![]() |
|
Plagegeister aller Art und deren Bekämpfung: updatepush.comWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #7 |
![]() ![]() | ![]() updatepush.com oh, vielen Dank. Aber was meinst Du denn mit VT? Code:
ATTFilter # ------------------------------- # Malwarebytes AdwCleaner 8.4.0.0 # ------------------------------- # Build: 08-30-2022 # Database: 2022-10-10.1 (Cloud) # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Clean # ------------------------------- # Start: 10-18-2022 # Duration: 00:00:02 # OS: Windows 10 (Build 19043.2130) # Cleaned: 8 # Failed: 0 ***** [ Services ] ***** No malicious services cleaned. ***** [ Folders ] ***** No malicious folders cleaned. ***** [ Files ] ***** No malicious files cleaned. ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** No malicious tasks cleaned. ***** [ Registry ] ***** No malicious registry entries cleaned. ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries cleaned. ***** [ Chromium URLs ] ***** No malicious Chromium URLs cleaned. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries cleaned. ***** [ Firefox URLs ] ***** No malicious Firefox URLs cleaned. ***** [ Hosts File Entries ] ***** No malicious hosts file entries cleaned. ***** [ Preinstalled Software ] ***** Deleted Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP CUSTOMER FEEDBACK Deleted Preinstalled.HPSupportAssistant Folder C:\ProgramData\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK Deleted Preinstalled.HPSupportAssistant Folder C:\Users\KiezPC\AppData\Roaming\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK Deleted Preinstalled.HPSupportAssistant Folder C:\Windows\System32\config\systemprofile\AppData\Local\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK Deleted Preinstalled.SonyPlayMemoriesHome File C:\Users\Public\Desktop\PlayMemories Home.lnk Deleted Preinstalled.SonyPlayMemoriesHome Folder C:\Program Files (x86)\SONY\PLAYMEMORIES HOME Deleted Preinstalled.SonyPlayMemoriesHome Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Run|PMBVolumeWatcher Deleted Preinstalled.SonyPlayMemoriesHome Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{AEB04E0E-0A28-4014-A96A-282E43B7227B} ************************* [+] Delete Tracing Keys [+] Reset Winsock ************************* AdwCleaner[S00].txt - [2760 octets] - [07/10/2020 12:50:57] AdwCleaner[S01].txt - [2821 octets] - [07/10/2020 12:52:53] AdwCleaner[S02].txt - [2434 octets] - [18/10/2022 21:34:05] ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C02].txt ########## Ich müsste jetzt erst suchen, wo ich das umstellen kann ![]() Code:
ATTFilter 18.10.2022 22:32:26 Geprüfte Dateien: 582274 Erkannte Dateien: 10 Gesäuberte Dateien: 10 Prüfdauer gesamt 00:43:25 Prüfstatus: Abgeschlossen C:\FRST\Quarantine\C\Program Files\Mozilla Firefox\zlib1.dll.xBAD eine Variante von Win64/Adware.Agent.Q Anwendung durch Löschen gesäubert C:\Program Files\DAEMON Tools Lite\inst\setuphlp.dll eine Variante von Win32/Yandex.K potenziell unerwünschte Anwendung gelöscht C:\Users\KiezPC\Downloads\OJ4630_198(1)(1).exe Win32/Bundled.Toolbar.Google.D potenziell unsichere Anwendung durch Löschen gesäubert C:\Users\KiezPC\Downloads\OJ4630_198(1).exe Win32/Bundled.Toolbar.Google.D potenziell unsichere Anwendung durch Löschen gesäubert C:\Users\KiezPC\Downloads\OJ4630_198(2).exe Win32/Bundled.Toolbar.Google.D potenziell unsichere Anwendung durch Löschen gesäubert C:\Users\KiezPC\Downloads\OJ4630_198(3).exe Win32/Bundled.Toolbar.Google.D potenziell unsichere Anwendung durch Löschen gesäubert C:\Users\KiezPC\Downloads\OJ4630_198.exe Win32/Bundled.Toolbar.Google.D potenziell unsichere Anwendung durch Löschen gesäubert D:\WindowsAlt\AdwCleaner\Quarantine\v1\20180416.123606\17\OpenCandy\CBA1BE18F63E4A2EB47ABDA710F98458\TuneUp2014GER15day-de-DE-p4v1.exe#4DA12BE24E213E08 eine Variante von Win32/Toolbar.AVG.B potenziell unerwünschte Anwendung durch Löschen gesäubert D:\WindowsAlt\AdwCleaner\Quarantine\v1\20180416.123606\5\Chip Digital GmbH\chip1click\chip 1-click installer.exe#C16FFD89AB9069EA eine Variante von Win32/ChipDownloader.B potenziell unerwünschte Anwendung durch Löschen gesäubert D:\WindowsAlt\Users\Felchow\Downloads\OJ4630_198.exe Win32/Bundled.Toolbar.Google.D potenziell unsichere Anwendung durch Löschen gesäubert Code:
ATTFilter SecurityCheck by glax24 & Severnyj v.1.4.0.54 [06.12.21] WebSite: www.safezone.cc DateLog: 18.10.2022 22:36:52 Path starting: C:\Users\KiezPC\AppData\Local\Temp\SecurityCheck\SecurityCheck.exe Log directory: C:\SecurityCheck\ IsAdmin: True User: KiezPC VersionXML: 10.24is-16.10.2022 ___________________________________________________________________________ Windows 10(6.3.19043) (x64) Core Release: 2009 Lang: German(0407) Installation date OS: 10.10.2020 10:37:23 LicenseStatus: Windows(R), Core edition The machine is permanently activated. LicenseStatus: Office 19, Office19HomeStudent2019R_Retail edition The machine is permanently activated. Boot Mode: Normal Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe SystemDrive: C: FS: [NTFS] Capacity: [237.9 Gb] Used: [205.5 Gb] Free: [32.4 Gb] ------------------------------- [ Windows ] ------------------------------- Internet Explorer 11.789.19041.0 User Account Control enabled (Level 3) Sicherheitscenter (wscsvc) - The service is running Remoteregistrierung (RemoteRegistry) - The service has stopped SSDP-Suche (SSDPSRV) - The service is running Remotedesktopdienste (TermService) - The service has stopped Windows-Remoteverwaltung (WS-Verwaltung) (WinRM) - The service has stopped ---------------------------- [ Antivirus_WMI ] ---------------------------- Malwarebytes (enabled and up to date) Windows Defender (disabled and up to date) Malwarebytes (enabled and up to date) --------------------------- [ FirewallWindows ] --------------------------- Windows Defender Firewall (mpssvc) - The service is running --------------------------- [ AntiSpyware_WMI ] --------------------------- Avira Antivirus (enabled and up to date) Windows Defender (disabled and up to date) ---------------------- [ AntiVirusFirewallInstall ] ----------------------- Malwarebytes version 4.5.15.215 v.4.5.15.215 --------------------------- [ OtherUtilities ] ---------------------------- AMD Software v.20.2.2 Microsoft Office Home and Student 2019 - de-de v.16.0.15629.20208 ------------------------------- [ Backup ] -------------------------------- Microsoft OneDrive v.22.196.0918.0001 ------------------------------ [ ArchAndFM ] ------------------------------ WinRAR 5.30 (64-Bit) v.5.30.0 Warning! Download Update -------------------------- [ IMAndCollaborate ] --------------------------- Zoom v.5.0 Warning! Download Update -------------------------------- [ Media ] -------------------------------- Spotify v.1.1.95.893.g6cf4d40c Warning! Download Update ------------------------------- [ Browser ] ------------------------------- Mozilla Firefox (x64 de) v.105.0.3 Opera Stable 91.0.4516.77 v.91.0.4516.77 Google Chrome v.85.0.4183.121 Warning! Download Update Microsoft Edge v.106.0.1370.47 ------------------ [ AntivirusFirewallProcessServices ] ------------------- C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe v.4.0.0.1355 Malwarebytes Service (MBAMService) - The service is running C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe v.3.2.0.1119 Microsoft Defender Antivirus-Dienst (WinDefend) - The service has stopped Microsoft Defender Antivirus-Netzwerkinspektionsdienst (WdNisSvc) - The service has stopped ---------------------------- [ UnwantedApps ] ----------------------------- CCleaner v.6.04 Warning! Suspected demo version of anti-spyware, driver updater or optimizer. If this program is not familiar to you it is recommended to uninstall it and execute PC scanning using Malwarebytes Anti-Malware. Possible you became a victim of fraud or social engineering. Computer experts no longer recommend this program. ----------------------------- [ End of Log ] ------------------------------ |
Themen zu updatepush.com |
.dll, aktion, aktiviert, bösartige, desktop, direkt, doppel, doppelt, drucker, entdeck, files, firefox, gen, gestartet, icon, kaufen, mozilla, programm, quarantäne, rechner, scan, schließe, tool, vollversion, windows |