017\14.50, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-24-2017\19.36, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-24-2017\19.46, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-25-2017\19.59, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-25-2017\21.19, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-25-2017\21.29, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-25-2017\21.39, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-25-2017\21.49, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-26-2017\01.21, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-26-2017\01.31, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-26-2017\01.51, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-26-2017\13.57, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-26-2017\14.07, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-26-2017\14.57, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-26-2017\15.07, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-26-2017\15.17, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-26-2017\15.27, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-26-2017\15.37, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-26-2017\15.47, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-26-2017\15.57, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-26-2017\18.11, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-26-2017\18.21, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-26-2017\18.31, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-26-2017\18.51, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-26-2017\19.01, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-26-2017\19.11, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-27-2017\07.49, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-27-2017\09.26, Quarantined, [4780], [374526],1.0.4426 Trojan.StolenData.D.Generic, C:\Users\windo\AppData\Roaming\Monitor\Screenshots\02-27-2017\09.36, Quarantined, [4780], [374526],1.0.4426 PUP.Optional.YSearchTab, C:\Users\windo\AppData\Roaming\Mozilla\Firefox\Profiles\5bx0i31c.default-1469531983726\storage\default\http+++imdownloader.ysearchtab.com\idb\301792106ttes.sqlite, Quarantined, [7740], [395234],1.0.4426 PUP.Optional.YSearchTab, C:\Users\windo\AppData\Roaming\Mozilla\Firefox\Profiles\5bx0i31c.default-1469531983726\storage\default\http+++imdownloader.ysearchtab.com\.metadata, Quarantined, [7740], [395234],1.0.4426 PUP.Optional.YSearchTab, C:\Users\windo\AppData\Roaming\Mozilla\Firefox\Profiles\5bx0i31c.default-1469531983726\storage\default\http+++imdownloader.ysearchtab.com\.metadata-v2, Quarantined, [7740], [395234],1.0.4426 PUP.Optional.Reimage, C:\WINDOWS\REIMAGE.INI, Quarantined, [1104], [412667],1.0.4426 PUP.Optional.Reimage, C:\USERS\WINDO\DOWNLOADS\REIMAGEREPAIR.EXE, Quarantined, [1104], [331559],1.0.4426 Physical Sector: 0 (No malicious items detected) (end) scanreport.txt
  10. Hello thank you for your fast answer those are the two files : FRST.txt Addition.txt
  11. Hello i have svchost on system32 and i know this shouldnt be like that. My cpu going high all the time. (And my ping is always high, i dont know if it has to do with it) I wanted to ask how can u remove the svchost because it might be a little virus.. Thank you,
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.