ContentCleaner / Content Cleaner entfernen

Was ist ContentCleaner / Content Cleaner?
Rogue.ContentCleaner / Content Cleaner ist eine weitere gefälschte Scan-Software, die mittels eines trojanischen Pferdes in den PC eindringt und weissmacht, den PC nach Malware abzusuchen.

Verbreitet wird Windows System Defender über 'dubiose Seiten', Cracks, KeyGen und Warez.



Symptome von ContentCleaner / Content Cleaner:

• Der Computer ist langsamer als üblich.
• Icons auf dem Desktop
  
  

Dateien von ContentCleaner / Content Cleaner:

C:\Documents and Settings\{username}\Start Menu\Programs\Content Cleaner 
C:\Program Files\Content Cleaner 
C:\Program Files\Content Cleaner\ContentCleaner.exe 
C:\Program Files\Content Cleaner\CCleaner.dll 
C:\Documents and Settings\{username}\Start Menu\Programs\Content Cleaner\Content Cleaner.lnk 
C:\Documents and Settings\{username}\Start Menu\Programs\Content Cleaner\Uninstall.lnk 
C:\Program Files\Content Cleaner\aff.txt 
C:\Program Files\Content Cleaner\cc.lnk 
C:\Program Files\Content Cleaner\infected.wav 
C:\Program Files\Content Cleaner\new_Delete_animated.gif 
C:\Program Files\Content Cleaner\RegAlert.exe 
C:\Program Files\Content Cleaner\uninst.exe 
C:\Documents and Settings\{username}\Desktop\Content Cleaner.lnk

Registry-Einträge von ContentCleaner / Content Cleaner:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\content cleaner
HKEY_CURRENT_USER\Software\ContentCleaner

ContentCleaner / Content Cleaner entfernen

• Starte einen vollständigen Scan mit Malwarebytes Anti-Malware

Achtung: Diese Fake Software wird versuchen, den Einsatz von Malwarebytes zu verhindern. Benenne das Setup vor dem speichern in etwas anderes um (z.B. Herbert.exe).

Falls es vorher nicht funktioniert hat, sollte das Setup jetzt starten.

Wenn das Programm nach der Installation nicht starten sollte, dann benenne die "mbam.exe" in "herbert.exe" um und versuche es erneut.

Memory Processes Infected:
C:\Program Files\Content Cleaner\ContentCleaner.exe (Rogue.ContentCleaner) -> Unloaded process successfully.

Memory Modules Infected:
C:\Program Files\Content Cleaner\CCleaner.dll (Rogue.ContentCleaner) -> Delete on reboot.

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\content cleaner (Rogue.ContentCleaner) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\ContentCleaner (Rogue.ContentCleaner) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\Documents and Settings\{username}\Start Menu\Programs\Content Cleaner (Rogue.ContentCleaner) -> Quarantined and deleted successfully.
C:\Program Files\Content Cleaner (Rogue.ContentCleaner) -> Quarantined and deleted successfully.

Files Infected:
C:\Program Files\Content Cleaner\ContentCleaner.exe (Rogue.ContentCleaner) -> Quarantined and deleted successfully.
C:\Program Files\Content Cleaner\CCleaner.dll (Rogue.ContentCleaner) -> Quarantined and deleted successfully.
C:\Documents and Settings\{username}\Start Menu\Programs\Content Cleaner\Content Cleaner.lnk (Rogue.ContentCleaner) -> Quarantined and deleted successfully.
C:\Documents and Settings\{username}\Start Menu\Programs\Content Cleaner\Uninstall.lnk (Rogue.ContentCleaner) -> Quarantined and deleted successfully.
C:\Program Files\Content Cleaner\aff.txt (Rogue.ContentCleaner) -> Quarantined and deleted successfully.
C:\Program Files\Content Cleaner\cc.lnk (Rogue.ContentCleaner) -> Quarantined and deleted successfully.
C:\Program Files\Content Cleaner\infected.wav (Rogue.ContentCleaner) -> Quarantined and deleted successfully.
C:\Program Files\Content Cleaner\new_Delete_animated.gif (Rogue.ContentCleaner) -> Quarantined and deleted successfully.
C:\Program Files\Content Cleaner\RegAlert.exe (Rogue.ContentCleaner) -> Quarantined and deleted successfully.
C:\Program Files\Content Cleaner\uninst.exe (Rogue.ContentCleaner) -> Quarantined and deleted successfully.
C:\Documents and Settings\{username}\Desktop\Content Cleaner.lnk (Rogue.ContentCleaner) -> Quarantined and deleted successfully.

Weitergehende Prüfung

Das System könnte noch nicht vollständig sauber sein.

Daher unbedingt ein Thema erstellen: Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten?

Nicht vergessen CCleaner mit RSIT Logfiles....