|
Plagegeister aller Art und deren Bekämpfung: GVU-Trojaner macht mir mein Leben schwer.Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
18.07.2013, 21:10 | #16 |
| GVU-Trojaner macht mir mein Leben schwer. Hallo Anerni, Entschuldige, dass ich solange nicht antworten konnte. Hier ist erstmal die Fixlogdatei: Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 14-07-2013 Ran by Thomas at 2013-07-18 21:58:52 Run:3 Running from C:\Users\Thomas\Desktop Boot Mode: Normal ============================================== C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_94E3CE3704FE82FBF49A6A.exe not found. "C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_94E3CE3704FE82FBF49A6A.exe" => File/Directory not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{27DB7C3D-AB5B-4D04-9A71-02F74BB7CAD9} => Key not found. HKCR\CLSID\{27DB7C3D-AB5B-4D04-9A71-02F74BB7CAD9} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{3AE87316-B428-4146-85C1-362A06481B5D} => Key not found. HKCR\CLSID\{3AE87316-B428-4146-85C1-362A06481B5D} => Key not found. HKLM\Software\Wow6432Node\MozillaPlugins\FF Plugin-x32: @microsoft.com/GENUINE - disabled No File => Key not found. FF Plugin-x32: @microsoft.com/GENUINE - disabled No File not found. C:\Users\Thomas\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} not found. C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\oq9x9p1v.default\Extensions\toolbar_ORJ-V7@apn.ask.com.xpi not found. "C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\oq9x9p1v.default\Extensions\toolbar_ORJ-V7@apn.ask.com.xpi" => File/Directory not found. "C:\Users\Thomas\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}" => File/Directory not found. "C:\ProgramData\FullRemove.exe" => File/Directory not found. "C:\ProgramData\slpcsrj.pad" => File/Directory not found. ==== End of Fixlog ==== Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=5244951afc5e0943963fd0cc155ff0be # engine=14451 # end=stopped # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-07-18 07:40:15 # local_time=2013-07-18 09:40:15 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=5893 16776573 100 94 364725 125806265 0 0 # compatibility_mode=9217 16776573 100 13 14352168 24389949 0 0 # scanned=1836 # found=0 # cleaned=0 # scan_time=760 Code:
ATTFilter Results of screen317's Security Check version 0.99.70 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` ZoneAlarm Free Firewall Antivirus Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` TuneUp Utilities 2012 TuneUp Utilities Language Pack (de-DE) JavaFX 2.1.0 Java 7 Update 25 Adobe Flash Player 11.7.700.224 Adobe Reader 10.1.4 Adobe Reader out of Date! Mozilla Firefox (22.0) Mozilla Thunderbird (17.0.3) Google Chrome 27.0.1453.116 Google Chrome 28.0.1500.72 ````````Process Check: objlist.exe by Laurent```````` CheckPoint ZoneAlarm vsmon.exe CheckPoint ZoneAlarm zatray.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-07-2013 Ran by Thomas (administrator) on 18-07-2013 22:06:28 Running from C:\Users\Thomas\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe () C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\ForceField.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Microsoft Corporation) C:\Windows\System32\osk.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /SF3 [2278504 2011-10-14] (Realtek Semiconductor) HKLM\...\Run: [AtherosBtStack] - "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe" [981664 2011-10-01] (Atheros Communications) HKLM\...\Run: [AthBtTray] - "C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe" [799904 2011-10-01] (Atheros Commnucations) HKLM\...\Run: [ETDCtrl] - %ProgramFiles%\Elantech\ETDCtrl.exe [2587944 2010-12-31] (ELAN Microelectronics Corp.) HKLM\...\Run: [ISW] - "C:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /icon="hidden" [1127592 2012-11-02] (Check Point Software Technologies) HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.) HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.) HKCU\...\Run: [Skype] - "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [18642024 2013-02-28] (Skype Technologies S.A.) HKCU\...\Run: [Google Update] - "C:\Users\Thomas\AppData\Local\Google\Update\GoogleUpdate.exe" /c [116648 2012-05-29] (Google Inc.) HKLM-x32\...\Run: [ASUSPRP] - "C:\Program Files (x86)\ASUS\APRP\APRP.EXE" [3331312 2011-10-19] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S [737104 2011-07-29] (ecareme) HKLM-x32\...\Run: [SonicMasterTray] - C:\Program Files (x86)\ASUS\ASUS Sonic Focus\SonicFocusTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus) HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2255360 2011-06-10] (ASUS) HKLM-x32\...\Run: [ZoneAlarm] - "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe" [73392 2012-11-07] (Check Point Software Technologies LTD) HKLM-x32\...\Run: [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation) IMEO\asuswspanel.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe" IMEO\emanual.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe" IMEO\facemgr.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe" IMEO\fancystart.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe" IMEO\fastboot.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe" IMEO\logonmgr.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe" IMEO\sonicfocus.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe" IMEO\uninst.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe" Startup: C:\ProgramData\Start Menu\Programs\Startup\AsusVibeLauncher.lnk ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe (ASUSTeK Computer Inc.) Startup: C:\ProgramData\Start Menu\Programs\Startup\FancyStart daemon.lnk ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_94E3CE3704FE82FBF49A6A.exe (No File) ==================== Internet (Whitelisted) ==================== ProxyEnable: Internet Explorer proxy is enabled. HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.zonealarm.com/?Source=Homepage&oemCode=ZLN29402517905246-1001&toolbarId=base&affiliateId=1025&Lan=de&utid=6459e9a600000000000000ff96d7d897 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com URLSearchHook: (No Name) - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File URLSearchHook: (No Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} - No File StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe HKCU SearchScopes: DefaultScope {CA2E3B1F-C41A-4F1A-B636-C2A77F486547} URL = hxxp://search.zonealarm.com/search?Source=Browser&oemCode=ZLN29402517905246-1001&toolbarId=base&affiliateId=1025&Lan=de&utid=6459e9a600000000000000ff96d7d897&q={searchTerms}&r=66 SearchScopes: HKCU - {CA2E3B1F-C41A-4F1A-B636-C2A77F486547} URL = hxxp://search.zonealarm.com/search?Source=Browser&oemCode=ZLN29402517905246-1001&toolbarId=base&affiliateId=1025&Lan=de&utid=6459e9a600000000000000ff96d7d897&q={searchTerms}&r=66 BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Zonealarm Helper Object - {2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.6.7.4\bh\zonealarm.dll (Montera Technologeis LTD) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies) BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - No Name - !{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File Toolbar: HKLM - No Name - !{EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File Toolbar: HKLM - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies) Toolbar: HKLM-x32 - No Name - !{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - No File Toolbar: HKLM-x32 - No Name - !{EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File Toolbar: HKLM-x32 - ZoneAlarm Security Toolbar - {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.6.7.4\zonealarmTlbr.dll (Montera Technologeis LTD) Toolbar: HKLM-x32 - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\oq9x9p1v.default FF Homepage: google.de FF NetworkProxy: "http", "127.0.0.1" FF NetworkProxy: "http_port", 8555 FF NetworkProxy: "type", 1 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Thomas\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Thomas\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF SearchPlugin: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\oq9x9p1v.default\searchplugins\utorrentbarde-customized-web-search.xml FF Extension: zonealarm.com - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\oq9x9p1v.default\Extensions\ffxtlbr@zonealarm.com FF Extension: No Name - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\oq9x9p1v.default\Extensions\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff}.oldbackup FF Extension: No Name - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\oq9x9p1v.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi FF Extension: No Name - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\oq9x9p1v.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: Hotspot Shield Helper (Please allow this installation) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afurladvisor@anchorfree.com FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF HKLM\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] C:\Program Files\CheckPoint\ZAForceField\TrustChecker FF Extension: No Name - C:\Program Files\CheckPoint\ZAForceField\TrustChecker FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker FF Extension: ZoneAlarm Security Engine - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR RestoreOnStartup: "hxxp://search.zonealarm.com/?Source=Homepage&oemCode=ZLN29402517905246-1001&toolbarId=base&affiliateId=1025&Lan=de&utid=6459e9a600000000000000ff96d7d897" CHR DefaultSearchURL: (Search Results) - hxxp://dts.search-results.com/sr?src=crb&appid=101&systemid=406&sr=0&q={searchTerms} CHR DefaultSuggestURL: (Search Results) - "suggest_url": "" CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\Thomas\AppData\Local\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\Thomas\AppData\Local\Google\Chrome\Application\28.0.1500.72\pdf.dll () CHR Plugin: (Shockwave Flash) - C:\Users\Thomas\AppData\Local\Google\Chrome\Application\28.0.1500.72\gcswf32.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll No File CHR Plugin: (Zeon Plus) - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll No File CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Users\Thomas\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Extension: (YouTube) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (DVDVideoSoft) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.2.3.3_0 CHR Extension: (Gmail) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 CHR StartMenuInternet: Google Chrome - "C:\Users\Thomas\AppData\Local\Google\Chrome\Application\chrome.exe" ==================== Services (Whitelisted) ================= R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2011-07-14] (Advanced Micro Devices, Inc.) S2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [831272 2013-06-21] (AnchorFree Inc.) S3 HssTrayService; C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE [78512 2013-06-21] () R2 HssWd; C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe [548136 2013-06-21] () R2 IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [827560 2012-11-02] (Check Point Software Technologies) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2143072 2012-05-29] (TuneUp Software) R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2447440 2012-11-07] (Check Point Software Technologies LTD) S4 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [158880 2011-10-01] (Atheros) ==================== Drivers (Whitelisted) ==================== R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [46792 2013-06-21] (AnchorFree Inc.) R2 ISWKL; C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys [33712 2012-11-02] (Check Point Software Technologies) R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [460888 2012-01-09] (Kaspersky Lab ZAO) R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [11864 2012-01-09] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [485680 2012-01-09] (Kaspersky Lab) R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-04-24] (Anchorfree Inc.) R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2012-02-09] (TuneUp Software) R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [450136 2012-11-01] (Check Point Software Technologies LTD) S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-07-17 16:36 - 2013-07-17 16:34 - 00448512 _____ (OldTimer Tools) C:\Users\Thomas\Desktop\TFC.exe 2013-07-17 16:21 - 2013-07-17 16:23 - 00038584 _____ C:\AdwCleaner[S1].txt 2013-07-17 16:21 - 2013-07-17 16:23 - 00000427 _____ C:\Windows\DeleteOnReboot.bat 2013-07-17 16:19 - 2013-07-17 16:19 - 00662345 _____ C:\Users\Thomas\Downloads\adwcleaner.exe 2013-07-17 12:12 - 2013-07-17 12:13 - 00024683 _____ C:\Users\Thomas\Desktop\Addition.txt 2013-07-16 16:39 - 2013-07-15 17:38 - 01777839 _____ (Farbar) C:\Users\Thomas\Desktop\FRST64.exe 2013-07-16 03:44 - 2013-07-16 03:44 - 00000000 ____D C:\FRST 2013-07-14 02:15 - 2013-07-14 02:14 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-07-14 02:14 - 2013-07-14 02:14 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-07-14 02:14 - 2013-07-14 02:14 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-07-14 02:14 - 2013-07-14 02:14 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-07-14 02:14 - 2013-07-14 02:14 - 00000000 ____D C:\Program Files (x86)\Java 2013-07-14 02:11 - 2013-07-14 02:11 - 00903080 _____ (Oracle Corporation) C:\Users\Thomas\Downloads\jxpiinstall.exe 2013-07-13 14:59 - 2013-07-13 14:59 - 480649570 _____ C:\Windows\MEMORY.DMP 2013-07-13 14:59 - 2013-07-13 14:59 - 01160328 _____ C:\Windows\Minidump\071313-23010-01.dmp 2013-07-03 19:09 - 2013-07-03 19:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-07-02 23:47 - 2013-07-02 23:47 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\LolClient 2013-07-01 22:27 - 2013-07-18 20:55 - 00002352 _____ C:\Windows\setupact.log 2013-07-01 22:27 - 2013-07-13 23:34 - 00013878 _____ C:\Windows\PFRO.log 2013-06-30 18:00 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2013-06-30 18:00 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2013-06-30 18:00 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2013-06-30 18:00 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2013-06-30 18:00 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2013-06-30 17:59 - 2013-06-30 17:59 - 00001613 _____ C:\Users\Public\Desktop\Play League of Legends.lnk 2013-06-30 17:59 - 2013-06-30 17:59 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin 2013-06-30 17:59 - 2013-06-30 17:59 - 00000000 ____D C:\Riot Games 2013-06-30 17:53 - 2013-06-30 17:53 - 00000000 ____D C:\Program Files (x86)\Pando Networks 2013-06-30 17:51 - 2013-06-30 17:51 - 34249488 _____ (Riot Games) C:\Users\Thomas\Downloads\LeagueofLegends_EUNE_Installer_06_17_13.exe 2013-06-30 17:50 - 2013-06-30 18:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Riot Games 2013-06-30 17:49 - 2013-06-30 17:50 - 32229024 _____ (Riot Games) C:\Users\Thomas\Downloads\LeagueofLegends_NA_Installer_05_07_13.exe 2013-06-30 17:48 - 2013-06-30 17:48 - 00000000 ____D C:\Users\Thomas\AppData\Local\{B203790D-816E-482B-A1DD-5DF22FDC83C0} 2013-06-25 20:14 - 2013-06-25 20:14 - 00001948 _____ C:\Users\Public\Desktop\Metin2.lnk 2013-06-25 19:36 - 2013-06-30 02:50 - 00001073 _____ C:\Users\Public\Desktop\Gameforge Live.lnk 2013-06-25 19:36 - 2013-06-30 02:50 - 00000000 ____D C:\Program Files (x86)\GameforgeLive 2013-06-25 19:36 - 2013-06-25 19:37 - 00000000 ____D C:\Users\Thomas\Downloads\Gameforge Live 2013-06-25 19:36 - 2013-06-25 19:36 - 00000000 ____D C:\Users\Thomas\AppData\Local\Gameforge4d 2013-06-25 19:20 - 2013-06-25 19:21 - 19277520 _____ (Gameforge ) C:\Users\Thomas\Downloads\Metin2_GameforgeLiveSetup.exe 2013-06-25 18:51 - 2013-06-25 18:51 - 00001026 _____ C:\Users\Public\Desktop\Hotspot Shield.lnk 2013-06-23 13:08 - 2013-06-23 13:08 - 00000000 ____D C:\Users\Thomas\AppData\Local\{E6A0239B-EE7E-4631-A6AE-D15E47676121} 2013-06-21 03:07 - 2013-06-21 03:07 - 00046792 _____ (AnchorFree Inc.) C:\Windows\system32\Drivers\hssdrv6.sys 2013-06-20 20:06 - 2013-06-20 20:06 - 00001404 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk 2013-06-20 20:06 - 2013-06-20 20:06 - 00001245 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk 2013-06-20 20:05 - 2013-06-20 20:06 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2013-06-20 20:04 - 2013-06-20 20:04 - 25454720 _____ (DVDVideoSoft Ltd. ) C:\Users\Thomas\Downloads\FreeYouTubeToMP3Converter.exe ==================== One Month Modified Files and Folders ======= 2013-07-18 21:34 - 2012-05-29 21:39 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1479537735-3793544780-3476029266-1001UA.job 2013-07-18 21:26 - 2012-03-22 04:19 - 01596822 _____ C:\Windows\WindowsUpdate.log 2013-07-18 21:22 - 2012-06-13 13:17 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-07-18 21:03 - 2009-07-14 06:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-07-18 21:03 - 2009-07-14 06:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-07-18 21:01 - 2012-06-07 21:51 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Skype 2013-07-18 20:56 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-07-18 20:55 - 2013-07-01 22:27 - 00002352 _____ C:\Windows\setupact.log 2013-07-17 16:34 - 2013-07-17 16:36 - 00448512 _____ (OldTimer Tools) C:\Users\Thomas\Desktop\TFC.exe 2013-07-17 16:23 - 2013-07-17 16:21 - 00038584 _____ C:\AdwCleaner[S1].txt 2013-07-17 16:23 - 2013-07-17 16:21 - 00000427 _____ C:\Windows\DeleteOnReboot.bat 2013-07-17 16:22 - 2012-12-17 00:37 - 00000000 ____D C:\ProgramData\Hotspot Shield 2013-07-17 16:22 - 2012-12-17 00:36 - 00000000 ____D C:\Program Files (x86)\Hotspot Shield 2013-07-17 16:19 - 2013-07-17 16:19 - 00662345 _____ C:\Users\Thomas\Downloads\adwcleaner.exe 2013-07-17 12:13 - 2013-07-17 12:12 - 00024683 _____ C:\Users\Thomas\Desktop\Addition.txt 2013-07-17 12:13 - 2011-02-19 06:24 - 00708282 _____ C:\Windows\system32\perfh007.dat 2013-07-17 12:13 - 2011-02-19 06:24 - 00151886 _____ C:\Windows\system32\perfc007.dat 2013-07-17 12:13 - 2009-07-14 07:13 - 01643244 _____ C:\Windows\system32\PerfStringBackup.INI 2013-07-16 12:15 - 2012-10-27 19:08 - 00415878 _____ C:\Windows\system32\Drivers\vsconfig.xml 2013-07-16 03:44 - 2013-07-16 03:44 - 00000000 ____D C:\FRST 2013-07-15 17:38 - 2013-07-16 16:39 - 01777839 _____ (Farbar) C:\Users\Thomas\Desktop\FRST64.exe 2013-07-14 02:14 - 2013-07-14 02:15 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-07-14 02:14 - 2013-07-14 02:14 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-07-14 02:14 - 2013-07-14 02:14 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-07-14 02:14 - 2013-07-14 02:14 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-07-14 02:14 - 2013-07-14 02:14 - 00000000 ____D C:\Program Files (x86)\Java 2013-07-14 02:14 - 2012-05-31 14:12 - 00867240 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll 2013-07-14 02:14 - 2012-05-31 14:12 - 00789416 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll 2013-07-14 02:11 - 2013-07-14 02:11 - 00903080 _____ (Oracle Corporation) C:\Users\Thomas\Downloads\jxpiinstall.exe 2013-07-14 01:11 - 2012-06-03 14:58 - 00000000 ____D C:\Users\Thomas\AppData\Local\CrashDumps 2013-07-13 23:34 - 2013-07-01 22:27 - 00013878 _____ C:\Windows\PFRO.log 2013-07-13 14:59 - 2013-07-13 14:59 - 480649570 _____ C:\Windows\MEMORY.DMP 2013-07-13 14:59 - 2013-07-13 14:59 - 01160328 _____ C:\Windows\Minidump\071313-23010-01.dmp 2013-07-13 14:59 - 2012-07-27 22:11 - 00000000 ____D C:\Windows\Minidump 2013-07-13 10:34 - 2012-05-29 21:39 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1479537735-3793544780-3476029266-1001Core.job 2013-07-13 10:29 - 2012-05-29 21:39 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1479537735-3793544780-3476029266-1001UA 2013-07-13 10:29 - 2012-05-29 21:39 - 00003700 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1479537735-3793544780-3476029266-1001Core 2013-07-06 09:22 - 2012-08-30 22:10 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-07-04 13:42 - 2012-06-16 20:38 - 00002779 _____ C:\Users\Thomas\Desktop\vba.ini 2013-07-03 19:09 - 2013-07-03 19:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-07-02 23:47 - 2013-07-02 23:47 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\LolClient 2013-06-30 18:01 - 2013-06-30 17:50 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Riot Games 2013-06-30 17:59 - 2013-06-30 17:59 - 00001613 _____ C:\Users\Public\Desktop\Play League of Legends.lnk 2013-06-30 17:59 - 2013-06-30 17:59 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin 2013-06-30 17:59 - 2013-06-30 17:59 - 00000000 ____D C:\Riot Games 2013-06-30 17:53 - 2013-06-30 17:53 - 00000000 ____D C:\Program Files (x86)\Pando Networks 2013-06-30 17:51 - 2013-06-30 17:51 - 34249488 _____ (Riot Games) C:\Users\Thomas\Downloads\LeagueofLegends_EUNE_Installer_06_17_13.exe 2013-06-30 17:50 - 2013-06-30 17:49 - 32229024 _____ (Riot Games) C:\Users\Thomas\Downloads\LeagueofLegends_NA_Installer_05_07_13.exe 2013-06-30 17:48 - 2013-06-30 17:48 - 00000000 ____D C:\Users\Thomas\AppData\Local\{B203790D-816E-482B-A1DD-5DF22FDC83C0} 2013-06-30 02:50 - 2013-06-25 19:36 - 00001073 _____ C:\Users\Public\Desktop\Gameforge Live.lnk 2013-06-30 02:50 - 2013-06-25 19:36 - 00000000 ____D C:\Program Files (x86)\GameforgeLive 2013-06-25 20:14 - 2013-06-25 20:14 - 00001948 _____ C:\Users\Public\Desktop\Metin2.lnk 2013-06-25 19:37 - 2013-06-25 19:36 - 00000000 ____D C:\Users\Thomas\Downloads\Gameforge Live 2013-06-25 19:36 - 2013-06-25 19:36 - 00000000 ____D C:\Users\Thomas\AppData\Local\Gameforge4d 2013-06-25 19:26 - 2013-03-06 17:04 - 00000000 ____D C:\Users\Thomas\AppData\Local\Thunderbird 2013-06-25 19:21 - 2013-06-25 19:20 - 19277520 _____ (Gameforge ) C:\Users\Thomas\Downloads\Metin2_GameforgeLiveSetup.exe 2013-06-25 18:51 - 2013-06-25 18:51 - 00001026 _____ C:\Users\Public\Desktop\Hotspot Shield.lnk 2013-06-23 13:08 - 2013-06-23 13:08 - 00000000 ____D C:\Users\Thomas\AppData\Local\{E6A0239B-EE7E-4631-A6AE-D15E47676121} 2013-06-21 03:07 - 2013-06-21 03:07 - 00046792 _____ (AnchorFree Inc.) C:\Windows\system32\Drivers\hssdrv6.sys 2013-06-20 20:06 - 2013-06-20 20:06 - 00001404 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk 2013-06-20 20:06 - 2013-06-20 20:06 - 00001245 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk 2013-06-20 20:06 - 2013-06-20 20:05 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2013-06-20 20:05 - 2012-05-30 16:03 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\DVDVideoSoft 2013-06-20 20:04 - 2013-06-20 20:04 - 25454720 _____ (DVDVideoSoft Ltd. ) C:\Users\Thomas\Downloads\FreeYouTubeToMP3Converter.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-07-13 09:50 ==================== End Of Log ============================ --- --- --- Schritt 4, Ich wusste ich hatte doch was vergessen. |
19.07.2013, 10:21 | #17 |
/// Malwareteam | GVU-Trojaner macht mir mein Leben schwer. Hallo Thomas
__________________bezüglich deiner Frage schaun wir uns das mit den Proxy Settings ,mal an: Schritt 1: Code:
ATTFilter ProxyEnable: Internet Explorer proxy is enabled. Schritt 2 : Installiere eine aktuelle Version vom Adobe Reader
__________________ |
19.07.2013, 14:02 | #18 |
| GVU-Trojaner macht mir mein Leben schwer. Hallo Aneri,
__________________ich habe mir die neueste Version von Adobe Reader runtergeladen, aber leider kann ich noch nichts im Internet . Was mache ich mit dem Code den du mir gepostet hast? |
19.07.2013, 14:25 | #19 |
/// Malwareteam | GVU-Trojaner macht mir mein Leben schwer. Hast du den Proxy eingestellt? Das war nur ein Hinweis auf eine deiner Logzeilen... |
19.07.2013, 16:38 | #20 |
| GVU-Trojaner macht mir mein Leben schwer. Ja also ich weiß ja nicht wie ich den Proxy da einstelle .. Hallo Aneri, ich wollt nur Bescheid sagen, dass ich dieses Proxyproblem gelöst habe. Nur noch die Frage bin ich fertig mit dem Rechner oder sollte ich noch was scannen, fixen etc.. |
20.07.2013, 13:22 | #21 |
/// Malwareteam | GVU-Trojaner macht mir mein Leben schwer. Hi wunderbar... dann räümen wir noch auf Schritt 1: Die Reihenfolge ist hier entscheidend.
Schritt 2: Wunderbar dein System ist soweit ich das sehen kann sauber. Hier noch ein paar Tipps zur Absicherung deines Systems. Benutzerkonto Einstellungen: Wir sehen immer wieder User mit Administratorrechten. Hier kann jeder Nutzer eines Windowsrechners schon die erste Türe schließen. Arbeite mit einem eingeschränkten Benutzerkonto anstelle eines Kontos mit Administratorrechten. Diese sind für das tägliche Arbeiten nicht nötig, und solltest du einmal Software installieren wollen wirst du im normalfall nach deinem Passwort gefragt. Solltest du Hilfe bei der Erstellung eines "eingeschränkten Kontos" benötigen helfe ich dir gern weiter. Systemupdates: Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Besonders Java erfährt zur Zeit regelmäßig sicherheitsrelevante Updates Ältere Versionen enthalten Sicherheitslücken, die von Malware missbraucht werden können.
Antivirensoftware Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen alternatives Browsen Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen. Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann. Wenn du möchtest, kannst du das Trojaner Board Forum mit einer kleinen Spende unterstützen.
__________________ --> GVU-Trojaner macht mir mein Leben schwer. |
20.07.2013, 23:49 | #22 |
| GVU-Trojaner macht mir mein Leben schwer. Hallo Aneri , Erstmal großes DANKE SCHÖN für deine Hilfe, ich dachte schon ich sei verloren Und tut mir auch Leid falls ich dir Umstände bereitet haben sollte. Das alles hat dich bestimmt viel Aufwand gekostet. Nur noch 2 Sachen , also diese Programme die du im Schritt 1 erwähnt hast sind mir völlig unbekannt. Und noch ne Frage .. Kennst du vielleicht ein Anti Virus den man kostenlos im Internet Runterladen kann den du mir empfehlen könntest ? Hallo Aneri, Ich wollte jetzt nur Bescheid sagen dass ich so vieles was du mir empfohlen hast, runtergeladen habe. Und auch noch mal ein DANKE für die vielen Tipps |
21.07.2013, 16:26 | #23 |
/// Malwareteam | GVU-Trojaner macht mir mein Leben schwer. Hi ich kann dir avast! Antivirus empfehlen. Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest du das Thema nochmals benötigen schreib mir bitte eine Persöhnliche Nachricht. PM. |
Themen zu GVU-Trojaner macht mir mein Leben schwer. |
abgesicherte, abgesicherten, abgesicherten modus, asus, auszuschalten, automatisch, bereits, betriebssystem, ebook, forum, gvu-trojaner, herunter, leben, modus, notebook, plagegeist, problem, quält, schwer, titel, versuch, versucht, windows, zugreife, zugreifen |