Probleme mit Dreck Namens MySearch123 [gelöst]

magic_pit

äh, kennt das Tool jemand und kann mir sagen, wie ich mir nur die Dinge in der Quarantäne ansehen und ggf löschen kann? Bei meinen Versuchen will er immer neu scannen

magic_pit

So, habe nur den Arbeitsspeicher scannen lassen, das ging dann flott

Hier die Quarantäne-Liste.
Entweder einer oder alle sind die Bösen

[attachment=0]Bild 1.jpg[/attachment]

2002Andreas

Auf dieser Seite....Schritt 4 von 4.

http://www.computersupporter.com/viren-entferne…n-mit-eset.html

magic_pit

So, wenn ich mal als Laie mit gefährlichem Halbwissen meine Erfahrung bis zur Lösung für alle evtl. Mitleidenden schildern darf:

Zuallererst ein riesiges DANKESCHÖN an alle fleißigen Helferlein hier. Ich schließe euch alle in mein Nachtgebet mit ein

Es scheint individuelle Lösungsmöglichkeiten zum Entfernen zu geben. Ich bin nach den Empfohlenen vorgegangen und bei mir hat es nicht gereicht.
- Zuerst die Startseite bei den Browsern wieder zurückgeändert
- Dann MySearch123 aus der Liste der Suchanbieter gelöscht
- Nach entsprechenden AddOns gesucht (waren bei mir keine Vorhanden)
- IExplorer zurückgesetzt, beim FF ein neues Profil eingerichtet

Hatte alles nichts genutzt, beim Browserstart hat sich immer als letztes ein aktives Fenster von MySearch1123 aufgebaut.

Scans:
- Malwarebytes hat nichts in dieser Richtung gefunden, Anzeige 0 Treffer
- ADW-Cleaner hat auch nichts dahingehend gefunden (ich habe noch 5 Treffer bei dem Tool, die habe ich allerdings nach dem endgültigen Wegmachen jetzt immer noch, kann also nicht damit zusammenhängen)
- Erst der mir bis dato unbekannte ESET OnlineScanner hat hier die Erkennung geschafft (und auch die Löschaktion)

Dachte ich bisher, die Kombination Malwarebytes /ADWCleaner reicht aus, bin ich heute eines Besseren belehrt worden

Die Bösewichte habe ich ich ja schon gepostet, für alle die evtl. auch den Dreck an Land ziehen jetzt ein guter Anhaltspunkt, wonach gesucht werden sollte.

Nochmals ein Dank an Alle hier, einen schönen Abend noch

P.S. wenn jemand die Russenmafia kennt, bitte bei den Programmierern von MySearch vorbeischicken

2002Andreas

Zitat von magic_pit

einen schönen Abend noch

Danke, das wünsche ich dir auch.

Ein Hinweis für die Zukunft mal.

Programme bitte immer nur direkt vom Hersteller laden.

Programme immer nur benutzerdefiniert installieren, damit du genau sehen kannst, was dir evtl. zusätzlich noch installiert werden soll.

Toolbars immer abwählen!

Und bitte nie etwas von der Seite Softonic downloaden

magic_pit

Yep, ich gebe es an den Besitzer weiter

Fox2Fox

Die Inhalte des Logfiles vom Erstscan mit Malwarebytes hast du noch? Falls ja, poste hier mal den Inhalt. Wäre schon wichtig, weil -je nach Funde- weitere Schritte eingeleitet werden müssten.
Denn bereinigen bedeutet nicht immer, dass alles OK ist.

magic_pit

Hier das Ergebnis vor dem ganzen Schlamassel von Malwarebytes (Madame hatte sich da ganz schön was eingefangen):

Code

Malwarebytes Anti-Malware
www.malwarebytes.org


Suchlaufdatum: 20.07.2015
Suchlaufzeit: 13:57
Protokolldatei: 
Administrator: Ja


Version: 2.1.8.1057
Malware-Datenbank: v2015.07.20.03
Rootkit-Datenbank: v2015.07.17.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert


Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: xxx


Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 367180
Abgelaufene Zeit: 22 Min., 7 Sek.


Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert


Prozesse: 0
(keine bösartigen Elemente erkannt)


Module: 0
(keine bösartigen Elemente erkannt)


Registrierungsschlüssel: 33
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [30d314d004864cea85424c3e55adf60a], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, In Quarantäne, [30d314d004864cea85424c3e55adf60a], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, In Quarantäne, [30d314d004864cea85424c3e55adf60a], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, In Quarantäne, [30d314d004864cea85424c3e55adf60a], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [30d314d004864cea85424c3e55adf60a], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [30d314d004864cea85424c3e55adf60a], 
PUP.Optional.SupTab.A, HKU\S-1-5-21-3853012518-764768069-3507123479-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [30d314d004864cea85424c3e55adf60a], 
PUP.Optional.SupTab.A, HKU\S-1-5-21-3853012518-764768069-3507123479-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [30d314d004864cea85424c3e55adf60a], 
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, In Quarantäne, [cd365391f595d462481e8cf6a75bae52], 
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, In Quarantäne, [cd365391f595d462481e8cf6a75bae52], 
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}, In Quarantäne, [cd365391f595d462481e8cf6a75bae52], 
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [cd365391f595d462481e8cf6a75bae52], 
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [cd365391f595d462481e8cf6a75bae52], 
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [cd365391f595d462481e8cf6a75bae52], 
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}, In Quarantäne, [cd365391f595d462481e8cf6a75bae52], 
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}, In Quarantäne, [cd365391f595d462481e8cf6a75bae52], 
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, In Quarantäne, [cd365391f595d462481e8cf6a75bae52], 
PUP.Optional.LuckyTab.A, HKU\S-1-5-21-3853012518-764768069-3507123479-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, In Quarantäne, [cd365391f595d462481e8cf6a75bae52], 
PUP.Optional.LuckyTab.A, HKU\S-1-5-21-3853012518-764768069-3507123479-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, In Quarantäne, [cd365391f595d462481e8cf6a75bae52], 
PUP.Optional.SweetPage.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [a45f6d7771192e0831acafe0dc2843bd], 
PUP.Optional.DealPly.A, HKLM\SOFTWARE\WOW6432NODE\DealPlyLive, In Quarantäne, [07fcd2125e2c58deeb5e77edab59b24e], 
PUP.Optional.IHProtect.A, HKLM\SOFTWARE\WOW6432NODE\IHProtect, In Quarantäne, [c340e5ff0981c175d62220f819ea02fe], 
PUP.Optional.PriceMeter.A, HKLM\SOFTWARE\WOW6432NODE\PriceMeterLiveUpdate, In Quarantäne, [4cb7f1f3b2d8e452d8a0be5c788ba759], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\supWPM, In Quarantäne, [8380fde7c5c5be7804cda6858a79cf31], 
PUP.Optional.SweetPage.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [3cc7875dcebc9d9947967b1404005ea2], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, In Quarantäne, [649f558f63276dc9daf63fec29da10f0], 
PUP.Optional.Webporpoise.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update webporpoise, In Quarantäne, [f60d0dd7c1c992a49795d4706c97e020], 
PUP.Optional.IEPluginServices.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\IePluginServices, In Quarantäne, [45becf1598f269cd554f59c93cc739c7], 
PUP.Optional.InstallCore.C, HKU\S-1-5-21-3853012518-764768069-3507123479-1001\SOFTWARE\InstallCore, In Quarantäne, [31d212d2afdbf2443036098dbc484eb2], 
PUP.Optional.DoSearch.A, HKU\S-1-5-21-3853012518-764768069-3507123479-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{1D881F83-036D-4DFB-BFB3-9F5FE6740666}, In Quarantäne, [d231677d0b7f92a470776e9cb74c08f8], 
PUP.Optional.DoSearch.A, HKU\S-1-5-21-3853012518-764768069-3507123479-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}, In Quarantäne, [b15226be6525e353a24525e5ab58ae52], 
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-3853012518-764768069-3507123479-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [b74c91531476b680117584064aba01ff], 
PUP.Optional.DoSearch.A, HKU\S-1-5-21-3853012518-764768069-3507123479-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E733165D-CBCF-4FDA-883E-ADEF965B476C}, In Quarantäne, [669dd90b98f290a665829a700ff4a858], 


Registrierungswerte: 13
PUP.Optional.SweetPage.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DisplayName, sweet-page, In Quarantäne, [a45f6d7771192e0831acafe0dc2843bd]
PUP.Optional.SweetPage.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, http://www.sweet-page.com/web/?type=ds&ts=1402440765&from=cor&uid=ST500LT012-9WS142_W0VGPMQXXXXXW0VGPMQX&q={searchTerms}, In Quarantäne, [11f2b82cd9b1d5616776c9c630d4c739]
PUP.Optional.SweetPage.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DisplayName, sweet-page, In Quarantäne, [3cc7875dcebc9d9947967b1404005ea2]
PUP.Optional.SweetPage.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, http://www.sweet-page.com/web/?type=ds&ts=1402440765&from=cor&uid=ST500LT012-9WS142_W0VGPMQXXXXXW0VGPMQX&q={searchTerms}, In Quarantäne, [798a11d3d7b376c0d10c27681aead22e]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, cor, In Quarantäne, [649f558f63276dc9daf63fec29da10f0]
PUP.Optional.DoSearch.A, HKU\S-1-5-21-3853012518-764768069-3507123479-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{1D881F83-036D-4DFB-BFB3-9F5FE6740666}|URL, http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}, In Quarantäne, [d231677d0b7f92a470776e9cb74c08f8]
PUP.Optional.DoSearch.A, HKU\S-1-5-21-3853012518-764768069-3507123479-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}|URL, http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}, In Quarantäne, [b15226be6525e353a24525e5ab58ae52]
PUP.Optional.DoSearch.A, HKU\S-1-5-21-3853012518-764768069-3507123479-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}|FaviconURL, http://do-search.com//favicon.ico, In Quarantäne, [bf44c81cd2b80a2c3aad907a16ed5da3]
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-3853012518-764768069-3507123479-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DisplayName, istartsurf, In Quarantäne, [b74c91531476b680117584064aba01ff]
PUP.Optional.DoSearch.A, HKU\S-1-5-21-3853012518-764768069-3507123479-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}, In Quarantäne, [7a89b3317713ed498265bc4eb54e0ff1]
PUP.Optional.Delta.A, HKU\S-1-5-21-3853012518-764768069-3507123479-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|TopResultURL, http://search.delta-homes.com/web/?type=ds&ts=1434717916&z=c4de7ab44a37db897253147gfz9c5z0mdg2m9tbg9q&from=ient06191&uid=ST500LT012-9WS142_W0VGPMQXXXXXW0VGPMQX&q={searchTerms}, In Quarantäne, [1be861836921b97db3bad03bb64d7f81]
PUP.Optional.DoSearch.A, HKU\S-1-5-21-3853012518-764768069-3507123479-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E733165D-CBCF-4FDA-883E-ADEF965B476C}|URL, http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}, In Quarantäne, [669dd90b98f290a665829a700ff4a858]
PUP.Optional.PriceMeter.A, HKU\S-1-5-21-3853012518-764768069-3507123479-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|PriceMeterW, "C:\Users\xxx\AppData\Local\PriceMeter\pricemeterw.exe", In Quarantäne, [0ff4875d1b6fa98dc8d25cdfb1526e92]


Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)


Ordner: 33
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\net_search, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\skin, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices, In Quarantäne, [f90a2eb6b3d72313f531f7edbc4641bf], 
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update, In Quarantäne, [f90a2eb6b3d72313f531f7edbc4641bf], 
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate, In Quarantäne, [43c0618359312c0a4c89c63347bb57a9], 
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update, In Quarantäne, [43c0618359312c0a4c89c63347bb57a9], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\skin, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\img, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\js, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\en-US, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\es-419, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\es-ES, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\fr-BE, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\fr-CA, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\fr-CH, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\fr-FR, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\fr-LU, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\it-CH, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\it-IT, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\pl, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\pt, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\pt-BR, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\ru, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\ru-MO, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\tr-TR, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\vi-VI, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\zh-CN, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\zh-TW, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.SupTab.A, C:\Users\xxx\SupTab, In Quarantäne, [fb08ecf8800a2313ff96768e0bf8f10f], 


Dateien: 119
PUP.Optional.LuckyTab.A, C:\Program Files (x86)\miuitab\SupTab.dll, In Quarantäne, [cd365391f595d462481e8cf6a75bae52], 
PUP.Optional.Browserwatch, C:\Program Files (x86)\miuitab\BrowerWatchCH.dll, In Quarantäne, [16edcd17fa902016640f8697fb0a837d], 
PUP.Optional.Browserwatch, C:\Program Files (x86)\miuitab\BrowerWatchFF.dll, In Quarantäne, [0df6bf25cfbbbe78ee852cf118ed8a76], 
PUP.Optional.SearchProtect, C:\Program Files (x86)\miuitab\BrowserAction.dll, In Quarantäne, [3dc6f4f0f59526100bcdc8c38a7718e8], 
PUP.Optional.Giner, C:\Program Files (x86)\miuitab\CmdShell.exe, In Quarantäne, [699a18ccbeccc4729fbf2b3d699caf51], 
PUP.Optional.Giner, C:\Program Files (x86)\miuitab\HPNotify.exe, In Quarantäne, [e320ad372f5b3df997c790d854b1857b], 
PUP.Optional.Giner, C:\Program Files (x86)\miuitab\IeWatchDog.dll, In Quarantäne, [e320657f99f18fa71a449dcb52b335cb], 
PUP.Optional.XTab.A, C:\Program Files (x86)\miuitab\ProtectService.exe, In Quarantäne, [fc073ea63b4f2c0affec2b30a25fb749], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\config.ini, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\everything.dll, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\everything.exe, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\helper.dll, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\Patch.dll, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\SearchBase.db, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\SearchBase.exe, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\SearchHand.dll, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\ServiceEverything.exe, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\SFKEX.dll, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\SFKEX.exe, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\SFKEX64.dll, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\SFKEX64.exe, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\update.exe, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\net_search\bing.png, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\net_search\google.png, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\net_search\search_config.ini, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\net_search\SFK.ini, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\net_search\SFKEX.ini, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\net_search\yahoo.png, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\skin\bing.png, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\skin\caret.png, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\skin\FileListItem.xml, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\skin\FileListItem_bing.xml, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\skin\FileListItem_google.xml, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\skin\frame.png, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\skin\frame2.png, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\skin\google.png, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\skin\guide.png, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\skin\icon_search.png, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\skin\mainpanel.png, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\skin\MainPannel.xml, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\skin\panel_base.xml, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\skin\search_content_list.png, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\skin\WndMask.xml, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.Everything.A, C:\Users\xxx\AppData\Everything\skin\yahoo.png, In Quarantäne, [c63d7e669bef71c54e7243c31be87e82], 
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update\conf, In Quarantäne, [f90a2eb6b3d72313f531f7edbc4641bf], 
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update\PluginUpdate.exe, In Quarantäne, [f90a2eb6b3d72313f531f7edbc4641bf], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\conf, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\ffsearch_toolbar!1.0.0.1031.xpi, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\install.data, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\msvcp110.dll, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\msvcr110.dll, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\searchProvider.xml, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\uninstall.exe, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\skin\about.png, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\skin\about_bk.png, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\skin\btn.png, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\skin\btn_apply.png, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\skin\close.png, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\skin\conf.xml, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\skin\conf_back.png, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\skin\input_bk.png, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\skin\logo.png, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\skin\main.xml, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\skin\radio_1.png, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\skin\radio_2.png, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\skin\rigth_arrow.png, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\skin\settings.png, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\data.html, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\indexIE.html, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\indexIE8.html, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\main.css, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\img\google_trends.png, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\img\icon128.png, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\img\icon16.png, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\img\icon48.png, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\img\loading.gif, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\img\logo32.ico, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\js\common.js, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\js\ga.js, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\js\jquery-1.11.0.min.js, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\js\jquery.autocomplete.js, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\js\jquery.xdomainrequest.min.js, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\js\js.js, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\js\library.js, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\js\xagainit-ie8.js, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\js\xagainit2.0.js, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\js\xdomain.min.js, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\en-US\messages.json, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\es-419\messages.json, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\es-ES\messages.json, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\fr-BE\messages.json, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\fr-CA\messages.json, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\fr-CH\messages.json, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\fr-FR\messages.json, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\fr-LU\messages.json, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\it-CH\messages.json, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\it-IT\messages.json, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\pl\messages.json, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\pt\messages.json, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\pt-BR\messages.json, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\ru\messages.json, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\ru-MO\messages.json, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\tr-TR\messages.json, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\vi-VI\messages.json, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\zh-CN\messages.json, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\miuitab\web\_locales\zh-TW\messages.json, In Quarantäne, [ad565094cebccc6a34a8ef140ff43ec2], 
PUP.Optional.SupTab.A, C:\Users\xxx\SupTab\domain, In Quarantäne, [fb08ecf8800a2313ff96768e0bf8f10f], 
PUP.Optional.SupTab.A, C:\Users\xxx\SupTab\expirationDate, In Quarantäne, [fb08ecf8800a2313ff96768e0bf8f10f], 
PUP.Optional.SupTab.A, C:\Users\xxx\SupTab\hotsearch, In Quarantäne, [fb08ecf8800a2313ff96768e0bf8f10f], 
PUP.Optional.SupTab.A, C:\Users\xxx\SupTab\hotsearch_uptime, In Quarantäne, [fb08ecf8800a2313ff96768e0bf8f10f], 
PUP.Optional.SupTab.A, C:\Users\xxx\SupTab\name, In Quarantäne, [fb08ecf8800a2313ff96768e0bf8f10f], 
PUP.Optional.SupTab.A, C:\Users\xxx\SupTab\path, In Quarantäne, [fb08ecf8800a2313ff96768e0bf8f10f], 
PUP.Optional.SupTab.A, C:\Users\xxx\SupTab\set_country, In Quarantäne, [fb08ecf8800a2313ff96768e0bf8f10f], 
PUP.Optional.SupTab.A, C:\Users\xxx\SupTab\set_z, In Quarantäne, [fb08ecf8800a2313ff96768e0bf8f10f], 
PUP.Optional.SupTab.A, C:\Users\xxx\SupTab\TABts, In Quarantäne, [fb08ecf8800a2313ff96768e0bf8f10f], 
PUP.Optional.SupTab.A, C:\Users\xxx\SupTab\uid, In Quarantäne, [fb08ecf8800a2313ff96768e0bf8f10f], 
PUP.Optional.SupTab.A, C:\Users\xxx\SupTab\updateTime, In Quarantäne, [fb08ecf8800a2313ff96768e0bf8f10f], 
PUP.Optional.SupTab.A, C:\Users\xxx\SupTab\url, In Quarantäne, [fb08ecf8800a2313ff96768e0bf8f10f], 
PUP.Optional.SupTab.A, C:\Users\xxx\SupTab\_ver, In Quarantäne, [fb08ecf8800a2313ff96768e0bf8f10f], 


Physische Sektoren: 0
(keine bösartigen Elemente erkannt)




(end)

Alles anzeigen

Boersenfeger

Das Malwarebytes den Mist nicht beseitigt hat, sondern nur in Quarantäne verschob, steht im Log... also einfach auch mal löschen lassen... ich würde nun noch mal einen Durchlauf starten.. (ich habe nicht den ganzen Thread gelesen...) wenn also schon gemacht, ist alles OK und in Zukunft sollte es nicht noch einmal passieren...