| |
| |||||||
Log-Analyse und Auswertung: Windows 10: TR/AD.FireHooker.BUWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
04.11.2020, 12:59
| #6 |
| |  Windows 10: TR/AD.FireHooker.BU Fixlog: Code:
ATTFilter Entfernungsergebnis von Farbar Recovery Scan Tool (x64) Version: 02-11-2020
durchgeführt von Surio (04-11-2020 12:03:32) Run:3
Gestartet von C:\Users\Surio\Desktop
Geladene Profile: Surio
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
ExportKey: HKLM\Software\MozillaPlugins
ExportKey: HKLM\SOFTWARE\WOW6432Node\MozillaPlugins
ExportKey: HKCU\SOFTWARE\MozillaPlugins
DeleteQuarantine:
Unlock: C:\FRST
Reboot:
*****************
================== ExportKey: ===================
[HKLM\Software\MozillaPlugins]
[HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.1]
"Description"="VLC Multimedia Plugin"
"Path"="C:\Program Files\VideoLAN\VLC\npvlc.dll"
"Product"="VLC media player"
"Vendor"="VideoLAN"
"Version"="2.1.1"
[HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.2]
"Description"="VLC Multimedia Plugin"
"Path"="C:\Program Files\VideoLAN\VLC\npvlc.dll"
"Product"="VLC media player"
"Vendor"="VideoLAN"
"Version"="2.1.2"
[HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"="VLC Multimedia Plugin"
"Path"="C:\Program Files\VideoLAN\VLC\npvlc.dll"
"Product"="VLC media player"
"Vendor"="VideoLAN"
"Version"="2.1.3"
[HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.4]
"Description"="VLC Multimedia Plugin"
"Path"="C:\Program Files\VideoLAN\VLC\npvlc.dll"
"Product"="VLC media player"
"Vendor"="VideoLAN"
"Version"="2.1.4"
[HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"="VLC Multimedia Plugin"
"Path"="C:\Program Files\VideoLAN\VLC\npvlc.dll"
"Product"="VLC media player"
"Vendor"="VideoLAN"
"Version"="2.1.5"
[HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"="VLC Multimedia Plugin"
"Path"="C:\Program Files\VideoLAN\VLC\npvlc.dll"
"Product"="VLC media player"
"Vendor"="VideoLAN"
"Version"="2.2.4"
[HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.6]
"Description"="VLC Multimedia Plugin"
"Path"="C:\Program Files\VideoLAN\VLC\npvlc.dll"
"Product"="VLC media player"
"Vendor"="VideoLAN"
"Version"="2.2.6"
[HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.10]
"Description"="VLC Multimedia Plugin"
"Path"="C:\Program Files\VideoLAN\VLC\npvlc.dll"
"Product"="VLC media player"
"Vendor"="VideoLAN"
"Version"="3.0.10"
[HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.11]
"Description"="VLC Multimedia Plugin"
"Path"="C:\Program Files\VideoLAN\VLC\npvlc.dll"
"Product"="VLC media player"
"Vendor"="VideoLAN"
"Version"="3.0.11"
[HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.3]
"Description"="VLC Multimedia Plugin"
"Path"="C:\Program Files\VideoLAN\VLC\npvlc.dll"
"Product"="VLC media player"
"Vendor"="VideoLAN"
"Version"="3.0.3"
[HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.4]
"Description"="VLC Multimedia Plugin"
"Path"="C:\Program Files\VideoLAN\VLC\npvlc.dll"
"Product"="VLC media player"
"Vendor"="VideoLAN"
"Version"="3.0.4"
[HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.6]
"Description"="VLC Multimedia Plugin"
"Path"="C:\Program Files\VideoLAN\VLC\npvlc.dll"
"Product"="VLC media player"
"Vendor"="VideoLAN"
"Version"="3.0.6"
[HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.7]
"Description"="VLC Multimedia Plugin"
"Path"="C:\Program Files\VideoLAN\VLC\npvlc.dll"
"Product"="VLC media player"
"Vendor"="VideoLAN"
"Version"="3.0.7"
[HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.7.1]
"Description"="VLC Multimedia Plugin"
"Path"="C:\Program Files\VideoLAN\VLC\npvlc.dll"
"Product"="VLC media player"
"Vendor"="VideoLAN"
"Version"="3.0.7.1"
[HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.8]
"Description"="VLC Multimedia Plugin"
"Path"="C:\Program Files\VideoLAN\VLC\npvlc.dll"
"Product"="VLC media player"
"Vendor"="VideoLAN"
"Version"="3.0.8"
=== Ende von ExportKey ===
================== ExportKey: ===================
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins]
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"ShortName"="ipt"
"Description"="Intel IPT WebApi plugin"
"Path"="C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll"
"ProductName"="ipt"
"Vendor"="Intel"
"Version"="4.0.5"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5\MimeTypes]
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5\MimeTypes\application/x-vnd-intel-webapi-ipt-4.0.5]
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"ShortName"="updater"
"Description"="This plugin updates Intel WebAPI component"
"Path"="C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll"
"ProductName"="updater"
"Vendor"="Intel"
"Version"=""
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater\MimeTypes]
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater\MimeTypes\application/x-vnd-intel-webapi-updater]
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.111.2]
"Description"="Java™ Deployment Toolkit"
"GeckoVersion"="1.9"
"Path"="C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll"
"ProductName"="Java™ Deployment Toolkit"
"Vendor"="Oracle Corp."
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.111.2\MimeTypes]
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.111.2\MimeTypes\application/java-deployment-toolkit]
"Description"="Java™ Deployment Toolkit"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.111.2\MimeTypes\application/java-deployment-toolkit;deploy=11.111.2]
"Description"="Java™ Deployment Toolkit"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2]
"Description"="Oracle® Next Generation Java™ Plug-In"
"GeckoVersion"="1.9"
"Path"="C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll"
"ProductName"="Oracle® Java™ Plug-In"
"Vendor"="Oracle Corp."
"Version"="1.8.0_111"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2\MimeTypes]
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2\MimeTypes\application/x-java-applet]
"Description"="Java™ Applet"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2\MimeTypes\application/x-java-applet;jpi-version=1.8.0_111]
"Description"="Java™ Applet"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2\MimeTypes\application/x-java-applet;version=1.1]
"Description"="Java™ Applet"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2\MimeTypes\application/x-java-applet;version=1.1.1]
"Description"="Java™ Applet"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2\MimeTypes\application/x-java-applet;version=1.1.2]
"Description"="Java™ Applet"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2\MimeTypes\application/x-java-applet;version=1.1.3]
"Description"="Java™ Applet"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2\MimeTypes\application/x-java-applet;version=1.2]
"Description"="Java™ Applet"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2\MimeTypes\application/x-java-applet;version=1.2.1]
"Description"="Java™ Applet"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2\MimeTypes\application/x-java-applet;version=1.3]
"Description"="Java™ Applet"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2\MimeTypes\application/x-java-applet;version=1.3.1]
"Description"="Java™ Applet"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2\MimeTypes\application/x-java-applet;version=1.4]
"Description"="Java™ Applet"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2\MimeTypes\application/x-java-applet;version=1.4.1]
"Description"="Java™ Applet"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2\MimeTypes\application/x-java-applet;version=1.4.2]
"Description"="Java™ Applet"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2\MimeTypes\application/x-java-applet;version=1.5]
"Description"="Java™ Applet"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2\MimeTypes\application/x-java-applet;version=1.6]
"Description"="Java™ Applet"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2\MimeTypes\application/x-java-applet;version=1.7]
"Description"="Java™ Applet"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2\MimeTypes\application/x-java-applet;version=1.8]
"Description"="Java™ Applet"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2\MimeTypes\application/x-java-vm]
"Description"="Java™ Virtual Machine"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.111.2\MimeTypes\application/x-java-vm-npruntime]
"Description"="Java™ Applet"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Path"="C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll"
"Description"="WLPG Install MIME type"
"GeckoVersion"="1.0"
"ProductName"="Windows Live Photo Gallery"
"Version"="16.4.3528.0331"
"Vendor"="Microsoft"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331\MimeTypes]
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331\MimeTypes\application/x-wlpg-detect]
"Description"="WLPG Detect"
"Suffixes"="wlpg"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331\MimeTypes\application/x-wlpg3-detect]
"Description"="WLPG Detect"
"Suffixes"="wlpg"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\Adobe Reader]
"Path"="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll"
"Version"="20.013.20064"
"Description"="Handles PDFs in-place in Firefox"
"ProductName"="Adobe Reader Plugin for Firefox"
"Vendor"="Adobe Systems Incorporated. Copyright 1994-2010 All Rights Reserved"
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\Adobe Reader\MimeTypes]
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\Adobe Reader\MimeTypes\application/pdf]
""=""
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\Adobe Reader\MimeTypes\application/vnd.adobe.xdp+xml]
""=""
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\Adobe Reader\MimeTypes\application/vnd.adobe.xfd+xml]
""=""
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\Adobe Reader\MimeTypes\application/vnd.adobe.xfdf]
""=""
[HKLM\SOFTWARE\WOW6432Node\MozillaPlugins\Adobe Reader\MimeTypes\application/vnd.fdf]
""=""
=== Ende von ExportKey ===
================== ExportKey: ===================
"HKCU\SOFTWARE\MozillaPlugins" => nicht gefunden
=== Ende von ExportKey ===
"C:\FRST\Quarantine" => erfolgreich entfernt
"C:\FRST" => wurde entsperrt
Das System musste neu gestartet werden.
==== Ende von Fixlog 12:03:53 ====
Cleanup & Maßnahmen führe ich im Anschluss von diesem Post aus. Im Anschluss noch drei Fragen, sollten diese nicht hierher gehören bitte ignorieren. Bisher wurde der Firehooker von Avira erkannt... bin ich jetzt besser dran nur mit dem Windows Defender oder soll ich die kostenlose Version von Malewarebytes auf dem Rechner lassen? Ist der Vivaldi Browser "schlecht" da er ja mit Chrome Erweiterungen arbeitet (soweit ich weiß)? Sollte ich irgendwann eine Neuinstallation von Windows machen wollen/müssen, ich hatte mit Auslieferung des Rechners Windows 8.1 und bin über das kostenlose Upgrade auf Windows 10 umgestiegen, muss ich mir dann Windows 10 kaufen oder wo kann ich meinen Product Key von Windows 10 auslesen? Vielen Dank Matthias, du warst mir eine riesige Hilfe!  |
| Themen zu Windows 10: TR/AD.FireHooker.BU |
| .dll, antivirus, avira, browser, defender, explorer, firefox, firewall, helper, home, internet, internet explorer, logfile, monitor, nvcontainer, nvcontainer.exe, pixel, registry, scan, security, server, software, tcp, temp, udp, virtualbox, windows, wmi |
Baum-Darstellung