| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: MalwarebefallWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
28.07.2011, 11:24
| #12 |
  |  Malwarebefall So nun hier das Log: ========== OTL ========== Prefs.js: "Facemoods Search" removed from browser.search.defaultenginename Prefs.js: "Babylon Search" removed from browser.search.defaulturl Prefs.js: "Search the web (Babylon)" removed from browser.search.order.1 Prefs.js: "Facemoods Search" removed from browser.search.selectedEngine Prefs.js: "Facemoods Search" removed from browser.startup.homepage Prefs.js: adapter@babylontc.com:1.0.0.1 removed from extensions.enabledItems Prefs.js: ffxtlbr@babylon.com:1.1.3 removed from extensions.enabledItems Prefs.js: ffxtlbr@Facemoods.com:1.2.1 removed from extensions.enabledItems Prefs.js: "Babylon Search=" removed from keyword.URL C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\b7k82og4.default\extensions\ffxtlbr@babylon.com\defaults\preferences folder moved successfully. C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\b7k82og4.default\extensions\ffxtlbr@babylon.com\defaults folder moved successfully. C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\b7k82og4.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio folder moved successfully. C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\b7k82og4.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs folder moved successfully. C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\b7k82og4.default\extensions\ffxtlbr@babylon.com\content\imgs folder moved successfully. C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\b7k82og4.default\extensions\ffxtlbr@babylon.com\content folder moved successfully. C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\b7k82og4.default\extensions\ffxtlbr@babylon.com\components folder moved successfully. C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\b7k82og4.default\extensions\ffxtlbr@babylon.com\chrome folder moved successfully. C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\b7k82og4.default\extensions\ffxtlbr@babylon.com folder moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CF070CB8-F02F-4af4-A7B7-8D45CAD4BB54}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CF070CB8-F02F-4af4-A7B7-8D45CAD4BB54}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CF070CB8-F02F-4af4-A7B7-8D45CAD4BB54}\ deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully! C:\AUTOEXEC.BAT moved successfully. C:\WINDOWS\system32\drivers\File-Upload.net - imapi.sys_files\lay5.jpg moved successfully. C:\WINDOWS\system32\drivers\File-Upload.net - imapi.sys_files\ga.js moved successfully. C:\WINDOWS\system32\drivers\File-Upload.net - imapi.sys.html moved successfully. File C:\WINDOWS\System32\drivers\File-Upload.net - imapi.sys_files\a_script.php not found. File C:\WINDOWS\System32\drivers\File-Upload.net - imapi.sys_files\show.html not found. File C:\WINDOWS\System32\drivers\File-Upload.net - imapi.sys_files\style.css not found. File C:\WINDOWS\System32\drivers\File-Upload.net - imapi.sys_files\show(1).html not found. File C:\WINDOWS\System32\drivers\File-Upload.net - imapi.sys_files\popup.js not found. File C:\WINDOWS\System32\drivers\File-Upload.net - imapi.sys_files\i6.gif not found. File C:\WINDOWS\System32\drivers\File-Upload.net - imapi.sys_files\lg.png not found. File C:\WINDOWS\System32\drivers\File-Upload.net - imapi.sys_files\i4.gif not found. File C:\WINDOWS\System32\drivers\File-Upload.net - imapi.sys_files\n_9701.jpg not found. File C:\WINDOWS\System32\drivers\File-Upload.net - imapi.sys_files\i5.gif not found. File C:\WINDOWS\System32\drivers\File-Upload.net - imapi.sys_files\i3.gif not found. File C:\WINDOWS\System32\drivers\File-Upload.net - imapi.sys_files\go.js not found. File C:\WINDOWS\System32\drivers\File-Upload.net - imapi.sys_files\go(1).js not found. File C:\WINDOWS\System32\drivers\File-Upload.net - imapi.sys_files\i2.gif not found. File C:\WINDOWS\System32\drivers\File-Upload.net - imapi.sys_files\i1.gif not found. File C:\WINDOWS\System32\drivers\File-Upload.net - imapi.sys_files\rotate.html not found. File C:\WINDOWS\System32\drivers\File-Upload.net - imapi.sys_files\f1.gif not found. File C:\WINDOWS\System32\drivers\File-Upload.net - imapi.sys_files\head-2.png not found. File C:\WINDOWS\System32\drivers\File-Upload.net - imapi.sys_files\script.php not found. File C:\WINDOWS\System32\drivers\File-Upload.net - imapi.sys_files\19a8953c644a828761cfb553a36c34d9.html not found. C:\WINDOWS\system32\drivers\imapi.sys.vir moved successfully. C:\WINDOWS\system32\drivers\imapi.sys.vir2 moved successfully. ========== COMMANDS ========== C:\WINDOWS\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully OTL by OldTimer - Version 3.2.26.1 log created on 07282011_122249
__________________ Wer auf den Kopf geht, hat den Himmel als Abgrund. |
| Themen zu Malwarebefall |
| anti-malware, autostart, avast, besitzer, bildschirm, dokumente, emerge, emsisoft, emsisoft emergency kit, falsch, fehler, g-data, gesucht, gmer, herunterfahren, home, interne, internet, kaspersky, kaspersky rescue, löschen, nichts, rescue, rescue cd, retten, sekunden, senden, sp3, spinnt, super, xp home |
Baum-Darstellung