Hallo,
seid einigen Tagen habe ich unerwünschte Werbung und Toolbars etc.
Ich hoffe ihr könnt mir helfen diese zu entfernen. Einen log von Hjt habe ich vorbereitet , falls erwünscht.
Code:
Alles auswählen Aufklappen ATTFilter
Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 23:16:49, on 22.06.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17041)
FIREFOX: 29.0.1 (de)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\Name\AppData\Roaming\uTorrent\uTorrent.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Users\Name\Desktop\Playstation 2 (PS2) Emulator\pcsx2.exe
C:\Program Files (x86)\Java\jre7\bin\javaw.exe
C:\Program Files (x86)\Java\jre7\bin\javaw.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
C:\Users\Name\Downloads\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about :blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=8ccd0e63-3eb9-2a7d-9fad-3f6d0a81746d&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=10/02/2014&type=hp1000
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=8ccd0e63-3eb9-2a7d-9fad-3f6d0a81746d&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=10/02/2014&type=hp1000
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=stnc_14_18&cd=2XzuyEtN2Y1L1Qzu0BzzzyyByD0AyEyByC0Azyzy0CyDtCyDtN0D0Tzu0SzytDtDtN1L2XzutBtFtBtCtFyEtFtCtN1L1Czu1B2Z1G1R1VtCyE1VtCzztN1L1G1B1V1N2Y1L1Qzu2SyC0DyD0E0E0BtC0FtG0D0AtB0DtGzyyDyE0BtGtDyCzytBtGyCzz0DyEtAyDyC0DtByCyEtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDtDyB0B0DyD0EtDtGyE0FyB0EtG0BtB0F0DtG0E0Fzz0CtGyCyC0E0CtD0F0DyC0E0BtDyD2Q&cr=672036477&ir=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about :blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1392563409&from=slbnew&uid=WDCXWD10EZEX-00KUWA0_WD-WCC1S588715687156&q={searchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1392563409&from=slbnew&uid=WDCXWD10EZEX-00KUWA0_WD-WCC1S588715687156&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=stnc_14_18&cd=2XzuyEtN2Y1L1Qzu0BzzzyyByD0AyEyByC0Azyzy0CyDtCyDtN0D0Tzu0SzytDtDtN1L2XzutBtFtBtCtFyEtFtCtN1L1Czu1B2Z1G1R1VtCyE1VtCzztN1L1G1B1V1N2Y1L1Qzu2SyC0DyD0E0E0BtC0FtG0D0AtB0DtGzyyDyE0BtGtDyCzytBtGyCzz0DyEtAyDyC0DtByCyEtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDtDyB0B0DyD0EtDtGyE0FyB0EtG0BtB0F0DtG0E0Fzz0CtGyCyC0E0CtD0F0DyC0E0BtDyD2Q&cr=672036477&ir=
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=8ccd0e63-3eb9-2a7d-9fad-3f6d0a81746d&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=10/02/2014&type=hp1000
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=8ccd0e63-3eb9-2a7d-9fad-3f6d0a81746d&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=10/02/2014&type=hp1000
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: (no name) - {01F29AE5-D48D-417B-9D00-8A115C23A0EB} - C:\Users\Name\AppData\LocalLow\SYSTEM~1\bho.dll
O2 - BHO: Bizzybolt - {13070af0-bc6c-4185-8baa-40a4cf05b323} - C:\Program Files (x86)\Bizzybolt\Bizzyboltbho.dll
O2 - BHO: melondrea - {16f059cb-3d3f-4ecc-b426-bafa47233676} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: ShopperProBHO - {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} - C:\ProgramData\ShopperPro\ShopperPro.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {e5d4f4fd-a039-4670-8354-633c30a5f54e} - (no file)
O3 - Toolbar: (no name) - {3444c3c5-6c56-4a16-a453-832b05bf6ea4} - (no file)
O3 - Toolbar: (no name) - {1FAFD711-ABF9-4F6A-8130-5166C7371427} - (no file)
O3 - Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - (no file)
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\RunOnce: [upfst_de_27.exe] C:\Users\Name\AppData\Local\fst_de_27\upfst_de_27.exe -runonce
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Name\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [RGSC] C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
O9 - Extra button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - (no file)
O9 - Extra 'Tools' menuitem: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - (no file)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: hxxp://*.aeriagames.com
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} (Battlefield Heroes Updater) - hxxp://www.battlefieldheroes.com/static/updater/BFHUpdater_5.0.203.0.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira Planer (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Echtzeit-Scanner (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: Google Update-Dienst (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-Dienst (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Handle Service (HandleService) - Handle - C:\Users\Name\AppData\Roaming\Win System\handle.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService..