|
"click to continue" oder "browse to save" entfernen Liste der Anhänge anzeigen (Anzahl: 1) Hallo liebes Trojaner-Board, ich benötige eure Hilfe. Ich habe mir diese Trojaner eingefangen. Über das Malewarebytes Anti-Malware Programm habe ich 3 infizierte Dateien gefunden und diese in Quarantäne getan. Eine PDF Datei mit den 3 Dateien habe ich angehängt. Wie kann ich jetzt weiter vorgehen und diese Dateien dauerhaft entfernen? Vielen lieben Dank im voraus. Viele Grüße Heike Pfeffer |
:hallo: Die Bereinigung besteht aus mehreren Schritten, die ausgefuehrt werden muessen. Diese Nacheinander abarbeiten und die 3 Logs, die dabei erstellt werden bitte in deine naechste Antwort einfuegen. Sollte der OTL-FIX nicht richig durchgelaufen sein. Fahre nicht fort, sondern melde dies bitte. 1. Schritt Fixen mit OTL Lade (falls noch nicht vorhanden) OTL von Oldtimer herunter und speichere es auf Deinem Desktop (nicht woanders hin).
Code: :OTL
Hinweis für Mitleser: Obiges OTL-Script ist ausschließlich für diesen User in dieser Situtation erstellt worden. Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen! 2. Schritt Downloade dir bitte  Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers danach: 3. Schritt Downloade Dir bitte  AdwCleaner auf deinen Desktop.
|
All processes killed ========== OTL ========== Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{75930A5A-E07B-85EB-FB53-1D9D74754DDD}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{75930A5A-E07B-85EB-FB53-1D9D74754DDD}\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{99079a25-328f-4bd4-be04-00955acaa0a7} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{99079a25-328f-4bd4-be04-00955acaa0a7}\ deleted successfully. C:\PROGRA~2\WI3C8A~1\Datamngr\ToolBar\searchqudtx.dll moved successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:c:\progra~2\saveby~1\sprote~1.dll deleted successfully. c:\progra~2\saveby~1\sprote~1.dll moved successfully. C:\ProgramData\FullRemove.exe moved successfully. ADS C:\ProgramData\Temp:5D7E5A8F deleted successfully. ADS C:\ProgramData\Temp:CDFF58FE deleted successfully. ADS C:\ProgramData\Temp:E36F5B57 deleted successfully. ADS C:\ProgramData\Temp:E1F04E8D deleted successfully. ADS C:\ProgramData\Temp:E3C56885 deleted successfully. ADS C:\ProgramData\Temp:798A3728 deleted successfully. C:\Users\Heike\AppData\Roaming\mozilla\firefox\profiles\r2x90xux.default\extensions\movie2kdownloader@movie2kdownloader.com.xpi moved successfully. ========== FILES ========== File\Folder C:\ProgramData\*.exe not found. File\Folder C:\ProgramData\*.dll not found. File\Folder C:\ProgramData\*.tmp not found. C:\ProgramData\Temp\{B906C11A-D193-4143-9FA7-E2EE8A5A8F21} folder moved successfully. C:\ProgramData\Temp\{5DB1DF0C-AABC-4362-8A6D-CEFDFB036E41} folder moved successfully. C:\ProgramData\Temp\{4968622A-4D3F-489E-9ACE-5FEC4CC0BDE3} folder moved successfully. C:\ProgramData\Temp\{2637C347-9DAD-11D6-9EA2-00055D0CA761} folder moved successfully. C:\ProgramData\Temp\{01FB4998-33C4-4431-85ED-079E3EEFE75D} folder moved successfully. C:\ProgramData\Temp folder moved successfully. File\Folder C:\Users\Heike\*.tmp not found. File\Folder C:\Users\Heike\AppData\*.dll not found. File\Folder C:\Users\Heike\AppData\*.exe not found. C:\Users\Heike\AppData\Local\Temp\G2MInstallerExtractor.exe moved successfully. C:\Users\Heike\AppData\Local\Temp\MSETUP4.EXE moved successfully. C:\Users\Heike\AppData\Local\Temp\uninstall.exe moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\tmp folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\muffin folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\host folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0 folder moved successfully. C:\Users\Heike\AppData\LocalLow\Sun\Java\Deployment\cache folder moved successfully. < ipconfig /flushdns /c > Windows-IP-Konfiguration Der DNS-Aufl”sungscache wurde geleert. C:\Users\Heike\Downloads\cmd.bat deleted successfully. C:\Users\Heike\Downloads\cmd.txt deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 56475 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Heike ->Temp folder emptied: 5775096 bytes ->Temporary Internet Files folder emptied: 11334944 bytes ->FireFox cache emptied: 230572536 bytes ->Google Chrome cache emptied: 202858472 bytes ->Flash cache emptied: 10280 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 1564672 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 4082903 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 959405 bytes RecycleBin emptied: 345904390 bytes Total Files Cleaned = 766,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 03212013_101840 Files\Folders moved on Reboot... C:\Users\Heike\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. File move failed. C:\Windows\temp\dsiwmis.log scheduled to be moved on reboot. PendingFileRenameOperations files... Registry entries deleted on Reboot... Malwarebytes Anti-Rootkit BETA 1.01.0.1021 www.malwarebytes.org Database version: v2013.03.21.04 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 Heike :: HEIKE-PC [administrator] 21.03.2013 11:59:28 mbar-log-2013-03-21 (11-59-28).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P Scan options disabled: Objects scanned: 29430 Time elapsed: 15 minute(s), 57 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end) AdwCleaner Logfile: Code: # AdwCleaner v2.115 - Datei am 21/03/2013 um 12:16:51 erstelltAdwCleaner Logfile: Code: # AdwCleaner v2.115 - Datei am 21/03/2013 um 12:05:30 erstellt |
Sehr gut! :daumenhoc Downloade dir bitte  aswMBR.exe und speichere die Datei auf deinem Desktop.
Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none). danach: ESET Online Scanner
danach: Downloade Dir bitte  SecurityCheck und:
|
aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software Run date: 2013-03-22 09:56:39 ----------------------------- 09:56:39.804 OS Version: Windows x64 6.1.7601 Service Pack 1 09:56:39.804 Number of processors: 2 586 0x100 09:56:39.806 ComputerName: HEIKE-PC UserName: Heike 09:56:41.963 Initialize success 10:06:04.675 AVAST engine defs: 13032200 10:14:24.590 The log file has been saved successfully to "C:\Users\Heike\Downloads\aswMBR.txt" |
Bite nochmal probieren. |
ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=b06196b06daf0b43b923b574f8d9f09a # engine=13451 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-03-22 01:23:21 # local_time=2013-03-22 02:23:21 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=1799 16775165 100 96 114848 17883179 107586 0 # compatibility_mode=5893 16776573 100 94 19068 115588451 0 0 # scanned=163627 # found=1 # cleaned=0 # scan_time=14333 sh=88B947005FE78F2B651657AEDF00A314D206BF3C ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\Users\Heike\AppData\Roaming\Mozilla\Firefox\Profiles\r2x90xux.default\extensions\5107d4bb30832@5107d4bb3086d.com\content\bg.js" aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software Run date: 2013-03-22 09:56:39 ----------------------------- 09:56:39.804 OS Version: Windows x64 6.1.7601 Service Pack 1 09:56:39.804 Number of processors: 2 586 0x100 09:56:39.806 ComputerName: HEIKE-PC UserName: Heike 09:56:41.963 Initialize success 10:06:04.675 AVAST engine defs: 13032200 10:14:24.590 The log file has been saved successfully to "C:\Users\Heike\Downloads\aswMBR.txt" aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software Run date: 2013-03-22 14:48:57 ----------------------------- 14:48:57.106 OS Version: Windows x64 6.1.7601 Service Pack 1 14:48:57.106 Number of processors: 2 586 0x100 14:48:57.108 ComputerName: HEIKE-PC UserName: Heike 14:48:58.541 Initialize success 14:49:22.002 AVAST engine defs: 13032200 14:49:27.710 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 14:49:27.714 Disk 0 Vendor: WDC_WD5000BPVT-22HXZT1 01.01A01 Size: 476940MB BusType: 11 14:49:27.843 Disk 0 MBR read successfully 14:49:27.848 Disk 0 MBR scan 14:49:27.859 Disk 0 Windows 7 default MBR code 14:49:27.922 Disk 0 Partition 1 00 27 Hidden NTFS WinRE NTFS 15872 MB offset 2048 14:49:27.945 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 32507904 14:49:27.957 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 460966 MB offset 32712704 14:49:27.996 Disk 0 scanning C:\Windows\system32\drivers 14:49:42.928 Service scanning 14:50:17.861 Modules scanning 14:50:17.876 Disk 0 trace - called modules: 14:50:17.930 ntoskrnl.exe CLASSPNP.SYS disk.sys ataport.SYS PCIIDEX.SYS hal.dll msahci.sys 14:50:17.942 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80042e63d0] 14:50:17.953 3 CLASSPNP.SYS[fffff8800190743f] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa8003df1060] 14:50:19.905 AVAST engine scan C:\Windows 14:50:23.318 AVAST engine scan C:\Windows\system32 14:55:49.273 AVAST engine scan C:\Windows\system32\drivers 14:56:31.616 AVAST engine scan C:\Users\Heike 15:01:08.366 AVAST engine scan C:\ProgramData 15:03:55.466 Scan finished successfully 15:06:54.262 Disk 0 MBR has been saved successfully to "C:\Users\Heike\Downloads\MBR.dat" 15:06:54.273 The log file has been saved successfully to "C:\Users\Heike\Downloads\aswMBR.txt" Results of screen317's Security Check version 0.99.59 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 9 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.70.0.1100 Java(TM) 6 Update 22 Java(TM) 6 Update 29 Java version out of Date! Adobe Flash Player 11.6.602.180 Adobe Reader 10.1.6 Adobe Reader out of Date! Mozilla Firefox (19.0.2) Google Chrome 25.0.1364.152 Google Chrome 25.0.1364.172 ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe Malwarebytes' Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` |
Aktualisiere:
Java aktualisieren Dein Java ist nicht mehr aktuell. Älter Versionen enthalten Sicherheitslücken, die von Malware missbraucht werden können.
Dann so einstellen: http://www.trojaner-board.de/105213-...tellungen.html Danach poste (kopieren und einfuegen) mir, was du hier angezeigt bekommst: PluginCheck Java deaktivieren Aufgrund derezeitigen Sicherheitsluecke: http://www.trojaner-board.de/122961-...ktivieren.html Danach poste mir (kopieren und einfuegen), was du hier angezeigt bekommst: PluginCheck |
PluginCheck Der PluginCheck hilft die größten Sicherheitslücken beim Surfen im Internet zu schliessen. Überprüft wird: Browser, Flash, Java und Adobe Reader Version. Firefox 19.0 ist aktuell Flash (11,6,602,180) ist aktuell. Java (1,7,0,17) ist aktuell. Adobe Reader 11,0,2,0 ist aktuell. Zurück PluginCheck Der PluginCheck hilft die größten Sicherheitslücken beim Surfen im Internet zu schliessen. Überprüft wird: Browser, Flash, Java und Adobe Reader Version. Firefox 19.0 ist aktuell Flash (11,6,602,180) ist aktuell. Java ist nicht Installiert oder nicht aktiviert. Adobe Reader 11,0,2,0 ist aktuell. Zurück |
Sehr gut! :daumenhoc damit bist Du sauber und entlassen! :) adwCleaner entfernen
Tool-Bereinigung mit OTL Wir werden nun die CleanUp!-Funktion von OTL nutzen, um die meisten Programme, die wir zur Bereinigung installiert haben, wieder von Deinem System zu löschen.
Zurücksetzen der Sicherheitszonen Lasse die Sicherheitszonen wieder zurücksetzen, da diese manipuliert wurden um den Browser für weitere Angriffe zu öffnen. Gehe dabei so vor: http://www.trojaner-board.de/111805-...ecksetzen.html Systemwiederherstellungen leeren Damit der Rechner nicht mit einer infizierten Systemwiederherstellung erneut infiziert werden kann, muessen wir diese leeren. Dazu schalten wir sie einmal aus und dann wieder ein: Systemwiederherstellung deaktivieren Tutorial fuer Windows XP, Windows Vista, Windows 7 Danach wieder aktivieren. Lektuere zum abarbeiten: http://www.trojaner-board.de/90880-d...tallation.html http://www.trojaner-board.de/105213-...tellungen.html PluginCheck http://www.trojaner-board.de/96344-a...-rechners.html Secunia Online Software Inspector http://www.trojaner-board.de/71715-k...iendungen.html http://www.trojaner-board.de/83238-a...sschalten.html http://www.trojaner-board.de/109844-...ren-seite.html PC wird immer langsamer - was tun? |
Hallo John, ich danke dir sehr für deine Hilfe. Ich habe jetzt alles Schritte abgearbeitetet bis zur "Lektüre zur Abarbeitung". Leider ist das Problem noch weiterhin vorhanden. Hab ich irgendwas falsch gemacht oder soll ich die Schritte nochmals durchführen? Vielen lieben Dank und einen schönen Tag. Grüße Heike |
welches Problem ist genau noch vorhanden? Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
|
Hallo John, es ist das Problen, dass ich von Anfang an hatte. Dass Wörter unterstrichen sind und wenn ich mit der Maus in die Nähe komme, dass sich Werbung aufmacht und es steht dann der Text: "click to continue > browse to save" unter der Maus. Liebe Grüße und schöne Ostern :singsing: Heike |
OK, bitte 1. JRT ausfuehren und dann 2. Plugins auflisten Extension List Dumper - Download - Filepony |
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 4.7.4 (03.29.2013:1) OS: Windows 7 Home Premium x64 Ran by Heike on 30.03.2013 at 18:25:24,80 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] hkey_current_user\software\filescout Successfully deleted: [Registry Key] hkey_current_user\software\systweak Successfully deleted: [Registry Key] hkey_local_machine\software\systweak ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\fantastigames" Successfully deleted: [Folder] "C:\Users\Heike\AppData\Roaming\systweak" Successfully deleted: [Folder] "C:\Users\Heike\appdata\locallow\datamngr" Failed to delete: [Folder] "C:\Program Files (x86)\fantastigames" ~~~ FireFox Successfully deleted: [Folder] C:\Users\Heike\AppData\Roaming\mozilla\firefox\profiles\r2x90xux.default\extensions\5107d4bb30832@5107d4bb3086d.com Successfully deleted the following from C:\Users\Heike\AppData\Roaming\mozilla\firefox\profiles\r2x90xux.default\prefs.js user_pref("extensions.5107d4bb308e1.scode", "(function(){try{if('aol.com,mail.google.com,premiumreports.info,search.babylon.com,search.gboxapp.com'.indexOf(window.self.locatio Emptied folder: C:\Users\Heike\AppData\Roaming\mozilla\firefox\profiles\r2x90xux.default\minidumps [299 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 30.03.2013 at 19:06:56,08 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
Punkt 2.? |
Anwendung: Firefox 19.0.2 (20130307023931) Betriebssystem: WINNT (x86-msvc) - Adobe Acrobat 11.0.2.0 - Adobe Acrobat 11.0.2.0 - Adobe Acrobat 11.0.2.0 - Adobe Acrobat 11.0.2.0 - CANON iMAGE GATEWAY Album Plugin Utility for IJ 4.0.0.0 - Citrix Online Web Deployment Plugin 1.0.0.94 1.0.0.94 - Flatcast Viewer Plugin 5.2.2.454 5.2.2.454 - Flatcast Viewer Plugin 5.2.2.454 5.2.2.454 - Google Earth Plugin 7.0.3.8542 - Google Update 1.3.21.135 - McAfee Security Scanner + 3.0.318.0 - Microsoft Office Live Plug-in for Firefox 2.0.4024.1 - Microsoft® Windows Media Player Firefox Plugin 1.0.0.8 - Microsoft® Windows Media Player Firefox Plugin 1.0.0.8 - QuickTime Plug-in 7.7.3 7.7.3.0 - QuickTime Plug-in 7.7.3 7.7.3.0 - QuickTime Plug-in 7.7.3 7.7.3.0 - QuickTime Plug-in 7.7.3 7.7.3.0 - QuickTime Plug-in 7.7.3 7.7.3.0 - QuickTime Plug-in 7.7.3 7.7.3.0 - QuickTime Plug-in 7.7.3 7.7.3.0 - QuickTime Plug-in 7.7.3 7.7.3.0 - QuickTime Plug-in 7.7.3 7.7.3.0 - QuickTime Plug-in 7.7.3 7.7.3.0 - QuickTime Plug-in 7.7.3 7.7.3.0 - QuickTime Plug-in 7.7.3 7.7.3.0 - QuickTime Plug-in 7.7.3 7.7.3.0 - QuickTime Plug-in 7.7.3 7.7.3.0 - QuickTime Plug-in 7.7.3 7.7.3.0 - QuickTime Plug-in 7.7.3 7.7.3.0 - QuickTime Plug-in 7.7.3 7.7.3.0 - QuickTime Plug-in 7.7.3 7.7.3.0 - QuickTime Plug-in 7.7.3 7.7.3.0 - QuickTime Plug-in 7.7.3 7.7.3.0 - QuickTime Plug-in 7.7.3 7.7.3.0 - Shockwave Flash 11.6.602.180 - Shockwave for Director 8.5.1.102 - Shockwave for Director 8.5.1.102 - Silverlight Plug-In 5.1.20125.0 - Windows Live™ Photo Gallery 15.4.3555.308 |
Welche Browser sind betroffen? |
Guten Morgen John, ich arbeite mit Mozilla Firefox. Ich habe allerdings auch Google Chrome installiert, der mir seit längerem eine Fehlermeldung anzeigt, dass mein Profil nicht ordnungsgemäß geöffnet werden kann, weil möglicherweise nicht alle Funktionen zur Verfügung stehen. Ich soll prüfen ob das Profil vorhanden ist und ich Lese- und Schreibzugriffe für die Profilinhalte besitze. Ich habe das versucht zu bereinigen, habe es allerdings nicht hingekriegt. Vielen Dank. Grüße Heike |
Downloade Dir bitte AdwCleaner auf deinen Desktop.
dann beide Browser deinstallieren und wieder neu installieren. Google Chrome - Download - Filepony Firefox - Download - Filepony |
Hallo John, vielen, vielen Dank für deine Hilfe. :dankeschoen: Alleine hätte ich das nie und nimmer geschafft. :nono: Liebe Grüße Heike |
wuensche eine virenfreie Zeit ;) |
| Alle Zeitangaben in WEZ +1. Es ist jetzt 15:33 Uhr. |
Copyright ©2000-2025, Trojaner-Board
