| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: ebenfalls unerwünschte Weiterleitung beim Anklicken von SuchmaschinenergebnissenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
18.02.2012, 16:20
| #1 |
| |  ebenfalls unerwünschte Weiterleitung beim Anklicken von Suchmaschinenergebnissen ich denke, der Titel beschreibt das Problem schon recht genau. Es tritt sowohl in Firefox 10.0.1 als auch im IE8 auf. wenn man den link ein weiteres mal klickt, klappt es meistens und man landet auf der gewünschten seite. es öffnet sich nicht immer die gleich seite. mal games, mal pornos, etc. ich bin mir nicht genau sicher, ob das ein virusproblem ist, oder ein wurm, oder etwas anderes. deshalb habe ich mal alles hier gepostet. ich würde mich sehr freuen, falls jemand von euch die zeit finden würde, mir zu helfen. lieben gruß, der Neue User es folgen jetzt die logs aus defogger und dds... EDIT: scheint nur auf google ein problem zu sein. yahoo, bing und ecosia scheinen zu funktionieren... Geändert von Neuer User (18.02.2012 um 16:26 Uhr) |
|
18.02.2012, 16:21
| #2 |
| | ebenfalls unerwünschte Weiterleitung beim Anklicken von Suchmaschinenergebnissen DEFOGGER:
__________________Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 15:59 on 18/02/2012 (Familie)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
SPTD -> Already disabled
-=E.O.F=-
Code:
ATTFilter .
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 1.6.0_29
Run by Familie at 16:01:19 on 2012-02-18
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.4094.2995 [GMT 1:00]
.
AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\spool\drivers\x64\3\E_IATIHLE.EXE
C:\Windows\System32\spool\drivers\x64\3\E_IATIHLE.EXE
C:\Windows\System32\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
C:\Program Files (x86)\iTunesHelper.exe
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files (x86)\Nero\Update\NASvc.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = *.local
mWinlogon: Userinit=userinit.exe,
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: DivX Plus Web Player HTML5 <video>: {326e768d-4182-46fd-9c16-1449a49795f4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\Program Files (x86)\Office 2007\Office12\GrooveShellExtensions.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Skype add-on for Internet Explorer: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
uRun: [EPSON SX235 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHLE.EXE /FU "C:\Users\Familie\AppData\Local\Temp\E_S5FA0.tmp" /EF "HKCU"
uRun: [Epson Stylus SX235(Netzwerk)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHLE.EXE /FU "C:\Users\Familie\AppData\Local\Temp\E_S5F43.tmp" /EF "HKCU"
uRun: [ULATHM] rundll32 "C:\Users\Familie\AppData\Roaming\cleanmgrk.dll",YYDIJHIMHFV
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
mRun: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunesHelper.exe"
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\MCAFEE~1.LNK - C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Add to Google Photos Screensa&ver - C:\Windows\system32\GPhotos.scr/200
IE: Nach Microsoft E&xel exportieren - C:\PROGRA~2\OFFICE~1\Office12\EXCEL.EXE/3000
IE: {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\PROGRA~2\OFFICE~1\Office12\ONBttnIE.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\OFFICE~1\Office12\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{8EA26E67-68B4-4F07-BDDE-BD5CF5CFA474} : DhcpNameServer = 192.168.1.1
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Office 2007\Office12\GrooveSystemServices.dll
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\Program Files (x86)\Office 2007\Office12\GrooveShellExtensions.dll
{18DF081C-E8AD-4283-A596-FA578C2EBDC3}
{326E768D-4182-46FD-9C16-1449A49795F4}
{72853161-30C5-4D22-B7F9-0BBC1D38A37E}
{9030D464-4C02-4ABF-8ECC-5164760863C6}
{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
{DBC80044-A445-435b-BC74-9C25C1C588A9}
TB-X64: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun-x64: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
mRun-x64: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunesHelper.exe"
mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
IE-X64: {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
SEH-X64: {B5A7F190-DDA6-4420-B3BA-52453494E6CD}: Groove GFS Stub Execution Hook
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Familie\AppData\Roaming\Mozilla\Firefox\Profiles\2i2x9yr4.default\
FF - prefs.js: browser.search.selectedEngine - Ecosia
FF - prefs.js: browser.startup.homepage - www.google.de
FF - component: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\components\FirefoxExtension.dll
FF - component: C:\Program Files (x86)Nokia\Nokia PC Suite 7\bkmrksync\components\BkMrkExt.dll
FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
FF - plugin: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Mozilla Plugins\npitunes.dll
FF - plugin: C:\Program Files (x86)\Plugins\npqtplugin.dll
FF - plugin: C:\Program Files (x86)\Plugins\npqtplugin2.dll
FF - plugin: C:\Program Files (x86)\Plugins\npqtplugin3.dll
FF - plugin: C:\Program Files (x86)\Plugins\npqtplugin4.dll
FF - plugin: C:\Program Files (x86)\Plugins\npqtplugin5.dll
FF - plugin: C:\Program Files (x86)\Plugins\npqtplugin6.dll
FF - plugin: C:\Program Files (x86)\Plugins\npqtplugin7.dll
FF - plugin: C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
FF - plugin: C:\Program Files\Veetle\Player\npvlc.dll
FF - plugin: C:\Program Files\Veetle\plugins\npVeetle.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
.
============= SERVICES / DRIVERS ===============
.
R1 avkmgr;avkmgr;C:\Windows\system32\DRIVERS\avkmgr.sys --> C:\Windows\system32\DRIVERS\avkmgr.sys [?]
R2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-5-14 759048]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe --> C:\Windows\system32\atiesrxx.exe [?]
R2 AntiVirSchedulerService;Avira Planer;C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2011-10-28 86224]
R2 AntiVirService;Avira Echtzeit Scanner;C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2011-10-28 110032]
R2 avgntflt;avgntflt;C:\Windows\system32\DRIVERS\avgntflt.sys --> C:\Windows\system32\DRIVERS\avgntflt.sys [?]
R2 EPSON_EB_RPCV4_04;EPSON V5 Service4(04);C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE [2012-2-5 168448]
R2 EPSON_PM_RPCV4_04;EPSON V3 Service4(04);C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE [2012-2-5 131072]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-2-17 652360]
R2 NAUpdate;Nero Update;C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-5-4 503080]
R2 vpnagent;Cisco AnyConnect Secure Mobility Agent;C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe [2011-12-15 476112]
R3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atikmdag.sys --> C:\Windows\system32\DRIVERS\atikmdag.sys [?]
R3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atikmpag.sys --> C:\Windows\system32\DRIVERS\atikmpag.sys [?]
R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-6 136176]
S3 acsock;acsock;C:\Windows\system32\DRIVERS\acsock64.sys --> C:\Windows\system32\DRIVERS\acsock64.sys [?]
S3 gupdatem;Google Update-Dienst (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-6 136176]
S3 LVUVC64;Logitech QuickCam S5500(UVC);C:\Windows\system32\DRIVERS\lvuvc64.sys --> C:\Windows\system32\DRIVERS\lvuvc64.sys [?]
S3 McComponentHostService;McAfee Security Scan Component Host Service;C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-1-15 227232]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
.
=============== Created Last 30 ================
.
2012-02-17 21:15:43 8602168 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{447084A3-5755-447B-B737-4A3D7C75C51B}\mpengine.dll
2012-02-17 14:36:51 -------- d-----w- C:\Users\Familie\.gimp-2.6
2012-02-17 14:35:16 -------- d-----w- C:\Program Files (x86)\GIMP-2.0
2012-02-17 13:56:28 -------- d-----w- C:\Users\Familie\AppData\Local\Microsoft Help
2012-02-17 11:25:32 -------- d-----w- C:\Users\Familie\AppData\Roaming\Malwarebytes
2012-02-17 11:25:25 23152 ----a-w- C:\Windows\System32\drivers\mbam.sys
2012-02-17 11:25:25 -------- d-----w- C:\ProgramData\Malwarebytes
2012-02-17 11:25:25 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-02-17 00:23:13 -------- d-----w- C:\ProgramData\Rockstar Games
2012-02-17 00:21:48 -------- d-----w- C:\Program Files (x86)\Rockstar Games
2012-02-16 11:00:21 199680 --sha-r- C:\Users\Familie\AppData\Roaming\cleanmgrk.dll
2012-02-14 20:14:07 -------- d-----w- C:\Program Files (x86)\NVIDIA Corporation
2012-02-14 20:13:40 -------- d-----w- C:\Program Files (x86)\Common Files\Wise Installation Wizard
2012-02-14 16:05:23 97240 ----a-w- C:\Program Files\Mozilla Firefox\libEGL.dll
2012-02-14 16:05:23 801752 ----a-w- C:\Program Files\Mozilla Firefox\mozsqlite3.dll
2012-02-14 16:05:23 626688 ----a-w- C:\Program Files\Mozilla Firefox\msvcr80.dll
2012-02-14 16:05:23 548864 ----a-w- C:\Program Files\Mozilla Firefox\msvcp80.dll
2012-02-14 16:05:23 479232 ----a-w- C:\Program Files\Mozilla Firefox\msvcm80.dll
2012-02-14 16:05:23 45016 ----a-w- C:\Program Files\Mozilla Firefox\mozutils.dll
2012-02-14 16:05:23 437208 ----a-w- C:\Program Files\Mozilla Firefox\libGLESv2.dll
2012-02-14 16:05:23 2106216 ----a-w- C:\Program Files\Mozilla Firefox\D3DCompiler_43.dll
2012-02-14 16:05:23 1998168 ----a-w- C:\Program Files\Mozilla Firefox\d3dx9_43.dll
2012-02-14 16:05:23 1911768 ----a-w- C:\Program Files\Mozilla Firefox\mozjs.dll
2012-02-14 16:05:23 15832 ----a-w- C:\Program Files\Mozilla Firefox\mozalloc.dll
2012-02-14 16:05:23 134104 ----a-w- C:\Program Files\Mozilla Firefox\components\browsercomps.dll
2012-02-14 16:03:45 -------- d-----w- C:\Program Files (x86)\Mozilla Plugins
2012-02-14 16:03:43 -------- d-----w- C:\Program Files (x86)\iTunesHelper.Resources
2012-02-14 16:03:22 -------- d-----w- C:\Program Files\iPod
2012-02-14 16:03:22 -------- d-----w- C:\Program Files (x86)\iTunes.Resources
2012-02-14 16:03:21 -------- d-----w- C:\Program Files\iTunes
2012-02-14 16:03:21 -------- d-----w- C:\Program Files (x86)\CD Configuration
2012-02-14 16:01:47 -------- d-----w- C:\Program Files\Bonjour
2012-02-14 16:01:47 -------- d-----w- C:\Program Files (x86)\Bonjour
2012-02-05 13:39:06 77824 ----a-w- C:\Windows\SysWow64\EBAPI.dll
2012-02-05 13:39:06 65536 ----a-w- C:\Windows\SysWow64\EEBUtil.dll
2012-02-05 13:39:06 55808 ----a-w- C:\Windows\SysWow64\EEBSDKIF.dll
2012-02-05 13:39:06 135168 ----a-w- C:\Windows\SysWow64\EEBAPI.dll
2012-02-05 13:39:06 110592 ----a-w- C:\Windows\SysWow64\EEBDSCVR.dll
2012-02-05 11:46:40 -------- d-----w- C:\Users\Familie\Scans
2012-02-05 10:11:02 -------- d-----w- C:\Program Files\Common Files\EPSON
2012-02-05 10:06:44 -------- d-----w- C:\Users\Familie\AppData\Local\ABBYY
2012-02-05 10:05:42 -------- d-----w- C:\ProgramData\ABBYY
2012-02-05 10:05:42 -------- d-----w- C:\Program Files (x86)\Common Files\ABBYY
2012-02-05 10:05:42 -------- d-----w- C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint
2012-02-05 10:04:18 -------- d-----w- C:\ProgramData\UDL
2012-02-05 10:03:18 -------- d-----w- C:\Program Files\Epson Software
2012-02-05 10:01:11 -------- d-----w- C:\Program Files (x86)\Epson Software
2012-02-05 10:00:20 558592 ----a-w- C:\Windows\System32\ensppmon.dll
2012-02-05 10:00:20 558592 ----a-w- C:\Windows\System32\enppmon.dll
2012-02-05 10:00:20 538112 ----a-w- C:\Windows\System32\ensppui.dll
2012-02-05 10:00:20 538112 ----a-w- C:\Windows\System32\enppui.dll
2012-02-05 10:00:20 250880 ----a-w- C:\Windows\System32\enspres.dll
2012-02-05 10:00:20 250880 ----a-w- C:\Windows\System32\enpres.dll
2012-02-05 10:00:19 -------- d-----w- C:\Program Files\EpsonNet
2012-02-05 10:00:09 -------- d-----w- C:\Program Files (x86)\Common Files\EPSON
2012-02-05 09:59:57 118784 ----a-w- C:\Windows\System32\E_ILMHLE.DLL
2012-02-05 09:59:57 10752 ----a-w- C:\Windows\System32\E_GCINST.DLL
2012-02-05 09:59:56 88064 ----a-w- C:\Windows\System32\E_IBCBHLE.DLL
2012-02-05 09:59:52 -------- d-----w- C:\ProgramData\EPSON
2012-02-05 09:59:44 464384 ----a-w- C:\Windows\System32\esxw2ud.dll
2012-02-05 09:59:44 13824 ----a-w- C:\Windows\System32\esxcdev.dll
2012-02-05 09:59:44 132560 ----a-w- C:\Windows\System32\esdevapp.exe
2012-02-05 09:59:39 -------- d-----w- C:\Program Files (x86)\epson
2012-02-03 10:19:18 -------- d-----w- C:\ProgramData\firebird
2012-02-03 10:18:33 -------- d-----w- C:\ProgramData\JanitosTarifrechner
2012-02-03 10:18:33 -------- d-----w- C:\Program Files (x86)\Fairware24
2012-01-30 14:27:14 0 ---ha-w- C:\Users\Familie\AppData\Local\BIT4BEE.tmp
2012-01-30 13:48:29 0 ---ha-w- C:\Users\Familie\AppData\Local\BIT3F61.tmp
2012-01-30 13:18:14 0 ---ha-w- C:\Users\Familie\AppData\Local\BITD892.tmp
2012-01-30 13:09:45 0 ---ha-w- C:\Users\Familie\AppData\Local\BIT5409.tmp
2012-01-30 12:24:18 0 ---ha-w- C:\Users\Familie\AppData\Local\BITDEAA.tmp
2012-01-30 10:58:48 0 ---ha-w- C:\Users\Familie\AppData\Local\BIT8604.tmp
.
==================== Find3M ====================
.
2012-01-26 23:52:58 279656 ------w- C:\Windows\System32\MpSigStub.exe
2012-01-16 16:22:16 293736 ----a-w- C:\Program Files (x86)\iTunesOutlookAddIn.dll
2012-01-16 16:22:12 421736 ----a-w- C:\Program Files (x86)\iTunesHelper.exe
2012-01-16 16:22:12 403304 ----a-w- C:\Program Files (x86)\iTunesAdmin.dll
2012-01-16 16:22:12 156520 ----a-w- C:\Program Files (x86)\iTunesHelper.dll
2012-01-16 16:22:08 9777000 ----a-w- C:\Program Files (x86)\iTunes.exe
2012-01-16 16:22:04 20868968 ----a-w- C:\Program Files (x86)\iTunes.dll
2012-01-16 16:22:02 803200 ----a-w- C:\Program Files (x86)\gnsdk_sdkmanager.dll
2012-01-16 16:22:02 3035520 ----a-w- C:\Program Files (x86)\gnsdk_dsp.dll
2012-01-16 16:22:02 287104 ----a-w- C:\Program Files (x86)\gnsdk_submit.dll
2012-01-16 16:22:02 246144 ----a-w- C:\Program Files (x86)\gnsdk_musicid.dll
2012-01-14 04:06:27 3145728 ----a-w- C:\Windows\System32\win32k.sys
2012-01-09 22:05:27 404640 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-01-04 10:44:20 509952 ----a-w- C:\Windows\System32\ntshrui.dll
2012-01-04 08:58:41 442880 ----a-w- C:\Windows\SysWow64\ntshrui.dll
2011-12-30 06:26:08 515584 ----a-w- C:\Windows\System32\timedate.cpl
2011-12-30 05:27:56 478720 ----a-w- C:\Windows\SysWow64\timedate.cpl
2011-12-28 03:59:24 498688 ----a-w- C:\Windows\System32\drivers\afd.sys
2011-12-16 08:47:38 1188864 ----a-w- C:\Windows\System32\wininet.dll
2011-12-16 08:46:06 634880 ----a-w- C:\Windows\System32\msvcrt.dll
2011-12-16 07:54:22 981504 ----a-w- C:\Windows\SysWow64\wininet.dll
2011-12-16 07:52:58 690688 ----a-w- C:\Windows\SysWow64\msvcrt.dll
2011-12-16 06:44:38 1638912 ----a-w- C:\Windows\System32\mshtml.tlb
2011-12-16 06:09:17 1638912 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2011-12-15 15:34:30 10704 ----a-w- C:\Windows\SysWow64\vpncategories.dll
2011-12-15 15:34:25 33232 ----a-w- C:\Windows\SysWow64\vpnevents.dll
2011-12-15 15:26:09 26536 ----a-w- C:\Windows\System32\drivers\vpnva64.sys
2011-12-15 15:25:15 106408 ----a-r- C:\Windows\System32\drivers\acsock64.sys
2011-11-14 19:16:44 112488 ----a-w- C:\Program Files (x86)\ITDetector.ocx
2011-10-24 14:30:12 796520 ----a-w- C:\Program Files (x86)\QTPlugin.ocx
2011-10-24 14:30:12 1234808 ----a-w- C:\Program Files (x86)\QuickTimePlayer.exe
2011-10-24 14:02:28 8120168 ----a-w- C:\Program Files (x86)\QuickTimePlayer.dll
2011-10-24 14:02:24 370536 ----a-w- C:\Program Files (x86)\QTUIPanelControl.dll
2011-10-24 14:02:20 894824 ----a-w- C:\Program Files (x86)\QTOControl.dll
2011-10-24 14:02:20 821096 ----a-w- C:\Program Files (x86)\QTOLibrary.dll
2011-10-24 13:28:52 421888 ----a-w- C:\Program Files (x86)\QTTask.exe
2011-10-24 13:28:38 561152 ----a-w- C:\Program Files (x86)\PictureViewer.exe
2001-05-06 19:10:18 299520 ----a-w- C:\Program Files\PictureViewer.exe
2001-05-06 19:10:18 225792 ----a-w- C:\Program Files\QTInfo.exe
2001-05-06 19:10:18 127488 ----a-w- C:\Program Files\QuickTimeUpdater.exe
2001-05-06 19:10:17 1056256 ----a-w- C:\Program Files\QuickTimePlayer.exe
.
============= FINISH: 16:02:39,53 ===============
Code:
ATTFilter .
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 16.05.2010 20:38:50
System Uptime: 18.02.2012 15:58:10 (1 hours ago)
.
Motherboard: Gigabyte Technology Co., Ltd. | | GA-MA770T-UD3
Processor: AMD Phenom(tm) II X4 945 Processor | Socket M2 | 780/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 103 GiB total, 22,472 GiB free.
D: is FIXED (NTFS) - 68 GiB total, 62,704 GiB free.
E: is FIXED (NTFS) - 127 GiB total, 44,306 GiB free.
F: is CDROM (CDFS)
G: is FIXED (NTFS) - 149 GiB total, 18,267 GiB free.
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Device ID: ROOT\NET\0000
Manufacturer: Cisco Systems
Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
PNP Device ID: ROOT\NET\0000
Service: vpnva
.
==== System Restore Points ===================
.
RP268: 15.02.2012 11:33:51 - Installed Company of Heroes.
RP269: 16.02.2012 19:31:55 - Windows Update
RP270: 16.02.2012 21:10:41 - Installed Cisco AnyConnect Secure Mobility Client
RP271: 17.02.2012 01:23:07 - Installiert L.A. Noire
RP272: 17.02.2012 21:54:47 - Installed L.A. Noire
.
==== Installed Programs ======================
.
Update for Microsoft Office 2007 (KB2508958)
7-Zip 4.65
ABBYY FineReader 9.0 Sprint
Adobe Flash Player 10 Plugin
Adobe Reader 9.5.0 - Deutsch
Adobe Shockwave Player 11.5
Apple Application Support
Apple Software Update
AudioConverter Studio 6.1
Avira Free Antivirus
Batman Arkham City version 1.0
Benutzerhandbuch EPSON SX235 Series
Cisco AnyConnect Secure Mobility Client
Cisco AnyConnect Secure Mobility Client
Company of Heroes
DiRT2
DivX-Setup
Epson Easy Photo Print 2
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser)
Epson Event Manager
EPSON Scan
EpsonNet Print
F1 2010
Free Audio CD Burner version 1.4
Free YouTube to MP3 Converter version 3.10.815
GIMP 2.6.11
Google Earth
Google Update Helper
ICQ7.5
IrfanView (remove only)
Janitos Offline-Tarifrechner 3.2.5.0
Java Auto Updater
Java(TM) 6 Update 29
JDownloader
L.A. Noire
Mafia II
Malwarebytes Anti-Malware Version 1.60.1.1000
McAfee Security Scan Plus
Microsoft .NET Framework 1.1
Microsoft Games for Windows - LIVE Redistributable
Microsoft Games for Windows Marketplace
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (German) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (German) 2007
Microsoft Office File Validation Add-In
Microsoft Office Groove MUI (German) 2007
Microsoft Office InfoPath MUI (German) 2007
Microsoft Office OneNote MUI (German) 2007
Microsoft Office Outlook MUI (German) 2007
Microsoft Office PowerPoint MUI (German) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (German) 2007
Microsoft Office Proof (Italian) 2007
Microsoft Office Proofing (German) 2007
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (German) 2007
Microsoft Office Shared MUI (German) 2007
Microsoft Office Word MUI (German) 2007
Microsoft Silverlight
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Mozilla Firefox 10.0.1 (x86 de)
MSVC80_x86_v2
MSVC90_x86
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
NBA 2K10
NBA 2K11
NBA 2K12
Nero BurnLite 10
Nero Control Center 10
Nero ControlCenter 10 Help (CHM)
Nero Core Components 10
Nero Update
Netzwerkhandbuch EPSON SX235 Series
Nokia Connectivity Cable Driver
Nokia Ovi Suite
Nokia Ovi Suite Software Updater
Nokia PC Suite
NVIDIA PhysX
OpenAL
OpenOffice.org 3.2
Ovi Desktop Sync Engine
OviMPlatform
PC Connectivity Solution
Picasa 3
QuickTime
Rapture3D 2.3.22 Game
Rockstar Games Social Club
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edition
Skype Toolbars
Skype™ 4.2
The Lord of the Rings FREE Trial
Thrustmaster Force Feedback Driver
Uninstall 1.0.0.1
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Outlook 2007 Help (KB963677)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft Office 2007 suites (KB2596651) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596789) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2597998) 32-Bit Edition
Update for Microsoft Office Excel 2007 (KB2596596) 32-Bit Edition
VC80CRTRedist - 8.0.50727.4053
Veetle TV 0.9.18
VLC media player 1.1.11
.
==== End Of File ===========================
|
|
19.02.2012, 03:35
| #3 |
| | ebenfalls unerwünschte Weiterleitung beim Anklicken von Suchmaschinenergebnissen hier ist noch die logdatei von Malwarebytes:
__________________Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.60.1.1000 www.malwarebytes.org Datenbank Version: v2012.02.18.03 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 8.0.7601.17514 Familie :: PCF [Administrator] Schutz: Deaktiviert 18.02.2012 19:44:23 mbam-log-2012-02-18 (19-44-23).txt Art des Suchlaufs: Vollständiger Suchlauf Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 390961 Laufzeit: 1 Stunde(n), 8 Minute(n), 9 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) |
|
28.02.2012, 17:50
| #4 |
| | ebenfalls unerwünschte Weiterleitung beim Anklicken von Suchmaschinenergebnissen mist, eigentlich soll man ja nicht pushen. aber durch meine logs habe ich genau das bewirkt, was beim pushen passieren kann. nämlich, dass man beim überfliegen des forums annimmt, dass schon auf die fragen geantwortet wurde. naja, vielleicht habe ich ja glück und jetzt klickt nochmal jemand rein. sonst werde ich wohl leider demnächst einen neuen thread erstellen müssen, wo ich alles in das startposting packen werde... |
|
| Themen zu ebenfalls unerwünschte Weiterleitung beim Anklicken von Suchmaschinenergebnissen |
| anklicken, ebenfalls, ergebnisse, firefox, folge, folgen, freue, games, klick, klicke, klicken, klickt, landet, link, neue, problem, recht, suchmaschine, titel, unerwünschte, weiteres, weiterleitung, wurm, würde, öffnet |
Linear-Darstellung
