Trojaner-Board - Wireshark Antivirus entfernen

Wireshark Antivirus entfernen

Es kann sein, dass Wireshark Antivirus einen Download aus dem Internet verhindert. In diesem Fall sollten die nachfolgenden Programme auf ein USB-Sick von einem sauberen Rechner aus geladen werden.

Tool: rkill.com Download Link (umbenannt: iExplore.exe) von Grinler herunterladen und mit doppelklick ausführen.

Sollte rkill.com nicht starten, versuche es mit der umbenannten Version iExplore.exe

http://www.trojaner-board.de/attachm...aning-tool.png

Das Tool stoppt alle Prozesse von Wireshark Antivirus.

Bei Bedarf mehrmals ausführen, bis alle ungewünschten Prozesse beendet wurden.

Starte einen vollständigen Scan mit Malwarebytes Anti-Malware

Achtung: Diese Fake Software wird versuchen, den Einsatz von Malwarebytes zu verhindern. Benenne das Setup vor dem speichern in etwas anderes um (z.B. Herbert.exe).

Falls es vorher nicht funktioniert hat, sollte das Setup jetzt starten.

Wenn das Programm nach der Installation nicht starten sollte, dann benenne die "mbam.exe" in "herbert.exe" um und versuche es erneut.

Sollte MBAM trotzdem nicht starten: Malwarebytes Anti-Malware startet nicht

http://www.trojaner-board.de/attachm...ntfernen-2.png

http://www.trojaner-board.de/attachm...1&d=1281678235

Code:

Memory Processes Infected: 2 Memory Modules Infected: 0 Registry Keys Infected: 6 Registry Values Infected: 0 Registry Data Items Infected: 1 Folders Infected: 4 Files Infected: 40 Memory Processes Infected: C:\Program Files\Wireshark Antivirus\Wireshark Antivirus.exe (Rogue.Installer) -> Unloaded process successfully. C:\Program Files\svchost.exe (Trojan.FakeAlert) -> Unloaded process successfully. Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\adbupd (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{149256d5-e103-4523-bb43-2cfb066839d6} (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{149256d5-e103-4523-bb43-2cfb066839d6} (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{149256d5-e103-4523-bb43-2cfb066839d6} (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\Software\Wireshark Antivirus (Rogue.WiresharkAntivirus) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ADBUPD (Trojan.Agent) -> Quarantined and deleted successfully. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_CLASSES_ROOT\exefile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: (C:\Program Files\alggui.exe "%1" %*) Good: ("%1" %*) -> Quarantined and deleted successfully. Folders Infected: C:\Program Files\scdata (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Start Menu\Programs\Wireshark Antivirus (Rogue.WiresharkAntivirus) -> Quarantined and deleted successfully. C:\Program Files\Wireshark Antivirus (Rogue.WiresharkAntivirus) -> Quarantined and deleted successfully. Files Infected: C:\Program Files\Wireshark Antivirus\Wireshark Antivirus.exe (Rogue.Installer) -> Quarantined and deleted successfully. C:\Program Files\svchost.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Program Files\adc_w32.dll (Trojan.FakeAlert) -> Delete on reboot. C:\Documents and Settings\{username}\Desktop\Wireshark Antivirus.exe (Rogue.Installer) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Desktop\wpp.exe (Rogue.Installer) -> Quarantined and deleted successfully. C:\Program Files\scdata\dbsinit.exe (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\wispex.html (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\i1.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\i2.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\i3.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\j1.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\j2.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\j3.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\jj1.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\jj2.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\jj3.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\l1.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\l2.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\l3.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\pix.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\t1.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\t2.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\Thumbs.db (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\up1.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\up2.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\w1.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\w11.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\w2.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\w3.jpg (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\word.doc (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\wt1.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\wt2.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\scdata\images\wt3.gif (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Start Menu\Programs\Wireshark Antivirus\Wireshark Antivirus.lnk (Rogue.WiresharkAntivirus) -> Quarantined and deleted successfully. C:\Documents and Settings\{username}\Desktop\Wireshark Antivirus.LNK (Rogue.WiresharkAntivirus) -> Quarantined and deleted successfully. C:\Program Files\alggui.exe (Trojan.Agent) -> Quarantined and deleted successfully. C:\Program Files\nuar.old (Malware.Trace) -> Quarantined and deleted successfully. C:\Program Files\skynet.dat (Malware.Trace) -> Quarantined and deleted successfully. C:\Program Files\wp3.dat (Malware.Trace) -> Quarantined and deleted successfully. C:\Program Files\wp4.dat (Malware.Trace) -> Quarantined and deleted successfully.