| |
| |||||||
Log-Analyse und Auswertung: Windows 7: blaue Links auf allen Internetseiten, die zu vermeintlichen Softwareupdates auffordernWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
23.05.2014, 17:16
| #5 |
| |  Windows 7: blaue Links auf allen Internetseiten, die zu vermeintlichen Softwareupdates auffordern Ok, hier das JRT Gedöns: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.4 (04.06.2014:1) OS: Windows 7 Home Premium x64 Ran by Leo on 23.05.2014 at 18:07:38,02 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services Failed to stop: [Service] update rightsurf ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1679964337-2249834522-3386294017-1000\Software\sweetim Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\robotaskbaricon_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\robotaskbaricon_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\robotaskbaricon_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\robotaskbaricon_RASMANCS Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0247B76B-721D-487C-AA06-097F341FC623} ~~~ Files Successfully deleted: [File] C:\Windows\Tasks\LyricsFinder-codedownloader.job Successfully deleted: [File] C:\Windows\Tasks\LyricsFinder-firefoxinstaller.job Successfully deleted: [File] C:\Windows\Tasks\LyricsFinder-updater.job Successfully deleted: [File] C:\Windows\Tasks\LyricsMonkey-1-chromeinstaller.job Successfully deleted: [File] C:\Windows\Tasks\LyricsMonkey-1-firefoxinstaller.job Successfully deleted: [File] "C:\Users\Leo\appdata\locallow\SkwConfig.bin" ~~~ Folders Failed to delete: [Folder] "C:\Program Files (x86)\rightsurf" ~~~ FireFox Successfully deleted: [File] C:\user.js ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 23.05.2014 at 18:13:29,27 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
| Themen zu Windows 7: blaue Links auf allen Internetseiten, die zu vermeintlichen Softwareupdates auffordern |
| pup.optional.amazontb.a, pup.optional.babsolution.a, pup.optional.babylon.a, pup.optional.bundleinstaller.a, pup.optional.bundlore, pup.optional.conduit.a, pup.optional.crossrider, pup.optional.crossrider.a, pup.optional.crx.a, pup.optional.delta.a, pup.optional.feven.a, pup.optional.installbrain.a, pup.optional.installcore, pup.optional.installcore.a, pup.optional.pricemeter.a, pup.optional.qone8, pup.optional.rightsurf.a, pup.optional.robinhood.a, pup.optional.scramblepacker.a, pup.optional.searchprotect.a, pup.optional.sweetim, pup.optional.vit.a, pup.optional.wajam, pup.optional.wajam.a, trojan.rotbrow.a |
Baum-Darstellung