|
Log-Analyse und Auswertung: "Firefox gesperrt" Bundespolizei virus - Win7Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
09.11.2013, 16:29 | #16 |
/// Winkelfunktion /// TB-Süch-Tiger™ | "Firefox gesperrt" Bundespolizei virus - Win7 Ok Dann lass adcleaner erstmal weg, mach erstmal JRT
__________________ Logfiles bitte immer in CODE-Tags posten |
14.11.2013, 18:45 | #17 |
| "Firefox gesperrt" Bundespolizei virus - Win7 Sorry das ich so spät antworte aber ging nicht anders.
__________________Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.0.8 (11.05.2013:1) OS: Windows 7 Home Premium x64 Ran by hke on 14.11.2013 at 18:23:20,70 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\protector_dll.protectorbho Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\protector_dll.protectorbho.1 Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\yahoopartnertoolbar Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\conduit Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT2269050 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_17-zip_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_17-zip_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_7-zip_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_7-zip_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_adobe-photoshop-speedup_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_adobe-photoshop-speedup_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_gimp_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_gimp_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_vlc-media-player_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_vlc-media-player_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_17-zip_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_17-zip_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_7-zip_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_7-zip_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_adobe-photoshop-speedup_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_adobe-photoshop-speedup_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_gimp_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_gimp_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_vlc-media-player_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_vlc-media-player_RASMANCS Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\partner" Successfully deleted: [Folder] "C:\Users\hke\AppData\Roaming\dvdvideosoftiehelpers" Successfully deleted: [Folder] "C:\Users\hke\appdata\locallow\conduit" Successfully deleted: [Folder] "C:\Program Files (x86)\conduit" ~~~ FireFox Successfully deleted: [File] C:\Users\hke\AppData\Roaming\mozilla\firefox\profiles\evxdjx6d.default\searchplugins\conduit.xml Successfully deleted: [Folder] C:\Users\hke\AppData\Roaming\mozilla\firefox\profiles\evxdjx6d.default\extensions\engine@conduit.com Successfully deleted: [Folder] C:\Users\hke\AppData\Roaming\mozilla\firefox\profiles\evxdjx6d.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5} Successfully deleted the following from C:\Users\hke\AppData\Roaming\mozilla\firefox\profiles\evxdjx6d.default\prefs.js user_pref("CT2269050.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); user_pref("CT2269050.CTID", "CT2269050"); user_pref("CT2269050.CurrentServerDate", "16-7-2010"); user_pref("CT2269050.DialogsAlignMode", "LTR"); user_pref("CT2269050.DownloadReferralCookieData", ""); user_pref("CT2269050.EMailNotifierPollDate", "Fri Jul 16 2010 04:49:15 GMT+0200"); user_pref("CT2269050.FirstServerDate", "16-7-2010"); user_pref("CT2269050.FirstTime", true); user_pref("CT2269050.FirstTimeFF3", true); user_pref("CT2269050.FirstTimeSettingsDone", true); user_pref("CT2269050.FixPageNotFoundErrors", true); user_pref("CT2269050.GroupingServerCheckInterval", 1440); user_pref("CT2269050.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); user_pref("CT2269050.Initialize", true); user_pref("CT2269050.InitializeCommonPrefs", true); user_pref("CT2269050.InstallationAndCookieDataSentCount", 1); user_pref("CT2269050.InstallationType", "UnknownIntegration"); user_pref("CT2269050.InstalledDate", "Fri Jul 16 2010 04:49:15 GMT+0200"); user_pref("CT2269050.InvalidateCache", false); user_pref("CT2269050.IsGrouping", false); user_pref("CT2269050.IsMulticommunity", false); user_pref("CT2269050.IsOpenThankYouPage", false); user_pref("CT2269050.IsOpenUninstallPage", false); user_pref("CT2269050.LanguagePackLastCheckTime", "Fri Jul 16 2010 04:49:16 GMT+0200"); user_pref("CT2269050.LanguagePackReloadIntervalMM", 1440); user_pref("CT2269050.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx"); user_pref("CT2269050.LastLogin_2.7.0.14", "Fri Jul 16 2010 04:49:15 GMT+0200"); user_pref("CT2269050.LatestVersion", "2.1.0.18"); user_pref("CT2269050.Locale", "en"); user_pref("CT2269050.LoginCache", 4); user_pref("CT2269050.MCDetectTooltipHeight", "83"); user_pref("CT2269050.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); user_pref("CT2269050.MCDetectTooltipWidth", "295"); user_pref("CT2269050.RadioIsPodcast", false); user_pref("CT2269050.RadioLastCheckTime", "Fri Jul 16 2010 04:49:15 GMT+0200"); user_pref("CT2269050.RadioLastUpdateIPServer", "3"); user_pref("CT2269050.RadioLastUpdateServer", "129132338014870000"); user_pref("CT2269050.RadioMediaID", "12473383"); user_pref("CT2269050.RadioMediaType", "Media Player"); user_pref("CT2269050.RadioMenuSelectedID", "EBRadioMenu_CT226905012473383"); user_pref("CT2269050.RadioStationName", "Hotmix%20108"); user_pref("CT2269050.RadioStationURL", "hxxp://67.202.67.18:8082"); user_pref("CT2269050.SavedHomepage", "resource:/browserconfig.properties"); user_pref("CT2269050.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2269050&octid=EB_ORIGINAL_CTID&SearchSource=1"); user_pref("CT2269050.SearchFromAddressBarIsInit", true); user_pref("CT2269050.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&q="); user_pref("CT2269050.SearchInNewTabEnabled", true); user_pref("CT2269050.SearchInNewTabIntervalMM", 1440); user_pref("CT2269050.SearchInNewTabLastCheckTime", "Fri Jul 16 2010 04:49:15 GMT+0200"); user_pref("CT2269050.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID"); user_pref("CT2269050.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID"); user_pref("CT2269050.SettingsCheckIntervalMin", 120); user_pref("CT2269050.SettingsLastCheckTime", "Fri Jul 16 2010 04:49:14 GMT+0200"); user_pref("CT2269050.SettingsLastUpdate", "1277823092"); user_pref("CT2269050.ThirdPartyComponentsInterval", 504); user_pref("CT2269050.ThirdPartyComponentsLastCheck", "Fri Jul 16 2010 04:49:14 GMT+0200"); user_pref("CT2269050.ThirdPartyComponentsLastUpdate", "1277823092"); user_pref("CT2269050.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112"); user_pref("CT2269050.UserID", "UN02353364672673752"); user_pref("CT2269050.WeatherNetwork", ""); user_pref("CT2269050.WeatherPollDate", "Fri Jul 16 2010 04:49:15 GMT+0200"); user_pref("CT2269050.WeatherUnit", "C"); user_pref("CT2269050.alertChannelId", "666138"); user_pref("CT2269050.clientLogIsEnabled", true); user_pref("CT2269050.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"); user_pref("CT2269050.myStuffEnabled", true); user_pref("CT2269050.myStuffPublihserMinWidth", 400); user_pref("CT2269050.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"); user_pref("CT2269050.myStuffServiceIntervalMM", 1440); user_pref("CT2269050.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT"); user_pref("CT2269050.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"); user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/DE", "\"0\""); user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"01ffa8b1cc6cb1:0\""); user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3.2", "\"4ead38b3e6bcd1:0\""); user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "634356118310000000"); user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/2011 11:17:11 AM", "634356118310000000"); user_pref("CommunityToolbar.EngineOwner", "ConduitEngine"); user_pref("CommunityToolbar.EngineOwnerGuid", "engine@conduit.com"); user_pref("CommunityToolbar.EngineOwnerToolbarId", "conduitengine"); user_pref("CommunityToolbar.IsEngineShown", true); user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true); user_pref("CommunityToolbar.OriginalEngineOwner", "ConduitEngine"); user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "engine@conduit.com"); user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "conduitengine"); user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties"); user_pref("CommunityToolbar.ToolbarsList", "CT2269050,ConduitEngine"); user_pref("CommunityToolbar.ToolbarsList2", "CT2269050"); user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sun Mar 27 2011 23:07:53 GMT+0200"); user_pref("CommunityToolbar.alert.alertInfoInterval", 1440); user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Fri May 11 2012 13:15:54 GMT+0200"); user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com"); user_pref("CommunityToolbar.alert.locale", "en"); user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); user_pref("CommunityToolbar.alert.loginLastCheckTime", "Fri May 11 2012 13:15:47 GMT+0200"); user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611"); user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com"); user_pref("CommunityToolbar.alert.showTrayIcon", false); user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); user_pref("CommunityToolbar.alert.userId", "e093008f-cdc0-4c9e-ae44-64caa0f9dd32"); user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Fri Jul 16 2010 04:49:15 GMT+0200"); user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2269050"); user_pref("ConduitEngine.AppTrackingLastCheckTime", "Tue May 08 2012 23:18:37 GMT+0200"); user_pref("ConduitEngine.CTID", "ConduitEngine"); user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Tue May 08 2012 23:18:27 GMT+0200"); user_pref("ConduitEngine.FirstServerDate", "03/28/2011 00"); user_pref("ConduitEngine.FirstTime", true); user_pref("ConduitEngine.FirstTimeFF3", true); user_pref("ConduitEngine.HasUserGlobalKeys", true); user_pref("ConduitEngine.Initialize", true); user_pref("ConduitEngine.InitializeCommonPrefs", true); user_pref("ConduitEngine.InstalledDate", "Sun Mar 27 2011 23:07:55 GMT+0200"); user_pref("ConduitEngine.IsMulticommunity", false); user_pref("ConduitEngine.IsOpenThankYouPage", false); user_pref("ConduitEngine.IsOpenUninstallPage", true); user_pref("ConduitEngine.LanguagePackLastCheckTime", "Fri May 11 2012 13:15:47 GMT+0200"); user_pref("ConduitEngine.LastLogin_3.3.3.2", "Fri May 11 2012 13:15:47 GMT+0200"); user_pref("ConduitEngine.SearchFromAddressBarIsInit", true); user_pref("ConduitEngine.SettingsLastCheckTime", "Fri May 11 2012 13:15:47 GMT+0200"); user_pref("ConduitEngine.UserID", "UN90976069534420995"); user_pref("ConduitEngine.componentAlertEnabled", false); user_pref("ConduitEngine.engineLocale", "de"); user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Fri May 11 2012 13:15:47 GMT+0200"); user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Fri May 11 2012 13:15:47 GMT+0200"); user_pref("ConduitEngine.initDone", true); user_pref("ConduitEngine.isAppTrackingManagerOn", true); user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}"); Emptied folder: C:\Users\hke\AppData\Roaming\mozilla\firefox\profiles\evxdjx6d.default\minidumps [130 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 14.11.2013 at 18:31:34,00 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ was soll ich tun? |
15.11.2013, 00:23 | #18 |
/// Winkelfunktion /// TB-Süch-Tiger™ | "Firefox gesperrt" Bundespolizei virus - Win7 adwCleaner neu runterladen und nochmal probieren
__________________
__________________ |
16.11.2013, 23:09 | #19 |
| "Firefox gesperrt" Bundespolizei virus - Win7 Hallo cosinus also wenn ich adwCleaner runterladen will kommt wieder diese Meldung adwcleaner is not commonly downloaded and could harm your computer und seit heute startet mein windows nicht mehr richtig, zu erst konnte nicht gestartet werden windows hat vorgeschlagen ich soll systemwiederherstellung machen und danach konnte gestartet werden braucht aber doppelt so lang. ich hab keine Ahnung warum jetzt das auch noch dazu gekommen ist, hab nichts neues gemacht außer JRT.exe runter zu laden. Woran kann das liegen und was soll ich als nächstes tun? |
17.11.2013, 00:46 | #20 |
/// Winkelfunktion /// TB-Süch-Tiger™ | "Firefox gesperrt" Bundespolizei virus - Win7 Was ist jetzt mit deinem Windows los, startet es nun oder nicht
__________________ Logfiles bitte immer in CODE-Tags posten |
Themen zu "Firefox gesperrt" Bundespolizei virus - Win7 |
antivirus, antivirus scan, browser, bundespolizei, bundespolizei trojaner windows 7, bundespolizei virus, comodo, firefox, firefox gesperrt, gesperrt, heute, hoffe, inter, interne, internet, internet-explorer, liebe, meldung, pcs, scan, scanne, scannen, sperre, troja, virus, win, win7 |