Trojaner-Board - XJR Antivirus entfernen

XJR Antivirus entfernen

Tool: rkill.com Download Link (umbenannt: iExplore.exe) von Grinler herunterladen und mit doppelklick ausführen.

Sollte rkill.com nicht starten, versuche es mit der umbenannten Version iExplore.exe

http://www.trojaner-board.de/attachm...aning-tool.png

Das Tool stoppt alle Prozesse von XJR Antivirus.

Bei Bedarf mehrmals ausführen, bis alle ungewünschten Prozesse beendet wurden.

Starte einen vollständigen Scan mit Malwarebytes Anti-Malware

Achtung: Diese Fake Software wird versuchen, den Einsatz von Malwarebytes zu verhindern. Benenne das Setup vor dem speichern in etwas anderes um (z.B. Herbert.exe).

Falls es vorher nicht funktioniert hat, sollte das Setup jetzt starten.

Wenn das Programm nach der Installation nicht starten sollte, dann benenne die "mbam.exe" in "herbert.exe" um und versuche es erneut.

Sollte MBAM trotzdem nicht starten: Malwarebytes Anti-Malware startet nicht

http://www.trojaner-board.de/attachm...ntfernen-2.png

http://www.trojaner-board.de/attachm...ntfernen-8.jpg

Code:

Memory Processes Infected: 2 Memory Modules Infected: 0 Registry Keys Infected: 6 Registry Values Infected: 0 Registry Data Items Infected: 1 Folders Infected: 4 Files Infected: 40 Memory Processes Infected: C:\Program Files\XJR Antivirus\XJR Antivirus.exe (Rogue.WindowsPolicePro) -> Unloaded process successfully. C:\Program Files\svchost.exe (Trojan.Agent) -> Unloaded process successfully. Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\CLSID\{149256d5-e103-4523-bb43-2cfb066839d6} (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{149256d5-e103-4523-bb43-2cfb066839d6} (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{149256d5-e103-4523-bb43-2cfb066839d6} (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\adbupd (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\Software\XJR Antivirus (Rogue.XJRAntivirus) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ADBUPD (Trojan.Agent) -> Quarantined and deleted successfully. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_CLASSES_ROOT\exefile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: (C:\Program Files\alggui.exe "%1" %*) Good: ("%1" %*) -> Quarantined and deleted successfully. Folders Infected: C:\Program Files\XJR Antivirus (Rogue.XJRAntivirus) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Start Menu\Programs\XJR Antivirus (Rogue.XJRAntivirus) -> Quarantined and deleted successfully. C:\Program Files\scdata (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images (Trojan.Dropper) -> Quarantined and deleted successfully. Files Infected: C:\Program Files\XJR Antivirus\XJR Antivirus.exe (Rogue.WindowsPolicePro) -> Quarantined and deleted successfully. C:\Program Files\adc_w32.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Desktop\XJR Antivirus.exe (Rogue.WindowsPolicePro) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Local Settings\Temp\win2.tmp (Trojan.Downloader) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Start Menu\Programs\XJR Antivirus\XJR Antivirus.lnk (Rogue.XJRAntivirus) -> Quarantined and deleted successfully. C:\Program Files\scdata\dbsinit.exe (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\wispex.html (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\i1.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\i2.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\i3.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\j1.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\j2.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\j3.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\jj1.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\jj2.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\jj3.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\l1.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\l2.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\l3.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\pix.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\t1.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\t2.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\Thumbs.db (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\up1.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\up2.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\w1.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\w11.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\w2.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\w3.jpg (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\word.doc (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\wt1.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\wt2.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\wt3.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Desktop\XJR Antivirus.LNK (Rogue.XJRAntivirus) -> Quarantined and deleted successfully. C:\Program Files\alggui.exe (Trojan.Agent) -> Quarantined and deleted successfully. C:\Program Files\nuar.old (Malware.Trace) -> Quarantined and deleted successfully. C:\Program Files\skynet.dat (Malware.Trace) -> Quarantined and deleted successfully. C:\Program Files\svchost.exe (Trojan.Agent) -> Quarantined and deleted successfully. C:\Program Files\wp3.dat (Malware.Trace) -> Quarantined and deleted successfully. C:\Program Files\wp4.dat (Malware.Trace) -> Quarantined and deleted successfully.