Trojaner-Board - PC Security 2011 entfernen

PC Security 2011 entfernen

Was ist PC Security 2011?
PC Security 2011 gehört zur selben Malware-Sorte wie Win7 AV. PC Security 2011 ist eine weitere Rogue-Malware in Form einer gefälschten Scan-Software, die mittels eines sog. Trojaners in den PC eindringt und dem Benutzer weissmacht, den PC nach Malware abzusuchen. Diese Software (PC Security 2011) ist ein Fake und selbst eine Schadsoftware und sollte nicht gekauft werden.

Da solche Software wie PC Security 2011 sich gegen jede Entfernung wehren wird und PC Security 2011 oftmals noch Rootkits mitinstalliert, sollte eine Neuinstallation des Systems in Erwägung gezogen werden.

Verbreitet wird Scareware wie PC Security 2011 nicht mehr ausschliesslich über 'dubiose Seiten' für Cracks, KeyGens und Warez, sondern auch seriöse Seiten werden zunehmend für die Verbreitung dieser mißbraucht (http://www.trojaner-board.de/90880-d...tallation.html).

Der wichtigste Schutz vor einer Infizierung ist ein aktuelles Windows (mit allen Updates) und aktuelle Drittanbietersoftware wie Java oder Adobe Flash!

http://www.trojaner-board.de/attachm...1&d=1297312853 http://www.trojaner-board.de/attachm...1&d=1297312853

http://www.trojaner-board.de/attachm...1&d=1297312853 http://www.trojaner-board.de/attachm...1&d=1297312853 http://www.trojaner-board.de/attachm...1&d=1297312853

Symptome von PC Security 2011:

ständige Fake Virenmeldungen von PC Security 2011
PC läuft seit PC Security 2011 langsamer als üblich

http://www.trojaner-board.de/attachm...1&d=1297312853 http://www.trojaner-board.de/attachm...1&d=1297312853

http://www.trojaner-board.de/attachm...1&d=1297312853 http://www.trojaner-board.de/attachm...1&d=1297312853

Fake-Meldungen von PC Security 2011:

PC Security 2011 - Runtime protection
PC Security 2011 has blocked spyware activity for this program.
iexplore.exe is probably infected with Conficker.B virus. This worm attempts to send your personal information to remote host through iexplore.exe.

Windows TaskManager has encountered a problem and needs to close. We are sorry for the inconvenience.

Warning! Adware Detected!
Netsky.Q.adware has been detected on your PC. A is a spyware program that may perform opening of a number of website popup's and ad's.

Windows Defender Warning
Review harmful of potetnially unwanted software
Windows defender detected programs that might compromise your private or damage your computer.
Name: Conficker.B virus
Alert Level: Severe

Warning! Identity theft attempt detected
Hidden connection to IP: <ip address>
Target: Microsoft Corporation keys

In order to ensure that your Windows system has highest level of protection, you should update your security software regulary.

Spyware Warning
Sality.AM virus Spyware detected.
Spyware try to hide associated malicious programs.

Dateien von PC Security 2011:

Code:

%UserProfile%\Application Data\.csrss

%UserProfile%\Application Data\<zufällig>.exe

%UserProfile%\Application Data\413A.C81

%UserProfile%\Application Data\<zufällig>.exe

%UserProfile%\Application Data\<zufällig>.exe

%UserProfile%\Application Data\dwm.exe

%UserProfile%\Application Data\Microsoft\conhost.exe

%UserProfile%\Application Data\PC Security 2011\

%UserProfile%\Application Data\PC Security 2011\_001.png

%UserProfile%\Application Data\PC Security 2011\_002.png

%UserProfile%\Application Data\PC Security 2011\_005.png

%UserProfile%\Application Data\PC Security 2011\_006.png

%UserProfile%\Application Data\PC Security 2011\_007.png

%UserProfile%\Application Data\PC Security 2011\_ico1.png

%UserProfile%\Application Data\PC Security 2011\_ico2.png

%UserProfile%\Application Data\PC Security 2011\_ico3.png

%UserProfile%\Application Data\PC Security 2011\activate_01.png

%UserProfile%\Application Data\PC Security 2011\activate_02.png

%UserProfile%\Application Data\PC Security 2011\activate_03.png

%UserProfile%\Application Data\PC Security 2011\activate_hdr_1.png

%UserProfile%\Application Data\PC Security 2011\activate_hdr_2.png

%UserProfile%\Application Data\PC Security 2011\activate_hdr_bg.png

%UserProfile%\Application Data\PC Security 2011\at.png

%UserProfile%\Application Data\PC Security 2011\balloon_174.png

%UserProfile%\Application Data\PC Security 2011\balloon_201.png

%UserProfile%\Application Data\PC Security 2011\bg_button_a.png

%UserProfile%\Application Data\PC Security 2011\bg_button_span.png

%UserProfile%\Application Data\PC Security 2011\blank.gif

%UserProfile%\Application Data\PC Security 2011\block_p_01.png

%UserProfile%\Application Data\PC Security 2011\block_p_03.png

%UserProfile%\Application Data\PC Security 2011\blue.png

%UserProfile%\Application Data\PC Security 2011\critical_202.png

%UserProfile%\Application Data\PC Security 2011\defender_001.png

%UserProfile%\Application Data\PC Security 2011\defender_002.png

%UserProfile%\Application Data\PC Security 2011\defender_003.png

%UserProfile%\Application Data\PC Security 2011\defender_004.png

%UserProfile%\Application Data\PC Security 2011\defender_005.png

%UserProfile%\Application Data\PC Security 2011\defender_006.png

%UserProfile%\Application Data\PC Security 2011\defender_007.png

%UserProfile%\Application Data\PC Security 2011\defender_008.png

%UserProfile%\Application Data\PC Security 2011\filder.png

%UserProfile%\Application Data\PC Security 2011\header.png

%UserProfile%\Application Data\PC Security 2011\i_1.png

%UserProfile%\Application Data\PC Security 2011\i_2.png

%UserProfile%\Application Data\PC Security 2011\i_3.png

%UserProfile%\Application Data\PC Security 2011\level.png

%UserProfile%\Application Data\PC Security 2011\loading.gif

%UserProfile%\Application Data\PC Security 2011\logo.png

%UserProfile%\Application Data\PC Security 2011\m.png

%UserProfile%\Application Data\PC Security 2011\off.png

%UserProfile%\Application Data\PC Security 2011\on.png

%UserProfile%\Application Data\PC Security 2011\progressbar.gif

%UserProfile%\Application Data\PC Security 2011\progressbar_bg_1.gif

%UserProfile%\Application Data\PC Security 2011\prot.png

%UserProfile%\Application Data\PC Security 2011\scan_res_icon.png

%UserProfile%\Application Data\PC Security 2011\t01.png

%UserProfile%\Application Data\PC Security 2011\t02.png

%UserProfile%\Application Data\PC Security 2011\update.png

%UserProfile%\Application Data\PC Security 2011\w1.png

%UserProfile%\Application Data\PC Security 2011\w2.png

%UserProfile%\Application Data\PC Security 2011\w3.png

%UserProfile%\Application Data\PC Security 2011\w4.png

%UserProfile%\Application Data\PC Security 2011\w5.png

%UserProfile%\Application Data\PC Security 2011\warning_popup_072.png

%UserProfile%\Application Data\PC Security 2011\warning_popup_200.png

%UserProfile%\Application Data\Uninstall_Security\

%UserProfile%\Application Data\Uninstall_Security\uninstall_security.lnk

%Temp%\1.tmp

%Temp%\1.tmp.exe

%Temp%\4.tmp

%Temp%\csrss.exe

%UserProfile%\Start Menu\Programs\PC Security 2011\

%UserProfile%\Start Menu\Programs\PC Security 2011\PC Security 2011.lnk

%UserProfile%\Start Menu\Programs\Startup\PC2011.lnk

c:\Program Files\PC Security 2011\

c:\Program Files\PC Security 2011\PC2011.exe

Registry-Einträge von PC Security 2011:

Code:

HKEY_CURRENT_USER\Software\PC Security 2011

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = 'http=127.0.0.1:53495'

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "conhost" = '%UserProfile%\Application Data\Microsoft\conhost.exe'

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = '1'

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows "load" = '%Temp%\csrss.exe'

PC Security 2011 im HijackThis-Log:

Code:

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:53495

F3 - REG:win.ini: load=%Temp%\csrss.exe

O1 - Hosts: 195.3.144.159 cad-pharmacy.com

O1 - Hosts: 195.3.144.159 canadian-discount-pharmacy.com

O1 - Hosts: 195.3.144.159 canadian-drugshop.com

O1 - Hosts: 195.3.144.159 canadian-healthcare-shop.com

O1 - Hosts: 195.3.144.159 canadian-medshop-247.com

O1 - Hosts: 195.3.144.159 canadian-medshop.com

O1 - Hosts: 195.3.144.159 canadian-pharmacy-store.com

O1 - Hosts: 195.3.144.159 canadian-pharmstore.com

O1 - Hosts: 195.3.144.159 canadian-pharmstore.net

O1 - Hosts: 195.3.144.159 canadian-pharmstore.org

O1 - Hosts: 195.3.144.159 ed-love-pills.com

O1 - Hosts: 195.3.144.159 euro-drugs-shop.com

O1 - Hosts: 195.3.144.159 euro-drugs-store.com

O1 - Hosts: 195.3.144.159 european-drugstore-online.com

O1 - Hosts: 195.3.144.159 european-medications.info

O1 - Hosts: 195.3.144.159 european-medications.org

O1 - Hosts: 195.3.144.159 european-medicines.info

O1 - Hosts: 195.3.144.159 european-medicines.org

O1 - Hosts: 195.3.144.159 love-medications.com

O1 - Hosts: 195.3.144.159 medshop-247.com

O1 - Hosts: 195.3.144.159 mycanadianhealthcare.com

O1 - Hosts: 195.3.144.159 natural-drugshop.com

O1 - Hosts: 195.3.144.159 nature-medications.com

O1 - Hosts: 195.3.144.159 online-canadian-drugshop.com

O1 - Hosts: 195.3.144.159 online-european-drugstore.com

O1 - Hosts: 195.3.144.159 pharmacy-discounter.com

O1 - Hosts: 195.3.144.159 pro-canadian-medications.com

O1 - Hosts: 195.3.144.159 professional-drugstore.com

O1 - Hosts: 195.3.144.159 professional-meds.com

O1 - Hosts: 195.3.144.159 unitedpharmacy.be

O1 - Hosts: 195.3.144.159 unitedpharmacy.ch

O1 - Hosts: 195.3.144.159 unitedpharmacy.co.uk

O1 - Hosts: 195.3.144.159 unitedpharmacy.de

O1 - Hosts: 195.3.144.159 unitedpharmacy.es

O1 - Hosts: 195.3.144.159 unitedpharmacy.se

O1 - Hosts: 195.3.144.159 www.canadian-pharamacy-drugstore.com

O1 - Hosts: 195.3.144.159 www.your-drug-store.com

O1 - Hosts: 195.3.144.159 your-canadian-medshop.com

O1 - Hosts: 195.3.144.159 aboutphentrimine.com

O1 - Hosts: 195.3.144.159 acomplia-online-store.com

O1 - Hosts: 195.3.144.159 all-about-cialis.com

O1 - Hosts: 195.3.144.159 all-about-propecia.com

O1 - Hosts: 195.3.144.159 cialis-for-you.com

O1 - Hosts: 195.3.144.159 everything-about-cialis.com

O1 - Hosts: 195.3.144.159 everything-about-propecia.com

O1 - Hosts: 195.3.144.159 everything-about-viagra.com

O1 - Hosts: 195.3.144.159 propecia-for-you.com

O1 - Hosts: 195.3.144.159 viagra-drugstore-online.com

O1 - Hosts: 195.3.144.159 viagra-drugstore.net

O1 - Hosts: 195.3.144.159 viagra-drugstore.org

O1 - Hosts: 195.3.144.159 onlinepharmacycr.com

O1 - Hosts: 195.3.144.159 accessrx.com

O4 - HKLM\..\Run: [conhost] %UserProfile%\Application Data\Microsoft\conhost.exe

O4 - Startup: PC2011.lnk = C:\Program Files\PC Security 2011\PC2011.exe