Einmal die AdwCleaner Log Code:
# -------------------------------
# Malwarebytes AdwCleaner 8.0.4.0
# -------------------------------
# Build: 04-03-2020
# Database: 2020-04-08.2 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 05-08-2020
# Duration: 00:00:02
# OS: Windows 10 Pro
# Cleaned: 44
# Failed: 1
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
Deleted C:\Users\Mac\AppData\LocalLow\somotomoviestoolbar1
Deleted C:\Users\Mac\AppData\Local\28050
Deleted C:\Users\Mac\AppData\Local\FilesFrog Update Checker
Deleted C:\Users\Mac\AppData\Local\Media Get LLC
Deleted C:\Users\Mac\AppData\Local\MediaGet2
Deleted C:\Users\Mac\AppData\Local\globalUpdate
Deleted C:\Users\Mac\AppData\Roaming\Hola
Deleted C:\Users\Mac\AppData\Roaming\Media Get LLC
Deleted C:\Users\Mac\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker
Deleted C:\Users\Mac\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaGet2
Deleted C:\Users\Mac\AppData\Roaming\Solvusoft
Deleted C:\Users\Mac\AppData\Roaming\dvdvideosoftiehelpers
***** [ Files ] *****
No malicious files cleaned.
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
Deleted HKCU\Software\Hola
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\hola.org
Deleted HKLM\Software\Hola
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|hola
Deleted HKLM\Software\Wow6432Node\Hola
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
Deleted hxxp://www.mystartsearch.com/?type=hp&ts=1414599731&from=smt&uid=SAMSUNGXHD501LJ_S0MUJ1MP936132
Deleted hxxp://www.mystartsearch.com/?type=hp&ts=1414599731&from=smt&uid=SAMSUNGXHD501LJ_S0MUJ1MP936132
Deleted hxxp://www.mystartsearch.com/?type=hp&ts=1414599731&from=smt&uid=SAMSUNGXHD501LJ_S0MUJ1MP936132
Deleted hxxp://www.mystartsearch.com/?type=hp&ts=1414599731&from=smt&uid=SAMSUNGXHD501LJ_S0MUJ1MP936132
Deleted hxxp://www.mystartsearch.com/?type=hp&ts=1430874384&z=676e8988896a360b58dde5cgdz0c9e1b6mbz8c7b9g&from=cor&uid=WDCXWD2002FAEX-007BA0_WD-WCAY0058072780727
Deleted hxxp://www.mystartsearch.com/?type=hp&ts=1430874384&z=676e8988896a360b58dde5cgdz0c9e1b6mbz8c7b9g&from=cor&uid=WDCXWD2002FAEX-007BA0_WD-WCAY0058072780727
Deleted hxxp://www.mystartsearch.com/?type=hp&ts=1430874384&z=676e8988896a360b58dde5cgdz0c9e1b6mbz8c7b9g&from=cor&uid=WDCXWD2002FAEX-007BA0_WD-WCAY0058072780727
Deleted hxxp://www.mystartsearch.com/?type=hp&ts=1430874384&z=676e8988896a360b58dde5cgdz0c9e1b6mbz8c7b9g&from=cor&uid=WDCXWD2002FAEX-007BA0_WD-WCAY0058072780727
Deleted hxxp://www.sweet-page.com/?type=hp&ts=1401015692&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WX91A732230622306
Deleted hxxp://www.sweet-page.com/?type=hppp&ts=1401114461&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WX91A732230622306
Deleted hxxp://www.sweet-page.com/?type=hppp&ts=1401222017&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WX91A732230622306
Deleted hxxp://www.sweet-page.com/?type=hppp&ts=1401565522&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WX91A732230622306
Deleted hxxp://www.sweet-page.com/?type=hppp&ts=1401642552&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WX91A732230622306
Deleted hxxp://www.sweet-page.com/?type=hppp&ts=1401717934&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WX91A732230622306
Deleted hxxp://www.sweet-page.com/?type=hppp&ts=1401735960&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WX91A732230622306
Deleted hxxp://www.sweet-page.com/?type=hppp&ts=1401780377&from=cor&uid=WDCXWD10JPVX-22JC3T0_WD-WX91A732230622306
Deleted mystartsearch
Deleted mystartsearch
Deleted mystartsearch
Deleted mystartsearch
Deleted mystartsearch
Deleted mystartsearch
Deleted mystartsearch
Deleted mystartsearch
Deleted mystartsearch
Deleted mystartsearch
Deleted mystartsearch
Not Deleted mystartsearch
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Hosts File Entries ] *****
No malicious hosts file entries cleaned.
***** [ Preinstalled Software ] *****
No Preinstalled Software cleaned.
*************************
[+] Delete IFEO
[+] Delete Prefetch
[+] Delete Tracing Keys
[+] Reset Chromium Policies
[+] Reset IE Policies
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [5629 octets] - [08/05/2020 20:27:49]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
Und einmal die mbam log Code:
Malwarebytes
www.malwarebytes.com
-Protokolldetails-
Scan-Datum: 08.05.20
Scan-Zeit: 20:41
Protokolldatei: 8ff71c4c-915b-11ea-8fe1-e03f49819714.json
-Softwaredaten-
Version: 4.1.0.56
Komponentenversion: 1.0.896
Version des Aktualisierungspakets: 1.0.23624
Lizenz: Testversion
-Systemdaten-
Betriebssystem: Windows 10 (Build 18362.657)
CPU: x64
Dateisystem: NTFS
Benutzer: JARVIS\Mac
-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 356742
Erkannte Bedrohungen: 28
In die Quarantäne verschobene Bedrohungen: 28
Abgelaufene Zeit: 2 Min., 6 Sek.
-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung
-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)
Modul: 0
(keine bösartigen Elemente erkannt)
Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)
Registrierungswert: 0
(keine bösartigen Elemente erkannt)
Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)
Daten-Stream: 0
(keine bösartigen Elemente erkannt)
Ordner: 11
PUP.Optional.HTTPBreaker, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, Ersetzt, 457, 455245, , , ,
PUP.Optional.HTTPBreaker, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, Ersetzt, 457, 455245, , , ,
PUP.Optional.HTTPBreaker, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, Ersetzt, 457, 455245, , , ,
Adware.Elex.ShrtCln, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, Ersetzt, 295, 454711, , , ,
PUP.Optional.SweetPage, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, Ersetzt, 443, 455284, , , ,
PUP.Optional.HTTPBreaker, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, Ersetzt, 457, 455245, , , ,
PUP.Optional.ASK, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, Ersetzt, 281, 454825, , , ,
PUP.Optional.HTTPBreaker, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, Ersetzt, 457, 455245, , , ,
PUP.Optional.HTTPBreaker, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, Ersetzt, 457, 455245, , , ,
Adware.Elex.ShrtCln, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, Ersetzt, 295, 454711, , , ,
PUP.Optional.HTTPBreaker, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, Ersetzt, 457, 455245, , , ,
Datei: 17
Malware.Generic.4284883000, C:\USERS\MAC\DESKTOP\PROGRAMME\AISEESOFT TOTAL VIDEO CONVERTER 9.2.28\PATCH.RAR, In Quarantäne, 1000000, 0, 1.0.23624, 665B587D7E8A1397FF662038, dds, 00710445
PUP.Optional.HTTPBreaker, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Ersetzt, 457, 455245, 1.0.23624, , ame,
PUP.Optional.HTTPBreaker, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Ersetzt, 457, 455245, 1.0.23624, , ame,
Adware.Elex.ShrtCln, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Ersetzt, 295, 454711, 1.0.23624, , ame,
PUP.Optional.HTTPBreaker, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Ersetzt, 457, 455245, 1.0.23624, , ame,
Adware.Elex.ShrtCln, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Ersetzt, 295, 454711, 1.0.23624, , ame,
Adware.Elex.ShrtCln, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Ersetzt, 295, 454711, 1.0.23624, , ame,
PUP.Optional.SweetPage, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Ersetzt, 443, 455284, 1.0.23624, , ame,
PUP.Optional.HTTPBreaker, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Ersetzt, 457, 455245, 1.0.23624, , ame,
PUP.Optional.ASK, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Ersetzt, 281, 454825, 1.0.23624, , ame,
PUP.Optional.HTTPBreaker, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Ersetzt, 457, 455245, 1.0.23624, , ame,
Adware.Elex.ShrtCln, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Ersetzt, 295, 454711, 1.0.23624, , ame,
Malware.Generic.3647413877, C:\USERS\MAC\DESKTOP\Games\Dishonored 2.lnk, In Quarantäne, 1000000, 0, , , ,
Malware.Generic.3647413877, E:\GAMES\DISHONORED 2\STP-DH2.EXE, In Quarantäne, 1000000, 0, 1.0.23624, 70D82EE3A5210ABBD9671E75, dds, 00710445
PUP.Optional.HTTPBreaker, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Ersetzt, 457, 455245, 1.0.23624, , ame,
Adware.Elex.ShrtCln, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Ersetzt, 295, 454711, 1.0.23624, , ame,
PUP.Optional.HTTPBreaker, C:\USERS\MAC\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Ersetzt, 457, 455245, 1.0.23624, , ame,
Physischer Sektor: 0
(keine bösartigen Elemente erkannt)
WMI: 0
(keine bösartigen Elemente erkannt)
(end)
|