![]() |
| |||||||
Plagegeister aller Art und deren Bekämpfung: MAILER-DAEMON@gmx.net - Trojaner?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
| | #5 |
| | MAILER-DAEMON@gmx.net - Trojaner? Hallo Leo Hat etwas gedauert... Hier die Logs: Code:
ATTFilter # AdwCleaner v3.000 - Report created 24/08/2013 at 14:10:46
# Updated 20/08/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Andreas - TINA-ANDI
# Running from : C:\Users\Andreas\Downloads\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\ConduitEngine
Folder Deleted : C:\Program Files (x86)\Freeware.de
Folder Deleted : C:\Windows\assembly\GAC_MSIL\QuickStoresToolbar
Folder Deleted : C:\Users\Andreas\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Andreas\AppData\LocalLow\ConduitEngine
Folder Deleted : C:\Users\Andreas\AppData\LocalLow\Dealio
Folder Deleted : C:\Users\Andreas\AppData\LocalLow\Search Settings
Folder Deleted : C:\Users\Andreas\AppData\LocalLow\Freeware.de
Folder Deleted : C:\Users\Andreas\AppData\Roaming\QuickStoresToolbar
Folder Deleted : C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\tsv2zjl9.default\Conduit
Folder Deleted : C:\Program Files (x86)\Mozilla Firefox\Extensions\quickstores@quickstores.de
File Deleted : C:\Users\Andreas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\QuickStores.url
File Deleted : C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\QuickStores.url
File Deleted : C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\tsv2zjl9.default\searchplugins\11-suche.xml
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted : HKLM\SOFTWARE\Classes\AppID\
Key Deleted : HKLM\SOFTWARE\Classes\AppID\
Key Deleted : HKLM\SOFTWARE\Classes\AppID\
Key Deleted : HKLM\SOFTWARE\Classes\AppID\
Key Deleted : HKLM\SOFTWARE\Classes\AppID\
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{10EDB994-47F8-43F7-AE96-F2EA63E9F90F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E111A5C-3D11-4F56-9463-5310C3C69025}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BADDDE37-CA26-4AB7-BFAF-61AD45447D39}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\
Key Deleted : HKLM\SOFTWARE\Classes\Interface\
Key Deleted : HKLM\SOFTWARE\Classes\Interface\
Key Deleted : HKLM\SOFTWARE\Classes\Interface\
Key Deleted : HKLM\SOFTWARE\Classes\Interface\
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10EDB994-47F8-43F7-AE96-F2EA63E9F90F}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10EDB994-47F8-43F7-AE96-F2EA63E9F90F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10EDB994-47F8-43F7-AE96-F2EA63E9F90F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{BADDDE37-CA26-4AB7-BFAF-61AD45447D39}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{34E0CF8C-4882-4D9C-83E5-FA11E19A0FC1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{10EDB994-47F8-43F7-AE96-F2EA63E9F90F}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{30F9B915-B755-4826-820B-08FBA6BD249D}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{7E111A5C-3D11-4F56-9463-5310C3C69025}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{30F9B915-B755-4826-820B-08FBA6BD249D}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7E111A5C-3D11-4F56-9463-5310C3C69025}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{7E111A5C-3D11-4F56-9463-5310C3C69025}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{7E111A5C-3D11-4F56-9463-5310C3C69025}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\conduitEngine
Key Deleted : HKCU\Software\AppDataLow\Software\Freeware.de
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\conduitEngine
Key Deleted : HKLM\Software\Freeware.de
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QuickStores-Toolbar_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Freeware.de Toolbar
***** [ Browsers ] *****
-\\ Internet Explorer v10.0.9200.16660
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v23.0.1 (de)
[ File : C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\ihvg5101.default\prefs.js ]
[ File : C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\tsv2zjl9.default\prefs.js ]
Line Deleted : user_pref("CT2736476..clientLogIsEnabled", true);
Line Deleted : user_pref("CT2736476..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Deleted : user_pref("CT2736476..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Deleted : user_pref("CT2736476.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Line Deleted : user_pref("CT2736476.CTID", "ct2736476");
Line Deleted : user_pref("CT2736476.CurrentServerDate", "30-1-2011");
Line Deleted : user_pref("CT2736476.DialogsAlignMode", "LTR");
Line Deleted : user_pref("CT2736476.DownloadReferralCookieData", "");
Line Deleted : user_pref("CT2736476.EMailNotifierPollDate", "Sun Jan 30 2011 19:30:56 GMT+0100");
Line Deleted : user_pref("CT2736476.FirstServerDate", "30-1-2011");
Line Deleted : user_pref("CT2736476.FirstTime", true);
Line Deleted : user_pref("CT2736476.FirstTimeFF3", true);
Line Deleted : user_pref("CT2736476.FixPageNotFoundErrors", false);
Line Deleted : user_pref("CT2736476.GroupingServerCheckInterval", 1440);
Line Deleted : user_pref("CT2736476.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Line Deleted : user_pref("CT2736476.HasUserGlobalKeys", true);
Line Deleted : user_pref("CT2736476.Initialize", true);
Line Deleted : user_pref("CT2736476.InitializeCommonPrefs", true);
Line Deleted : user_pref("CT2736476.InstallationAndCookieDataSentCount", 1);
Line Deleted : user_pref("CT2736476.InstallationId", "StubInstaller");
Line Deleted : user_pref("CT2736476.InstallationType", "ConduitIntegration");
Line Deleted : user_pref("CT2736476.InstalledDate", "Sun Jan 30 2011 19:30:56 GMT+0100");
Line Deleted : user_pref("CT2736476.IsGrouping", false);
Line Deleted : user_pref("CT2736476.IsMulticommunity", false);
Line Deleted : user_pref("CT2736476.IsOpenThankYouPage", false);
Line Deleted : user_pref("CT2736476.IsOpenUninstallPage", true);
Line Deleted : user_pref("CT2736476.LanguagePackLastCheckTime", "Sun Jan 30 2011 19:31:19 GMT+0100");
Line Deleted : user_pref("CT2736476.LanguagePackReloadIntervalMM", 1440);
Line Deleted : user_pref("CT2736476.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Line Deleted : user_pref("CT2736476.LastLogin_3.2.5.2", "Sun Jan 30 2011 19:30:56 GMT+0100");
Line Deleted : user_pref("CT2736476.LatestVersion", "3.2.5.2");
Line Deleted : user_pref("CT2736476.Locale", "de");
Line Deleted : user_pref("CT2736476.MCDetectTooltipHeight", "83");
Line Deleted : user_pref("CT2736476.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Line Deleted : user_pref("CT2736476.MCDetectTooltipWidth", "295");
Line Deleted : user_pref("CT2736476.SearchFromAddressBarIsInit", true);
Line Deleted : user_pref("CT2736476.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2736476&q=");
Line Deleted : user_pref("CT2736476.SearchInNewTabEnabled", true);
Line Deleted : user_pref("CT2736476.SearchInNewTabIntervalMM", 1440);
Line Deleted : user_pref("CT2736476.SearchInNewTabLastCheckTime", "Sun Jan 30 2011 19:30:56 GMT+0100");
Line Deleted : user_pref("CT2736476.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
Line Deleted : user_pref("CT2736476.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
Line Deleted : user_pref("CT2736476.ServiceMapLastCheckTime", "Sun Jan 30 2011 19:30:55 GMT+0100");
Line Deleted : user_pref("CT2736476.SettingsLastCheckTime", "Sun Jan 30 2011 19:30:56 GMT+0100");
Line Deleted : user_pref("CT2736476.SettingsLastUpdate", "1295945146");
Line Deleted : user_pref("CT2736476.ThirdPartyComponentsInterval", 504);
Line Deleted : user_pref("CT2736476.ThirdPartyComponentsLastCheck", "Sun Jan 30 2011 19:30:55 GMT+0100");
Line Deleted : user_pref("CT2736476.ThirdPartyComponentsLastUpdate", "1255348257");
Line Deleted : user_pref("CT2736476.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112");
Line Deleted : user_pref("CT2736476.Uninstall", true);
Line Deleted : user_pref("CT2736476.UserID", "UN09797881728746838");
Line Deleted : user_pref("CT2736476.alertChannelId", "1128724");
Line Deleted : user_pref("CT2736476.components.1000082", false);
Line Deleted : user_pref("CT2736476.components.1000234", false);
Line Deleted : user_pref("CT2736476.ct2736476.DialogsAlignMode", "LTR");
Line Deleted : user_pref("CT2736476.ct2736476.LanguagePackLastCheckTime", "Sun Jan 30 2011 19:31:19 GMT+0100");
Line Deleted : user_pref("CT2736476.ct2736476.Locale", "de");
Line Deleted : user_pref("CT2736476.ct2736476.SettingsLastCheckTime", "Sun Jan 30 2011 19:31:19 GMT+0100");
Line Deleted : user_pref("CT2736476.ct2736476.SettingsLastUpdate", "1295945146");
Line Deleted : user_pref("CT2736476.ct2736476.ThirdPartyComponentsLastCheck", "Sun Jan 30 2011 19:31:19 GMT+0100");
Line Deleted : user_pref("CT2736476.ct2736476.ThirdPartyComponentsLastUpdate", "1255348257");
Line Deleted : user_pref("CT2736476.ct2736476.toolbarAppMetaDataLastCheckTime", "Sun Jan 30 2011 19:31:19 GMT+0100");
Line Deleted : user_pref("CT2736476.ct2736476.toolbarContextMenuLastCheckTime", "Sun Jan 30 2011 19:31:19 GMT+0100");
Line Deleted : user_pref("CT2736476.myStuffEnabled", true);
Line Deleted : user_pref("CT2736476.myStuffPublihserMinWidth", 400);
Line Deleted : user_pref("CT2736476.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Line Deleted : user_pref("CT2736476.myStuffServiceIntervalMM", 1440);
Line Deleted : user_pref("CT2736476.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Line Deleted : user_pref("CT2736476.testingCtid", "");
Line Deleted : user_pref("CT2736476.toolbarAppMetaDataLastCheckTime", "Sun Jan 30 2011 19:30:56 GMT+0100");
Line Deleted : user_pref("CT2736476.toolbarContextMenuLastCheckTime", "Sun Jan 30 2011 19:31:19 GMT+0100");
Line Deleted : user_pref("CT2736476.undefined", "Sun Jan 30 2011 19:31:19 GMT+0100");
Line Deleted : user_pref("CT2736476.usagesFlag", 1);
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1128724/1124413/DE", "\"0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/DE", "\"0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2736476", "\"1288781014\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=ct2736476", "\"1288781014\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=de", "L+tncv4eqt6Qm5T3dzChdA==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=de", "poKjTfHs0NrVUIalKI8jyg==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=de", "QmycQXJXVyFVAzIiNllWhQ==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=de", "SuMy8xgBA7+FodOxmk9aiQ==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"634289840782570000\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "634303635100000000");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2736476/CT2736476", "\"1295945146\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/ct2736476/CT2736476", "\"1295945146\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=de", "\"634310612473900000\"");
Line Deleted : user_pref("CommunityToolbar.EngineOwner", "");
Line Deleted : user_pref("CommunityToolbar.EngineOwnerGuid", "");
Line Deleted : user_pref("CommunityToolbar.EngineOwnerToolbarId", "");
Line Deleted : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Line Deleted : user_pref("CommunityToolbar.OriginalEngineOwner", "");
Line Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "");
Line Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "");
Line Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2736476");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2736476");
Line Deleted : user_pref("CommunityToolbar.alert.alertInfoInterval", 60);
Line Deleted : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sun Jan 30 2011 19:31:19 GMT+0100");
Line Deleted : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Line Deleted : user_pref("CommunityToolbar.alert.locale", "en");
Line Deleted : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Line Deleted : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sun Jan 30 2011 19:30:55 GMT+0100");
Line Deleted : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1291052234");
Line Deleted : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Line Deleted : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Line Deleted : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Line Deleted : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Line Deleted : user_pref("CommunityToolbar.alert.userId", "558e2bd8-cf31-40e8-ac12-227e040c60ac");
Line Deleted : user_pref("extensions.enabledItems", "{E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1,6,2,44,{20a82645-c095-46ed-80e3-08825760534b}:1.2.1,quickstores@quickstores.de:1.0.0,{CAFEEFAC-0016-0000-0024-ABCDEFFEDCB[...]
Line Deleted : user_pref("quickstores.toolbar.affid", "2002");
Line Deleted : user_pref("quickstores.toolbar.guid", "{53204D62-AE7A-6A41-FE87-B4E1C856A468}");
*************************
AdwCleaner[R0].txt - [23417 octets] - [24/08/2013 14:06:28]
AdwCleaner[R1].txt - [23478 octets] - [24/08/2013 14:10:10]
AdwCleaner[S0].txt - [19314 octets] - [24/08/2013 14:10:46]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [19375 octets] ##########
Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.08.24.02 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16660 Andreas :: TINA-ANDI [Administrator] 24.08.2013 14:18:42 mbam-log-2013-08-24 (14-18-42).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 227133 Laufzeit: 12 Minute(n), 52 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 1 C:\Users\Andreas\AppData\Local\Temp\is-8T3RO.tmp\dealio.exe (PUP.Dealio.TB) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=232396e71dbbd7449644cbb842a5277e
# engine=14887
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-24 04:40:29
# local_time=2013-08-24 06:40:29 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5122 16777213 100 88 14515025 126145025 0 0
# compatibility_mode=5893 16776574 66 85 3714642 128992279 0 0
# scanned=361784
# found=0
# cleaned=0
# scan_time=13447
Vielen Dank mal wieder.... |
| Themen zu MAILER-DAEMON@gmx.net - Trojaner? |
| abend, charset, could, delivery, failed, folge, folgendes, gestern, gmx.net, heute, inhalt, iphone, localhost, mail delivery, mails, meldung, message, nemesis, not, original, permanent, problem, temp, this, troja, trojaner, trojaner?, unterschiedliche |