![]() |
CWS therealsearch Hallo und guten Tag , ich bin total neu hier und bitte um Hilfe !! Der Escan hat bei mir den Therealsearch gefunden. Weder CWShredder , noch Spybot oder Ad-Aware finden ihn..... Ich habe auch schon mit SpywareDoctor gesucht.....nix ! Ich merke schon , dass auf dem Rechner etwas anders ist als früher ( größere Schrift etc ) Was soll ich denn bloß tun , sollich mal den gesamten Auszug von Escan hier rein kopieren? Ich danke euch schon jetzt für eine Antwort !! Liebe Grüße ,Frank Thu Sep 22 08:54:22 2005 => System found infected with cws.therealsearch Spyware/Adware (waol.exe)! Action taken: No Action Taken. Thu Sep 22 08:54:37 2005 => ***** Scanning Registry for errors created because of Adware/Spyware ***** Thu Sep 22 08:54:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\HijackThis.exe" refers to invalid object "C:\DOKUME~1\FRANKB~1\LOKALE~1\Temp\Temporäres Verzeichnis 2 für hijackthis.zip\hijackthis.exe". Action Taken: No Action Taken. Thu Sep 22 08:54:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\Microsoft Office\Office\XLStart\". Action Taken: No Action Taken. Thu Sep 22 08:54:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\Microsoft Office\Office\Startup\". Action Taken: No Action Taken. Thu Sep 22 08:54:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\ahead\Nero\". Action Taken: No Action Taken. Thu Sep 22 08:54:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\ELLA\MyFengShui\". Action Taken: No Action Taken. Thu Sep 22 08:54:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\ELLA\". Action Taken: No Action Taken. Thu Sep 22 08:54:39 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".000". Action Taken: No Action Taken. Thu Sep 22 08:54:39 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".dbf". Action Taken: No Action Taken. Thu Sep 22 08:54:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "HSA". Action Taken: No Action Taken. Thu Sep 22 08:54:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "InCD!UninstallKey". Action Taken: No Action Taken. Thu Sep 22 08:54:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "SE". Action Taken: No Action Taken. Thu Sep 22 08:54:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "SW". Action Taken: No Action Taken. Thu Sep 22 08:54:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Trojancheck_is1". Action Taken: No Action Taken. Thu Sep 22 08:54:45 2005 => Entry "HKCR\NeroAACType\shell\open\command" refers to invalid object "C:\PROGRA~1\Ahead\Nero\nero.exe "%1"". Action Taken: No Action Taken. Thu Sep 22 08:54:45 2005 => Entry "HKCR\NeroCDExtraType\shell\open\command" refers to invalid object "C:\PROGRA~1\Ahead\Nero\nero.exe "%1"". Action Taken: No Action Taken. Thu Sep 22 08:54:45 2005 => Entry "HKCR\NeroCopyType\shell\open\command" refers to invalid object "C:\PROGRA~1\Ahead\Nero\nero.exe "%1"". Action Taken: No Action Taken. Thu Sep 22 08:54:45 2005 => Entry "HKCR\NeroCueSheetType\shell\open\command" refers to invalid object "C:\PROGRA~1\Ahead\Nero\nero.exe "%1"". Action Taken: No Action Taken. Thu Sep 22 08:54:45 2005 => Entry "HKCR\NeroErrorType\shell\open\command" refers to invalid object "C:\PROGRA~1\Ahead\Nero\nero.exe "%1"". Action Taken: No Action Taken. Thu Sep 22 08:54:45 2005 => Entry "HKCR\NeroHDBackupType\shell\open\command" refers to invalid object "C:\PROGRA~1\Ahead\Nero\nero.exe "%1"". Action Taken: No Action Taken. Thu Sep 22 08:54:45 2005 => Entry "HKCR\NeroUDFISOType\shell\open\command" refers to invalid object "C:\PROGRA~1\Ahead\Nero\nero.exe "%1"". Action Taken: No Action Taken. |
Hallo, Zitat:
Vermutlich ist das aber ein Bug von eScan. |
Alle Zeitangaben in WEZ +1. Es ist jetzt 22:25 Uhr. |
Copyright ©2000-2025, Trojaner-Board