|
Log-Analyse und Auswertung: IE Werbung öffnet sich ständigWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
08.06.2010, 13:26 | #16 |
| IE Werbung öffnet sich ständig Hi vielen Dank hoffe das in den nächsten std nix an werbung kommt. hier einmal der bericht. All processes killed ========== OTL ========== Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64577f6f-8a9d-413a-b4c8-d080d6aeaf88}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{64577f6f-8a9d-413a-b4c8-d080d6aeaf88}\ deleted successfully. C:\Program Files (x86)\Softonic_VLC_DE\tbSoft.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}\ deleted successfully. C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c2db4fe6-8409-45ce-8010-189a7b5cce86}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c2db4fe6-8409-45ce-8010-189a7b5cce86}\ deleted successfully. C:\Program Files (x86)\NCH\tbNCH.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\ deleted successfully. C:\Program Files (x86)\softonic-de3\tbsoft.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully. C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{64577f6f-8a9d-413a-b4c8-d080d6aeaf88} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{64577f6f-8a9d-413a-b4c8-d080d6aeaf88}\ not found. File C:\Program Files (x86)\Softonic_VLC_DE\tbSoft.dll not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{855F3B16-6D32-4FE6-8A56-BBB695989046} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}\ deleted successfully. C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{c2db4fe6-8409-45ce-8010-189a7b5cce86} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c2db4fe6-8409-45ce-8010-189a7b5cce86}\ not found. File C:\Program Files (x86)\NCH\tbNCH.dll not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\ not found. File de3\tbsoft.dll not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found. File C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Google Updater deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Windows System Guard deleted successfully. ADS C:\ProgramData\Temp:E1F04E8D deleted successfully. ADS C:\ProgramData\Temp:4CF61E54 deleted successfully. ========== FILES ========== C:\eee2x.exe moved successfully. File\Folder C:\Windows\Trezed.exe not found. File\Folder C:\Windows\Trezea.exe not found. File\Folder C:\Windows\Trezee.exe not found. ========== COMMANDS ========== HOSTS file reset successfully [EMPTYTEMP] User: Acer ->Temp folder emptied: 384319275 bytes ->Temporary Internet Files folder emptied: 494329950 bytes ->Java cache emptied: 5370404 bytes ->FireFox cache emptied: 92675938 bytes ->Google Chrome cache emptied: 30574717 bytes ->Apple Safari cache emptied: 1615435 bytes ->Flash cache emptied: 50896 bytes User: All Users User: AppData User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 5846907 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 66818 bytes RecycleBin emptied: 315908430 bytes Total Files Cleaned = 1.269,00 mb OTL by OldTimer - Version 3.2.4.1 log created on 06082010_142123 Files\Folders moved on Reboot... C:\Users\Acer\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully. Registry entries deleted on Reboot... mfg Diodid |
08.06.2010, 14:00 | #17 |
/// Winkelfunktion /// TB-Süch-Tiger™ | IE Werbung öffnet sich ständig Ok. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs.
__________________Denk dran beide Tools zu updaten vor dem Scan!!
__________________ |
10.06.2010, 16:37 | #18 |
| IE Werbung öffnet sich ständig Malwarebytes' Anti-Malware 1.46
__________________www.malwarebytes.org Datenbank Version: 4186 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 10.06.2010 17:34:51 mbam-log-2010-06-10 (17-34-51).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|G:\|) Durchsuchte Objekte: 284831 Laufzeit: 46 Minute(n), 7 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 1 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: HKEY_CURRENT_USER\SOFTWARE\V71IQL7HI7 (Trojan.FakeAlert) -> No action taken. |
10.06.2010, 16:40 | #19 |
| IE Werbung öffnet sich ständig moin danke erstmal bisher keine werbung mehr bekommen ich habe leider keine ahnung wo ich die textdatei von SUPERAntiSpyware finde mfg |
10.06.2010, 18:30 | #20 |
/// Winkelfunktion /// TB-Süch-Tiger™ | IE Werbung öffnet sich ständig Bitte die Anleitungen genauer lesen, hier sind die Logs versteckt:
__________________ Logfiles bitte immer in CODE-Tags posten |
Themen zu IE Werbung öffnet sich ständig |
adobe, ask toolbar, ask.com, bho, bonjour, excel, explorer, firefox, google, gupdate, hijack, hijackthis, hotkey, icq, internet, internet explorer, local\temp, locker, microsoft, mozilla, mywinlocker, nvidia, plug-in, rundll, security, security scan, server, softonic, software, symantec, syswow64, temp, trojaner, werbung, windows, wmp, öffnet |