|
Log-Analyse und Auswertung: Windows Fehlermeldung bat=exeWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
17.08.2014, 13:13 | #16 |
/// Selecta Jahrusso | Windows Fehlermeldung bat=exe Hy. Die Fehlermeldung kommt direkt nach dem Einloggen und sicher nur in einem Nutzeraccount ? Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter Task: {03E41FA7-1155-4FE8-9D09-4D12C36A2CD5} - \BitGuard No Task File <==== ATTENTION Task: {8D0AF272-9BBF-4701-A9A0-34AE1530BA33} - \rcvfrdna No Task File <==== ATTENTION Task: {8E8057CE-0E89-4D5E-941A-8D6CF2D9396C} - \oxhyhqy No Task File <==== ATTENTION Task: {90517AA0-0BFC-4026-B3EF-5E58A40EB93C} - \dajiwe No Task File <==== ATTENTION Task: {942AF872-4E53-45C9-A77F-C1AD18F68A1B} - \fdumefum No Task File <==== ATTENTION Task: {9EF6E7EE-AA06-4AD4-B00A-6E7415B67A05} - \gnmfmmt No Task File <==== ATTENTION Task: {9FC21936-705E-4D0B-9B1F-60B5E1E0E588} - \irlwh No Task File <==== ATTENTION Task: {A342BA7A-9144-4D6B-9806-8D7D6A7FF00A} - \{D5F4D3D2-F7AB-4E29-BDF2-CA42AF8AADDB} No Task File <==== ATTENTION Task: {A5752C6B-7901-4D03-8AFC-9F00230BFF9B} - \rvhko No Task File <==== ATTENTION Task: {AB444443-6422-4CB3-9A37-4F97E2472BC5} - \kfcqncyd No Task File <==== ATTENTION Task: {B314BE82-D5EA-4F2A-9931-7207B2DBF300} - \ruydhkvz No Task File <==== ATTENTION Task: {B319B151-FFAB-4232-8E74-928FDA780973} - \lsfeky No Task File <==== ATTENTION Task: {B413219E-9C63-41F1-9E8A-8D517DDBC62E} - \dohpaqa No Task File <==== ATTENTION Task: {BDDFCB49-F84F-4AAC-AC51-4419190BEC70} - \ylditnyd No Task File <==== ATTENTION Task: {C4C11E4D-4D86-43BC-896A-EA972BB443D8} - \fayzsseg No Task File <==== ATTENTION Task: {CE0A2E2E-6E73-483A-9DCD-F20B1F5635B1} - \knquxdg No Task File <==== ATTENTION Task: {D0A97EC6-9CBB-41D1-8F41-9081C01B4F3B} - \xacmpz No Task File <==== ATTENTION Task: {D56C5C18-4F13-43C4-A237-E7B4D3589BAE} - \qknxrupy No Task File <==== ATTENTION Task: {D60205E9-20D7-4138-9590-10A92060003A} - \yrcxbb No Task File <==== ATTENTION Task: {D8A3D161-F4C4-4525-B938-563C64F93667} - \jdauq No Task File <==== ATTENTION Task: {DDA12045-93E4-48DB-9642-26D1689EB936} - \xjtepae No Task File <==== ATTENTION Task: {E4AB6C8D-9ACA-4078-9B5B-BE11B50CB77F} - \sgtesqep No Task File <==== ATTENTION Task: {E53012E1-13AF-4E66-ACDD-0FD85E3E4960} - \fltdkcjq No Task File <==== ATTENTION Task: {F1FC1A22-DD4E-4334-A266-7DE71C084F2E} - \abbopjlw No Task File <==== ATTENTION Task: {F6CDBAAB-D6E8-4847-8B57-3976D07C3ECD} - \bxmigtp No Task File <==== ATTENTION Task: {FA30C484-072F-4411-81AA-1F6D59F81D24} - \ycoakwis No Task File <==== ATTENTION Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
ESET Online Scanner
__________________ mfg, Daniel ASAP & UNITE Member Alliance of Security Analysis Professionals Unified Network of Instructors and Trusted Eliminators Lerne, zurück zu schlagen und unterstütze uns! TB Akademie |
17.08.2014, 19:03 | #17 |
| Windows Fehlermeldung bat=exe Ja, direkt nach dem ich mich angemeldet habe. Mit einem anderen Account habe ich es noch nicht probiert.
__________________Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-08-2014 04 Ran by Stephanie at 2014-08-17 17:53:25 Run:2 Running from C:\Users\Stephanie\Desktop\FRST Boot Mode: Normal ============================================== Content of fixlist: ***************** Task: {03E41FA7-1155-4FE8-9D09-4D12C36A2CD5} - \BitGuard No Task File <==== ATTENTION Task: {8D0AF272-9BBF-4701-A9A0-34AE1530BA33} - \rcvfrdna No Task File <==== ATTENTION Task: {8E8057CE-0E89-4D5E-941A-8D6CF2D9396C} - \oxhyhqy No Task File <==== ATTENTION Task: {90517AA0-0BFC-4026-B3EF-5E58A40EB93C} - \dajiwe No Task File <==== ATTENTION Task: {942AF872-4E53-45C9-A77F-C1AD18F68A1B} - \fdumefum No Task File <==== ATTENTION Task: {9EF6E7EE-AA06-4AD4-B00A-6E7415B67A05} - \gnmfmmt No Task File <==== ATTENTION Task: {9FC21936-705E-4D0B-9B1F-60B5E1E0E588} - \irlwh No Task File <==== ATTENTION Task: {A342BA7A-9144-4D6B-9806-8D7D6A7FF00A} - \{D5F4D3D2-F7AB-4E29-BDF2-CA42AF8AADDB} No Task File <==== ATTENTION Task: {A5752C6B-7901-4D03-8AFC-9F00230BFF9B} - \rvhko No Task File <==== ATTENTION Task: {AB444443-6422-4CB3-9A37-4F97E2472BC5} - \kfcqncyd No Task File <==== ATTENTION Task: {B314BE82-D5EA-4F2A-9931-7207B2DBF300} - \ruydhkvz No Task File <==== ATTENTION Task: {B319B151-FFAB-4232-8E74-928FDA780973} - \lsfeky No Task File <==== ATTENTION Task: {B413219E-9C63-41F1-9E8A-8D517DDBC62E} - \dohpaqa No Task File <==== ATTENTION Task: {BDDFCB49-F84F-4AAC-AC51-4419190BEC70} - \ylditnyd No Task File <==== ATTENTION Task: {C4C11E4D-4D86-43BC-896A-EA972BB443D8} - \fayzsseg No Task File <==== ATTENTION Task: {CE0A2E2E-6E73-483A-9DCD-F20B1F5635B1} - \knquxdg No Task File <==== ATTENTION Task: {D0A97EC6-9CBB-41D1-8F41-9081C01B4F3B} - \xacmpz No Task File <==== ATTENTION Task: {D56C5C18-4F13-43C4-A237-E7B4D3589BAE} - \qknxrupy No Task File <==== ATTENTION Task: {D60205E9-20D7-4138-9590-10A92060003A} - \yrcxbb No Task File <==== ATTENTION Task: {D8A3D161-F4C4-4525-B938-563C64F93667} - \jdauq No Task File <==== ATTENTION Task: {DDA12045-93E4-48DB-9642-26D1689EB936} - \xjtepae No Task File <==== ATTENTION Task: {E4AB6C8D-9ACA-4078-9B5B-BE11B50CB77F} - \sgtesqep No Task File <==== ATTENTION Task: {E53012E1-13AF-4E66-ACDD-0FD85E3E4960} - \fltdkcjq No Task File <==== ATTENTION Task: {F1FC1A22-DD4E-4334-A266-7DE71C084F2E} - \abbopjlw No Task File <==== ATTENTION Task: {F6CDBAAB-D6E8-4847-8B57-3976D07C3ECD} - \bxmigtp No Task File <==== ATTENTION Task: {FA30C484-072F-4411-81AA-1F6D59F81D24} - \ycoakwis No Task File <==== ATTENTION ***************** "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{03E41FA7-1155-4FE8-9D09-4D12C36A2CD5}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{03E41FA7-1155-4FE8-9D09-4D12C36A2CD5}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BitGuard" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{8D0AF272-9BBF-4701-A9A0-34AE1530BA33}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8D0AF272-9BBF-4701-A9A0-34AE1530BA33}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\rcvfrdna" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{8E8057CE-0E89-4D5E-941A-8D6CF2D9396C}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8E8057CE-0E89-4D5E-941A-8D6CF2D9396C}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\oxhyhqy" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{90517AA0-0BFC-4026-B3EF-5E58A40EB93C}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{90517AA0-0BFC-4026-B3EF-5E58A40EB93C}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\dajiwe" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{942AF872-4E53-45C9-A77F-C1AD18F68A1B}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{942AF872-4E53-45C9-A77F-C1AD18F68A1B}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\fdumefum" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9EF6E7EE-AA06-4AD4-B00A-6E7415B67A05}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9EF6E7EE-AA06-4AD4-B00A-6E7415B67A05}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\gnmfmmt" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9FC21936-705E-4D0B-9B1F-60B5E1E0E588}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9FC21936-705E-4D0B-9B1F-60B5E1E0E588}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\irlwh" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A342BA7A-9144-4D6B-9806-8D7D6A7FF00A}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A342BA7A-9144-4D6B-9806-8D7D6A7FF00A}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{D5F4D3D2-F7AB-4E29-BDF2-CA42AF8AADDB}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A5752C6B-7901-4D03-8AFC-9F00230BFF9B}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A5752C6B-7901-4D03-8AFC-9F00230BFF9B}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\rvhko" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{AB444443-6422-4CB3-9A37-4F97E2472BC5}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AB444443-6422-4CB3-9A37-4F97E2472BC5}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\kfcqncyd" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B314BE82-D5EA-4F2A-9931-7207B2DBF300}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B314BE82-D5EA-4F2A-9931-7207B2DBF300}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ruydhkvz" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B319B151-FFAB-4232-8E74-928FDA780973}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B319B151-FFAB-4232-8E74-928FDA780973}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\lsfeky" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B413219E-9C63-41F1-9E8A-8D517DDBC62E}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B413219E-9C63-41F1-9E8A-8D517DDBC62E}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\dohpaqa" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{BDDFCB49-F84F-4AAC-AC51-4419190BEC70}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BDDFCB49-F84F-4AAC-AC51-4419190BEC70}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ylditnyd" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C4C11E4D-4D86-43BC-896A-EA972BB443D8}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C4C11E4D-4D86-43BC-896A-EA972BB443D8}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\fayzsseg" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CE0A2E2E-6E73-483A-9DCD-F20B1F5635B1}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CE0A2E2E-6E73-483A-9DCD-F20B1F5635B1}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\knquxdg" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D0A97EC6-9CBB-41D1-8F41-9081C01B4F3B}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D0A97EC6-9CBB-41D1-8F41-9081C01B4F3B}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\xacmpz" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D56C5C18-4F13-43C4-A237-E7B4D3589BAE}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D56C5C18-4F13-43C4-A237-E7B4D3589BAE}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\qknxrupy" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D60205E9-20D7-4138-9590-10A92060003A}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D60205E9-20D7-4138-9590-10A92060003A}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\yrcxbb" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D8A3D161-F4C4-4525-B938-563C64F93667}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D8A3D161-F4C4-4525-B938-563C64F93667}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\jdauq" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DDA12045-93E4-48DB-9642-26D1689EB936}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DDA12045-93E4-48DB-9642-26D1689EB936}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\xjtepae" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E4AB6C8D-9ACA-4078-9B5B-BE11B50CB77F}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E4AB6C8D-9ACA-4078-9B5B-BE11B50CB77F}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\sgtesqep" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E53012E1-13AF-4E66-ACDD-0FD85E3E4960}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E53012E1-13AF-4E66-ACDD-0FD85E3E4960}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\fltdkcjq" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F1FC1A22-DD4E-4334-A266-7DE71C084F2E}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F1FC1A22-DD4E-4334-A266-7DE71C084F2E}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\abbopjlw" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F6CDBAAB-D6E8-4847-8B57-3976D07C3ECD}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F6CDBAAB-D6E8-4847-8B57-3976D07C3ECD}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\bxmigtp" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{FA30C484-072F-4411-81AA-1F6D59F81D24}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FA30C484-072F-4411-81AA-1F6D59F81D24}" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ycoakwis" => Key deleted successfully. ==== End of Fixlog ==== ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7623 # api_version=3.0.2 # EOSSerial=85eabb386fb787448fc4a4752ed91b3f # engine=19700 # end=finished # remove_checked=true # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2014-08-17 05:55:14 # local_time=2014-08-17 07:55:14 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1031 # osver=6.2.9200 NT # compatibility_mode_1='avast! Antivirus' # compatibility_mode=783 16777213 100 95 26160 3218410 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776574 100 82 2277768 12681635 0 0 # scanned=261598 # found=40 # cleaned=39 # scan_time=6512 sh=5F0546EC86F3E27F0EEC4D5D5451EDC630907654 ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung" ac=I fn="C:\Users\All Users\InstallMate\{9D31E915-0403-4296-A07D-4C2146D2CBE3}\Custom.dll" sh=1DBF1556C82A78CA45882E66DD83C0A977BF8D23 ft=1 fh=328989ef9803066c vn="Win32/Thinknice.B evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterface32.dll.vir" sh=C5883F4245AE2C0515FB1D04A08FD82885B06398 ft=1 fh=8d649859311d4519 vn="Win64/Thinknice.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterface64.dll.vir" sh=EA186A56E0445AF8E5F382F56F42F91682CFED3B ft=1 fh=875c743a5b727b00 vn="Win32/ELEX.AR evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\RSHP.exe.vir" sh=9E90A050EB0BB1CEAB5633BCE404E5D5BC307647 ft=1 fh=2563181150dc44ea vn="Win32/Thinknice.D evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SearchProtect32.dll.vir" sh=16CF5D6E11C0F55548A67B8B5D04FA3460C76A2D ft=1 fh=7418003a088e68c3 vn="Win64/Thinknice.B evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SearchProtect64.dll.vir" sh=C03584BE4ED7835858158D1C38D6B08317E2FC82 ft=1 fh=a96a1125b953bd6a vn="Win32/Thinknice.C evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SpAPPSv32.dll.vir" sh=67642DACDC22ED45AF7947E4F47B1B8463E4162C ft=1 fh=b08cc40f36e9035a vn="Win64/Thinknice.C evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SpAPPSv64.dll.vir" sh=9042385F0336C5429FCD45FC347CC29A9BC06BB0 ft=1 fh=a7a426d7c77c80fb vn="Win32/Thinknice.B evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SupTab.dll.vir" sh=047278064AE6E38562E451DB2EF510B40FE490E9 ft=1 fh=8f3c8e5d217e8008 vn="Variante von Win32/BrowseFox.H evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\ToggleMark\bin\utilToggleMark.exe.vir" sh=6A6306759D43398B2503CDC5AA416E285906B6FF ft=1 fh=bf2584f58f554c8f vn="Win32/ExpressDownloader.I evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\YourFileDownloader\Downloader.exe.vir" sh=246DDBC3A2C223A6B9072637D93DC2A2832D097A ft=1 fh=c71c0011b04f613a vn="Win32/Toolbar.Babylon.Y evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\DSearchLink\DSearchLink.exe.vir" sh=58082C6FD69B624C913A4F5B4F0E1641EAAB2C6F ft=1 fh=311ff3fd5f86bccf vn="Variante von Win32/ELEX.AV evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\IePluginServices\PluginService.exe.vir" sh=140F1BA4DD591202E50DEA5DE4EF46612C059BD0 ft=1 fh=906b6d7a397ba4c9 vn="Variante von MSIL/Adware.PullUpdate.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\InternetUpdater\InternetUpdaterService.exe.vir" sh=43C6D701DDD5C1F05669C18ED0277B055BD03F87 ft=1 fh=e06d3aa74e7cd947 vn="Win32/Packed.ScrambleWrapper.M evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Stephanie\AppData\Local\DownloadGuide\Offers\plus-hd-8-8.exe.vir" sh=95D1E596ACC1912879100C54027750C1772027C7 ft=1 fh=212faf0536ad9d68 vn="Win32/BrowseFox.C evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Stephanie\AppData\Local\DownloadGuide\Offers\ResultsAlphaSetup.exe.vir" sh=76039D5A64EF897B1AA388EED70452774019DB59 ft=1 fh=890f56b03e669e11 vn="Win32/Somoto.D evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Stephanie\AppData\Local\FilesFrog Update Checker\update_checker.exe.vir" sh=4F1198EAE621CD597250A2A074AC09BBDFC4F59F ft=1 fh=81ea31f780d9a20f vn="Win32/Systweak.G evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Stephanie\AppData\Roaming\Systweak\ssd\SSDPTstub.exe.vir" sh=972DB9071C719922142BE77CF935C208B66F8DE2 ft=1 fh=c50a95d882970223 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\STEPHA~1\AppData\Local\Temp\OCS\ocs_v71b.exe.vir" sh=5EAB7E29EC58BB4A918F91FE86416DC04B479704 ft=1 fh=7e05237fd12ae975 vn="Variante von Win32/OpenCandy.A potenziell unsichere Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\STEPHA~1\AppData\Local\Temp\OCS\Downloads\fc14996dfa99adfc7baae624196888c5\cb6c174a44aacdea19246564b93bda7c\FreeV ideoToiPadConverter5.0.44.623.exe.vir" sh=5F0546EC86F3E27F0EEC4D5D5451EDC630907654 ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\ProgramData\InstallMate\{9D31E915-0403-4296-A07D-4C2146D2CBE3}\Custom.dll" sh=7F6FABD3A425BD65A7894EBE9E2DAC5D03142E93 ft=1 fh=ab95a6e5f54531f8 vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Stephanie\AppData\Local\Google\Chrome\User Data\Default\File System\002\t\00\00000000" sh=4DDDD2F47406631646B52BBBB01688CD492596E0 ft=1 fh=c09bf2720f9812ac vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Stephanie\AppData\Local\Google\Chrome\User Data\Default\File System\002\t\00\00000001" sh=66A17E384DE010588B617C09CD15BA30BEA9158C ft=1 fh=2c18ed788a7b442a vn="Win32/Somoto.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Stephanie\AppData\Local\Microsoft\Windows\INetCache\IE\6PXB7VCQ\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate[1].exe" sh=247AA1A2895A677D12E4CB35DDCFD9E7CF649760 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Stephanie\AppData\Local\Microsoft\Windows\INetCache\IE\DCC7BJQ9\91[1].js" sh=08A0F0FDF49B86F8FD0547594BDC3F7455330836 ft=1 fh=e3ad9ceca28a6528 vn="MSIL/MyPCBackup.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Stephanie\AppData\Local\Temp\BackupSetup.exe" sh=429A06E35E5022155C5CAEB4480FB1ECF95C02E2 ft=1 fh=d8b19b57fd58d079 vn="Win32/OpenCandy potenziell unsichere Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Stephanie\AppData\Local\Temp\FreemakeVideoConverter_4.1.3.7.exe" sh=429A06E35E5022155C5CAEB4480FB1ECF95C02E2 ft=1 fh=d8b19b57fd58d079 vn="Win32/OpenCandy potenziell unsichere Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Stephanie\AppData\Local\Temp\FreemakeVideoConverter_4.1.3.7.exe_1" sh=F0C673C92AD5896CB68B0379CA617351BDCA6CAC ft=1 fh=c6b14c25722869b6 vn="Mehrere Bedrohungen (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Stephanie\AppData\Local\Temp\optprosetup.exe" sh=8CCF6341AF198CBC5454BB4E67B631C95BF68D22 ft=1 fh=75f1b2e13262d59c vn="Win32/OpenCandy potenziell unsichere Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Stephanie\AppData\Local\Temp\tmpC857.exe" sh=3BA7315F81D0026EC9506E8B9D34596762ACF6DB ft=1 fh=78e6d2ce703e9697 vn="Win32/BrowseFox.C evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Stephanie\AppData\Local\Temp\toolbar181817859.exe" sh=4AB25DA7D0604FAA22C9F20EE7659F59C8BB3E72 ft=1 fh=c03c470736c3b335 vn="Win32/AdWare.AddLyrics.AZ Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Stephanie\AppData\Local\Temp\66253f31-f4d8-476d-b55a-2d3fdcee03d2\software\2040-2082_Re-markit.exe" sh=1A9C2CE8C1F539AC8546D67C9F924AEA8D2A84C2 ft=1 fh=d348c3328e970e39 vn="Win32/MyPCBackup.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Stephanie\AppData\Local\Temp\66253f31-f4d8-476d-b55a-2d3fdcee03d2\software\Cloud_Backup_Setup.exe" sh=142CB40541942FFCDBD71639E4A9D4EC53969186 ft=1 fh=895b17abff6eb58d vn="Variante von Win32/AdWare.SpeedingUpMyPC.N Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Stephanie\AppData\Local\Temp\66253f31-f4d8-476d-b55a-2d3fdcee03d2\software\OptimizerPro.exe" sh=3AFC711BBAD2EE52D0AF859F9A1381E28A10D43C ft=1 fh=4a5edd40c9b4cb6c vn="Win32/AdWare.EoRezo.AW Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Stephanie\AppData\Local\Temp\is-6H161.tmp\package_togglemark_installer_multilang.exe" sh=F5FD2CE212179E61CC087C0E7AA98FC0041D75E3 ft=1 fh=474908941fe401e0 vn="Win32/AdWare.EoRezo.AW Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Stephanie\AppData\Local\Temp\is-CCJ13.tmp\package_tuto4pc_installer_multilang.exe" sh=13DF82DC49D95B69F099FC0C35CE2D38E81336E8 ft=1 fh=9bae039b14faa5ed vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Stephanie\Desktop\Zeug\Spiele\Minecraft - alles\Minecraft\wrar_4.10beta4.exe.exe" sh=7F886D3A63F6E4562EAB662FF64F1038A6C9AB2C ft=1 fh=a8132e67bd4afc01 vn="Win32/WinloadSDA.E evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Stephanie\Downloads\Die-Sims-3---Einfach-tierisch-lnstall.exe" sh=E97A979585BACDE8BD15559E9BC33F5708486572 ft=1 fh=1391cd3cdfbeff16 vn="Variante von Win32/OpenCandy.A potenziell unsichere Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Stephanie\Downloads\FreeYouTubeToMP3Converter-3.12.41.623.exe" sh=21B5055FF8772D10E5E86D52E0E2D4D38B068DE8 ft=1 fh=5c84e9530bff4dff vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Stephanie\Downloads\Windows Media Player - CHIP-Installer.exe" |
18.08.2014, 16:24 | #18 | ||
/// Selecta Jahrusso | Windows Fehlermeldung bat=exe Hach, Anweisungen lesen kann so schwer sein
__________________Zitat:
Zitat:
Hast du nur diesen einen Account ?
__________________ |
18.08.2014, 16:35 | #19 |
| Windows Fehlermeldung bat=exe Nein, es ist weg! Vielen Dank! |
18.08.2014, 16:50 | #20 |
/// Selecta Jahrusso | Windows Fehlermeldung bat=exe Den Schritt mit Combofix ignorieren. Lösche bitte einfach die Dateien aus deinem Downloadverzeichnis. Die Reihenfolge ist hier entscheidend.
Als Hinweis, achte darauf was du von wo herunter ladest. Du hattest mehr Adware am System als alles andere. Downloader von Chip, Softtonic etc sind mittlerweile absolutes NoGo. Lieber von der Herstellerseite herunter laden und keine Klick,Klick,Klick Installationen sondern ggf lesen, was alles mitinstalliert werden möchte.
__________________ mfg, Daniel ASAP & UNITE Member Alliance of Security Analysis Professionals Unified Network of Instructors and Trusted Eliminators Lerne, zurück zu schlagen und unterstütze uns! TB Akademie |
01.09.2014, 14:08 | #21 |
| Windows Fehlermeldung bat=exe Hallo, ich bräuchte nochmal Hilfe. Plus-hd-9.1 ist es diesmal. Kann mir jemand helfen? LG! |
01.09.2014, 15:22 | #22 |
/// Selecta Jahrusso | Windows Fehlermeldung bat=exe Bitte erstelle ein neues Thema
__________________ mfg, Daniel ASAP & UNITE Member Alliance of Security Analysis Professionals Unified Network of Instructors and Trusted Eliminators Lerne, zurück zu schlagen und unterstütze uns! TB Akademie |