Schritt 1
Die folgenden Programme sind veraltet, stören die Bereinigung oder es handelt sich um Werbesoftware bzw. unerwünschte Software (Adware, PUP) und müssen entfernt werden. - Deinstalliere über Start > Einstellungen > Apps bzw. Start > Systemsteuerung > Programme deinstallieren die folgenden Programme:
- CPUID CPU-Z
- Yahoo Search Set
- Sämtliche Software von Avira
- Starte den Rechner im Anschluss neu auf.
- Gib eine kurze Rückmeldung, ob die Deinstallation erfolgreich war.
Schritt 2- Schließe alle offenen Programme und Internet Browser, damit keine Daten verloren gehen.
- Kopiere den gesamten Inhalt der folgenden Code-Box:
Code:
Start::
CloseProcesses:
CMD: type "C:\Windows\System32\Tasks\NetGroup Benutzerdienst IP"
Task: {3E89F0D3-F434-4260-9C96-9D0166D35AFD} - System32\Tasks\NetGroup Benutzerdienst IP => C:\Program Files (x86)\nodejs\node.exe [15017624 2017-05-02] (Node.js Foundation -> Node.js) <==== ACHTUNG
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Node.js
C:\Program Files (x86)\nodejs
DeleteKey: HKLM\SOFTWARE\Node.js
DeleteKey: HKLM\SOFTWARE\WOW6432Node\Node.js
DeleteKey: HKLM\SOFTWARE\Classes\Installer\Products\4D45993E1218CF443A3DFD6652D48B19
DeleteKey: HKLM\SOFTWARE\Classes\Installer\Products\27AC50E0DD8DF2342ACC8800434A5877
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4D45993E1218CF443A3DFD6652D48B19
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\27AC50E0DD8DF2342ACC8800434A5877
DeleteKey: HKU\.DEFAULT\Software\Node.js
DeleteKey: HKCU\SOFTWARE\Node.js
DeleteKey: HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E39954D4-8121-44FC-A3D3-DF66254DB891}
CHR StartupUrls: Default -> "hxxp://www.trovigo.com/?gd=&ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=5&UP=SPD827F2A0-EA43-4F24-9A8B-529A7C817DEC&SSPV=","hxxp://search.conduit.com/?ctid=CT3318522&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPD827F2A0-EA43-4F24-9A8B-529A7C817DEC&SSPV=","hxxp://www.trovigo.com/?gd=&ctid=CT3319434&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=5&UP=SPD827F2A0-EA43-4F24-9A8B-529A7C817DEC&SSPV=","hxxp://www.sweet-page.com/?type=hppp&ts=1401099680&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1401185841&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1401282798&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1401301728&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1401365419&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1401450402&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1401537528&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1401640827&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1401714084&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1401797494&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1401883523&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1401974106&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1402043026&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1402145571&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1402242603&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1402314092&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1402366070&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1402488220&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1402509554&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1402561892&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1402662156&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1402745155&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1402852550&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1402925659&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1403010100&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1403091633&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1403185782&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1403280263&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1403354214&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1403429756&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1403445437&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1403462761&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1403522831&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1403619871&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1403694583&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1403792878&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1403872839&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1403982212&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1404045043&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1404129599&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1404220371&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1404292030&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1404326422&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1404454567&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1404479389&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1404561706&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1404648187&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1404741255&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1404823782&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1404908638&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.sweet-page.com/?type=hppp&ts=1404992979&from=wld&uid=SAMSUNGXHD502HI_S1VZJ90S236016","hxxp://www.google.com/"
CHR NewTab: Default -> Active:"chrome-extension://ehhkfhegcenpfoanmgfpfhnmdmflkbgk/index.html"
C:\WINDOWS\system32\Tasks\Avira
C:\WINDOWS\system32\Tasks\AVAST Software
C:\Users\Lars\AppData\Roaming\npm
C:\ProgramData\Avira
C:\Program Files (x86)\Avira
C:\Users\Lars\AppData\Roaming\Avira
C:\Users\Lars\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startfenster-Replace
AS: Avira Antivirus (Enabled - Up to date) {33CF8AA2-FA06-4AD4-98AB-332D53DD7FFB}
Hosts:
RemoveProxy:
SystemRestore: On
EmptyTemp:
End:: - Starte nun FRST und klicke direkt den Reparieren Button.
Wichtig: Du brauchst den Inhalt der Code-Box nirgends einfügen, da sich FRST den Code aus der Zwischenablage holt! - Das Tool führt die gewünschten Schritte aus und erstellt eine fixlog.txt im selben Verzeichnis, in dem sich FRST befindet.
- Gegebenenfalls muss dein Rechner neu gestartet werden.
- Poste mir den Inhalt der fixlog.txt mit deiner nächsten Antwort.
Schritt 3- Starte FRST erneut. Vergewissere dich, dass vor Addition.txt ein Haken gesetzt ist und drücke auf Untersuchen.
- FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
- Poste mir beide Logdateien mit deiner nächsten Antwort.
Bitte poste mit deiner nächsten Antwort:- eine Rückmeldung bezüglich der Deinstallationen
- die Logdatei des FRST-Fix (fixlog.txt)
- die beiden neuen Logdateien von FRST (FRST.txt und Addition.txt)
|