Hilfe!!!!!! MyWebSearch geht nicht mehr runter!!!

BIOTEC · 26.06.2008, 14:06

Hi!

Ich brauche mal dringend eure Hilfe:

Ich war gestern mal bei meinen Nachbarn am PC und hab mal nen Viren Scan
mit Spybot SD durchgeführt....der hat da so einige seltsame Sachen zu tage befördert...Meistens waren es nur unnötige Sachen...Unter anderem auch ein VIRTUMONDE Eintrag in der Registry und auch MyWebSearch und Anhang....

Ich hab Spybot mal laufen gelassen und der hat dann auch den grössten Teil der Sachen entfernen könne, aber da war immer noch was drauf...er wollte dann wieder das er beim Hochfahren einen test machen kann....also gemacht.

Der VIRTUMONDE Eintrag war weg, aber dieses MyWebSearch Zeug bekomm ich so nicht runter....Avira hat da auch schon eine MyWebSearch.zip in Karantaine geschoben und nach einem Neustart kam dann, das er eine Datei nicht mehr finden könne....

Im IE7 (Bei denen läuft Vista Bussiness) hab ich die Toolbar schon deaktiviert!

Das war das letzte, was ich gestern bei denen noch gemacht habe...

Könntet ihr mir ein Programm empfehlen, mit dem sich da was machen lässt?

Ich bin mit meinem Latein nämlich am Ende!

Gruss BIOTEC

Silent sharK · 26.06.2008, 14:11

Evtl. MalwareBytes Anti-Malware
mfg

BIOTEC · 26.06.2008, 14:20

Ich werd mir das Programm mal runter laden und bei denen anwenden....

Dann sag ich euch bescheid, was es gebracht hat....

(Ich werde dann auch noch ein HJT Log machen....mal gucken, was der so meint!)

Bis nachher!

Silent sharK · 26.06.2008, 14:21

Jop, mach das

BIOTEC · 27.06.2008, 11:15

Hi!

Hier mal das Log File von HJT:

Code:

ATTFilter

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:05:46, on 27.06.2008
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16681)
Boot mode: Normal

Running processes:
C:\windows\system32\taskeng.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\PDF Complete\pdfsty.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Lexmark X1100 Series\LXBKbmgr.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
G:\ThermoScan7E.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ebay.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [PDF Complete] "C:\Program Files\PDF Complete\pdfsty.exe"
O4 - HKLM\..\Run: [SetRefresh] C:\Program Files\HP\SetRefresh\SetRefresh.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [lxbkbmgr.exe] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [MyWebSearch Plugin] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\M3PLUGIN.DLL,UPF
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\RunOnce: [ST Recovery Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O8 - Extra context menu item: &Search - ?p=ZKman000
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O13 - Gopher Prefix: 
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100
O23 - Service: Avira AntiVir Personal – Free Antivirus Planer (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\windows\system32\Ati2evxx.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: lxbk_device -   - C:\windows\system32\lxbkcoms.exe
O23 - Service: My Web Search Service (MyWebSearchService) - MyWebSearch.com - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files\PDF Complete\pdfsvc.exe

--
End of file - 5380 bytes

Bitte Bitte Analysiert doch das mal....ich habs schon mal getestet und da sind noch schädliche Sachen drauf, aber ich weiss nicht mit was man die runter bekommt....wär schön, wenn mir da jemand mal einen Tip geben kann...

Gruss BIOTEC

BIOTEC · 27.06.2008, 11:17

Hab grad noch eine Log mit AntiByte gemacht....

Code:

ATTFilter

Malwarebytes' Anti-Malware 1.18
Database version: 895

12:18:48 27.06.2008
mbam-log-6-27-2008 (12-18-28).txt

Scan type: Quick Scan
Objects scanned: 51315
Time elapsed: 7 minute(s), 19 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 18
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 9
Files Infected: 213

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\Interface\{cf54be1c-9359-4395-8533-1657cf209cfe} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{d518921a-4a03-425e-9873-b9a71756821e} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59c7fc09-1c83-4648-b3e6-003d2bbc7481} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68af847f-6e91-45dd-9b68-d6a12c30e5d7} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170b96c-28d4-4626-8358-27e6caeef907} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d1a71fa0-ff48-48dd-9b6d-7a13a3e42127} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ddb1968e-ead6-40fd-8dae-ff14757f60c7} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f138d901-86f0-4383-99b6-9cdd406036da} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{1962c5bc-e475-465b-823b-133e711bceb9} (Adware.Starware) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5f90c0e3-4c0a-4d54-a8ac-5afe6163a99e} (Adware.Starware) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWay) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> No action taken.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\Program Files\MyWebSearch (Adware.MyWebSearch) -> No action taken.
C:\Program Files\MyWebSearch\bar (Adware.MyWebSearch) -> No action taken.
C:\Program Files\MyWebSearch\bar\1.bin (Adware.MyWebSearch) -> No action taken.
C:\Program Files\Starware357 (Adware.Starware) -> No action taken.
C:\Program Files\Starware357\bin (Adware.Starware) -> No action taken.
C:\Program Files\Starware357\icons (Adware.Starware) -> No action taken.
C:\ProgramData\Starware357 (Adware.Starware) -> No action taken.
C:\ProgramData\Starware357\buttons (Adware.Starware) -> No action taken.
C:\ProgramData\Starware357\contexts (Adware.Starware) -> No action taken.

Files Infected:
C:\windows\system32\f3PSSavr.scr (Adware.MyWebSearch) -> No action taken.
C:\Program Files\MyWebSearch\bar\1.bin\MWSSVC.EXE (Adware.MyWebSearch) -> No action taken.
C:\Program Files\Starware357\Starware357Config.xml (Adware.Starware) -> No action taken.
C:\Program Files\Starware357\Starware357Uninstall.exe (Adware.Starware) -> No action taken.
C:\Program Files\Starware357\bin\IELauncher.exe (Adware.Starware) -> No action taken.
C:\Program Files\Starware357\icons\star_16.ico (Adware.Starware) -> No action taken.
C:\ProgramData\Starware357\buttons\578_button_1b_def.bmp (Adware.Starware) -> No action taken.
C:\ProgramData\Starware357\buttons\578_button_1b_over.bmp (Adware.Starware) -> No action taken.
C:\ProgramData\Starware357\buttons\585_button_1b_def.bmp (Adware.Starware) -> No action taken.
C:\ProgramData\Starware357\buttons\FindIt.bmp (Adware.Starware) -> No action taken.
C:\ProgramData\Starware357\buttons\FindItHot.bmp (Adware.Starware) -> No action taken.
C:\ProgramData\Starware357\buttons\findithotxp.png (Adware.Starware) -> No action taken.
C:\ProgramData\Starware357\buttons\finditxp.png (Adware.Starware) -> No action taken.
C:\ProgramData\Starware357\buttons\logo.bmp (Adware.Starware) -> No action taken.
C:\ProgramData\Starware357\buttons\logoxp.bmp (Adware.Starware) -> No action taken.
C:\ProgramData\Starware357\contexts\error.xml (Adware.Starware) -> No action taken.
C:\ProgramData\Starware357\contexts\related.xml (Adware.Starware) -> No action taken.
C:\ProgramData\Starware357\contexts\travel.xml (Adware.Starware) -> No action taken.
C:\Users\Annika\Cookies\bumo.reg (Fake.Dropped.Malware) -> No action taken.
C:\Users\Annika\Cookies\jababug.inf (Fake.Dropped.Malware) -> No action taken.
C:\Users\Annika\Cookies\uwux.exe (Fake.Dropped.Malware) -> No action taken.
C:\Users\Annika\Cookies\jiceji._sy (Fake.Dropped.Malware) -> No action taken.
C:\Users\Annika\Cookies\esycire._dl (Fake.Dropped.Malware) -> No action taken.
C:\Users\Annika\Cookies\syssp.exe (Fake.Dropped.Malware) -> No action taken.
C:\windows\Temp\SpywareSweeperSetup.exe (Rogue.Installer) -> No action taken.
C:\windows\Temp\csrssc.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\IcnOvrly.dll (Trojan.Agent) -> No action taken.
C:\windows\Temp\babies.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\uNkbot.exe (Backdoor.Bot) -> No action taken.
C:\windows\Temp\setup_526_1_.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\zhm14q9o.dat (Trojan.Agent) -> No action taken.
C:\windows\Temp\nwizsrv.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\ytcdhxzm.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\egchvjgw.exe (Trojan.Agent) -> No action taken.
C:\Users\Default\Cookies\bumo.reg (Fake.Dropped.Malware) -> No action taken.
C:\Users\Bobbi\Cookies\bumo.reg (Fake.Dropped.Malware) -> No action taken.
C:\Users\Bartagame\Cookies\bumo.reg (Fake.Dropped.Malware) -> No action taken.
C:\Users\Default\Cookies\jababug.inf (Fake.Dropped.Malware) -> No action taken.
C:\Users\Bobbi\Cookies\jababug.inf (Fake.Dropped.Malware) -> No action taken.
C:\Users\Bartagame\Cookies\jababug.inf (Fake.Dropped.Malware) -> No action taken.
C:\windows\Temp\noop.tmp (Trojan.Agent) -> No action taken.
C:\windows\Temp\sysfiz.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\us0105.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\ie.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\sbBo.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\printsrv32.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\cthirosg.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\ms1210094351.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\vclrggsy.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\.tt15.tmp (Trojan.Agent) -> No action taken.
C:\windows\Temp\mc229.tmp (Trojan.Agent) -> No action taken.
C:\windows\Temp\snapsnet.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\rasesnet.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\wavvsnet.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\yazzsnet.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\winvsnet.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\winlagon.exe (Trojan.Agent) -> No action taken.
C:\Users\Default\Cookies\uwux.exe (Fake.Dropped.Malware) -> No action taken.
C:\Users\Bobbi\Cookies\uwux.exe (Fake.Dropped.Malware) -> No action taken.
C:\Users\Bartagame\Cookies\uwux.exe (Fake.Dropped.Malware) -> No action taken.
C:\Users\Default\Cookies\jiceji._sy (Fake.Dropped.Malware) -> No action taken.
C:\Users\Bobbi\Cookies\jiceji._sy (Fake.Dropped.Malware) -> No action taken.
C:\Users\Bartagame\Cookies\jiceji._sy (Fake.Dropped.Malware) -> No action taken.
C:\Users\Default\Cookies\esycire._dl (Fake.Dropped.Malware) -> No action taken.
C:\Users\Bobbi\Cookies\esycire._dl (Fake.Dropped.Malware) -> No action taken.
C:\Users\Bartagame\Cookies\esycire._dl (Fake.Dropped.Malware) -> No action taken.
C:\windows\Temp\Bot.exe (Trojan.FakeAlert) -> No action taken.
C:\windows\Temp\Buckster.exe (Trojan.FakeAlert) -> No action taken.
C:\windows\Temp\nd.tmp (Trojan.FakeAlert) -> No action taken.
C:\windows\Temp\BEEIKA.EX (Trojan.Agent) -> No action taken.
C:\windows\Temp\6VKQ322c.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\RtkBtMnt.EXE (Trojan.Agent) -> No action taken.
C:\windows\Temp\svchost.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\1ow.dll (Trojan.Agent) -> No action taken.
C:\windows\Temp\85rtkct.dll (Trojan.Agent) -> No action taken.
C:\windows\Temp\lhoioovb.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\ijuwvhnd.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\ms1210090251.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\CPV.stt (Malware.Trace) -> No action taken.
C:\windows\Temp\thinksnet.exe (AdWare.Agent) -> No action taken.
C:\windows\Temp\696A.tmp (Trojan.Agent) -> No action taken.
C:\windows\Temp\wkwgvuld.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\sh.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\lfgkfihu.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\spy.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\cjphnmli.dat (Rootkit.Agent) -> No action taken.
C:\windows\Temp\deskmlpu.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\cnmtkn.dll (Trojan.Agent) -> No action taken.
C:\windows\Temp\ehcrqpob.drv (Trojan.Agent) -> No action taken.
C:\windows\Temp\etkjeponats.sys (Trojan.Agent) -> No action taken.
C:\windows\Temp\msram.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\nyps4.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\yxcxpris.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\lsubwyko.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\rsyncini.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\qflyfxbh.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\epagyhle.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\ea-good.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\babkinepaxnut.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\comsvr32.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\!update.exe (Trojan.Downloader) -> No action taken.
C:\windows\Temp\wnslogan.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\dknqpcjqhcj.dll (Trojan.Agent) -> No action taken.
C:\windows\Temp\bmtor.sys (Trojan.Agent) -> No action taken.
C:\windows\Temp\22.exe (Trojan.Downloader) -> No action taken.
C:\windows\Temp\0wl.tmp (Trojan.Patched) -> No action taken.
C:\windows\Temp\winlogan.exe (Trojan.Downloader) -> No action taken.
C:\windows\Temp\ieobj.dll (Trojan.Zlob) -> No action taken.
C:\windows\Temp\~util32.dll (Trojan.FakeAlert) -> No action taken.
C:\windows\Temp\wndutl32.dll (Trojan.FakeAlert) -> No action taken.
C:\windows\Temp\ms-4.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\iframestat.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\newoxo.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\lokocash.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\gold.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\laf0.exe (Trojan.Zlob) -> No action taken.
C:\windows\Temp\laf1.exe (Trojan.Zlob) -> No action taken.
C:\windows\Temp\laf2.exe (Trojan.Zlob) -> No action taken.
C:\windows\Temp\laf3.exe (Trojan.Zlob) -> No action taken.
C:\windows\Temp\zfe0.exe (Trojan.Zlob) -> No action taken.
C:\windows\Temp\zfe1.exe (Trojan.Zlob) -> No action taken.
C:\windows\Temp\zfe2.exe (Trojan.Zlob) -> No action taken.
C:\windows\Temp\zfe3.exe (Trojan.Zlob) -> No action taken.
C:\windows\Temp\zs0.exe (Trojan.Zlob) -> No action taken.
C:\windows\Temp\zs1.exe (Trojan.Zlob) -> No action taken.
C:\windows\Temp\zs2.exe (Trojan.Zlob) -> No action taken.
C:\windows\Temp\zs3.exe (Trojan.Zlob) -> No action taken.
C:\Users\Default\My Documents\My Documents.url (Trojan.Zlob) -> No action taken.
C:\windows\Temp\msprint.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\Explorer32.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\winlogon.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\Explorer.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\lxvwaxxebnacnyd.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\ms-a.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\dllsvr32.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\bx18dxv.dat (Trojan.Agent) -> No action taken.
C:\windows\Temp\cmdinst.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\ctxad.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\mshtml2.exe (Trojan.Dropper) -> No action taken.
C:\windows\Temp\mshtml3.exe (Trojan.Dropper) -> No action taken.
C:\windows\Temp\NDrv.exe (Trojan.Dropper) -> No action taken.
C:\windows\Temp\xpre.exe (Trojan.Downloader) -> No action taken.
C:\windows\Temp\xrun.exe (Trojan.Downloader) -> No action taken.
C:\windows\Temp\myself.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\Cd1iC2cT.exe (Trojan.Downloader) -> No action taken.
C:\windows\Temp\mso11.exe (Trojan.FakeAlert) -> No action taken.
C:\windows\Temp\mozzi.exe (Trojan.FakeAlert) -> No action taken.
C:\windows\Temp\SuperBarSetup.exe (Adware.SuperBar) -> No action taken.
C:\windows\Temp\mscass.exe (Trojan.Agent) -> No action taken.
C:\windows\Temp\BN1.tmp (Trojan.Agent) -> No action taken.
C:\windows\Temp\whoiscache.datwhoiscache.dat (Adware.WebDir) -> No action taken.
C:\windows\Temp\ldr1.tmp (Trojan.Vundo) -> No action taken.
C:\windows\Temp\revmodnpq.exe (Trojan.FakeAlert) -> No action taken.
C:\windows\Temp\decsysrox.exe (Trojan.FakeAlert) -> No action taken.
C:\windows\Temp\~~install.dll (Trojan.FakeAlert) -> No action taken.
C:\windows\Temp\media.php (Trojan.FakeAlert) -> No action taken.
C:\windows\Temp\stdlan.exe (Trojan.FakeAlert) -> No action taken.
C:\windows\Temp\cbxww.dll (Trojan.FakeAlert) -> No action taken.
C:\windows\Temp\winpole32.exe (Trojan.FakeAlert) -> No action taken.
C:\windows\Temp\mxqrf56g12.dat (Trojan.FakeAlert) -> No action taken.
C:\windows\Temp\stdstring.exe (Trojan.FakeAlert) -> No action taken.
C:\windows\Temp\bindserv.exe (Trojan.FakeAlert) -> No action taken.
C:\Users\Default\Local Settings\Tempwn10044.exe (Trojan.FakeAlert) -> No action taken.
C:\Users\Default\Local Settings\Tempxl10044.exe (Trojan.FakeAlert) -> No action taken.
C:\Users\Default\Local Settings\Tempmbroit.exe (Trojan.FakeAlert) -> No action taken.
C:\Users\Default\Cookies\syssp.exe (Fake.Dropped.Malware) -> No action taken.
C:\Users\Bobbi\Cookies\syssp.exe (Fake.Dropped.Malware) -> No action taken.
C:\Users\Bartagame\Cookies\syssp.exe (Fake.Dropped.Malware) -> No action taken.
C:\windows\Temp\hipomx.exe (Trojan.FakeAlert) -> No action taken.
C:\windows\Temp\32power.exe (Trojan.Downloader) -> No action taken.
C:\windows\Temp\looklook.exe (Trojan.Downloader) -> No action taken.
C:\windows\Temp\svpower.exe (Trojan.Downloader) -> No action taken.
C:\windows\Temp\taskmgr.exe (Trojan.Downloader) -> No action taken.
C:\windows\Temp\vpncore.exe (Trojan.Downloader) -> No action taken.
C:\windows\Temp\svchots.exe (Heuristics.Malware) -> No action taken.
C:\windows\Temp\lprn32.exe (Trojan.Zlob) -> No action taken.
C:\windows\Temp\startdrv.exe (Trojan.Downloader) -> No action taken.
C:\windows\Temp\dmxonk.exe (Trojan.FakeAlert) -> No action taken.
C:\windows\Temp\svhost.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\windows\Temp\poolsv.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\windows\Temp\winpower.exe (Trojan.Downloader) -> No action taken.
C:\windows\Temp\64look.exe (Trojan.Downloader) -> No action taken.
C:\windows\Temp\look32.exe (Trojan.Downloader) -> No action taken.
C:\windows\Temp\serverserver.exe (Trojan.Downloader) -> No action taken.
C:\windows\Temp\sv32.exe (Trojan.Downloader) -> No action taken.
C:\windows\Temp\synsys.exe (Trojan.Downloader) -> No action taken.
C:\windows\Temp\winagent.exe (Trojan.Downloader) -> No action taken.
C:\windows\Temp\ddxplugin.exe (Trojan.FakeAlert) -> No action taken.
C:\windows\Temp\econf32.exe (Trojan.FakeAlert) -> No action taken.
C:\windows\Temp\dnlsvc.exe (Trojan.Downloader) -> No action taken.
C:\windows\Temp\csrss.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\Users\Default\Local Settings\csrss.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\windows\Temp\lsass.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\Users\Default\Local Settings\lsass.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\windows\Temp\services.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\Users\Default\Local Settings\services.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\windows\Temp\smss.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\Users\Default\Local Settings\smss.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\Users\Default\Local Settings\svchost.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\Users\Default\Local Settings\winlogon.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\Users\Default\Local Settings\explorer.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\windows\Temp\spoolsv.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\Users\Default\Local Settings\spoolsv.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\windows\Temp\dllhost.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\Users\Default\Local Settings\dllhost.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\windows\Temp\msiexec.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\Users\Default\Local Settings\msiexec.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\windows\Temp\ctfmon.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\Users\Default\Local Settings\ctfmon.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\windows\Temp\userinit.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\Users\Default\Local Settings\userinit.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\windows\Temp\rundll32.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
C:\Users\Default\Local Settings\rundll32.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.

Das sieht ja noch schlechter aus.....BITTE HILFE!

Hilfe!!!!!! MyWebSearch geht nicht mehr runter!!!

Plagegeister aller Art und deren Bekämpfung: Hilfe!!!!!! MyWebSearch geht nicht mehr runter!!!