Hallo...,
ich habe Win XP home mit SP 1 und Norton Internet Security (mit den aktuellsten Update) und habe den MS Internet Explorer deinstalliert und arbeite mit Firefox. Von Zeit zu Zeit gehen Fenster mit dem Titel Internet Explorer auf. In diesen sind meistens die Meldung: "Warning: Your computer may be infected with spy ware" zu lesen.

Ich habe mein System mit Ad Aware, F-Prot und Spybot gescannt. Alle finden auch jeweils etwas. Bei keinem der Tools hat ein entfernen etwas genutzt. Hier habe ich mal den Report von F-Prot beigefügt.


F-PROT ANTIVIRUS
Program version: 3.16b
Engine version: 3.16.6

VIRUS SIGNATURE FILES
MACRO.DEF created 6/14/2005
SIGN.DEF created 6/17/2005
SIGN2.DEF created 6/18/2005

StartTime: 06.19.2005 14:27

Scan settings:

Path to scan:
<Hard drive> C:\

Which files:
Depending on file content and extensions.
Scan inside archives.
Scan inside compressed executables
Scan inside subfolders.

Action if malware is found:
Disinfect.
How to scan:
Use heuristics (always in normal mode).

C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\CleverIEHookerJeired.zip->tvmupdater.exe could be a suspicious file (encrypted program in archive)
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\ErrorGuard.zip->setupactive.exe could be a suspicious file (encrypted program in archive)
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\SpywareStormer1.zip->Setup.exe could be a suspicious file (encrypted program in archive)
C:\Dokumente und Einstellungen\Eric\Eigene Dateien\Eigene Downloads\setuperrorguard.exe is a security risk or a "backdoor" program
File deleted.
C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\11F65E7D.exe->(CryptFF)->(FSG) could be infected with an unknown virus
Viruses cannot be disinfected unless they are identified.
C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\20610BEC.tmp->(CryptFF) is a security risk named W32/Downloader.NW
Could not delete the file.
C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\271E6770.exe->(CryptFF) is a dropper for W32/Rameh.D@dl
Could not delete the file.
C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\2721116D.exe->(CryptFF) is a security risk or a "backdoor" program
Could not delete the file.
C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\2721116D.tmp->(CryptFF) is a security risk named W32/Downloader.NW
Could not delete the file.
C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\27286566.exe->(CryptFF)->(FSG) could be infected with an unknown virus
Viruses cannot be disinfected unless they are identified.
C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\2F4624B8.exe->(CryptFF)->(FSG) could be infected with an unknown virus
Viruses cannot be disinfected unless they are identified.
C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\5A992DED.dll->(CryptFF) is a security risk named W32/Rameh.D@dl
Could not delete the file.
C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\628B7D2A.exe->(CryptFF)->(FSG) could be infected with an unknown virus
Viruses cannot be disinfected unless they are identified.
C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\662969EC.exe->(CryptFF) is a security risk or a "backdoor" program
Could not delete the file.
C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\76A422C6.exe->(CryptFF)->(FSG) could be infected with an unknown virus
Viruses cannot be disinfected unless they are identified.
C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\76A84CC2.exe->(CryptFF)->(FSG) could be infected with an unknown virus
Viruses cannot be disinfected unless they are identified.
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\Install.dll is a security risk named W32/Hexa.A
File deleted.
C:\WINDOWS\protector.exe is a destructive program named W32/Startpage.TJ
File deleted.
Scan settings:

Path to scan:
<Hard drive> D:\

Which files:
Depending on file content and extensions.
Scan inside archives.
Scan inside compressed executables
Scan inside subfolders.

Action if malware is found:
Disinfect.
How to scan:
Use heuristics (always in normal mode).

Scan settings:

Path to scan:
<Hard drive> E:\

Which files:
Depending on file content and extensions.
Scan inside archives.
Scan inside compressed executables
Scan inside subfolders.

Action if malware is found:
Disinfect.
How to scan:
Use heuristics (always in normal mode).

The scanning ended successfully, with infected or suspicious object found

Results of virus scanning:

MBRs scanned..........: 3
Boot sectors scanned..: 6
Files total...........: 58735
Scanned objects.......: 46054
Infected objects......: 0
Suspicious objects....: 18
Deleted objects.......: 3
Disinfected objects...: 0
Renamed objects.......: 0
Moved objects.........: 0

Endtime: 06.19.2005 15:04

Scantime: 37:26 min.
------------------------------- END OF REPORT ------------------------------



Jetzt wollte ich dann einfach mein System neu installieren: Also XP-Diskette ins Laufwerk und neu gebootet. Zugriff erfolgt auf die CD mit der Frage ob von der CD gebootet werden soll. Dies habe ich bestätigt. Dann kommt die Meldung, dass die Hardware überprüft wird und der Bildschirm bleibt schwarz und nichts tut sich mehr.

Mir würde es ja reichen, wenn ich meinen Rechner neu installieren könnte. Weiss hierzu jemand einen Rat?

Gruß

Hallo,

Dann kommt die Meldung, dass die Hardware überprüft wird und der Bildschirm bleibt schwarz und nichts tut sich mehr.

Wie lange hält dieser Zustand an bzw. nach welcher Zeit hast du abgebrochen? Eventuell hat dein System sich einmalig 'aufgehängt', versuche es deshalb nochmal.
Halte dich aber beim Neuaufsetzen an die Anleitung in meiner Signatur, insbesondere an Windows neu oder erstmalig installieren (Screenshotguide).