FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-171592873-1656066399-1947005370-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU\S-1-5-21-171592873-1656066399-1947005370-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-171592873-1656066399-1947005370-1000 -> URL hxxp://search.conduit.com/Results.aspx?ctid=CT3322287&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP8803837A-1DA4-472E-BAE6-FF0BFD270EFC&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-171592873-1656066399-1947005370-1000 -> SuggestionsURL_JSON hxxp://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}
SearchScopes: HKU\S-1-5-21-171592873-1656066399-1947005370-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = web/?type=dspp&q={searchTerms}
Toolbar: HKU\S-1-5-21-171592873-1656066399-1947005370-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKU\S-1-5-21-171592873-1656066399-1947005370-1000 -> No Name - {534D542D-5637-006A-76A7-7A786E7484D7} -  No File
CHR HKLM-x32\...\Chrome\Extension: [fknfdieimobmimhdkfkheeejenmdjhoe] - C:\Program Files (x86)\pandasecuritytb\chrome-newtab-search.crx [Not Found]
C:\Windows\System32\Tasks\{69024FA6-BE33-473D-B9A3-EE1A4D9E4625}
C:\ProgramData\{95f4c13f-5638-faae-95f4-4c13f56304fd}
C:\Windows\System32\Tasks\{A2F92AC1-AFA1-4E86-8E4F-4320AF8CAFC8}
C:\Windows\System32\Tasks\{42DB7226-BD17-443B-9B46-0B981C090BEB}
C:\Windows\System32\Tasks\{379D7A1C-5990-4F7B-8D7F-93DBB093395D}
C:\Users\Holger Carlson\Desktop\Buchliebhaber.lnk
C:\Buchliebhaber1
C:\Windows\System32\Tasks\{31DF2CAA-6FE5-4163-BE60-BDF22507129E}
C:\Windows\System32\Tasks\{7BE02FCA-D2BD-4C97-AEEF-BEAB652E047F}
Task: {098E8135-34F9-4A64-934D-CB129E5D2CDC} - \Google Updater and Installer No Task File <==== ATTENTION
Task: {0CE00D12-17CE-4495-BF65-180B9826F70C} - \{61A08136-196D-4297-89AD-D497D9417337} No Task File <==== ATTENTION
Task: {0D02835E-8E5B-471D-B8DD-C212A01D96EC} - \{D04405DF-9CCA-470D-B397-4843D8B97AF0} No Task File <==== ATTENTION
Task: {0D85BDAC-E5C7-468D-B749-BB89C6043C0C} - \{5287E865-8199-49E9-9791-D1D1C8255AD2} No Task File <==== ATTENTION
Task: {11951C30-7772-4873-A9C8-E7D79EC20876} - \{D8737E18-1D23-477D-AAC7-5336054949A5} No Task File <==== ATTENTION
Task: {3210E7F8-FB59-421F-B199-67709A46C787} - \{A6277D21-0A69-4926-8537-03083BD82DC4} No Task File <==== ATTENTION
Task: {38A8F2A8-F514-4C70-A1BB-A5D46267F1FB} - \{F46C64DF-4E00-4451-B8AB-B1BD2B03A5D6} No Task File <==== ATTENTION
Task: {38ADF97D-C025-44B4-8A28-255AF09F87BD} - \{9623FEA8-9F14-41C1-B13F-5E2F1DDF2973} No Task File <==== ATTENTION
Task: {3B3ABEC6-C5C7-4317-98AA-0E6A0A2CCF4B} - \{9DB39282-3B31-400F-9105-DE5FB32A8625} No Task File <==== ATTENTION
Task: {3DFA3AE3-36A5-43EE-86FD-5CFEE82FD09E} - \{010EC50E-DEBC-4DDF-818F-D8FD586C6441} No Task File <==== ATTENTION
Task: {442B4BA7-EBD3-4530-973F-E7CC01346952} - \{BA46EF16-D5AD-455B-A934-5EFCEB3A4388} No Task File <==== ATTENTION
Task: {46897D9B-08E1-407A-86D2-588D7ABBE189} - \{BE03A807-43D0-45D8-9633-BA1E5A2BF85C} No Task File <==== ATTENTION
Task: {47F29D00-B56D-4D0B-A245-F110AC103BA3} - \{DCE86621-269D-478F-9FAC-AF30D2697486} No Task File <==== ATTENTION
Task: {4ABBB83F-8527-455B-839D-0E31E9921ABF} - \{414946E3-07AA-4AF3-BB0D-E22440C7BAAE} No Task File <==== ATTENTION
Task: {4DB12196-A5A6-455A-A31E-8A8F9CDA048F} - \{00D6677F-309E-4218-BCA8-4C50017C8BFD} No Task File <==== ATTENTION
Task: {4E55F6B2-D76F-46DA-85CA-851B04EA102C} - System32\Tasks\4805 => Wscript.exe C:\Users\HOLGER~1\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
Task: {536019A5-4DF9-4D2A-AB12-D4F97B46565A} - \{3542F023-1538-411B-9E77-ACAF5E3DCF29} No Task File <==== ATTENTION
Task: {61DA3565-D65E-4727-A79B-CFF46B7C83D0} - \{515B0C8B-D302-490D-B011-1690D5CB8DA8} No Task File <==== ATTENTION
Task: {67253C4B-AA19-4D28-A2C4-ACB82A1E8FB3} - \{8715223C-93FC-489B-A4F9-497C1B06356D} No Task File <==== ATTENTION
Task: {689876BF-828C-4CAC-B3C8-96B7A34B374C} - \{E27BA60A-F9D1-4950-AADD-E4C8BB8E3AE7} No Task File <==== ATTENTION
Task: {6B054A5F-A0E3-42EF-B939-199ECAD09EEE} - \Registration 1und1 Task No Task File <==== ATTENTION
Task: {73E334A0-2C62-4488-842A-B6047FD36A67} - \{4C3D4C4C-3DD2-436D-B415-CC9B34C519DA} No Task File <==== ATTENTION
Task: {7687468C-FCB9-4157-98A5-29F118266571} - \{80C774A3-BC4E-4FEF-B262-A5578F350E85} No Task File <==== ATTENTION
Task: {7D065A65-864E-4237-909F-B37C27ECC63A} - \{A86E51F0-822F-4FC6-9962-851362E69E65} No Task File <==== ATTENTION
Task: {813A7F73-0382-4A15-BA6D-549796A8A795} - \{A3123A1E-2B47-4121-992C-63487F1CE1F3} No Task File <==== ATTENTION
Task: {83C4C39B-F484-45E4-B677-EFBBD3E1183A} - \{7874A9A9-C312-459B-A16C-50B15C6AE000} No Task File <==== ATTENTION
Task: {8B51862B-900B-4C95-A7D5-29D974D8EE26} - \{4BA2B75B-115C-4BCA-B45A-BD110E15FEF3} No Task File <==== ATTENTION
Task: {933153D3-FF7D-4F2F-93DB-4EE18AEC267A} - \{58E9C4A2-89D5-4097-9A1D-3C7212CC100A} No Task File <==== ATTENTION
Task: {95298E87-8CFD-4CCA-890F-8B7D7730CF74} - \{E2D6ACFE-B61E-4447-AE80-4B0CA9F20914} No Task File <==== ATTENTION
Task: {961A4741-EA5F-4FD4-9F58-9824862E1432} - System32\Tasks\0 => Iexplore.exe  <==== ATTENTION
Task: {9AA4F3F3-6B2F-4EA6-B81B-1EA4DF38689E} - \{F99ED12E-E280-47FF-9CC7-4FA9874C09B4} No Task File <==== ATTENTION
Task: {ABE155A8-22A7-4F41-A3D7-35B367212640} - \{8EE0BDD3-D87C-4147-865B-EF850579BBB3} No Task File <==== ATTENTION
Task: {B35D3966-C1EC-4ABB-BAC5-D82790C11C3F} - \{E3C1408B-870F-4E8E-863D-53964BB8AC89} No Task File <==== ATTENTION
Task: {B3C1DDB0-DE41-4A0A-BF91-DBEDCF91283A} - \{579791C6-84C4-4514-8990-62DE88C0F405} No Task File <==== ATTENTION
Task: {B4381734-38BC-4416-BA34-AD5B873F9C57} - \Java Update Scheduler No Task File <==== ATTENTION
Task: {B4906D30-8E70-438F-ACE2-F49B1DBE7445} - \{94AA3650-9FB1-4CD9-A08A-C903E473EBCE} No Task File <==== ATTENTION
Task: {BE3C31CF-63BD-4BBF-B1EC-7B0AD8E1475C} - \{766A2B2A-5AE1-40C4-B5D1-3ACEE3EDB174} No Task File <==== ATTENTION
Task: {C9922EB1-0689-4006-9DE5-EC7322657A2E} - \{3A7AA56D-B373-4984-B360-5A49D81838B3} No Task File <==== ATTENTION
Task: {D3A8949A-66C0-404E-A951-6D81347CC413} - \{5F42D548-089A-4880-B17A-030133EB09AE} No Task File <==== ATTENTION
Task: {D3DCDC2E-0597-4E10-B9B2-DA8A9D0B8184} - \{C8855EFF-1C49-474C-8EC9-A88A46937291} No Task File <==== ATTENTION
Task: {D79B06A8-69BD-44AF-A4F9-51F90B02F5F9} - \{010E4118-67B1-49F2-B0A9-AEBEB8C22ED8} No Task File <==== ATTENTION
Task: {D804B95C-2E56-41A3-BA15-CBFF3F453270} - \{D1412BBD-3329-445E-BAAC-11DAA3F957DE} No Task File <==== ATTENTION
Task: {D97583DC-E996-4394-9850-866EE5071AA3} - \{54761E2D-0F8D-4150-9BAF-A6C950ABC57C} No Task File <==== ATTENTION
Task: {DCCEAEA3-B771-45EF-B482-A5AF7C257613} - \{F268C70D-1377-46B5-B8EF-B0F597A319DD} No Task File <==== ATTENTION
Task: {DD20FA04-E2E5-4565-BC1F-EF251B8CF767} - \{017BCEFC-6CC0-4438-9C8C-8201389B3A60} No Task File <==== ATTENTION
Task: {E4FADBEF-BD70-4875-9F9E-1F514FAE9ACE} - \{428451EA-30BB-4D09-B88F-21C45644BDDD} No Task File <==== ATTENTION
Task: {EBAEA87A-60D8-457D-B7BE-FDDEE0C029B6} - \{E72F77B1-78E7-4B59-A542-303E6C370E31} No Task File <==== ATTENTION
Task: {F088DE68-E8E0-404D-A03F-71D270529CAA} - \{C9155B3B-9625-4BCA-8DC8-57E7BE8F3A16} No Task File <==== ATTENTION
Task: {F2C3A777-E8AA-4F3A-BAFD-9404E1BEA2BA} - \SidebarExecute No Task File <==== ATTENTION
Task: {FCC576CF-4869-4F53-B945-CC818F71D6F7} - \{A56BDF5A-F4F1-4A50-8871-D8B38E0FE432} No Task File <==== ATTENTION
RemoveProxy:
EmptyTemp:
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

wenn ich FRST wieder geladen habe und dann auf Fix drücke, findet er die Fixlist nicht.
No fixlist.txt found.
The fixlist.txt should be in the same Folder/directory the tool is located.

Ich habe den Text in den Firstlist-Editor kopiert und wie folgt gespeichert:
unter Bibliotheken
Dokumente
Firstlist.txt.
Textdateien(*txt)
Codierung: ANSI
Was mache ich falsch???

Das kommt weil du meinen eindringlichen Hinweis, die FRST.exe nur auf dem Desktop zu speichern, offensichtlich ignoriert hast:

Running from C:\Users\Holger Carlson\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XF329JBY

aus dem Temp oder Browsercache-Ordner FRST zu starten ist völliger Murks

ich war so sicher, dass ich alle Anweisungen wie vorgegeben befolgt habe.
Im Moment gelingt es mir nicht einmal mehr, FRST neu zu downloaden. Deshalb werde ich jetzt alles erst einmal wieder alles löschen und den Laptop in Ruhe lassen.

Dann werde ich es erneut versuchen und nach den drei Schritten vorgehen:
1. MBAM
2. JRT
3. Frisches Log mit FRST

Ich weiß, dass Du dir große Mühe gegeben hast und ich bedanke mich noch einmal für Deinen Langmut.
Da ich nicht weiß, was ich falsch gemacht habe und demnach auch nicht weiß, was ich ändern soll, brauche erst einmal Abstand, damit ich wieder in meinen Spiegel schauen kann.
Bis dahin
beste Grüße
Klavitter831... Holger Carlson