Sehr gut!



Deinstalliere:
Emsisoft Anti-Malware


ESET Online Scanner

Vorbereitung

• Schließe evtl. vorhandene externe Festplatten und/oder sonstigen Wechselmedien (z. B. evtl. vorhandene USB-Sticks) an den Rechner an.
• Bitte während des Online-Scans Anti-Virus-Programm und Firewall deaktivieren.
• Vista/Win7-User: Bitte den Browser unbedingt als Administrator starten.

Los geht's

• Lade und starte Eset Smartinstaller
• Haken setzen bei YES, I accept the Terms of Use.
• Klick auf Start.
• Haken setzen bei Remove found threads und Scan archives.
• Klick auf Start.
• Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Finish drücken.
• Browser schließen.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (manchmal auch C:\Programme\Eset\log.txt) suchen und mit Deinem Editor öffnen.
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Das Eset Log:

ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=ebdcdae9f9ec0b4fb24fe0c3d107fcf9
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-08-16 08:49:03
# local_time=2012-08-16 10:49:03 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 4369 96748572 0 0
# compatibility_mode=8192 67108863 100 0 189 189 0 0
# scanned=174814
# found=33
# cleaned=33
# scan_time=32783
C:\Program Files\Uniblue\RegistryBooster\Launcher.exe	a variant of Win32/RegistryBooster application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
C:\Program Files\Uniblue\RegistryBooster\registrybooster.exe	Win32/RegistryBooster application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
C:\Qoobox\Quarantine\C\Windows\System32\Services.exe.vir	Win32/Sirefef.FC trojan (deleted - quarantined)	00000000000000000000000000000000	C
C:\Users\Pia\Downloads\SoftonicDownloader30100.exe	a variant of Win32/SoftonicDownloader.A application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
C:\_OTL\MovedFiles\08082012_130729\C_Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll	Win32/Toolbar.Babylon application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
C:\_OTL\MovedFiles\08082012_130729\C_Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll	Win32/Toolbar.Babylon application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
C:\_OTL\MovedFiles\08082012_130729\C_ProgramData\qosqbqklxapknjx\main.html	HTML/Ransom.B trojan (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
C:\_OTL\MovedFiles\08082012_130729\C_Users\Pia\AppData\Local\{a2afcad0-7336-7df3-913d-1c62aa2abbcc}\U\00000001.@	Win32/Conedex.C trojan (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
C:\_OTL\MovedFiles\08082012_130729\C_Windows\Installer\{a2afcad0-7336-7df3-913d-1c62aa2abbcc}\U\80000000.@	a variant of Win32/Sirefef.FA trojan (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
D:\download\RegistryReviverSetup(1).exe	Win32/RegistryReviver application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
D:\download\RegistryReviverSetup(2).exe	a variant of Win32/SlowPCfighter application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
D:\download\RegistryReviverSetup.exe	a variant of Win32/SlowPCfighter application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
D:\download\WinMaximizer2011.exe	a variant of Win32/SlowPCfighter application (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
D:\PIA-PC\Backup Set 2010-05-05 062737\Backup Files 2010-05-05 062737\Backup files 2.zip	a variant of Win32/SoftonicDownloader.A application (deleted - quarantined)	00000000000000000000000000000000	C
D:\PIA-PC\Backup Set 2010-06-13 230720\Backup Files 2010-06-13 230720\Backup files 2.zip	a variant of Win32/SoftonicDownloader.A application (deleted - quarantined)	00000000000000000000000000000000	C
D:\PIA-PC\Backup Set 2011-05-15 190002\Backup Files 2011-05-15 190002\Backup files 2.zip	a variant of Win32/RegistryBooster application (deleted - quarantined)	00000000000000000000000000000000	C
D:\PIA-PC\Backup Set 2011-06-12 190001\Backup Files 2011-06-12 190001\Backup files 1.zip	a variant of Win32/SoftonicDownloader.A application (deleted - quarantined)	00000000000000000000000000000000	C
D:\PIA-PC\Backup Set 2011-06-12 190001\Backup Files 2011-06-12 190001\Backup files 2.zip	a variant of Win32/RegistryBooster application (deleted - quarantined)	00000000000000000000000000000000	C
D:\PIA-PC\Backup Set 2011-06-26 190005\Backup Files 2011-06-26 190005\Backup files 1.zip	a variant of Win32/SoftonicDownloader.A application (deleted - quarantined)	00000000000000000000000000000000	C
D:\PIA-PC\Backup Set 2011-06-26 190005\Backup Files 2011-06-26 190005\Backup files 2.zip	a variant of Win32/RegistryBooster application (deleted - quarantined)	00000000000000000000000000000000	C
D:\PIA-PC\Backup Set 2011-08-28 190953\Backup Files 2011-08-28 190953\Backup files 1.zip	a variant of Win32/SoftonicDownloader.A application (deleted - quarantined)	00000000000000000000000000000000	C
D:\PIA-PC\Backup Set 2011-08-28 190953\Backup Files 2011-08-28 190953\Backup files 2.zip	a variant of Win32/RegistryBooster application (deleted - quarantined)	00000000000000000000000000000000	C
D:\PIA-PC\Backup Set 2011-11-11 130613\Backup Files 2011-11-11 130613\Backup files 1.zip	a variant of Win32/SoftonicDownloader.A application (deleted - quarantined)	00000000000000000000000000000000	C
D:\PIA-PC\Backup Set 2011-11-11 130613\Backup Files 2011-11-11 130613\Backup files 2.zip	a variant of Win32/RegistryBooster application (deleted - quarantined)	00000000000000000000000000000000	C
D:\PIA-PC\Backup Set 2012-01-22 195253\Backup Files 2012-01-22 195253\Backup files 1.zip	a variant of Win32/SoftonicDownloader.A application (deleted - quarantined)	00000000000000000000000000000000	C
D:\PIA-PC\Backup Set 2012-01-22 195253\Backup Files 2012-01-22 195253\Backup files 2.zip	a variant of Win32/RegistryBooster application (deleted - quarantined)	00000000000000000000000000000000	C
D:\PIA-PC\Backup Set 2012-04-01 190003\Backup Files 2012-04-01 190003\Backup files 1.zip	a variant of Win32/SoftonicDownloader.A application (deleted - quarantined)	00000000000000000000000000000000	C
D:\PIA-PC\Backup Set 2012-04-01 190003\Backup Files 2012-04-01 190003\Backup files 2.zip	a variant of Win32/RegistryBooster application (deleted - quarantined)	00000000000000000000000000000000	C
D:\PIA-PC\Backup Set 2012-04-01 190003\Backup Files 2012-05-21 192137\Backup files 1.zip	a variant of Win32/Injector.RIO trojan (deleted - quarantined)	00000000000000000000000000000000	C
D:\PIA-PC\Backup Set 2012-08-07 015202\Backup Files 2012-08-07 015202\Backup files 1.zip	a variant of Win32/SoftonicDownloader.A application (deleted - quarantined)	00000000000000000000000000000000	C
D:\PIA-PC\Backup Set 2012-08-07 015202\Backup Files 2012-08-07 015202\Backup files 2.zip	a variant of Win32/RegistryBooster application (deleted - quarantined)	00000000000000000000000000000000	C
D:\PIA-PC\Backup Set 2012-08-07 015202\Backup Files 2012-08-07 015202\Backup files 5.zip	multiple threats (deleted - quarantined)	00000000000000000000000000000000	C
D:\PIA-PC\Backup Set 2012-08-07 015202\Backup Files 2012-08-14 030603\Backup files 1.zip	a variant of Win32/SoftonicDownloader.A application (deleted - quarantined)	00000000000000000000000000000000	C