| |
| |||||||
Log-Analyse und Auswertung: Firefox ist langsam und lädt ungefragt in Sekundenschnelle 100 bis 200 neue Tabs, Win 7Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
| |
20.08.2014, 08:35
| #1 |
| /// TB-Ausbilder   |  Firefox ist langsam und lädt ungefragt in Sekundenschnelle 100 bis 200 neue Tabs, Win 7 Servus, AdwCleaner und MBAM nochmal ausführen, dann nochmal FRST bitte. Schritt 1 Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Schritt 2 Downloade Dir bitte  Malwarebytes Anti-Malware
Schritt 3
Bitte poste mit deiner nächsten Antwort
|
|
20.08.2014, 11:34
| #2 |
| | Firefox ist langsam und lädt ungefragt in Sekundenschnelle 100 bis 200 neue Tabs, Win 7 Hallole, ich hab alles so gemacht. Hier die Logdateien.AdwCleaner Logfile:
__________________Code:
ATTFilter # AdwCleaner v3.307 - Bericht erstellt am 20/08/2014 um 12:03:47
# Aktualisiert 17/08/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : administrator - REZEPTION
# Gestartet von : C:\Users\administrator.UNSELD\Downloads\adwcleaner_3.307.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17239
-\\ Mozilla Firefox v31.0 (x86 de)
*************************
AdwCleaner[R0].txt - [9239 octets] - [18/08/2014 10:07:29]
AdwCleaner[R1].txt - [9327 octets] - [18/08/2014 10:10:01]
AdwCleaner[R2].txt - [1006 octets] - [18/08/2014 13:39:08]
AdwCleaner[R3].txt - [1066 octets] - [20/08/2014 12:01:02]
AdwCleaner[S0].txt - [380 octets] - [18/08/2014 10:08:49]
AdwCleaner[S1].txt - [6713 octets] - [18/08/2014 10:10:45]
AdwCleaner[S2].txt - [989 octets] - [20/08/2014 12:03:47]
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1048 octets] ##########
Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 20.08.2014 Suchlauf-Zeit: 12:08:02 Logdatei: mbam2.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.08.20.03 Rootkit Datenbank: v2014.08.16.01 Lizenz: Testversion Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Self-protection: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: administrator Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 376281 Verstrichene Zeit: 7 Min, 18 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 0 (No malicious items detected) Registrierungsdaten: 0 (No malicious items detected) Ordner: 0 (No malicious items detected) Dateien: 0 (No malicious items detected) Physische Sektoren: 0 (No malicious items detected) (end) Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-08-2014 04 Ran by administrator at 2014-08-20 12:19:06 Running from C:\Users\administrator.UNSELD\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 64 Bit HP CIO Components Installer (Version: 17.2.1 - Hewlett-Packard) Hidden 7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - ) Adobe Reader XI (11.0.08) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated) Avira Professional Security (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.6.552 - Avira) Browser Guard (HKLM-x32\...\Browser Guard) (Version: - ) Daisy (HKLM-x32\...\{5A628D5E-C03C-4AB4-963E-E67AF46FAB2C}) (Version: 13.07.23 - DAISY Akademie + Verlag GmbH) DBSWIN (C:\Program Files (x86)\Duerr\DBSWIN) (HKLM-x32\...\DBSWIN) (Version: 5.4.0 Build 10978 - DUERR DENTAL AG) Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{2A07A3D4-F6CA-4EEB-9576-3A6AC8A736CE}) (Version: - Microsoft) Duerr Dental Driver Setup (HKLM-x32\...\VCamDigital) (Version: - DUERR DENTAL AG) Foxy Secure (HKLM-x32\...\Foxy Secure) (Version: 6 - ) GCR5500 Healthcare Terminal & CT-API (HKLM\...\{80172F79-E596-4087-B3FF-A79D02264500}) (Version: 1.0.0 - Gemalto) GOZ INFORM 2012 Version 1.10 (HKLM-x32\...\GOZ INFORM 2012_is1) (Version: - Landeszahnärztekammer Baden-Württemberg) HiJackThis (HKLM-x32\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro) InetStat (HKCU\...\InetStat) (Version: 0.5b - InetStat) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation) Intel(R) Network Connections 19.0.27.1 (HKLM\...\PROSetDX) (Version: 19.0.27.1 - Intel) Intel(R) Network Connections 19.0.27.1 (Version: 19.0.27.1 - Intel) Hidden Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.18.10.3204 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.0.2.1000 - Intel Corporation) Intel(R) Rapid Storage Technology (Version: 13.0.2.1000 - Intel Corporation) Hidden Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.19 - Intel Corporation) Intel® Trusted Connect Service Client (Version: 1.31.8.1 - Intel Corporation) Hidden KZBV – DPF – Aktualisierung 2.9.0 (28.03.2014) (HKLM-x32\...\DPF_is1) (Version: - KZBV) LZK Praxishandbuch CD 2011 - Update 4 Version 6.04 (HKLM-x32\...\LZK Praxishandbuch CD 2011 - Update 4_is1) (Version: 6.04 - Landeszahnärztekammer Baden-Württemberg) Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Office 32-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Single Image 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106 - Microsoft Corporation) Hidden MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek) Mozilla Firefox 31.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 de)) (Version: 31.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.0 - Mozilla) Mozilla Thunderbird 31.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.0 (x86 de)) (Version: 31.0 - Mozilla) OXFORD OXPCIe952 Serial/Parallel PCIe Card (HKLM-x32\...\OXFORD OXPCIe952 Serial/Parallel PCIe Card) (Version: 1.0.2010.06 - ) Protegere (HKLM-x32\...\Protegere) (Version: - ) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7161 - Realtek Semiconductor Corp.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden Update for Microsoft Access 2010 (KB2553446) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{FEF4C57D-0975-4D3C-ACC7-DCD038C3788F}) (Version: - Microsoft) Update for Microsoft Excel 2010 (KB2837600) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{17815BC8-062D-49BE-B40C-B54149C85CE3}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{84B191B5-5319-463A-A305-8C4D53B1D20A}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817369) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{DB0B0CDF-77EC-47B0-94E2-4738573A1E58}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{79C725A1-3964-421C-A528-78C1C083C7C7}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{95BE5D45-A3DD-4CB1-8C35-D75DD7B4D862}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.SingleImage_{95BE5D45-A3DD-4CB1-8C35-D75DD7B4D862}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{EBD18DE5-BC84-4B57-9A30-097044871F9A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{4AD36582-256B-433D-8593-F31773A15CA4}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.SingleImage_{4AD36582-256B-433D-8593-F31773A15CA4}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2687502) 64-Bit Edition (HKLM\...\{90140000-001F-0409-1000-0000000FF1CE}_Office14.SingleImage_{B114A387-8A14-4C43-AE51-82F17EB81D49}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{F216169C-2B40-429B-8370-B5BA06EC5423}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.SingleImage_{F216169C-2B40-429B-8370-B5BA06EC5423}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{07DC9C6C-E916-4F42-8677-716930ED0393}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825635) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{6E760BBA-B83F-4C2D-918F-5F91EF6C9861}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2837581) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{D1F3B526-7EB2-4701-92DB-0784988D78DE}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2837606) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{52BEF8AE-9324-40A1-9A92-E5A8FB63A475}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878252) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{56551B9F-2FE1-4705-ACF0-8FA920535E18}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878252) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.SingleImage_{56551B9F-2FE1-4705-ACF0-8FA920535E18}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 64-Bit Edition (HKLM\...\{90140000-001F-0407-1000-0000000FF1CE}_Office14.SingleImage_{8F699D53-05FB-488E-B7D3-E4E47257BE5D}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 64-Bit Edition (HKLM\...\{90140000-001F-040C-1000-0000000FF1CE}_Office14.SingleImage_{4B9B2BAF-EE1F-4B60-A4D9-17B7BEEB13A1}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 64-Bit Edition (HKLM\...\{90140000-001F-0410-1000-0000000FF1CE}_Office14.SingleImage_{B2508D75-61CF-4CC0-84C0-CF257219201D}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{3029C408-1DD1-4273-8E58-87CB1B638FC8}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.SingleImage_{3029C408-1DD1-4273-8E58-87CB1B638FC8}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 64-Bit Edition (HKLM\...\{90140000-001A-0407-1000-0000000FF1CE}_Office14.SingleImage_{6164E0E5-C903-488C-93AF-1B7AF7EBC331}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{DDDC32A5-9528-4771-B91A-97A8E1D7957B}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 64-Bit Edition (HKLM\...\{90140000-0018-0407-1000-0000000FF1CE}_Office14.SingleImage_{FD360122-6829-4497-97C1-1BF578EF695B}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{A20A650C-F820-4CE4-AEA5-EC140192FAFB}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.SingleImage_{77374F16-2DC6-4EEF-AFAD-C59FDA2E010D}) (Version: - Microsoft) Update for Microsoft Visio 2010 (KB2880526) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{F6F342A1-530B-4D48-A468-1E3F70928984}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2837587) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{C950A55F-82E3-4CC8-8FA2-E8A2A0F651F3}) (Version: - Microsoft) Update for Microsoft Word 2010 (KB2880529) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{89FDC8D9-FB84-4EFE-950D-AF4EECC3B64C}) (Version: - Microsoft) VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden VistaEasy (HKLM-x32\...\VScan) (Version: 5.4.0 Build 10978 - DUERR DENTAL AG) Yahoo Community Smartbar Engine (HKCU\...\{6691c2d9-019d-46af-974a-2e4853553bb2}) (Version: 11.88.66.18547 - Linkury Inc.) <==== ATTENTION ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 15-08-2014 07:30:57 Avira Professional Security - 15.08.2014 09:30 15-08-2014 10:44:47 Installiert Daisy 16-08-2014 12:48:39 Installed HiJackThis 18-08-2014 14:47:31 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {F8E86675-D7C4-4D02-866C-8B916FF98502} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Ghost Resign Task => c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\HPResignFileLoader.exe ==================== Loaded Modules (whitelisted) ============= 2014-08-13 16:09 - 2014-08-13 16:09 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (08/20/2014 00:06:39 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/20/2014 07:35:46 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/19/2014 08:33:05 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/19/2014 05:06:30 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/19/2014 07:37:49 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/18/2014 04:52:00 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (08/19/2014 05:05:34 PM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst NlaSvc erreicht. Microsoft Office Sessions: ========================= Error: (08/20/2014 00:06:39 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/20/2014 07:35:46 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/19/2014 08:33:05 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/19/2014 05:06:30 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/19/2014 07:37:49 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (08/18/2014 04:52:00 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 ==================== Memory info =========================== Processor: Intel(R) Core(TM) i3-4130 CPU @ 3.40GHz Percentage of memory in use: 36% Total physical RAM: 4007.57 MB Available physical RAM: 2550.52 MB Total Pagefile: 8013.31 MB Available Pagefile: 6160.3 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:465.54 GB) (Free:411.91 GB) NTFS Drive z: () (Network) (Total:232.69 GB) (Free:197.28 GB) ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: 0697B9C0) Partition: GPT Partition Type. ==================== End Of Log ============================ Gruß und Dank amboss |
|
20.08.2014, 12:04
| #3 |
| /// TB-Ausbilder | Firefox ist langsam und lädt ungefragt in Sekundenschnelle 100 bis 200 neue Tabs, Win 7 Wir entfernen die letzten Reste und kontrollieren nochmal alles. ESET kann länger (> 3 h) dauern.
__________________Im Anschluss entfernen wir alle verwendeten Tools und ich gebe dir noch ein paar Tipps mit auf den Weg. Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start
HKU\S-1-5-21-636688740-476899030-845274342-500\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-636688740-476899030-845274342-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [DisallowRun] 1
BHO-x32: No Name -> {C32F5BF7-6918-4F78-A97A-53CDF7D07C8C} -> C:\Users\administrator.UNSELD\AppData\LocalLow\Internet Explorer BHO\bho.dll ()
C:\Users\administrator.UNSELD\AppData\LocalLow\Internet Explorer BHO\bho.dll
FF Extension: Yahoo Community Smartbar - C:\Users\administrator.UNSELD\AppData\Roaming\Mozilla\Firefox\Profiles\z2aomdfi.default\Extensions\{7c88e6e9-1beb-9589-4a8d-41b6f47ddb97} [2014-08-14]
FF Extension: ST-de3 - C:\Users\administrator.UNSELD\AppData\Roaming\Mozilla\Firefox\Profiles\z2aomdfi.default\Extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065} [2014-08-14]
FF HKLM-x32\...\Firefox\Extensions: [{20d1f7b3-7721-4da0-b6f3-78bb4d7248f4}] - C:\Program Files (x86)\Browser Guard\browserguard.xpi
C:\Program Files (x86)\Browser Guard
C:\Users\administrator.UNSELD\Desktop\fbDownloader.lnk
C:\Users\administrator.UNSELD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\fbDownloader
C:\Users\administrator.UNSELD\AppData\Roaming\Sixth
C:\Users\administrator.UNSELD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InetStat
C:\Users\administrator.UNSELD\AppData\Roaming\InetStat
C:\Users\administrator.UNSELD\AppData\Roaming\BupSystem
C:\Users\administrator.UNSELD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
C:\Users\administrator.UNSELD\AppData\Roaming\Security System 2
C:\Users\administrator.UNSELD\AppData\Roaming\Hub Timer
EmptyTemp:
end
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 ESET Online Scanner
Schritt 3 Downloade Dir bitte  SecurityCheck und:
Schritt 4 Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop: SystemLook (32 bit) | SystemLook (64 bit)
Bitte poste mit deiner nächsten Antwort
|
|
20.08.2014, 15:21
| #4 |
| | Firefox ist langsam und lädt ungefragt in Sekundenschnelle 100 bis 200 neue Tabs, Win 7 Hallo, hier die gewünschten files. Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-08-2014 04
Ran by administrator at 2014-08-20 14:59:24 Run:1
Running from C:\Users\administrator.UNSELD\Downloads
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
start
HKU\S-1-5-21-636688740-476899030-845274342-500\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-636688740-476899030-845274342-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [DisallowRun] 1
BHO-x32: No Name -> {C32F5BF7-6918-4F78-A97A-53CDF7D07C8C} -> C:\Users\administrator.UNSELD\AppData\LocalLow\Internet Explorer BHO\bho.dll ()
C:\Users\administrator.UNSELD\AppData\LocalLow\Internet Explorer BHO\bho.dll
FF Extension: Yahoo Community Smartbar - C:\Users\administrator.UNSELD\AppData\Roaming\Mozilla\Firefox\Profiles\z2aomdfi.default\Extensions\{7c88e6e9-1beb-9589-4a8d-41b6f47ddb97} [2014-08-14]
FF Extension: ST-de3 - C:\Users\administrator.UNSELD\AppData\Roaming\Mozilla\Firefox\Profiles\z2aomdfi.default\Extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065} [2014-08-14]
FF HKLM-x32\...\Firefox\Extensions: [{20d1f7b3-7721-4da0-b6f3-78bb4d7248f4}] - C:\Program Files (x86)\Browser Guard\browserguard.xpi
C:\Program Files (x86)\Browser Guard
C:\Users\administrator.UNSELD\Desktop\fbDownloader.lnk
C:\Users\administrator.UNSELD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\fbDownloader
C:\Users\administrator.UNSELD\AppData\Roaming\Sixth
C:\Users\administrator.UNSELD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InetStat
C:\Users\administrator.UNSELD\AppData\Roaming\InetStat
C:\Users\administrator.UNSELD\AppData\Roaming\BupSystem
C:\Users\administrator.UNSELD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
C:\Users\administrator.UNSELD\AppData\Roaming\Security System 2
C:\Users\administrator.UNSELD\AppData\Roaming\Hub Timer
EmptyTemp:
end
*****************
HKU\S-1-5-21-636688740-476899030-845274342-500\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\DisallowRun => value deleted successfully.
HKU\S-1-5-21-636688740-476899030-845274342-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\DisallowRun => value deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C32F5BF7-6918-4F78-A97A-53CDF7D07C8C}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{C32F5BF7-6918-4F78-A97A-53CDF7D07C8C}" => Key deleted successfully.
C:\Users\administrator.UNSELD\AppData\LocalLow\Internet Explorer BHO\bho.dll => Moved successfully.
C:\Users\administrator.UNSELD\AppData\Roaming\Mozilla\Firefox\Profiles\z2aomdfi.default\Extensions\{7c88e6e9-1beb-9589-4a8d-41b6f47ddb97} => Moved successfully.
C:\Users\administrator.UNSELD\AppData\Roaming\Mozilla\Firefox\Profiles\z2aomdfi.default\Extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065} => Moved successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\{20d1f7b3-7721-4da0-b6f3-78bb4d7248f4} => value deleted successfully.
"C:\Program Files (x86)\Browser Guard" => File/Directory not found.
C:\Users\administrator.UNSELD\Desktop\fbDownloader.lnk => Moved successfully.
C:\Users\administrator.UNSELD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\fbDownloader => Moved successfully.
C:\Users\administrator.UNSELD\AppData\Roaming\Sixth => Moved successfully.
C:\Users\administrator.UNSELD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InetStat => Moved successfully.
C:\Users\administrator.UNSELD\AppData\Roaming\InetStat => Moved successfully.
C:\Users\administrator.UNSELD\AppData\Roaming\BupSystem => Moved successfully.
C:\Users\administrator.UNSELD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk => Moved successfully.
C:\Users\administrator.UNSELD\AppData\Roaming\Security System 2 => Moved successfully.
C:\Users\administrator.UNSELD\AppData\Roaming\Hub Timer => Moved successfully.
EmptyTemp: => Removed 3.1 GB temporary data.
The system needed a reboot.
==== End of Fixlog ====
Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=a8a8403d9a17c44da03cb2517e6a1015
# engine=19748
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-08-20 01:49:09
# local_time=2014-08-20 03:49:09 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1802 16775165 100 96 4159 8916429 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 458015 160172399 0 0
# scanned=164567
# found=16
# cleaned=0
# scan_time=1870
sh=FF5A5FBEBD8D2FACE026E4B774AD9DEBCBAB7E13 ft=0 fh=0000000000000000 vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="C:\Firefox 31.0 (x86 de) - 2014-08-14.pcv"
sh=84088344DE0F298E2EB4BCE985E206F31F4B7C49 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Firefox 31.0 (x86 de) - 2014-08-16.pcv"
sh=3EBCD090FB0EB93A5C86C73FCA770F36D24D9A61 ft=1 fh=1b1d59894c0fb9fd vn="Variante von MSIL/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\sppsm.dll.vir"
sh=B8D7D0FD7BB234BCEB03248DD1D3CE1EC4DE6039 ft=1 fh=79d0d01506219bd3 vn="Variante von MSIL/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\spusm.dll.vir"
sh=4EE056C2FA7E24C123229B0F523585E580383990 ft=1 fh=da4562af660f87ff vn="Variante von MSIL/Toolbar.Linkury.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\srbu.dll.vir"
sh=11A16D6D6F7C6D4DD423083EB39FC3E0185CFE28 ft=1 fh=8071463b2ecb883c vn="Variante von MSIL/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\srptc.dll.vir"
sh=502D74A96065A471FAA12E30E85E8DCBAFA3A447 ft=1 fh=aa0497a2b71c6df7 vn="Variante von Win32/RiskWare.Astori.B Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\administrator.UNSELD\AppData\Roaming\InetStat\inetstat.exe"
sh=06224AC6C8287B94BE4DFE2BF5AFFF46C9282A0F ft=1 fh=7a3c734e975eadf9 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\administrator.UNSELD\AppData\Roaming\Mozilla\Firefox\Profiles\z2aomdfi.default\Extensions\{7c88e6e9-1beb-9589-4a8d-41b6f47ddb97}\components\SmartbarFireFoxRemotePlugin_26.dll"
sh=D2C1CD7B9963AEB0EF7196AA893672A25AC4D6BF ft=1 fh=f5804ebde2812853 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\administrator.UNSELD\AppData\Roaming\Mozilla\Firefox\Profiles\z2aomdfi.default\Extensions\{7c88e6e9-1beb-9589-4a8d-41b6f47ddb97}\components\SmartbarFireFoxRemotePlugin_27.dll"
sh=53EF087F26149CA7B8FC648537794C6D62B2E9E5 ft=1 fh=d64f52b151e7ab42 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\administrator.UNSELD\AppData\Roaming\Mozilla\Firefox\Profiles\z2aomdfi.default\Extensions\{7c88e6e9-1beb-9589-4a8d-41b6f47ddb97}\components\SmartbarFireFoxRemotePlugin_28.dll"
sh=0BD0AA22BA51A20B28685D6A2268F1617D9DD9FC ft=1 fh=fe3254499ecc3bc0 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\administrator.UNSELD\AppData\Roaming\Mozilla\Firefox\Profiles\z2aomdfi.default\Extensions\{7c88e6e9-1beb-9589-4a8d-41b6f47ddb97}\components\SmartbarFireFoxRemotePlugin_29.dll"
sh=7989FA7F09D1D16F06DB2F2C880783DF98DD2ECE ft=1 fh=eba9f0269a3db677 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\administrator.UNSELD\AppData\Roaming\Mozilla\Firefox\Profiles\z2aomdfi.default\Extensions\{7c88e6e9-1beb-9589-4a8d-41b6f47ddb97}\components\SmartbarFireFoxRemotePlugin_30.dll"
sh=8593C073B753906B62EED2529FBEA5CA5F3E76FC ft=1 fh=e07fd3c139205cd8 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\administrator.UNSELD\AppData\Roaming\Mozilla\Firefox\Profiles\z2aomdfi.default\Extensions\{7c88e6e9-1beb-9589-4a8d-41b6f47ddb97}\components\SmartbarFireFoxRemotePlugin_31.dll"
sh=AD3EB5C38E33919317F46331E93E669105497F07 ft=1 fh=f28f6a642fe78f79 vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\administrator.UNSELD\AppData\Roaming\Mozilla\Firefox\Profiles\z2aomdfi.default\Extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\ctypes\FirefoxCtype.dll"
sh=545537DD6DF32D4ADCA7CD093735EB727CF3B98E ft=1 fh=c14d1e35487b28c7 vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\administrator.UNSELD\AppData\Roaming\Mozilla\Firefox\Profiles\z2aomdfi.default\Extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\Plugins\npFirefoxPlugin.dll"
sh=8ADAAF7069D7280DAACFA8D0439C855B2ABFF62B ft=0 fh=0000000000000000 vn="Variante von MSIL/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\c856a4.msi"
Code:
ATTFilter Results of screen317's Security Check version 0.99.87 Windows 7 Service Pack 1 x64 (UAC is disabled!) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Adobe Reader XI Mozilla Firefox (31.0) Mozilla Thunderbird (31.0.) ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbam.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe Malwarebytes Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` Code:
ATTFilter SystemLook 30.07.11 by jpshortstuff
Log created at 15:58 on 20/08/2014 by administrator
Administrator - Elevation successful
========== regfind ==========
Searching for "Yahoo Community Smartbar Engine"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6691c2d9-019d-46af-974a-2e4853553bb2}]
"DisplayName"="Yahoo Community Smartbar Engine"
[HKEY_USERS\S-1-5-21-636688740-476899030-845274342-500\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6691c2d9-019d-46af-974a-2e4853553bb2}]
"DisplayName"="Yahoo Community Smartbar Engine"
Searching for "Linkury"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6691c2d9-019d-46af-974a-2e4853553bb2}]
"Publisher"="Linkury Inc."
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-636688740-476899030-845274342-500\Products\BF6F818607268ED48972048E2511F1A2\InstallProperties]
"HelpLink"="hxxp://www.linkury.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-636688740-476899030-845274342-500\Products\BF6F818607268ED48972048E2511F1A2\InstallProperties]
"Publisher"="Linkury Inc."
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-636688740-476899030-845274342-500\Products\BF6F818607268ED48972048E2511F1A2\InstallProperties]
"URLInfoAbout"="hxxp://www.linkury.com/index-8_faq.html"
[HKEY_USERS\S-1-5-21-636688740-476899030-845274342-500\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6691c2d9-019d-46af-974a-2e4853553bb2}]
"Publisher"="Linkury Inc."
Searching for "Sixth"
No data found.
Searching for "Hub Timer"
No data found.
Searching for "fbDownloader"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\administrator.UNSELD\AppData\Roaming\FBDownloader\DotNetCheck.exe"="DotNetCheck"
[HKEY_USERS\S-1-5-21-636688740-476899030-845274342-500\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\administrator.UNSELD\AppData\Roaming\FBDownloader\DotNetCheck.exe"="DotNetCheck"
[HKEY_USERS\S-1-5-21-636688740-476899030-845274342-500_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\administrator.UNSELD\AppData\Roaming\FBDownloader\DotNetCheck.exe"="DotNetCheck"
-= EOF =-
Gruß amboss |
|
20.08.2014, 17:00
| #5 | |
| /// TB-Ausbilder | Firefox ist langsam und lädt ungefragt in Sekundenschnelle 100 bis 200 neue Tabs, Win 7 Servus, nein, es war nicht umsonst. Die Bedrohungen befinden sich zum größten Teil in der Quarantäne und werden mit DelFix (siehe weiter unten) automatisch entfernt. Zitat:
 Reste entfernen Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start
C:\Firefox 31.0 (x86 de)*.pcv
C:\Windows\Installer\c856a4.msi
DeleteKey: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6691c2d9-019d-46af-974a-2e4853553bb2}
Reboot:
end
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Wenn du keine Probleme mehr hast, dann sind wir hier fertig. Deine Logdateien sind sauber.  Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern. Schritt 1 Die Reihenfolge ist hier entscheidend.
Schritt 2 Abschließend habe ich noch ein paar Tipps zur Absicherung deines Systems. Ich kann gar nicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti-Viren-Programm und zusätzlicher Schutz
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden. Mozilla Firefox
Performance
Was du vermeiden solltest:
Nun bleibt mir nur noch dir viel Spaß beim sicheren Surfen zu wünschen... ... und vielleicht möchtest du ja das Trojaner-Board unterstützen? Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann. |
|
20.08.2014, 19:01
| #6 |
| | Firefox ist langsam und lädt ungefragt in Sekundenschnelle 100 bis 200 neue Tabs, Win 7 Hallo und schon mal, falls ich es noch nicht erwähnt hatte, viiiiiielen Dank für die super Hilfe. Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-08-2014 04
Ran by administrator at 2014-08-20 19:53:01 Run:2
Running from C:\Users\administrator.UNSELD\Downloads
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
start
C:\Firefox 31.0 (x86 de)*.pcv
C:\Windows\Installer\c856a4.msi
DeleteKey: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6691c2d9-019d-46af-974a-2e4853553bb2}
Reboot:
end
*****************
C:\Firefox 31.0 (x86 de)*.pcv => Moved successfully.
C:\Windows\Installer\c856a4.msi => Moved successfully.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6691c2d9-019d-46af-974a-2e4853553bb2} => Key deleted successfully.
The system needed a reboot.
==== End of Fixlog ====
Ich mach jetzt noch den Rest. Hoffentlich brauche ich Eure super Hilfe nicht so schnell wieder. |
|
20.08.2014, 22:48
| #7 |
| /// TB-Ausbilder | Firefox ist langsam und lädt ungefragt in Sekundenschnelle 100 bis 200 neue Tabs, Win 7 Ich bin froh, dass wir helfen konnten  In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest: Lob, Kritik und Wünsche Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank!  Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM. Jeder andere bitte hier klicken und einen eigenen Thread erstellen. |
|
| Themen zu Firefox ist langsam und lädt ungefragt in Sekundenschnelle 100 bis 200 neue Tabs, Win 7 |
| adware/agentcv.a.6984, appdata, avira, datei, fehler, firefox, firefox öffnet tabs, internetseite, langsam, logfiles, lädt, malware, namen, netzwerk, neue, programm, rechner, roaming, security, seite, server, temp, unerwünschtes programm, virus, win, öffnen, öffnet |
Hybrid-Darstellung
