Trojaner-Board - GeneralAntivirus / General Antivirus entfernen

GeneralAntivirus / General Antivirus entfernen

Starte einen vollständigen Scan mit Malwarebytes Anti-Malware

Achtung: Diese Fake Software wird versuchen, den Einsatz von Malwarebytes zu verhindern. Benenne das Setup vor dem speichern in etwas anderes um (z.B. Herbert.exe).

Falls es vorher nicht funktioniert hat, sollte das Setup jetzt starten.

Wenn das Programm nach der Installation nicht starten sollte, dann benenne die "mbam.exe" in "herbert.exe" um und versuche es erneut.

Sollte MBAM trotzdem nicht starten: Malwarebytes Anti-Malware startet nicht

http://www.trojaner-board.de/attachm...ntfernen-2.png

Code:

Memory Processes Infected: C:\program files\General Antivirus\GenAvir.exe (Rogue.GeneralAntivirus) -> Unloaded process successfully. C:\Documents and Settings\{username}\My Documents\My Pictures\theonin.exe (Rootkit.TDSS) -> Unloaded process successfully. C:\Documents and Settings\{username}\Local Settings\Application Data\Microsoft\Windows\services.exe (Rootkit.TDSS) -> Unloaded process successfully. Memory Modules Infected: C:\WINDOWS\system32\jktfnwi.dll (Rootkit.TDSS) -> Delete on reboot. C:\WINDOWS\system32\uwirdlwhp.dll (Rootkit.TDSS) -> Delete on reboot. Registry Keys Infected: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\htgrdengine (Rootkit.TDSS) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\general antivirus_is1 (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_HTGRDENGINE (Trojan.Agent) -> Quarantined and deleted successfully. Registry Values Infected: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\general antivirus (Rogue.GeneralAntivirus) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\theonin (Rootkit.TDSS) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\hostservice (Malware.Trace) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe\debugger (Security.Hijack) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe\realdebugger (Security.Hijack) -> Quarantined and deleted successfully. Registry Data Items Infected: (No malicious items detected) Folders Infected: C:\Documents and Settings\{username}\Application Data\General AntiVirus (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Application Data\General AntiVirus\db (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Program Files\General AntiVirus (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Program Files\General AntiVirus\db (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Program Files\General AntiVirus\Languages (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Start Menu\Programs\General AntiVirus (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. Files Infected: C:\WINDOWS\system32\jktfnwi.dll (Rootkit.TDSS) -> Delete on reboot. C:\WINDOWS\system32\uwirdlwhp.dll (Rootkit.TDSS) -> Delete on reboot. C:\program files\General Antivirus\GenAvir.exe (Rogue.GeneralAntivirus) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\My Documents\My Pictures\theonin.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Local Settings\Application Data\Microsoft\Windows\services.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Application Data\Microsoft\Windows\winlogon.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Local Settings\Temp\102191notepad.exe (Rogue.GeneralAntivirus) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Local Settings\Temp\399512charmap.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Local Settings\Temp\526879paint.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Local Settings\Temp\615014notepad.exe (Rogue.GeneralAntivirus) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Local Settings\Temp\855495paint.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Local Settings\Temp\907177charmap.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Local Settings\Temp\is-F4ACH.tmp\WMILib.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Local Settings\Temporary Internet Files\Content.IE5\ISF6HJK1\file[1].jpg (Rootkit.TDSS) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Local Settings\Temporary Internet Files\Content.IE5\ISF6HJK1\file[2].jpg (Rootkit.TDSS) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Local Settings\Temporary Internet Files\Content.IE5\OAPPQD53\Ipackxp[1].jpg (Rogue.GeneralAntivirus) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Local Settings\Temporary Internet Files\Content.IE5\OAPPQD53\Ipackxp[2].jpg (Rogue.GeneralAntivirus) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Local Settings\Temporary Internet Files\Content.IE5\VAD23EEL\file5[1].jpg (Malware.Packer.Gen) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Local Settings\Temporary Internet Files\Content.IE5\VAD23EEL\file5[2].jpg (Malware.Packer.Gen) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Application Data\General AntiVirus\settings.ini (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Application Data\General AntiVirus\uill.ini (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Application Data\General AntiVirus\unins000.exe (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Application Data\General AntiVirus\Uninstall General Antivirus.lnk (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Application Data\General AntiVirus\updateloadlist.ini (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Application Data\General AntiVirus\db\config.cfg (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Application Data\General AntiVirus\db\Timeout.inf (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Application Data\General AntiVirus\db\Urls.inf (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Program Files\General AntiVirus\activate.ico (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Program Files\General AntiVirus\Explorer.ico (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Program Files\General AntiVirus\unins000.dat (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Program Files\General AntiVirus\uninstall.ico (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Program Files\General AntiVirus\working.log (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Program Files\General AntiVirus\db\DBInfo.ver (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Program Files\General AntiVirus\db\ga090122.db (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Program Files\General AntiVirus\db\Infected.wav (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Program Files\General AntiVirus\db\lists.ini (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Program Files\General AntiVirus\db\WMILib.dll (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Start Menu\Programs\General AntiVirus\General Antivirus Home Page.lnk (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Start Menu\Programs\General AntiVirus\General Antivirus.lnk (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Start Menu\Programs\General AntiVirus\Purchase License.lnk (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Desktop\General Antivirus.lnk (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Application Data\Microsoft\Internet Explorer\Quick Launch\General Antivirus.lnk (Rogue.GeneralAntiVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Local Settings\Application Data\Microsoft\Windows\pguard.ini (Rogue.InternetAntiVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png (Trojan.FakeAlert) -> Quarantined and deleted successfully.