| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Polizeivirus (West Yorkshire Police) - kein abgesicherter Modus möglichWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
28.07.2012, 12:11
| #16 |
| /// Helfer-Team  |  Polizeivirus (West Yorkshire Police) - kein abgesicherter Modus möglich Malware mit Combofix beseitigen Lade Combofix von einem der folgenden Download-Spiegel herunter: BleepingComputer.com - ForoSpyware.com und speichere das Programm auf den Desktop, nicht woanders hin, das ist wichtig! Beachte die ausführliche Original-Anleitung. Zurzeit ist Combofix auf folgenden Windows-Versionen lauffähig:
Vorbereitung und wichtige Hinweise
Combofix nicht auf eigene Faust einsetzen. Wenn keine entsprechende Infektion vorliegt, kann das den Rechner lahmlegen und/oder nachhaltig schädigen! |
|
28.07.2012, 13:37
| #17 |
 | Polizeivirus (West Yorkshire Police) - kein abgesicherter Modus möglich Hier das ComboFix Log:
__________________Code:
ATTFilter ComboFix 12-07-27.03 - Max Mustermann 28.07.2012 12:46:26.1.2 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1252.49.1031.18.3584.2429 [GMT 1:00]
ausgeführt von:: c:\users\Max Mustermann\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6}
SP: Microsoft Security Essentials *Disabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Max Mustermann\AppData\Local\Microsoft\Windows\2448\UIAnimation.exe
c:\windows\Downloaded Program Files\IDropPTB.dll
c:\windows\IsUn0407.exe
.
.
((((((((((((((((((((((( Dateien erstellt von 2012-06-28 bis 2012-07-28 ))))))))))))))))))))))))))))))
.
.
2012-07-28 11:06 . 2012-06-29 08:44 6891424 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{ECA7444E-417F-453E-A2DB-261ABA090BCE}\mpengine.dll
2012-07-26 14:59 . 2012-06-29 08:44 6891424 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-07-26 14:56 . 2012-07-27 14:13 -------- d-----w- c:\program files\Emsisoft Anti-Malware
2012-07-25 17:42 . 2012-07-25 17:42 -------- d-----w- C:\_OTL
2012-07-25 14:15 . 2012-07-25 14:15 -------- d-----w- c:\users\Max Mustermann\AppData\Roaming\Malwarebytes
2012-07-25 14:14 . 2012-07-25 14:14 -------- d-----w- c:\programdata\Malwarebytes
2012-07-25 14:14 . 2012-07-03 12:46 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-07-25 14:14 . 2012-07-25 14:15 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-07-20 08:29 . 2012-07-20 08:29 -------- d-----w- c:\programdata\ATI
2012-07-20 08:29 . 2012-07-20 08:29 -------- d-----w- c:\programdata\AMD
2012-07-20 08:29 . 2012-07-20 08:29 -------- d-----w- c:\program files\AMD AVT
2012-07-20 08:29 . 2012-07-20 08:29 -------- d-----w- c:\program files\AMD APP
2012-07-20 08:29 . 2012-07-20 08:29 -------- d-----w- c:\program files\Common Files\ATI Technologies
2012-07-11 13:54 . 2012-06-12 02:40 2345984 ----a-w- c:\windows\system32\win32k.sys
2012-07-03 13:50 . 2012-02-11 15:11 713784 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{EA2BC8EE-1805-4F4F-9E09-589A7F01ECBF}\gapaengine.dll
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-15 19:39 . 2012-04-04 09:44 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-15 19:39 . 2011-05-15 21:34 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-06-02 22:19 . 2012-06-19 08:24 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 22:19 . 2012-06-19 08:24 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 22:19 . 2012-06-19 08:24 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 22:19 . 2012-06-19 08:24 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 22:19 . 2012-06-19 08:24 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 22:12 . 2012-06-19 08:24 2422272 ----a-w- c:\windows\system32\wucltux.dll
2012-06-02 22:12 . 2012-06-19 08:24 88576 ----a-w- c:\windows\system32\wudriver.dll
2012-06-02 14:19 . 2012-06-19 08:23 171904 ----a-w- c:\windows\system32\wuwebv.dll
2012-06-02 14:12 . 2012-06-19 08:23 33792 ----a-w- c:\windows\system32\wuapp.exe
2012-05-21 09:05 . 2011-08-19 11:23 16400 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
2012-05-04 09:59 . 2012-06-13 11:23 514560 ----a-w- c:\windows\system32\qdvd.dll
2012-05-01 04:44 . 2012-06-13 11:22 164352 ----a-w- c:\windows\system32\profsvc.dll
2012-03-28 09:14 . 2011-05-25 13:47 1456640 ----a-w- c:\program files\Common Files\Falk Navi-Manager.msi
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 94208 ----a-w- c:\users\Max Mustermann\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 94208 ----a-w- c:\users\Max Mustermann\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 94208 ----a-w- c:\users\Max Mustermann\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OfficeSyncProcess"="c:\program files\Microsoft Office\Office14\MSOSYNC.EXE" [2011-07-21 718720]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AMD AVT"="start AMD Accelerated Video Transcoding device initialization" [X]
"AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2010-01-13 611712]
"ProfilerU"="c:\program files\Saitek\SD6\Software\ProfilerU.exe" [2009-06-03 237568]
"SaiMfd"="c:\program files\Saitek\SD6\Software\SaiMfd.exe" [2009-06-03 131072]
"FreePDF Assistant"="c:\program files\FreePDF_XP\fpassist.exe" [2009-09-05 385024]
"QuickTime Task"="d:\programme\QuickTime\QTTask.exe" [2010-08-10 421888]
"Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 648072]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"EvtMgr6"="d:\programme\Logitech\SetPointP\SetPoint.exe" [2011-06-23 1386776]
"VirtualCloneDrive"="d:\programme\VirtualCloneDrive\VCDDaemon.exe" [2011-03-07 89456]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-03-26 931200]
"Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2010-11-03 1246544]
"amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-04-06 641664]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2011-06-17 07:33 66328 ----a-w- c:\program files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [x]
R2 SkypeUpdate;Skype Updater;d:\programme\Skype\Updater\Updater.exe [x]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [x]
R3 RRNetCap;RRNetCap Service;c:\windows\system32\DRIVERS\rrnetcap.sys [x]
R3 SaiH0762;SaiH0762;c:\windows\system32\DRIVERS\SaiH0762.sys [x]
R3 tap0801;TAP-Win32 Adapter V8;c:\windows\system32\DRIVERS\tap0801.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam.sys [x]
R4 MSSQLServerADHelper100;SQL Server Hilfsdienst für Active Directory;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [x]
R4 RsFx0103;RsFx0103 Driver;c:\windows\system32\DRIVERS\RsFx0103.sys [x]
R4 SQLAgent$SQLEXPRESS;SQL Server-Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [x]
S1 LUMDriver;LUMDriver;c:\windows\system32\drivers\LUMDriver.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 ANSYS, Inc. License Manager;ANSYS, Inc. License Manager;c:\program files\ANSYS Inc\Shared Files\Licensing\win32\ansysli_server.exe [x]
S2 Autodesk Content Service;Autodesk Content Service;c:\program files\Autodesk\Content Service\Connect.Service.ContentService.exe [x]
S2 BBDemon;Backbone Service;d:\programme\CATIA V5R18\intel_a\code\bin\CATSysDemon.exe [x]
S2 mitsijm2012;Autodesk Moldflow Inventor Tool Suite Integration 2012 Job-Manager;d:\programme\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe [x]
S2 SaiDOutput;Saitek DirectOutput;c:\program files\Saitek\DirectOutput\DirectOutputService.exe [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [x]
S3 ctxS51;Creatix V.9X DSP Data Fax Modem;c:\windows\system32\DRIVERS\ctxS51.sys [x]
S3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;c:\windows\system32\Drivers\LEqdUsb.Sys [x]
S3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;c:\windows\system32\Drivers\LHidEqd.Sys [x]
S3 Ph3xIB32;Philips 713x Inbox PCI TV Card;c:\windows\system32\DRIVERS\Ph3xIB32.sys [x]
S3 RRNetCapMP;RRNetCapMP;c:\windows\system32\DRIVERS\rrnetcap.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.t-online.de/
IE: An OneNote s&enden - c:\progra~1\MIF5BA~1\Office14\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - c:\progra~1\MIF5BA~1\Office14\EXCEL.EXE/3000
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MIF5BA~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 138.250.50.41 138.250.54.20
FF - ProfilePath - c:\users\Max Mustermann\AppData\Roaming\Mozilla\Firefox\Profiles\7isz19o2.default\
.
.
------- Dateityp-Verknüpfung -------
.
.scr=AutoCADScriptFile
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKCU-Run-AdobeBridge - (no file)
HKCU-Run-Akamai NetSession Interface - c:\users\Max Mustermann\AppData\Local\Akamai\netsession_win.exe
HKCU-Run-UIAnimation - c:\users\Max Mustermann\AppData\Local\Microsoft\Windows\2448\UIAnimation.exe
HKLM-Run-Cmaudio - cmicnfg.cpl
HKLM-Run-DivXUpdate - c:\program files\DivX\DivX Update\DivXUpdate.exe
MSConfigStartUp-openvpn-gui - c:\program files\OpenVPN\bin\openvpn-gui.exe
AddRemove-Catan - c:\windows\IsUn0407.exe
AddRemove-Catan - Das Kartenspiel MMP - d:\programme\Catan\Catan Online Welt 3\MMPuninst.exe
AddRemove-Microsoft Help Viewer 1.0 - c:\program files\Microsoft Help Viewer\v1.0\Microsoft Help Viewer 1.0\install.exe
AddRemove-Microsoft Help Viewer 1.0 Language Pack - DEU - c:\program files\Microsoft Help Viewer\v1.0\Microsoft Help Viewer 1.0 Language Pack - DEU\install.exe
AddRemove-{7B63B2922B174135AFC0E1377DD81EC2} - d:\programme\DivX\DivXCodecUninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\Akamai]
"ServiceDll"="c:\program files\common files\akamai/netsession_win_80c2ffa.dll"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-2203433739-409605324-1319817812-1001\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:86,22,dc,57,7b,f6,fb,a3,63,c7,26,5b,2b,75,83,9a,93,61,6b,73,29,e3,d0,
18,4a,1e,fb,ec,d1,73,91,46,05,eb,39,3b,81,31,a6,74,63,11,f2,4c,fa,58,24,3b,\
"??"=hex:f7,79,f0,07,ff,49,05,76,e5,42,5e,e4,73,52,3c,5c
.
[HKEY_USERS\S-1-5-21-2203433739-409605324-1319817812-1001\Software\SecuROM\License information*]
"datasecu"=hex:c9,34,4f,6d,d7,2a,1e,84,12,18,8f,7c,36,53,66,f4,f9,ce,44,9a,7e,
dd,64,f1,d2,a9,97,b0,fd,28,55,da,1a,2b,4c,ea,5e,b8,0a,4e,2d,27,eb,d6,bd,4b,\
"rkeysecu"=hex:55,17,73,e8,a3,14,07,c8,6a,c5,1e,49,d2,06,30,d2
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:00000004
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'winlogon.exe'(624)
c:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll
.
- - - - - - - > 'Explorer.exe'(872)
c:\users\Max Mustermann\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
c:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll
c:\program files\WinSCP\DragExt.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files\Microsoft Security Client\MsMpEng.exe
c:\windows\system32\atieclxx.exe
c:\windows\system32\taskhost.exe
c:\program files\ANSYS Inc\Shared Files\Licensing\win32\ansysli_monitor.exe
c:\windows\system32\conhost.exe
c:\program files\ANSYS Inc\Shared Files\Licensing\win32\lmgrd.exe
c:\program files\ANSYS Inc\Shared Files\Licensing\win32\ansyslmd.exe
c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
d:\programme\CDBurnerXP\NMSAccessU.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\WUDFHost.exe
c:\windows\system32\conhost.exe
c:\windows\system32\sppsvc.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-07-28 13:07:18 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2012-07-28 12:07
.
Vor Suchlauf: 10 Verzeichnis(se), 25.119.158.272 Bytes frei
Nach Suchlauf: 17 Verzeichnis(se), 24.994.676.736 Bytes frei
.
- - End Of File - - F210AFCB13AB2C9E8B28090E2FB7C12F
Code:
ATTFilter 360 GEnx (1024) Screen Saver 7-Zip 9.20 AC3Filter 1.63b Adobe AIR Adobe Anchor Service CS4 Adobe Bridge CS4 Adobe CMaps CS4 Adobe Color - Photoshop Specific CS4 Adobe Color EU Recommended Settings CS4 Adobe Color JA Extra Settings CS4 Adobe Color NA Extra Settings CS4 Adobe Color Video Profiles CS CS4 Adobe CSI CS4 Adobe Default Language CS4 Adobe Device Central CS4 Adobe Digital Editions Adobe Drive CS4 Adobe ExtendScript Toolkit CS4 Adobe Extension Manager CS4 Adobe Flash Player 11 ActiveX Adobe Flash Player 11 Plugin Adobe Fonts All Adobe Linguistics CS4 Adobe Media Player Adobe Output Module Adobe PDF Library Files CS4 Adobe Photoshop CS4 Adobe Photoshop CS4 Support Adobe Reader X (10.1.0) - Deutsch Adobe Search for Help Adobe Service Manager Extension Adobe Setup Adobe Shockwave Player 11.6 Adobe Type Support CS4 Adobe Update Manager CS4 Adobe WinSoft Linguistics Plugin Adobe XMP Panels CS4 AdobeColorCommonSetCMYK AdobeColorCommonSetRGB Akamai NetSession Interface Akamai NetSession Interface Service AMD Accelerated Video Transcoding AMD APP SDK Runtime AMD Catalyst Install Manager AMD Drag and Drop Transcoding AMD Media Foundation Decoders Apple Application Support Apple Software Update Ashampoo Burning Studio 2010 Advanced µTorrent Attribute Changer 7.0 Audials AutoCAD Architecture 2011 - Deutsch AutoCAD Architecture 2011 Language Pack - Deutsch AutoCAD Mechanical 2012 AutoCAD Mechanical 2012 Language Pack - Deutsch Autodesk Content Service Autodesk Design Review 2012 Autodesk Inventor Content Center Libraries 2012 (Desktop Content) Autodesk Inventor Fusion 2012 Autodesk Inventor Fusion 2012 Language Pack Autodesk Inventor Fusion for Inventor 2012 Add-in Autodesk Inventor Fusion for Inventor 2012 Zusatzmodul Autodesk Inventor Fusion for Inventor 2012 Zusatzmodul Language Pack Autodesk Inventor Fusion plug-in for AutoCAD 2012 Autodesk Inventor Fusion Plugin for AutoCAD 2012 Autodesk Inventor Fusion Plugin Language Pack for AutoCAD 2012 Autodesk Inventor Professional 2012 Autodesk Inventor Professional 2012 Deutsch Autodesk Inventor Professional 2012 Language Pack - Deutsch Autodesk Material Library 2011 Autodesk Material Library 2011 Base Image library Autodesk Material Library 2012 Autodesk Material Library Base Resolution Image Library 2012 Autodesk Material Library Low Resolution Image Library 2012 Autodesk Vault 2012 (Client) Autodesk Vault 2012 (Client) German Language Pack AviSynth 2.5 Batman: Arkham Asylum Game of the Year Edition Batman: Arkham City Demo C-Media WDM Audio Driver Catalyst Control Center Catalyst Control Center - Branding Catalyst Control Center Graphics Previews Common Catalyst Control Center InstallProxy Catalyst Control Center Localization All Catan Catan - Das Kartenspiel Catan - Das Kartenspiel MMP ccc-utility CCC Help Chinese Standard CCC Help Chinese Traditional CCC Help Czech CCC Help Danish CCC Help Dutch CCC Help English CCC Help Finnish CCC Help French CCC Help German CCC Help Greek CCC Help Hungarian CCC Help Italian CCC Help Japanese CCC Help Korean CCC Help Norwegian CCC Help Polish CCC Help Portuguese CCC Help Russian CCC Help Spanish CCC Help Swedish CCC Help Thai CCC Help Turkish CDBurnerXP CDisplay 1.8 Chinese Simplified Fonts Support For Adobe Reader 9 Command & Conquer(TM) Generäle Command & Conquer™ Red Alert™ 3 Demo Connect ConvertHelper 2.2 Creatix V.9X DSP Data Fax Modem Crystal Reports for Visual Studio D3DX10 Dassault Systemes Software B18 Dassault Systemes Software Prerequisites x86 Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition DivX-Setup DivX Converter DivX Plus DirectShow Filters DivX Version Checker Dotfuscator Software Services - Community Edition Dotfuscator Software Services - Community Edition - DEU Dropbox Dual-Core Optimizer DWG TrueView 2012 EAX4 Unified Redist Eco Materials Adviser eReg erLT EVEREST Home Edition v2.20 Falk Navi-Manager FARO LS 1.1.406.58 ffdshow [rev 2583] [2009-01-05] Free Video Dub version 1.8 FreePDF (Remove only) GPL Ghostscript 8.71 GSview 4.9 Haali Media Splitter Hex-Editor MX Hotfix für Microsoft Visual Studio 2010 Professional - DEU (KB2522890) Hotfix für Microsoft Visual Studio 2010 Professional - DEU (KB2529927) Hotfix für Microsoft Visual Studio 2010 Professional - DEU (KB2548139) Hotfix für Microsoft Visual Studio 2010 Professional - DEU (KB2549864) Hotfix für Microsoft Visual Studio 2010 Professional - DEU (KB2635973) Hotfix for Microsoft Visual Studio 2010 Professional - DEU (KB2542054) IM-Screensaver Integrated Documentation Intel Composer XE 2011 Update 5 for Windows* Intel MKL common files Intel MKL on IA-32 Intel MKL on Intel(R) 64 Intel Parallel Debugger Extension Intel Visual Fortran Compiler XE on IA-32 Intel Visual Fortran Compiler XE on Intel(R) 64 Intel(R) Composer XE 2011 Update 5 for Windows* Iron Man 2 War Machine Screen Saver Japanese Fonts Support For Adobe Reader X Java Auto Updater Java(TM) 6 Update 31 JDownloader Joe KLONK Image Measurement kuler Lock On: Modern Air Combat Logitech SetPoint 6.30 Logitech Unifying-Software 2.00 Malwarebytes Anti-Malware Version 1.62.0.1300 MATLAB R2009a MeshLab 1.3.0 Microsoft .NET Framework 4 Client Profile Microsoft .NET Framework 4 Client Profile DEU Language Pack Microsoft .NET Framework 4 Extended Microsoft .NET Framework 4 Extended DEU Language Pack Microsoft .NET Framework 4 Multi-Targeting Pack Microsoft Antimalware Service DE-DE Language Pack Microsoft Application Error Reporting Microsoft ASP.NET MVC 2 Microsoft ASP.NET MVC 2 - DEU Microsoft ASP.NET MVC 2 - Visual Studio 2010 Tools Microsoft ASP.NET MVC 2 - Visual Studio 2010 Tools - DEU Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) Microsoft Flight Simulator X Demo Microsoft Games for Windows - LIVE Redistributable Microsoft Games for Windows Marketplace Microsoft Help Viewer 1.0 Microsoft Help Viewer 1.0 Language Pack - DEU Microsoft Office 2010 Language Pack Service Pack 1 (SP1) Microsoft Office 2010 Service Pack 1 (SP1) Microsoft Office Access MUI (German) 2010 Microsoft Office Excel MUI (German) 2010 Microsoft Office Groove MUI (German) 2010 Microsoft Office InfoPath MUI (German) 2010 Microsoft Office OneNote MUI (German) 2010 Microsoft Office Outlook Connector Microsoft Office Outlook MUI (German) 2010 Microsoft Office PowerPoint MUI (German) 2010 Microsoft Office Professional Plus 2010 Microsoft Office Proof (English) 2010 Microsoft Office Proof (French) 2010 Microsoft Office Proof (German) 2010 Microsoft Office Proof (Italian) 2010 Microsoft Office Proofing (German) 2010 Microsoft Office Publisher MUI (German) 2010 Microsoft Office Shared MUI (German) 2010 Microsoft Office Visio 2010 Microsoft Office Visio MUI (German) 2010 Microsoft Office Word MUI (German) 2010 Microsoft Outlook-Sicherung für Persönliche Ordner Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit Microsoft Security Client Microsoft Security Client DE-DE Language Pack Microsoft Security Essentials Microsoft Silverlight Microsoft Silverlight 3 SDK - Deutsch Microsoft Silverlight 4 SDK - Deutsch Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft SQL Server 2008 Microsoft SQL Server 2008 Browser Microsoft SQL Server 2008 Common Files Microsoft SQL Server 2008 Database Engine Services Microsoft SQL Server 2008 Database Engine Shared Microsoft SQL Server 2008 Native Client Microsoft SQL Server 2008 R2-Datenebenenanwendungs-Framework Microsoft SQL Server 2008 R2 Data-Tier Application Project Microsoft SQL Server 2008 R2 Management Objects Microsoft SQL Server 2008 R2 Transact-SQL Language Service Microsoft SQL Server 2008 RsFx Driver Microsoft SQL Server Compact 3.5 SP2 DEU Microsoft SQL Server Database Publishing Wizard 1.4 Microsoft SQL Server System CLR Types Microsoft SQL Server VSS Writer Microsoft Sync Framework Runtime v1.0 SP1 (x86) de Microsoft Sync Framework SDK v1.0 SP1 de Microsoft Sync Framework Services v1.0 SP1 (x86) de Microsoft Sync Services for ADO.NET v2.0 SP1 (x86) de Microsoft Team Foundation Server 2010-Objektmodell - DEU Microsoft Team Foundation Server 2010 Object Model - DEU Microsoft – Speichern als PDF – Add-In für 2007 Microsoft Office-Programme Microsoft Visio 2010 Service Pack 1 (SP1) Microsoft Visio Professional 2010 Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 Microsoft Visual C++ 2010 x86 Runtime - 10.0.30319 Microsoft Visual F# 2.0 Runtime Microsoft Visual F# 2.0 Runtime Language Pack - DEU Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x86) Language Pack - DEU Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools Microsoft Visual Studio 2010 Office Developer Tools (x86) Microsoft Visual Studio 2010 Professional - DEU Microsoft Visual Studio 2010 Service Pack 1 Microsoft Visual Studio 2010 SharePoint Developer Tools Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU Microsoft Visual Studio Macro Tools Microsoft Visual Studio Macro Tools - DEU Language Pack Microsoft WSE 3.0 Runtime MiKTeX 2.9 Mozilla Firefox 7.0.1 (x86 de) Mozilla Firefox 8.0.1 (x86 de) MSVCRT MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) MSXML 4.0 SP2 Parser und SDK Notepad++ NVIDIA PhysX PASW Statistics 18 PDF Settings CS4 PDFill PDF Editor with FREE Writer and FREE Tools Photoshop Camera Raw Protect Disc License Helper 1.0.118 Python 2.7 pycrypto-2.3 Python 2.7 pywin32-216 Python 2.7.2 QuickTime Red Alert Windows 95 RedMon - Redirection Port Monitor Saitek DirectOutput 6.2.2.4 Saitek SD6 Programming Software 6.6.6.9 Schnell-Deinstallations-Tool für Autodesk Inventor 2012 Screensaver GE90 1024 Screensaver GEnx 1024 Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827) Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2518870) Security Update for Microsoft .NET Framework 4 Extended (KB2416472) Security Update for Microsoft .NET Framework 4 Extended (KB2487367) Security Update for Microsoft .NET Framework 4 Extended (KB2656351) Security Update for Microsoft Excel 2010 (KB2597166) 32-Bit Edition Security Update for Microsoft InfoPath 2010 (KB2553322) 32-Bit Edition Security Update for Microsoft InfoPath 2010 (KB2553431) 32-Bit Edition Security Update for Microsoft Office 2010 (KB2553091) Security Update for Microsoft Office 2010 (KB2553096) Security Update for Microsoft Office 2010 (KB2553371) 32-Bit Edition Security Update for Microsoft Office 2010 (KB2553447) 32-Bit Edition Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition Security Update for Microsoft Office 2010 (KB2598039) 32-Bit Edition Security Update for Microsoft Office 2010 (KB2598243) 32-Bit Edition Security Update for Microsoft PowerPoint 2010 (KB2553185) 32-Bit Edition Security Update for Microsoft SharePoint Workspace 2010 (KB2566445) Security Update for Microsoft Visio 2010 (KB2553374) 32-Bit Edition Security Update for Microsoft Visio Viewer 2010 (KB2597981) 32-Bit Edition Security Update for Microsoft Visual Studio Macro Tools (KB2669970) sentinelsystemdriver Service Pack 2 für SQL Server 2008 (KB 2285068) SES Driver Sicherheitsupdate für Microsoft Visual Studio 2010 Professional - DEU (KB2645410) Side 9 Screensaver Skype™ 5.8 Source Checker common files Source Checker on IA-32 Source Checker on Intel(R) 64 Spelling Dictionaries Support For Adobe Reader 9 Sql Server Customer Experience Improvement Program Steam Suite Shared Configuration CS4 swMSM TeXnicCenter Version 1.0 Stable RC1 Tom Clancy's Rainbow Six Vegas Tom Clancy's Splinter Cell Double Agent Tomb Raider: Underworld 1.1 TreeSize Free V2.6 Uninstall 1.0.0.1 Unterstützungsdateien für Microsoft SQL Server 2008-Setup Update for Microsoft .NET Framework 4 Client Profile (KB2468871) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) Update for Microsoft .NET Framework 4 Extended (KB2468871) Update for Microsoft .NET Framework 4 Extended (KB2533523) Update for Microsoft .NET Framework 4 Extended (KB2600217) Update for Microsoft Office 2010 (KB2494150) Update for Microsoft Office 2010 (KB2553065) Update for Microsoft Office 2010 (KB2553092) Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition Update for Microsoft Office 2010 (KB2566458) Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition Update for Microsoft Office 2010 (KB2597091) 32-Bit Edition Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition Update for Microsoft OneNote 2010 (KB2589345) 32-Bit Edition Update for Microsoft Outlook 2010 (KB2553248) 32-Bit Edition Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition VBA (2627.01) VBA (2701.01) VBA (3821b) VC80CRTRedist - 8.0.50727.6195 VirtualCloneDrive Visual Fortran Indicator MSI Visual Fortran Integration(s) in Microsoft Visual Studio* Visual Fortran OpenMP on IA-32 Visual Fortran OpenMP on Intel(R) 64 Visual Fortran Top Level Files Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU VLC media player 2.0.1 WCF RIA Services V1.0 SP1 Web Deployment Tool Windows Live Communications Platform Windows Live Essentials Windows Live Fotogalerie Windows Live ID Sign-in Assistant Windows Live Installer Windows Live Messenger Windows Live Movie Maker Windows Live OneCare safety scanner Windows Live Photo Common Windows Live Photo Gallery Windows Live PIMT Platform Windows Live SOXE Windows Live SOXE Definitions Windows Live Sync Windows Live UX Platform Windows Live UX Platform Language Pack Windows Mobile-Gerätecenter Windows Mobile-Gerätecenter: Treiberupdate WinRAR WinSCP 5.0.7 beta WinUAE 2.3.3 XMedia Recode 3.0.1.3 Xming 6.9.0.31 XnView 1.97.8 Xvid 1.2.2 final uninstall |
|
28.07.2012, 13:38
| #18 |
| /// Helfer-Team | Polizeivirus (West Yorkshire Police) - kein abgesicherter Modus möglich Java aktualisieren
__________________Dein Java ist nicht mehr aktuell. Älter Versionen enthalten Sicherheitslücken, die von Malware missbraucht werden können.
Dann so einstellen: http://www.trojaner-board.de/105213-...tellungen.html
__________________ |
|
28.07.2012, 14:01
| #19 |
| | Polizeivirus (West Yorkshire Police) - kein abgesicherter Modus möglich Gesagt, getan. Java ist jetzt wieder up-to-date. |
|
28.07.2012, 14:08
| #20 |
| /// Helfer-Team | Polizeivirus (West Yorkshire Police) - kein abgesicherter Modus möglich Sehr gut!  damit bist Du sauber und entlassen!  Combofix deinstallieren Bitte vor der folgenden Aktion wieder temporär Antivirus-Programm, evtl. vorhandenes Skript-Blocking (Norton) und Anti-Malware Programme deaktivieren. Start => Ausführen => dort reinschreiben ComboFix /Uninstall => Enter drücken Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert, damit auch daraus die Schädlinge verschwinden. Es wird ein neuer Systemwiederherstellungspunkt erstellt. Gleichzeitig setzt Combofix die Zeiteinstellungen wieder auf die Ursprungseinstellungen, und setzt die Systemeinstellungen wieder so zurück, dass Dateierweiterungen und Systemdateien versteckt sind, was Du bei Bedarf im Explorer unter Extras => Ordneroptionen aber wieder ändern bzw. Deinen persönlichen Vorlieben entsprechend anpassen kannst. Tool-Bereinigung mit OTL Wir werden nun die CleanUp!-Funktion von OTL nutzen, um die meisten Programme, die wir zur Bereinigung installiert haben, wieder von Deinem System zu löschen.
Zurücksetzen der Sicherheitszonen Lasse die Sicherheitszonen wieder zurücksetzen, da diese manipuliert wurden um den Browser für weitere Angriffe zu öffnen. Gehe dabei so vor: http://www.trojaner-board.de/111805-...ecksetzen.html Aufräumen mit CCleaner Lasse mit CCleaner (Download) (Anleitung) Fehler in der
Lektuere zum abarbeiten: http://www.trojaner-board.de/90880-d...tallation.html http://www.trojaner-board.de/105213-...tellungen.html PluginCheck http://www.trojaner-board.de/96344-a...-rechners.html Secunia Online Software Inspector http://www.trojaner-board.de/71715-k...iendungen.html http://www.trojaner-board.de/83238-a...sschalten.html |
|
28.07.2012, 15:18
| #21 |
| | Polizeivirus (West Yorkshire Police) - kein abgesicherter Modus möglich Vielen herzlichen Dank!! Der Computer läuft jetzt wieder ohne Probleme und hoffentlich auch viel sicherer.  |
|
| Themen zu Polizeivirus (West Yorkshire Police) - kein abgesicherter Modus möglich |
| abgesicherte, abgesicherten, abgesicherter, abgesicherter modus möglich, banner, betriebssystem, bild, bildschirm, computer, erklärt, erscheint, frage, freunde, gestern, infiziert., kein abgesicherter modus möglich, liebe, modus, neu, poste, posten, professional, sobald, starte, starten, startet, warum, web, windows 7 |
Linear-Darstellung
