Seite 1 von 2 12 LetzteLetzte
Ergebnis 1 bis 10 von 12
  1. #1
    Einsteiger
    Registriert seit
    06.09.2012
    Beiträge
    5

    GVU Virus 2.07 (Windows 7 )

    auch ich habe leider das Problem und benötige Hilfe.

    Scan wurde mit OTL nach Anleitung durchgeführt. (siehe Anhang)

    Danke im Voraus

    Emre
    Angehängte Dateien Angehängte Dateien

  2. #2
    Generation C64 Avatar von CG
    Registriert seit
    31.08.2011
    Ort
    Kölle
    Beiträge
    3.877


    Hallo Emre1, ein System zu bereinigen ist aufwändig und mit einiger Arbeit für dich verbunden. Es ist immer am Sichersten und meist am Schnellsten bei Schädlingen auf dem Rechner eine Neuinstallation durchzuführen.
    Bevor wir anfangen, hier noch ein paar lästige, aber wichtige und grundsätzliche Punkte, die von dir zu beachten sind:

    • Es gibt grundsätzlich keinen Support per privater Nachricht oder Email.
    • Wir bereinigen keine Rechner, die geschäftlich/gewerblich genutzt werden, dafür ist der Administrator oder lokale Fachhandel zuständig.
    • Wir bereinigen keine Rechner, die Cracks, Keygens und Konsorten oder kurz, gestohlene Software enthalten.
    • Es ist wichtig, dass du solange mitarbeitest, bis alle Punkte abgearbeitet sind und das Signal kommt, dass die Bereinigung beendet ist, auch wenn die Symptome vielleicht schon nach den ersten Aktionen verschwunden sein sollten.
    • Solltest du eigenmächtig die Bereinigung abbrechen und dich danach noch einmal mit neuen Problemen melden, kannst du sicher sein, von mir ignoriert zu werden.
    • Evtl. vorhandene persönliche Daten und Nachnamen kannst du durch xyz ersetzen.
    • Während unserer Reinigungsphase nur Programme installieren, Programme starten und Scans durchführen, die wir anordnen.
    • Arbeite die Punkte unbedingt in der vorgegebenen Reihenfolge ab. Sollte etwas nicht klar sein, dann frage nach. Sollte etwas Probleme bereiten, dann berichte es. In jedem Fall warte auf weitere Anweisungen, bevor du den nächsten Punkt startest.


    Fixen mit OTL

    Hiermit fixen wir unnötige oder schädliche Einträge.

    Lade (falls noch nicht vorhanden) OTL von Oldtimer herunter und speichere es auf Deinem Desktop (nicht woanders hin).
    • Starte die OTL.exe.
      Vista- und Windows 7-User starten mit Rechtsklick auf das Programm-Icon und wählen "Als Administrator ausführen".
    • Kopiere folgendes Skript in das Textfeld unterhalb von Benuterdefinierte Scans/Fixes:

    Code:
    :OTL
    IE - HKU\S-1-5-21-616585440-3720934190-237172692-1001\..\SearchScopes,DefaultScope = {B6A609F2-AD1D-45A7-B16E-B4DAC7725D89}
    IE - HKU\S-1-5-21-616585440-3720934190-237172692-1001\..\SearchScopes\{B6A609F2-AD1D-45A7-B16E-B4DAC7725D89}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MDNF_enDE393
    O33 - MountPoints2\{279744c6-d5c5-11e1-ae98-685d430c4edc}\Shell - "" = AutoRun
    O33 - MountPoints2\{279744c6-d5c5-11e1-ae98-685d430c4edc}\Shell\AutoRun\command - "" = I:\setup_vmc_lite.exe /checkApplicationPresence
    O33 - MountPoints2\{a5da6c0f-d0b3-11e1-a3b0-685d430c4edc}\Shell - "" = AutoRun
    O33 - MountPoints2\{a5da6c0f-d0b3-11e1-a3b0-685d430c4edc}\Shell\AutoRun\command - "" = I:\setup_vmc_lite.exe /checkApplicationPresence
    O33 - MountPoints2\{b6150530-c561-11e1-aba6-806e6f6e6963}\Shell - "" = AutoRun
    O33 - MountPoints2\{b6150530-c561-11e1-aba6-806e6f6e6963}\Shell\AutoRun\command - "" = F:\cdstart.exe
    O33 - MountPoints2\{de4adde1-cf27-11e1-9a1e-685d430c4edc}\Shell - "" = AutoRun
    O33 - MountPoints2\{de4adde1-cf27-11e1-9a1e-685d430c4edc}\Shell\AutoRun\command - "" = I:\setup_vmc_lite.exe /checkApplicationPresence
    O33 - MountPoints2\{de4ade66-cf27-11e1-9a1e-685d430c4edc}\Shell - "" = AutoRun
    O33 - MountPoints2\{de4ade66-cf27-11e1-9a1e-685d430c4edc}\Shell\AutoRun\command - "" = J:\setup_vmc_lite.exe /checkApplicationPresence
    O33 - MountPoints2\I\Shell - "" = AutoRun
    O33 - MountPoints2\I\Shell\AutoRun\command - "" = I:\setup_vmc_lite.exe /checkApplicationPresence
    [2012.09.04 13:53:03 | 004,503,728 | ---- | M] () -- C:\ProgramData\ism_0_llatsni.pad
    [2012.08.27 16:20:36 | 000,001,893 | ---- | M] () -- C:\Users\Emre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
    
    :Files
    ipconfig /flushdns /c
    C:\Users\Emre\AppData\Local\Temp
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache
    
    :Commands
    [emptytemp]
    • Schließe alle Programme ink. z. B. Verhaltensüberwachung von Antivirus-Programmen.
    • Klicke auf den Fix Button.
    • Wenn OTL einen Neustart verlangt, bitte zulassen.
    • Kopiere den Inhalt des Logfiles hier in Code-Tags in Deinen Thread.
      Nachträglich kannst Du das Logfile hier einsehen => C:\_OTL\MovedFiles\<datum_nummer.log>


    Hinweis für Mitleser: Obiges OTL-Script ist ausschließlich für diesen User in dieser Situtation erstellt worden.
    Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen!
    Grüße
    CG (ABBZ)
    .
    .
    .

    ABBZ | Botfrei-Blog | facebook | twitter | Google+
    Kein Support über PN oder Mail!

  3. #3
    Einsteiger
    Registriert seit
    06.09.2012
    Beiträge
    5
    Code:
    All processes killed
    ========== OTL ==========
    HKEY_USERS\S-1-5-21-616585440-3720934190-237172692-1001\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
    Registry key HKEY_USERS\S-1-5-21-616585440-3720934190-237172692-1001\Software\Microsoft\Internet Explorer\SearchScopes\{B6A609F2-AD1D-45A7-B16E-B4DAC7725D89}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B6A609F2-AD1D-45A7-B16E-B4DAC7725D89}\ not found.
    Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{279744c6-d5c5-11e1-ae98-685d430c4edc}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{279744c6-d5c5-11e1-ae98-685d430c4edc}\ not found.
    Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{279744c6-d5c5-11e1-ae98-685d430c4edc}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{279744c6-d5c5-11e1-ae98-685d430c4edc}\ not found.
    File I:\setup_vmc_lite.exe /checkApplicationPresence not found.
    Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a5da6c0f-d0b3-11e1-a3b0-685d430c4edc}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a5da6c0f-d0b3-11e1-a3b0-685d430c4edc}\ not found.
    Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a5da6c0f-d0b3-11e1-a3b0-685d430c4edc}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a5da6c0f-d0b3-11e1-a3b0-685d430c4edc}\ not found.
    File I:\setup_vmc_lite.exe /checkApplicationPresence not found.
    Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b6150530-c561-11e1-aba6-806e6f6e6963}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b6150530-c561-11e1-aba6-806e6f6e6963}\ not found.
    Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b6150530-c561-11e1-aba6-806e6f6e6963}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b6150530-c561-11e1-aba6-806e6f6e6963}\ not found.
    File F:\cdstart.exe not found.
    Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{de4adde1-cf27-11e1-9a1e-685d430c4edc}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{de4adde1-cf27-11e1-9a1e-685d430c4edc}\ not found.
    Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{de4adde1-cf27-11e1-9a1e-685d430c4edc}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{de4adde1-cf27-11e1-9a1e-685d430c4edc}\ not found.
    File I:\setup_vmc_lite.exe /checkApplicationPresence not found.
    Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{de4ade66-cf27-11e1-9a1e-685d430c4edc}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{de4ade66-cf27-11e1-9a1e-685d430c4edc}\ not found.
    Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{de4ade66-cf27-11e1-9a1e-685d430c4edc}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{de4ade66-cf27-11e1-9a1e-685d430c4edc}\ not found.
    File J:\setup_vmc_lite.exe /checkApplicationPresence not found.
    Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\I\ deleted successfully.
    Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\I\ not found.
    File I:\setup_vmc_lite.exe /checkApplicationPresence not found.
    C:\ProgramData\ism_0_llatsni.pad moved successfully.
    C:\Users\Emre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk moved successfully.
    ========== FILES ==========
    < ipconfig /flushdns /c >
    Windows-IP-Konfiguration
    Der DNS-Aufl”sungscache wurde geleert.
    C:\Users\Emre\Desktop\virus\cmd.bat deleted successfully.
    C:\Users\Emre\Desktop\virus\cmd.txt deleted successfully.
    C:\Users\Emre\AppData\Local\Temp\{F0B60E79-8816-47D8-B9CC-F978B747EF88} folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\{EEFF7BB6-BC5F-471F-9B02-4C49CB3A113D} folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\{E97D2B8C-44CF-4A52-A536-D2521C1FC649} folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\{C761876F-FCF1-4310-8EB7-4C885A8B1009} folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\{BFC1BEFC-39D7-4095-8A67-A1CEDB4F331B} folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\{BF8B2457-11F5-4068-9140-E1761F88DE34} folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\{BB50A7BC-6F26-4E46-A2EF-B45825ABAD5F} folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\{8B443206-15D8-4FD3-87DD-928E7F35F507} folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\{840D1A3A-EB38-48DF-AC9A-A964B4F5DC63} folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\{69fac44a-9ac7-4cb9-ab65-271fa262af94} folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\{5DAB820F-A01E-47CE-AC55-476BD868D4DF} folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\{5A1FA3C2-87AD-48D5-B6D4-F30B61461493} folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\{4EBC2C12-8BF5-43E8-ACAE-4B1FE204BF2F} folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\{4428EC55-08C5-4C4F-BB6A-616AC9F09049} folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\{2C9B95E1-2895-4028-AB2C-3FBAE7BACC00} folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\{2B162EC4-8862-45F1-9F58-3DCC5A448B97} folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\{03AEF6A3-C1E5-4306-8290-8F50E34CFF95} folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\www.minecraft.net\Minecraft\natives folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\www.minecraft.net\Minecraft folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\www.minecraft.net folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\WPDNSE folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\tmp9D8C.tmp folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\Temporary Internet Files\Content.IE5\ZZNMMAJO folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\Temporary Internet Files\Content.IE5\LOPSMK0I folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\Temporary Internet Files\Content.IE5\GSQICTQB folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\Temporary Internet Files\Content.IE5\6KFSPE9I folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\Temporary Internet Files\Content.IE5 folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\Temporary Internet Files folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\Temp1_sami_v1.1.zip folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\OIS\temp folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\OIS\cacheFiles folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\OIS folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\msdtadmin folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\msdt folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\Microsoft Visual C++ 2010  x86 Redistributable Setup_10.0.30319 folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst77876740654304970221345808211176\META-INF folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst77876740654304970221345808211176\com\sijobe\swing\.svn\tmp folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst77876740654304970221345808211176\com\sijobe\swing\.svn\text-base folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst77876740654304970221345808211176\com\sijobe\swing\.svn folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst77876740654304970221345808211176\com\sijobe\swing folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst77876740654304970221345808211176\com\sijobe\installer\v1copy folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst77876740654304970221345808211176\com\sijobe\installer folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst77876740654304970221345808211176\com\sijobe\images\.svn\tmp folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst77876740654304970221345808211176\com\sijobe\images\.svn\text-base folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst77876740654304970221345808211176\com\sijobe\images\.svn\prop-base folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst77876740654304970221345808211176\com\sijobe\images\.svn folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst77876740654304970221345808211176\com\sijobe\images folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst77876740654304970221345808211176\com\sijobe folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst77876740654304970221345808211176\com folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst77876740654304970221345808211176 folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst56150623095541185641345808336585\META-INF folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst56150623095541185641345808336585\com\sijobe\swing\.svn\tmp folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst56150623095541185641345808336585\com\sijobe\swing\.svn\text-base folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst56150623095541185641345808336585\com\sijobe\swing\.svn folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst56150623095541185641345808336585\com\sijobe\swing folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst56150623095541185641345808336585\com\sijobe\installer\v1copy folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst56150623095541185641345808336585\com\sijobe\installer folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst56150623095541185641345808336585\com\sijobe\images\.svn\tmp folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst56150623095541185641345808336585\com\sijobe\images\.svn\text-base folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst56150623095541185641345808336585\com\sijobe\images\.svn\prop-base folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst56150623095541185641345808336585\com\sijobe\images\.svn folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst56150623095541185641345808336585\com\sijobe\images folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst56150623095541185641345808336585\com\sijobe folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst56150623095541185641345808336585\com folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst56150623095541185641345808336585 folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst54486238473730539291345808057719\META-INF folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst54486238473730539291345808057719\com\sijobe\swing\.svn\tmp folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst54486238473730539291345808057719\com\sijobe\swing\.svn\text-base folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst54486238473730539291345808057719\com\sijobe\swing\.svn folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst54486238473730539291345808057719\com\sijobe\swing folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst54486238473730539291345808057719\com\sijobe\installer\v1copy folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst54486238473730539291345808057719\com\sijobe\installer folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst54486238473730539291345808057719\com\sijobe\images\.svn\tmp folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst54486238473730539291345808057719\com\sijobe\images\.svn\text-base folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst54486238473730539291345808057719\com\sijobe\images\.svn\prop-base folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst54486238473730539291345808057719\com\sijobe\images\.svn folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst54486238473730539291345808057719\com\sijobe\images folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst54486238473730539291345808057719\com\sijobe folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst54486238473730539291345808057719\com folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst54486238473730539291345808057719 folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst51689802060505129071345808531847\META-INF folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst51689802060505129071345808531847\com\sijobe\swing\.svn\tmp folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst51689802060505129071345808531847\com\sijobe\swing\.svn\text-base folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst51689802060505129071345808531847\com\sijobe\swing\.svn folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst51689802060505129071345808531847\com\sijobe\swing folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst51689802060505129071345808531847\com\sijobe\installer\v1copy folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst51689802060505129071345808531847\com\sijobe\installer folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst51689802060505129071345808531847\com\sijobe\images\.svn\tmp folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst51689802060505129071345808531847\com\sijobe\images\.svn\text-base folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst51689802060505129071345808531847\com\sijobe\images\.svn\prop-base folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst51689802060505129071345808531847\com\sijobe\images\.svn folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst51689802060505129071345808531847\com\sijobe\images folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst51689802060505129071345808531847\com\sijobe folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst51689802060505129071345808531847\com folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst51689802060505129071345808531847 folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst4736260934402705421345808828581\META-INF folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst4736260934402705421345808828581\com\sijobe\swing\.svn\tmp folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst4736260934402705421345808828581\com\sijobe\swing\.svn\text-base folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst4736260934402705421345808828581\com\sijobe\swing\.svn folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst4736260934402705421345808828581\com\sijobe\swing folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst4736260934402705421345808828581\com\sijobe\installer\v1copy folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst4736260934402705421345808828581\com\sijobe\installer folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst4736260934402705421345808828581\com\sijobe\images\.svn\tmp folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst4736260934402705421345808828581\com\sijobe\images\.svn\text-base folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst4736260934402705421345808828581\com\sijobe\images\.svn\prop-base folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst4736260934402705421345808828581\com\sijobe\images\.svn folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst4736260934402705421345808828581\com\sijobe\images folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst4736260934402705421345808828581\com\sijobe folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst4736260934402705421345808828581\com folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst4736260934402705421345808828581 folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst34703986970919501741345808367346\net\minecraft\client folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst34703986970919501741345808367346\net\minecraft folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst34703986970919501741345808367346\net folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst34703986970919501741345808367346\META-INF folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst34703986970919501741345808367346 folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst25154474046636365011345808844393\net\minecraft\client folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst25154474046636365011345808844393\net\minecraft folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst25154474046636365011345808844393\net folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst25154474046636365011345808844393\META-INF folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst25154474046636365011345808844393 folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst18532689526656687731345808074975\net\minecraft\client folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst18532689526656687731345808074975\net\minecraft folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst18532689526656687731345808074975\net folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst18532689526656687731345808074975\META-INF folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\mcmodinst18532689526656687731345808074975 folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\Low\hsperfdata_Emre folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\Low\Google Toolbar folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\Low folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\ispED35.tmp folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\ish12251647\sdk folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\ish12251647\locale folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\ish12251647\images folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\ish12251647\defaultOffer\TechTracker folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\ish12251647\defaultOffer\images folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\ish12251647\defaultOffer folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\ish12251647\css folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\ish12251647 folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\is1598539481 folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\ICReinstall folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\hsperfdata_Emre folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\History\History.IE5 folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\History folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\Google Toolbar folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\gm_ttt_65205 folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\CyberLink\PowerDVD10\Thumbnail folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\CyberLink\PowerDVD10 folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\CyberLink folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\Cookies folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\CDBurnerXP-updates folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\Adobe\Acrobat\10.0 folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\Adobe\Acrobat folder moved successfully.
    C:\Users\Emre\AppData\Local\Temp\Adobe folder moved successfully.
    Folder move failed. C:\Users\Emre\AppData\Local\Temp scheduled to be moved on reboot.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\tmp folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\muffin folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\host folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0 folder moved successfully.
    C:\Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache folder moved successfully.
    ========== COMMANDS ==========
     
    [EMPTYTEMP]
     
    User: All Users
     
    User: Default
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 33170 bytes
    ->Flash cache emptied: 56475 bytes
     
    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 0 bytes
     
    User: Emre
    ->Temp folder emptied: 1406686648 bytes
    ->Temporary Internet Files folder emptied: 290434658 bytes
    ->Flash cache emptied: 61828 bytes
     
    User: Public
     
    User: UpdatusUser
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 56475 bytes
     
    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 0 bytes
    %systemroot%\System32 .tmp files removed: 0 bytes
    %systemroot%\System32 (64bit) .tmp files removed: 0 bytes
    %systemroot%\System32\drivers .tmp files removed: 0 bytes
    Windows Temp folder emptied: 108157197 bytes
    %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
    %systemroot%\sysnative\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 749 bytes
    RecycleBin emptied: 154303126 bytes
     
    Total Files Cleaned = 1.869,00 mb
     
     
    OTL by OldTimer - Version 3.2.61.1 log created on 09072012_151522

  4. #4
    Einsteiger
    Registriert seit
    06.09.2012
    Beiträge
    5
    Logdatei: Scan mit Malwarebytes

    Code:
    Malwarebytes Anti-Malware (Test) 1.62.0.1300
    www.malwarebytes.org
    
    Datenbank Version: v2012.09.07.08
    
    Windows 7 Service Pack 1 x64 NTFS (Abgesichertenmodus)
    Internet Explorer 9.0.8112.16421
    Emre :
    
    
    
    07.09.2012 15:37:15
    mbam-log-2012-09-07 (15-37-15).txt
    
    Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|G:\|H:\|)
    Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
    Deaktivierte Suchlaufeinstellungen: P2P
    Durchsuchte Objekte: 405616
    Laufzeit: 13 Minute(n), 52 Sekunde(n)
    
    Infizierte Speicherprozesse: 0
    (Keine bösartigen Objekte gefunden)
    
    Infizierte Speichermodule: 0
    (Keine bösartigen Objekte gefunden)
    
    Infizierte Registrierungsschlüssel: 0
    (Keine bösartigen Objekte gefunden)
    
    Infizierte Registrierungswerte: 0
    (Keine bösartigen Objekte gefunden)
    
    Infizierte Dateiobjekte der Registrierung: 0
    (Keine bösartigen Objekte gefunden)
    
    Infizierte Verzeichnisse: 0
    (Keine bösartigen Objekte gefunden)
    
    Infizierte Dateien: 0
    (Keine bösartigen Objekte gefunden)
    
    (Ende)

  5. #5
    Generation C64 Avatar von CG
    Registriert seit
    31.08.2011
    Ort
    Kölle
    Beiträge
    3.877
    Sperrbildschirm kommt also nicht mehr?

    Weiter geht's hiermit:

    Eset Online Scanner

    Bitte während des Online-Scans Anti-Virus-Programm und Firewall deaktivieren.

    • Lade und starte Eset Smartinstaller
    • Haken setzen bei YES, I accept the Terms of Use.
    • Klick auf Start.
    • Haken setzen bei Remove found threads und Scan archives.
    • Klick auf Start.
    • Signaturen werden heruntergeladen, der Scan beginnt automatisch.
    • Finish drücken.
    • Browser schließen.
    • Explorer öffnen.
    • C:\Programme\Eset\EsetOnlineScanner\log.txt (manchmal auch C:\Programme\Eset\log.txt) suchen und mit Deinem Editor öffnen.
    • Logfile hier posten.

    Deinstallation: Systemsteuerung => Software => Eset Online Scanner V3 entfernen. Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset
    Grüße
    CG (ABBZ)
    .
    .
    .

    ABBZ | Botfrei-Blog | facebook | twitter | Google+
    Kein Support über PN oder Mail!

  6. #6
    Generation C64 Avatar von CG
    Registriert seit
    31.08.2011
    Ort
    Kölle
    Beiträge
    3.877
    Hallo? Bist du noch da?
    Grüße
    CG (ABBZ)
    .
    .
    .

    ABBZ | Botfrei-Blog | facebook | twitter | Google+
    Kein Support über PN oder Mail!

  7. #7
    Einsteiger
    Registriert seit
    06.09.2012
    Beiträge
    5
    Sorry für die verspätete Antwort.

    Scan wurde mit Eset Online Scanner durchgeführt.



    Code:
    ESETSmartInstaller@High as downloader log:
    all ok
    # version=7
    # OnlineScannerApp.exe=1.0.0.1
    # OnlineScanner.ocx=1.0.0.6583
    # api_version=3.0.2
    # EOSSerial=5200c9f98df54c4ea3ea52c3ca62eae7
    # end=finished
    # remove_checked=true
    # archives_checked=true
    # unwanted_checked=true
    # unsafe_checked=false
    # antistealth_checked=true
    # utc_time=2012-09-21 05:53:21
    # local_time=2012-09-21 07:53:21 (+0100, Mitteleuropäische Sommerzeit)
    # country="Germany"
    # lang=1033
    # osver=6.1.7601 NT Service Pack 1
    # compatibility_mode=1280 16777215 100 0 6922779 6922779 0 0
    # compatibility_mode=1792 16777215 100 0 1219651 1219651 0 0
    # compatibility_mode=5893 16776574 100 94 4913622 99876720 0 0
    # compatibility_mode=8192 67108863 100 0 85 85 0 0
    # scanned=228549
    # found=5
    # cleaned=5
    # scan_time=3132
    C:\Users\Emre\Downloads\cnet2_install-mario-worker_exe.exe	a variant of Win32/InstallCore.D application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
    C:\Users\Emre\Downloads\SoftonicDownloader_fuer_mario-forever.exe	a variant of Win32/SoftonicDownloader.E application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
    C:\Users\Emre\Downloads\SoftonicDownloader_fuer_minecraft.exe	a variant of Win32/SoftonicDownloader.D application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
    C:\_OTL\MovedFiles\09072012_151522\C_Users\Emre\AppData\Local\Temp\ICReinstall\cnet2_install-mario-worker_exe.exe	a variant of Win32/InstallCore.D application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
    C:\_OTL\MovedFiles\09072012_151522\C_Users\Emre\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\24d002b6-3ab1db3b	a variant of Java/Exploit.CVE-2012-1723.BH trojan (deleted - quarantined)	00000000000000000000000000000000	C

  8. #8
    Generation C64 Avatar von CG
    Registriert seit
    31.08.2011
    Ort
    Kölle
    Beiträge
    3.877
    1. Adware suchen mit adwCleaner

    • Lade Dir bitte AdwCleaner auf deinen Desktop herunter.
    • Schliesse alle Programme.
    • Starte die adwcleaner.exe mit einem Doppelklick.
    • Klicke auf Delete.
    • Bestätige zweimal mit Klick auf OK.
    • Rechner startet neu.
    • Nach Neustart öffnet sich eine Textdatei, die hier posten.
    • Die Logdatei findest du auch unter C:\AdwCleaner[S1].txt.


    2. adwCleaner deinstallieren

    • Schliesse alle Programme.
    • Starte die adwcleaner.exe mit einem Doppelklick.
    • Klicke auf Uninstall.
    • Bestätige mit Klick auf OK.
    Grüße
    CG (ABBZ)
    .
    .
    .

    ABBZ | Botfrei-Blog | facebook | twitter | Google+
    Kein Support über PN oder Mail!

  9. #9
    Einsteiger
    Registriert seit
    06.09.2012
    Beiträge
    5
    Scan mit Adware durchgeführt.
    Logdatei:

    Code:
    # AdwCleaner v2.003 - Datei am 09/28/2012 um 20:07:19 erstellt
    # Aktualisiert am 23/09/2012 von Xplode
    # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
    # Benutzer : Emre 
    # Bootmodus : Abgesicherter Modus mit Netzwerkunterstützung
    # Ausgeführt unter : C:\Users\Emre\Desktop\virus\adwcleaner.exe
    # Option [Löschen]
    
    
    **** [Dienste] ****
    
    
    ***** [Dateien / Ordner] *****
    
    Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk
    Ordner Gelöscht : C:\ProgramData\Partner
    Ordner Gelöscht : C:\Users\Emre\Documents\Save
    
    ***** [Registrierungsdatenbank] *****
    
    Schlüssel Gelöscht : HKCU\Software\Softonic
    
    ***** [Internet Browser] *****
    
    -\\ Internet Explorer v9.0.8112.16421
    
    Wiederhergestellt : [HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
    Wiederhergestellt : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
    Wiederhergestellt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
    Wiederhergestellt : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
    Wiederhergestellt : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
    Wiederhergestellt : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
    
    *************************
    
    AdwCleaner[S1].txt - [1356 octets] - [28/09/2012 20:07:19]
    
    ########## EOF - C:\AdwCleaner[S1].txt - [1416 octets] ##########

  10. #10
    Generation C64 Avatar von CG
    Registriert seit
    31.08.2011
    Ort
    Kölle
    Beiträge
    3.877
    Brauchst du Java zwingend?!?
    Wenn nicht, solltest du den Krempel komplett entfernen und nicht wieder neu installieren, da hier momentan die größten Sicherheitslücken entstehen!

    Java deinstallieren, bzw. aktualisieren

    Viele Schädlinge kommen über Sicherheitslücken (sog. Exploits) in Java auf ein System. Sofern Java benötigt wird, ist es unbedingt erforderlich, alte Versionen (falls vorhanden) zu deinstallieren und das Risiko zu minimieren, indem Java immer topaktuell gehalten wird. Da mittlerweise selbst in den aktuellsten Versionen Sicherheitslücken vorhanden sind, solltest du Java am besten nur dann installieren, wenn es zwingend benötigt wird. Einige Kollegen haben Java inzwischen komplett von ihrem System verbannt und konnten keinerlei Einschränkungen feststellen. In diesem Artikel wird erklärt, was Java ist und wozu es benötigt wird.

    Bei zscaler.com kannst Du testen, ob Deine Java-Version von bekannten Sicherheitslücken betroffen ist. Falls im Firefox das Addon NoScript installiert ist, Skripte auf dieser Seite erlauben.

    Deinstalliere alle vorhandenen Versionen von Java über Systemsteuerung => Programme deinstallieren
    ggfs. auch im Firefox unter Addons => Erweiterungen die alten Java-Versionen entfernen.

    Laut Logfiles hast du folgende Version auf dem System:

    Code:
    Java(TM) 7 Update 3 (64-bit)
    Java(TM) 7 Update 3
    Solltest du Java weiterhin verwenden findest du die aktuelle Java-Version hier.
    Eventuell angebotene Toolbars nicht mitinstallieren, ggfs. also den Haken beim Toolbar-Angebot entfernen.

    User mit 64Bit-System sollten die 32Bit-Version installieren. Es hat sich mehrfach gezeigt, dass die 64Bit-Version Probleme bereitet.
    Grüße
    CG (ABBZ)
    .
    .
    .

    ABBZ | Botfrei-Blog | facebook | twitter | Google+
    Kein Support über PN oder Mail!

Lesezeichen

Berechtigungen

  • Neue Themen erstellen: Nein
  • Themen beantworten: Nein
  • Anhänge hochladen: Nein
  • Beiträge bearbeiten: Nein
  •  
G Data
forum.botfrei.de wird überprüft von der Initiative-S