![]() |
|
Plagegeister aller Art und deren Bekämpfung: Probleme mit Click to save Deal Finder & Click to ContinueWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #8 |
| ![]() Probleme mit Click to save Deal Finder & Click to Continue Hallo, hier die nächsten Log Dateien: 1.OTL Code:
ATTFilter All processes killed ========== REGISTRY ========== Registry key HKEY_LOCAL_MACHINE\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Chrisi ->Temp folder emptied: 18801457 bytes ->Temporary Internet Files folder emptied: 149334133 bytes ->Java cache emptied: 454171 bytes ->FireFox cache emptied: 28627371 bytes ->Google Chrome cache emptied: 0 bytes ->Flash cache emptied: 8828 bytes User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Public ->Temp folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 208707428 bytes RecycleBin emptied: 6868537 bytes Total Files Cleaned = 394,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 08022013_143205 Files\Folders moved on Reboot... File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot. File\Folder C:\Windows\temp\TMP000000010FB97A8321E8407F not found! PendingFileRenameOperations files... Registry entries deleted on Reboot... Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.08.02.05 Windows Vista Service Pack 2 x86 NTFS Internet Explorer 9.0.8112.16421 Chrisi :: Jana-Laptop [Administrator] 02.08.2013 15:12:20 mbam-log-2013-08-02 (15-12-20).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 220091 Laufzeit: 9 Minute(n), 21 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6844 # api_version=3.0.2 # EOSSerial=21dc25ba8d7230419e4bbf3175460eb5 # end=finished # remove_checked=true # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2012-12-06 02:44:58 # local_time=2012-12-06 03:44:58 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.0.6002 NT Service Pack 2 # compatibility_mode=1799 16775165 100 99 35424 220185188 28199 0 # compatibility_mode=5892 16776574 100 100 17289922 192294626 0 0 # scanned=194539 # found=1 # cleaned=1 # scan_time=9009 C:\Windows\FixCamera.exe a variant of Win32/KillProc.A application (cleaned by deleting - quarantined) 2FFF1A1B0FD2DC645B35D88E7144D5343B0F6FFB C ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=21dc25ba8d7230419e4bbf3175460eb5 # engine=14626 # end=finished # remove_checked=true # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-08-02 05:26:53 # local_time=2013-08-02 07:26:53 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.0.6002 NT Service Pack 2 # compatibility_mode=774 16777213 85 93 263279 152170685 0 0 # compatibility_mode=5892 16776574 100 100 18118 212997141 0 0 # scanned=207936 # found=4 # cleaned=4 # scan_time=8373 sh=A696C5A0D50145AFDE3D3A71F70B1C3006AC2199 ft=1 fh=da0003b6601dbc17 vn="a variant of Win32/Adware.MultiPlug.I application (cleaned by deleting - quarantined)" ac=C fn="C:\_OTL\MovedFiles\02152013_153337\C_ProgramData\SaveByclick\5103f652ad6b5.dll" sh=47488F9155959F0C31D3D929F4F558B6CF9AE1E8 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application (cleaned by deleting - quarantined)" ac=C fn="C:\_OTL\MovedFiles\02152013_153337\C_Users\Chrisi\AppData\Local\Google\Chrome\User Data\Default\Extensions\adpigmpgildgegcachdfnnbkfbkajddi\1\511d22a4384374.18582077.js" sh=77E7A8CF27E7E93175FA198A0E3C47A526CBF010 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application (cleaned by deleting - quarantined)" ac=C fn="C:\_OTL\MovedFiles\02152013_153337\C_Users\Chrisi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pccmijghlphbggchlnjjgjgjdfbcndfg\1\5103f652ad47d9.05544397.js" sh=2835E18B2342B4F90B874C5FACD0C540BA88A1F7 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application (cleaned by deleting - quarantined)" ac=C fn="C:\_OTL\MovedFiles\02152013_153337\C_Users\Chrisi\AppData\Roaming\mozilla\Firefox\Profiles\x2gbdyg6.default\extensions\5103f652ad51e@5103f652ad557.com\content\bg.js" Code:
ATTFilter Results of screen317's Security Check version 0.99.71 Windows Vista Service Pack 2 x86 Internet Explorer 9 Internet Explorer 8 ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 CCleaner JavaFX 2.1.1 Java 7 Update 25 Adobe Flash Player 11.8.800.94 Mozilla Firefox (22.0) Mozilla Thunderbird (17.0.7) ````````Process Check: objlist.exe by Laurent```````` AVAST Software Avast AvastSvc.exe AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` LG sunny_tate |
Themen zu Probleme mit Click to save Deal Finder & Click to Continue |
32 bit, click, continue, deal finder, finder, firefox, hängt, log's, nerviges, plagegeister, problem, probleme, schön, troja, vista 32, vista 32 bit, win32/adware.multiplug.h, win32/adware.multiplug.i, win32/killproc.a |