Trojaner-Board - Milestone Antivirus entfernen

Milestone Antivirus entfernen

Was ist Milestone Antivirus?
Milestone Antivirus ist ein Ableger der Malware Wireshark Antivirus. Milestone Antivirus ist eine weitere Rogue-Malware in Form einer gefälschten Scan-Software, die mittels eines sog. Trojaners in den PC eindringt und dem Benutzer weissmacht, den PC nach Malware abzusuchen. Diese Software (Milestone Antivirus) ist ein Fake und selbst eine Schadsoftware und sollte nicht gekauft werden.

Da solche Software wie Milestone Antivirus sich gegen jede Entfernung wehren wird und Milestone Antivirus oftmals noch Rootkits mitinstalliert, sollte eine Neuinstallation des Systems in Erwägung gezogen werden.

Verbreitet wird Scareware wie Milestone Antivirus nicht mehr ausschliesslich über 'dubiose Seiten' für Cracks, KeyGens und Warez, sondern auch seriöse Seiten werden zunehmend für die Verbreitung dieser mißbraucht (http://www.trojaner-board.de/90880-d...tallation.html).

Der wichtigste Schutz vor einer Infizierung ist ein aktuelles Windows (mit allen Updates) und aktuelle Drittanbietersoftware wie Java oder Adobe Flash!

http://www.trojaner-board.de/attachm...1&d=1307508263 http://www.trojaner-board.de/attachm...1&d=1307508263

http://www.trojaner-board.de/attachm...1&d=1307508263

Symptome von Milestone Antivirus:

ständige Fake Virenmeldungen von Milestone Antivirus
PC läuft seit Milestone Antivirus langsamer als üblich

http://www.trojaner-board.de/attachm...1&d=1307508263 http://www.trojaner-board.de/attachm...1&d=1307508263 http://www.trojaner-board.de/attachm...1&d=1307508263 http://www.trojaner-board.de/attachm...1&d=1307508263 http://www.trojaner-board.de/attachm...1&d=1307508263

Fake-Meldungen von Milestone Antivirus:

Security Warning:
The file C:\Windows\System32\notepad.exe is infected.
Running of application is impossible.

Please activate your antivirus software.

Security Warning
Your computer continues to be infected with harmful viruses. In order to prevent permanent loss of your information and credit card data theft please activate your antivirus software. Click here to enable protection.

Security Warning
Malicious programs that may steal your private information and prevent your system from working properly are detected on your computer.
Click here to clean your PC immediately.

Security Warning
There are critical system files on your computer that were modified by malicious program.
It will cause unstable work of your system and permanent data loss.
Click here to undo performed modifications and remove malicious software (Highly recommended).

Warning: Infection is Detected
Windows has found spyware infection on your computer!
Click here to update your Windows antivirus software

Warning: Spyware Detected
Windows has found spy programs running on your computer!
Click here to update your Windows antivirus software

svchost.exe has encountered a problem and needs to close. We are sorry for the inconvenience.
If you were in the middle of something, the information you were working on might be lost.
Please tell Microsoft about this problem.
We have created an error report that you can send to us. We will treat this report as confidential and anonymous.
To see what data this error report contains, click here.

Dateien von Milestone Antivirus:

Code:

c:\Program Files\conhost.exe

c:\Program Files\csrss.exe

c:\Program Files\Milestone Antivirus.ico

c:\Program Files\nuar.old

c:\Program Files\sh3.dat

c:\Program Files\sh4.dat

c:\Program Files\skynet.dat

c:\Program Files\Milestone Antivirus\

c:\Program Files\Milestone Antivirus\Milestone Antivirus.exe

c:\Program Files\scdata\

c:\Program Files\scdata\wispex.html

c:\Program Files\scdata\wskinn.exe

c:\Program Files\scdata\images\

c:\Program Files\scdata\images\i1.gif

c:\Program Files\scdata\images\i2.gif

c:\Program Files\scdata\images\i3.gif

c:\Program Files\scdata\images\j1.gif

c:\Program Files\scdata\images\j2.gif

c:\Program Files\scdata\images\j3.gif

c:\Program Files\scdata\images\jj1.gif

c:\Program Files\scdata\images\jj2.gif

c:\Program Files\scdata\images\jj3.gif

c:\Program Files\scdata\images\l1.gif

c:\Program Files\scdata\images\l2.gif

c:\Program Files\scdata\images\l3.gif

c:\Program Files\scdata\images\pix.gif

c:\Program Files\scdata\images\t1.gif

c:\Program Files\scdata\images\t2.gif

c:\Program Files\scdata\images\Thumbs.db

c:\Program Files\scdata\images\up1.gif

c:\Program Files\scdata\images\up2.gif

c:\Program Files\scdata\images\w1.gif

c:\Program Files\scdata\images\w11.gif

c:\Program Files\scdata\images\w2.gif

c:\Program Files\scdata\images\w3.jpg

c:\Program Files\scdata\images\word.doc

c:\Program Files\scdata\images\wt1.gif

c:\Program Files\scdata\images\wt2.gif

c:\Program Files\scdata\images\wt3.gif

%UserProfile%\Desktop\Milestone Antivirus.exe.txt

%UserProfile%\Desktop\Milestone Antivirus.lnk

%UserProfile%\Start Menu\Programs\Milestone Antivirus\

%UserProfile%\Start Menu\Programs\Milestone Antivirus\Milestone Antivirus.lnk

Registry-Einträge von Milestone Antivirus:

Code:

HKEY_CURRENT_USER\Software\Milestone Antivirus

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\QTUpdate

HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" = 'C:\Program Files\conhost.exe "%1" %*'

Milestone Antivirus im HijackThis-Log:

Code:

O23 - Service: Quicktime update (QTUpdate) - Unknown owner - C:\Program Files\csrss.exe