Trojaner-Board - adsdelivery + iStartSurf

FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument
Code:
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

CHR HKU\S-1-5-21-171592873-1656066399-1947005370-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

HKU\S-1-5-21-171592873-1656066399-1947005370-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-171592873-1656066399-1947005370-1000 -> URL hxxp://search.conduit.com/Results.aspx?ctid=CT3322287&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP8803837A-1DA4-472E-BAE6-FF0BFD270EFC&q={searchTerms}&SSPV=

SearchScopes: HKU\S-1-5-21-171592873-1656066399-1947005370-1000 -> SuggestionsURL_JSON hxxp://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}

SearchScopes: HKU\S-1-5-21-171592873-1656066399-1947005370-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = web/?type=dspp&q={searchTerms}

Toolbar: HKU\S-1-5-21-171592873-1656066399-1947005370-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

Toolbar: HKU\S-1-5-21-171592873-1656066399-1947005370-1000 -> No Name - {534D542D-5637-006A-76A7-7A786E7484D7} -  No File

CHR HKLM-x32\...\Chrome\Extension: [fknfdieimobmimhdkfkheeejenmdjhoe] - C:\Program Files (x86)\pandasecuritytb\chrome-newtab-search.crx [Not Found]

C:\Windows\System32\Tasks\{69024FA6-BE33-473D-B9A3-EE1A4D9E4625}

C:\ProgramData\{95f4c13f-5638-faae-95f4-4c13f56304fd}

C:\Windows\System32\Tasks\{A2F92AC1-AFA1-4E86-8E4F-4320AF8CAFC8}

C:\Windows\System32\Tasks\{42DB7226-BD17-443B-9B46-0B981C090BEB}

C:\Windows\System32\Tasks\{379D7A1C-5990-4F7B-8D7F-93DBB093395D}

C:\Users\Holger Carlson\Desktop\Buchliebhaber.lnk

C:\Buchliebhaber1

C:\Windows\System32\Tasks\{31DF2CAA-6FE5-4163-BE60-BDF22507129E}

C:\Windows\System32\Tasks\{7BE02FCA-D2BD-4C97-AEEF-BEAB652E047F}

Task: {098E8135-34F9-4A64-934D-CB129E5D2CDC} - \Google Updater and Installer No Task File <==== ATTENTION

Task: {0CE00D12-17CE-4495-BF65-180B9826F70C} - \{61A08136-196D-4297-89AD-D497D9417337} No Task File <==== ATTENTION

Task: {0D02835E-8E5B-471D-B8DD-C212A01D96EC} - \{D04405DF-9CCA-470D-B397-4843D8B97AF0} No Task File <==== ATTENTION

Task: {0D85BDAC-E5C7-468D-B749-BB89C6043C0C} - \{5287E865-8199-49E9-9791-D1D1C8255AD2} No Task File <==== ATTENTION

Task: {11951C30-7772-4873-A9C8-E7D79EC20876} - \{D8737E18-1D23-477D-AAC7-5336054949A5} No Task File <==== ATTENTION

Task: {3210E7F8-FB59-421F-B199-67709A46C787} - \{A6277D21-0A69-4926-8537-03083BD82DC4} No Task File <==== ATTENTION

Task: {38A8F2A8-F514-4C70-A1BB-A5D46267F1FB} - \{F46C64DF-4E00-4451-B8AB-B1BD2B03A5D6} No Task File <==== ATTENTION

Task: {38ADF97D-C025-44B4-8A28-255AF09F87BD} - \{9623FEA8-9F14-41C1-B13F-5E2F1DDF2973} No Task File <==== ATTENTION

Task: {3B3ABEC6-C5C7-4317-98AA-0E6A0A2CCF4B} - \{9DB39282-3B31-400F-9105-DE5FB32A8625} No Task File <==== ATTENTION

Task: {3DFA3AE3-36A5-43EE-86FD-5CFEE82FD09E} - \{010EC50E-DEBC-4DDF-818F-D8FD586C6441} No Task File <==== ATTENTION

Task: {442B4BA7-EBD3-4530-973F-E7CC01346952} - \{BA46EF16-D5AD-455B-A934-5EFCEB3A4388} No Task File <==== ATTENTION

Task: {46897D9B-08E1-407A-86D2-588D7ABBE189} - \{BE03A807-43D0-45D8-9633-BA1E5A2BF85C} No Task File <==== ATTENTION

Task: {47F29D00-B56D-4D0B-A245-F110AC103BA3} - \{DCE86621-269D-478F-9FAC-AF30D2697486} No Task File <==== ATTENTION

Task: {4ABBB83F-8527-455B-839D-0E31E9921ABF} - \{414946E3-07AA-4AF3-BB0D-E22440C7BAAE} No Task File <==== ATTENTION

Task: {4DB12196-A5A6-455A-A31E-8A8F9CDA048F} - \{00D6677F-309E-4218-BCA8-4C50017C8BFD} No Task File <==== ATTENTION

Task: {4E55F6B2-D76F-46DA-85CA-851B04EA102C} - System32\Tasks\4805 => Wscript.exe C:\Users\HOLGER~1\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION

Task: {536019A5-4DF9-4D2A-AB12-D4F97B46565A} - \{3542F023-1538-411B-9E77-ACAF5E3DCF29} No Task File <==== ATTENTION

Task: {61DA3565-D65E-4727-A79B-CFF46B7C83D0} - \{515B0C8B-D302-490D-B011-1690D5CB8DA8} No Task File <==== ATTENTION

Task: {67253C4B-AA19-4D28-A2C4-ACB82A1E8FB3} - \{8715223C-93FC-489B-A4F9-497C1B06356D} No Task File <==== ATTENTION

Task: {689876BF-828C-4CAC-B3C8-96B7A34B374C} - \{E27BA60A-F9D1-4950-AADD-E4C8BB8E3AE7} No Task File <==== ATTENTION

Task: {6B054A5F-A0E3-42EF-B939-199ECAD09EEE} - \Registration 1und1 Task No Task File <==== ATTENTION

Task: {73E334A0-2C62-4488-842A-B6047FD36A67} - \{4C3D4C4C-3DD2-436D-B415-CC9B34C519DA} No Task File <==== ATTENTION

Task: {7687468C-FCB9-4157-98A5-29F118266571} - \{80C774A3-BC4E-4FEF-B262-A5578F350E85} No Task File <==== ATTENTION

Task: {7D065A65-864E-4237-909F-B37C27ECC63A} - \{A86E51F0-822F-4FC6-9962-851362E69E65} No Task File <==== ATTENTION

Task: {813A7F73-0382-4A15-BA6D-549796A8A795} - \{A3123A1E-2B47-4121-992C-63487F1CE1F3} No Task File <==== ATTENTION

Task: {83C4C39B-F484-45E4-B677-EFBBD3E1183A} - \{7874A9A9-C312-459B-A16C-50B15C6AE000} No Task File <==== ATTENTION

Task: {8B51862B-900B-4C95-A7D5-29D974D8EE26} - \{4BA2B75B-115C-4BCA-B45A-BD110E15FEF3} No Task File <==== ATTENTION

Task: {933153D3-FF7D-4F2F-93DB-4EE18AEC267A} - \{58E9C4A2-89D5-4097-9A1D-3C7212CC100A} No Task File <==== ATTENTION

Task: {95298E87-8CFD-4CCA-890F-8B7D7730CF74} - \{E2D6ACFE-B61E-4447-AE80-4B0CA9F20914} No Task File <==== ATTENTION

Task: {961A4741-EA5F-4FD4-9F58-9824862E1432} - System32\Tasks\0 => Iexplore.exe  <==== ATTENTION

Task: {9AA4F3F3-6B2F-4EA6-B81B-1EA4DF38689E} - \{F99ED12E-E280-47FF-9CC7-4FA9874C09B4} No Task File <==== ATTENTION

Task: {ABE155A8-22A7-4F41-A3D7-35B367212640} - \{8EE0BDD3-D87C-4147-865B-EF850579BBB3} No Task File <==== ATTENTION

Task: {B35D3966-C1EC-4ABB-BAC5-D82790C11C3F} - \{E3C1408B-870F-4E8E-863D-53964BB8AC89} No Task File <==== ATTENTION

Task: {B3C1DDB0-DE41-4A0A-BF91-DBEDCF91283A} - \{579791C6-84C4-4514-8990-62DE88C0F405} No Task File <==== ATTENTION

Task: {B4381734-38BC-4416-BA34-AD5B873F9C57} - \Java Update Scheduler No Task File <==== ATTENTION

Task: {B4906D30-8E70-438F-ACE2-F49B1DBE7445} - \{94AA3650-9FB1-4CD9-A08A-C903E473EBCE} No Task File <==== ATTENTION

Task: {BE3C31CF-63BD-4BBF-B1EC-7B0AD8E1475C} - \{766A2B2A-5AE1-40C4-B5D1-3ACEE3EDB174} No Task File <==== ATTENTION

Task: {C9922EB1-0689-4006-9DE5-EC7322657A2E} - \{3A7AA56D-B373-4984-B360-5A49D81838B3} No Task File <==== ATTENTION

Task: {D3A8949A-66C0-404E-A951-6D81347CC413} - \{5F42D548-089A-4880-B17A-030133EB09AE} No Task File <==== ATTENTION

Task: {D3DCDC2E-0597-4E10-B9B2-DA8A9D0B8184} - \{C8855EFF-1C49-474C-8EC9-A88A46937291} No Task File <==== ATTENTION

Task: {D79B06A8-69BD-44AF-A4F9-51F90B02F5F9} - \{010E4118-67B1-49F2-B0A9-AEBEB8C22ED8} No Task File <==== ATTENTION

Task: {D804B95C-2E56-41A3-BA15-CBFF3F453270} - \{D1412BBD-3329-445E-BAAC-11DAA3F957DE} No Task File <==== ATTENTION

Task: {D97583DC-E996-4394-9850-866EE5071AA3} - \{54761E2D-0F8D-4150-9BAF-A6C950ABC57C} No Task File <==== ATTENTION

Task: {DCCEAEA3-B771-45EF-B482-A5AF7C257613} - \{F268C70D-1377-46B5-B8EF-B0F597A319DD} No Task File <==== ATTENTION

Task: {DD20FA04-E2E5-4565-BC1F-EF251B8CF767} - \{017BCEFC-6CC0-4438-9C8C-8201389B3A60} No Task File <==== ATTENTION

Task: {E4FADBEF-BD70-4875-9F9E-1F514FAE9ACE} - \{428451EA-30BB-4D09-B88F-21C45644BDDD} No Task File <==== ATTENTION

Task: {EBAEA87A-60D8-457D-B7BE-FDDEE0C029B6} - \{E72F77B1-78E7-4B59-A542-303E6C370E31} No Task File <==== ATTENTION

Task: {F088DE68-E8E0-404D-A03F-71D270529CAA} - \{C9155B3B-9625-4BCA-8DC8-57E7BE8F3A16} No Task File <==== ATTENTION

Task: {F2C3A777-E8AA-4F3A-BAFD-9404E1BEA2BA} - \SidebarExecute No Task File <==== ATTENTION

Task: {FCC576CF-4869-4F53-B945-CC818F71D6F7} - \{A56BDF5A-F4F1-4A50-8871-D8B38E0FE432} No Task File <==== ATTENTION

RemoveProxy:

EmptyTemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.