![]() |
|
Log-Analyse und Auswertung: Popups öffnen sich bei jedem Klick, Werbung über ganzen BildschirmWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() |
|
![]() | #1 |
| ![]() Popups öffnen sich bei jedem Klick, Werbung über ganzen BildschirmCode:
ATTFilter Zoek.exe v5.0.0.0 Updated 31-12-2014 Tool run by Tobi on 03.01.2015 at 17:47:00,97. Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Tobi\Desktop\zoek.exe [Scan all users] [Script inserted] ==== System Restore Info ====================== ==== Empty Folders Check ====================== C:\PROGRA~2\AGEIA Technologies deleted successfully C:\PROGRA~2\Mozilla Firefox deleted successfully C:\PROGRA~2\Navilog1 deleted successfully C:\Program Files\ATI Technologies deleted successfully C:\Program Files\Google deleted successfully C:\PROGRA~3\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} deleted successfully C:\Users\Default\AppData\Local\Adobe deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-436329390-220876122-1825807824-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully HKEY_USERS\TEMP_2\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully HKEY_USERS\S-1-5-21-436329390-220876122-1825807824-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E3D96E85-529D-4269-AC6A-97CF9E2221E3} deleted successfully HKEY_USERS\S-1-5-21-436329390-220876122-1825807824-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E3D96E85-529D-4269-AC6A-97CF9E2221E3} deleted successfully HKEY_USERS\S-1-5-21-436329390-220876122-1825807824-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} deleted successfully HKEY_USERS\S-1-5-21-436329390-220876122-1825807824-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} deleted successfully HKEY_USERS\S-1-5-21-436329390-220876122-1825807824-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} deleted successfully HKEY_USERS\S-1-5-21-436329390-220876122-1825807824-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} deleted successfully HKEY_USERS\S-1-5-21-436329390-220876122-1825807824-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{55ADADE8-B1A2-42DB-8AB8-71F7176B76} deleted successfully HKEY_USERS\S-1-5-21-436329390-220876122-1825807824-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{55E8693D-F66C-48B8-9E24-3023A2E5A29F} deleted successfully HKEY_USERS\S-1-5-21-436329390-220876122-1825807824-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6F573465-2AB1-4690-BF85-9D6099189AA9} deleted successfully HKEY_USERS\S-1-5-21-436329390-220876122-1825807824-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8273698E-2B3D-4BED-A35F-E3FFCF50B5EE} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Batch Command(s) Run By Tool====================== Windows-IP-Konfiguration Der DNS-Aufl”sungscache wurde geleert. ==== Deleting Files \ Folders ====================== C:\PROGRA~3\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} not found C:\PROGRA~2\COMMON~1\DVDVideoSoft\bin deleted C:\PROGRA~3\Package Cache deleted C:\windows\patsearch.bin deleted C:\windows\SysNative\config\systemprofile\Searches deleted C:\Users\Tobi\AppData\Roaming\Mozilla\Firefox\Profiles\rxmg66m2.default\extensions\abs@avira.com deleted ==== System Specs ====================== Windows: Windows 7 Home Premium Edition (64-bit) Service Pack 1 (Build 7601) Memory (RAM): 8126 MB CPU Info: Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz CPU Speed: 3597,0 MHz Sound Card: Lautsprecher (Realtek High Defi | Realtek Digital Output (Realtek | Display Adapters: ASUS R9 280 Series | ASUS R9 280 Series | ASUS R9 280 Series | ASUS R9 280 Series | ASUS R9 280 Series | ASUS R9 280 Series | RDPDD Chained DD | RDP Encoder Mirror Driver | RDP Reflector Display Driver Monitors: 1x; PnP-Monitor (Standard) | Screen Resolution: 1920 X 1080 - 32 bit Network: Network Present Network Adapters: Realtek PCIe GBE Family Controller | Hamachi Network Interface CD / DVD Drives: 1x (E: | ) E: ASUS DRW-24F1ST a Ports: COM Ports NOT Present. LPT Port NOT Present. Mouse: 5 Button Wheel Mouse Present Hard Disks: C: 250,0GB | D: 681,2GB | F: 232,8GB Hard Disks - Free: C: 42,4GB | D: 674,4GB | F: 146,6GB Manufacturer *: American Megatrends Inc. BIOS Info: AT/AT COMPATIBLE | 06/16/14 | ALASKA - 1072009 Time Zone: Mitteleuropäische Zeit Motherboard *: ASUSTeK COMPUTER INC. H81M-PLUS Country: Deutschland Language: DEU ==== System Specs (Software) ====================== Anti-Virus: Avira Desktop On-access scanning disabled (Outdated) Anti-Spyware: Avira Desktop disabled (Outdated) Anti-Spyware: Windows Defender disabled (Outdated) Internet Explorer Version: 11.0.9600.17501 Adobe Reader version: 11.0.10.32 Sun Java version: 1.7.0_71 (64-bit) Flash Player version: 15.0.0.246 ==== Firefox Start and Search pages ====================== ProfilePath: C:\Users\Tobi\AppData\Roaming\Mozilla\Firefox\Profiles\rxmg66m2.default user_pref("browser.startup.homepage", "about:home"); ==== Firefox Extensions ====================== ProfilePath: C:\Users\Tobi\AppData\Roaming\Mozilla\Firefox\Profiles\rxmg66m2.default - Undetermined - {73a6fe31-595d-460b-a920-fcc0f8843232} - NoScript - %ProfilePath%\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi - Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi ==== Firefox Plugins ====================== Profilepath: C:\Users\Tobi\AppData\Roaming\Mozilla\Firefox\Profiles\rxmg66m2.default 9860727E477F17B88E39AF8B69B0407A - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll - Shockwave Flash ==== Chromium Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions flliilndjeohchalpbbcdekjklbdgfkk - No path found[] lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[14.07.2014 18:22] ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="hxxp://google.de/" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="hxxp://google.de/" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" {012E1000-F331-11DB-8314-0800200C9A66} Google Url="hxxp://www.google.com/search?q={searchTerms}" {51D9FD66-0948-4F6C-AF61-1C3518E482A3} Unknown Url="Not_Found" ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-436329390-220876122-1825807824-1000\Software\Microsoft\Internet Explorer\SearchScopes\{51D9FD66-0948-4F6C-AF61-1C3518E482A3} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\raptrstub.exe deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\skype.exe deleted successfully ==== Empty IE Cache ====================== C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Tobi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Tobi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== C:\Users\Tobi\AppData\Local\Mozilla\Firefox\Profiles\rxmg66m2.default\cache2 emptied successfully ==== Empty Chrome Cache ====================== No Chrome User Data found ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== No Java Cache Found ==== C:\zoek_backup content ====================== C:\zoek_backup (files=171 folders=53 44086820 bytes) ==== Empty Temp Folders ====================== C:\Users\Administrator\AppData\Local\Temp emptied successfully C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\Tobi\AppData\Local\Temp will be emptied at reboot C:\windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\windows\Temp successfully emptied C:\Users\Tobi\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== EOF on 03.01.2015 at 17:57:30,60 ====================== ![]() Muss echt sagen Top Forum und vor allem Top Hilfe! Herzlichen Dank deeprybka! |
![]() | #2 |
/// TB-Ausbilder /// Anleitungs-Guru ![]() ![]() ![]() ![]() ![]() | ![]() Popups öffnen sich bei jedem Klick, Werbung über ganzen BildschirmGerne! ![]() Wir sind aber noch nicht fertig... ![]() Schritt 1 ESET Online Scanner
Schritt 2 ![]() ![]() Bitte starte FRST erneut, markiere auch die checkbox ![]() Bitte poste mir den Inhalt der beiden Logs die erstellt werden.
__________________ |
![]() |
Themen zu Popups öffnen sich bei jedem Klick, Werbung über ganzen Bildschirm |
andere, anderen, bildschirm, firefox, hilfe, klick, lästiger, nicht mehr, pc repair, pop up, popups, problem, seite, seiten, virus, voller, werbung, öffnen |