Antivermis-Virus

#16 Bitte schön!

Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Services\gxbyhihc

*******************

Script file located at: \??\C:\WINDOWS\rotdeens.txt
Script file opened successfully.

Script file read successfully

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:



Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vspf_hk not found!
Deletion of registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vspf_hk failed!

Could not process line:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vspf_hk
Status: 0xc0000034



Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vspf not found!
Deletion of registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vspf failed!

Could not process line:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vspf
Status: 0xc0000034

edit

#17 ««
http://virus-protect.org/artikel/tools/sdfix.html
im Normalmodus
RunThis.bat doppelt klicken
reinschreiben: 1

1 : es wird a-squared geladen

a-squared

1. update
2. full scan
3. full scan (heuristic/riskware scanning enabled)
4. save quarantine list

dann poste den scanreport
__________
MfG Sabina

rund um die PC-Sicherheit

#18 Hi, lies:

Downloading a-squared Command Line Scanner

EMSI Software - http://www.emsisoft.com

Das System kann den angegebenen Pfad nicht finden.
Drücken Sie eine beliebige Taste . . .

aber ich auch so versuchenzu laden von http://www.emsisoft.de/de/software/download/

wen du mir sagst was genau??? ich laden muss!!!

DANKE!!!

#19 lade es also von hier :
http://virus-protect.org/a2.html
__________
MfG Sabina

rund um die PC-Sicherheit

#20 Bitte schön mein Ergebniss:

a-squared Anti-Malware - Version 2.1

Scan Einstellungen:

Objekte: Speicher, Traces, Cookies, C:\, D:\
Archiv Scan: An
Heuristik: An
ADS Scan: An

Scan Beginn: 09-02-2007 18:38:55

C:\Programme\funwebproducts gefunden: Trace.Directory.FunWebProducts
C:\Programme\funwebproducts\screensaver gefunden: Trace.Directory.MyWebSearch Toolbar
C:\Programme\funwebproducts\screensaver\images gefunden: Trace.Directory.MyWebSearch Toolbar
C:\Programme\funwebproducts\shared gefunden: Trace.Directory.MyWebSearch Toolbar
C:\Programme\funwebproducts\shared\cache gefunden: Trace.Directory.MyWebSearch Toolbar
C:\Programme\mywebsearch\bar gefunden: Trace.Directory.MyWebSearch Toolbar
C:\Programme\mywebsearch\bar\1.bin gefunden: Trace.Directory.MyWebSearch Toolbar
C:\Programme\mywebsearch\bar\cache gefunden: Trace.Directory.MyWebSearch Toolbar
C:\Programme\mywebsearch\bar\game gefunden: Trace.Directory.MyWebSearch Toolbar
C:\Programme\mywebsearch\bar\history gefunden: Trace.Directory.MyWebSearch Toolbar
C:\Programme\mywebsearch\bar\settings gefunden: Trace.Directory.MyWebSearch Toolbar
C:\Programme\mywebsearch\srchastt gefunden: Trace.Directory.MyWebSearch Toolbar
C:\Programme\mywebsearch gefunden: Trace.Directory.MyWebSearchToobar
C:\Programme\mywebsearch gefunden: Trace.Directory.MyWebSearchToolbar
C:\Programme\funwebproducts\shared\cache\cursormaniabtn.html gefunden: Trace.File.MyWebSearch Toolbar
C:\Programme\funwebproducts\shared\cache\funbuddyiconbtn.html gefunden: Trace.File.MyWebSearch Toolbar
C:\Programme\funwebproducts\shared\cache\myfuncardsimbtn.html gefunden: Trace.File.MyWebSearch Toolbar
C:\Programme\funwebproducts\shared\cache\smileycentralbtn.html gefunden: Trace.File.MyWebSearch Toolbar
C:\Programme\mywebsearch\bar\cache\files.ini gefunden: Trace.File.MyWebSearch Toolbar
C:\Programme\mywebsearch\bar\game\checkers.f3s gefunden: Trace.File.MyWebSearch Toolbar
C:\Programme\mywebsearch\bar\game\chess.f3s gefunden: Trace.File.MyWebSearch Toolbar
C:\Programme\mywebsearch\bar\game\reversi.f3s gefunden: Trace.File.MyWebSearch Toolbar
C:\Programme\mywebsearch\bar\history\search2 gefunden: Trace.File.MyWebSearch Toolbar
C:\Programme\mywebsearch\bar\settings\prevcfg2.htm gefunden: Trace.File.MyWebSearch Toolbar
C:\Programme\mywebsearch\bar\settings\s_pid.dat gefunden: Trace.File.MyWebSearch Toolbar
C:\Dokumente und Einstellungen\ARSENIJ\Startmenu\Programme\Autostart\powerreg scheduler v3.exe gefunden: Trace.File.PowerRegScheduler
Key: HKEY_LOCAL_MACHINE\software\classes\interface\{2bb15d36-43be-4743-a3a0-3308f4b1a610} gefunden: Trace.Registry.DelFinMediaViewer
Key: HKEY_LOCAL_MACHINE\software\classes\interface\{41700749-a109-4254-af13-be54011e8783} gefunden: Trace.Registry.DelFinMediaViewer
Key: HKEY_CLASSES_ROOT\funwebproducts.historykillerscheduler gefunden: Trace.Registry.FunWebProducts
Key: HKEY_CLASSES_ROOT\funwebproducts.historyswattercontrolbar gefunden: Trace.Registry.FunWebProducts
Key: HKEY_CLASSES_ROOT\funwebproducts.htmlmenu gefunden: Trace.Registry.FunWebProducts
Key: HKEY_CLASSES_ROOT\funwebproducts.killerobjmanager gefunden: Trace.Registry.FunWebProducts
Key: HKEY_CLASSES_ROOT\funwebproducts.popswatterbarbutton gefunden: Trace.Registry.FunWebProducts
Key: HKEY_CLASSES_ROOT\funwebproducts.popswattersettingscontrol gefunden: Trace.Registry.FunWebProducts
Key: HKEY_CLASSES_ROOT\interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} gefunden: Trace.Registry.FunWebProducts
Key: HKEY_LOCAL_MACHINE\software\fun web products gefunden: Trace.Registry.FunWebProducts
Value: HKEY_CURRENT_USER\Software\MyWebSearch\bar --> MenuExtLabel gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\MSNMessenger --> DLLDir gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\MSNMessenger --> DLLFile gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\ScreenSaver --> ImagesDir gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\CursorManiaBtn --> ETag gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\CursorManiaBtn --> HTMLMenuRevision gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\CursorManiaBtn --> LastHTMLMenuURL gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\FunBuddyIconBtn --> ETag gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\FunBuddyIconBtn --> HTMLMenuRevision gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\FunBuddyIconBtn --> LastHTMLMenuURL gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\MyFunCardsIMBtn --> ETag gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\MyFunCardsIMBtn --> HTMLMenuRevision gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\MyFunCardsIMBtn --> LastHTMLMenuURL gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\Promos --> BuddyFreqNone gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\Promos --> BuddyFreqUninstalled gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\Promos --> BuddyTextNone.0 gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\Promos --> BuddyTextNone.numActive gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\Promos --> BuddyTextUninstalled.0 gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\Promos --> BuddyTextUninstalled.numActive gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\Promos --> MSN.1 gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\Promos --> MSN.2 gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\Promos --> MSN.numActive gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\Promos --> MSN.numActive2 gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\SmileyCentralBtn --> ETag gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\SmileyCentralBtn --> HTMLMenuPosDeleted gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\SmileyCentralBtn --> HTMLMenuRevision gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products\Settings\SmileyCentralBtn --> LastHTMLMenuURL gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products --> CacheDir gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products --> JpegConversionLib gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} --> DisplayName gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} --> URL gefunden: Trace.Registry.MyWebSearch Toolbar
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\sources --> f3PopularScreensavers gefunden: Trace.Registry.MyWebSearch Toolbar
Key: HKEY_CLASSES_ROOT\clsid\{07b18ea3-a523-4961-b6bb-170de4475cca} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\clsid\{07b18eab-a523-4961-b6bb-170de4475cca} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\clsid\{1e0de227-5ce4-4ea3-ab0c-8b03e1aa76bc} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\clsid\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\clsid\{7473d296-b7bb-4f24-ae82-7e2ce94bb6a9} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{07b18eaa-a523-4961-b6bb-170de4475cca} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{07b18eac-a523-4961-b6bb-170de4475cca} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{1093995a-ba37-41d2-836e-091067c4ad17} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{120927bf-1700-43bc-810f-fab92549b390} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{17de5e5e-bfe3-4e83-8e1f-8755795359ec} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{1f52a5fa-a705-4415-b975-88503b291728} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{247a115f-06c2-4fb3-967d-2d62d3cf4f0a} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{2e3537fc-cf2f-4f56-af54-5a6a3dd375cc} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{3e1656ed-f60e-4597-b6aa-b6a58e171495} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{3e720451-b472-4954-b7aa-33069eb53906} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{3e720453-b472-4954-b7aa-33069eb53906} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{63d0ed2b-b45b-4458-8b3b-60c69bbbd83c} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{6e74766c-4d93-4cc0-96d1-47b8e07ff9ca} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{7473d291-b7bb-4f24-ae82-7e2ce94bb6a9} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{7473d295-b7bb-4f24-ae82-7e2ce94bb6a9} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{7473d297-b7bb-4f24-ae82-7e2ce94bb6a9} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{90449521-d834-4703-bb4e-d3aa44042ff8} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{991aac62-b100-47ce-8b75-253965244f69} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{bbabdc90-f3d5-4801-863a-ee6ae529862d} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{d6ff3684-ad3b-48eb-bbb4-b9e6c5a355c1} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{de38c398-b328-4f4c-a3ad-1b5e4ed93477} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25e} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\interface\{eb9e5c1c-b1f9-4c2b-be8a-27d6446fdaf8} gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\mywebsearch.htmlpanel gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\mywebsearch.outlookaddin gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\mywebsearch.pseudotransparentplugin gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\mywebsearchtoolbar.settingsplugin.1 gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\mywebsearchtoolbar.settingsplugin gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\mywebsearchtoolbar.toolbarplugin gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\screensavercontrol.screensaverinstaller gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CURRENT_USER\software\mywebsearch gefunden: Trace.Registry.MyWebSearchToobar
Key: HKEY_CLASSES_ROOT\clsid\{07b18ea3-a523-4961-b6bb-170de4475cca} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\clsid\{07b18eab-a523-4961-b6bb-170de4475cca} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\clsid\{1e0de227-5ce4-4ea3-ab0c-8b03e1aa76bc} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\clsid\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\clsid\{7473d296-b7bb-4f24-ae82-7e2ce94bb6a9} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{07b18eaa-a523-4961-b6bb-170de4475cca} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{07b18eac-a523-4961-b6bb-170de4475cca} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{1093995a-ba37-41d2-836e-091067c4ad17} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{120927bf-1700-43bc-810f-fab92549b390} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{17de5e5e-bfe3-4e83-8e1f-8755795359ec} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{1f52a5fa-a705-4415-b975-88503b291728} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{247a115f-06c2-4fb3-967d-2d62d3cf4f0a} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{2e3537fc-cf2f-4f56-af54-5a6a3dd375cc} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{3e1656ed-f60e-4597-b6aa-b6a58e171495} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{3e720451-b472-4954-b7aa-33069eb53906} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{3e720453-b472-4954-b7aa-33069eb53906} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{63d0ed2b-b45b-4458-8b3b-60c69bbbd83c} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{6e74766c-4d93-4cc0-96d1-47b8e07ff9ca} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{7473d291-b7bb-4f24-ae82-7e2ce94bb6a9} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{7473d295-b7bb-4f24-ae82-7e2ce94bb6a9} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{7473d297-b7bb-4f24-ae82-7e2ce94bb6a9} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{90449521-d834-4703-bb4e-d3aa44042ff8} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{991aac62-b100-47ce-8b75-253965244f69} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{bbabdc90-f3d5-4801-863a-ee6ae529862d} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{d6ff3684-ad3b-48eb-bbb4-b9e6c5a355c1} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{de38c398-b328-4f4c-a3ad-1b5e4ed93477} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25e} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{eb9e5c1c-b1f9-4c2b-be8a-27d6446fdaf8} gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\mywebsearch.htmlpanel gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\mywebsearch.outlookaddin gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\mywebsearch.pseudotransparentplugin gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\mywebsearchtoolbar.settingsplugin.1 gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\mywebsearchtoolbar.settingsplugin gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\mywebsearchtoolbar.toolbarplugin gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\screensavercontrol.screensaverinstaller gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CURRENT_USER\software\mywebsearch gefunden: Trace.Registry.MyWebSearchToolbar
Key: HKEY_CLASSES_ROOT\interface\{2bb15d36-43be-4743-a3a0-3308f4b1a610} gefunden: Trace.Registry.PromulGate
Key: HKEY_CLASSES_ROOT\interface\{41700749-a109-4254-af13-be54011e8783} gefunden: Trace.Registry.PromulGate
Value: HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\shellbrowser --> {cc8c8f4f-f2e8-404b-a43d-5cc57876a008} gefunden: Trace.Registry.SoftomateToolbar
Value: HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser --> {cc8c8f4f-f2e8-404b-a43d-5cc57876a008} gefunden: Trace.Registry.SoftomateToolbar
Value: HKEY_CURRENT_USER\Software\ICQToolbar\IEToolbar --> DID gefunden: Trace.Registry.ICQToolbar
C:\Dokumente und Einstellungen\ARSENIJ\Cookies\arsenij@adserver.easyad[2].txt gefunden: Trace.TrackingCookie
C:\Dokumente und Einstellungen\ARSENIJ\Cookies\arsenij@bizrate[2].txt gefunden: Trace.TrackingCookie
C:\Dokumente und Einstellungen\ARSENIJ\Cookies\arsenij@cgi-bin[1].txt gefunden: Trace.TrackingCookie
C:\Dokumente und Einstellungen\ARSENIJ\Cookies\arsenij@common[2].txt gefunden: Trace.TrackingCookie

C:\Programme\MSN Messenger\riched20.dll gefunden: Adware.Win32.MyWebSearch
C:\Programme\MyWebSearch\bar\2.bin\F3RESTUB.DLL gefunden: Adware.Win32.MyWebSearch
C:\Programme\MyWebSearch\bar\2.bin\M3OUTLCN.DLL gefunden: Adware.Win32.MyWebSearch
C:\SDFix\apps\Process.exe gefunden: Riskware.RiskTool.Win32.Processor.20
D:\FireFox Downloads\SDFix.exe/Process.exe gefunden: Riskware.RiskTool.Win32.Processor.20
D:\Verschiedenes\Install\Install\Dlja antvirma\SmitfraudFix\Process.exe gefunden: Riskware.RiskTool.Win32.Processor.20
D:\Verschiedenes\Install\Install\Dlja antvirma\SmitfraudFix\Reboot.exe gefunden: Riskware.RiskTool.Win32.Reboot.f
D:\Verschiedenes\Install\Install\wrar341ru.exe/Default.sfx gefunden: Trojan.Win32.KillWin.aq

Gescannt

Dateien: 353341
Traces: 96897
Cookies: 1361
Prozesse: 50

Gefunden

Dateien: 8
Traces: 147
Cookies: 77
Prozesse: 0
Registry Keys: 0

Scan Ende: 09-02-2007 21:34:39
Scan Zeit: 2:55:44



und nach dem Neustart habe ich nochmal gemacht,aber jetzt SMART SCAN, also nicht volles System:

a-squared Anti-Malware - Version 2.1

Scan Einstellungen:

Objekte: Speicher, Traces, Cookies, C:\WINDOWS\, C:\Programme
Archiv Scan: An
Heuristik: An
ADS Scan: An

Scan Beginn: 09-02-2007 21:46:38

C:\Dokumente und Einstellungen\ARSENIJ\Anwendungsdaten\Mozilla\Firefox\Profiles\fzl2d2oy.default\cookies.txt:14 gefunden: Trace.TrackingCookie

C:\Dokumente und Einstellungen\ARSENIJ\Anwendungsdaten\Mozilla\Firefox\Profiles\fzl2d2oy.default\cookies.txt:582 gefunden: Trace.TrackingCookie

Gescannt

Dateien: 18716
Traces: 96897
Cookies: 1243
Prozesse: 50

Gefunden

Dateien: 0
Traces: 0
Cookies: 42
Prozesse: 0
Registry Keys: 0

Scan Ende: 09-02-2007 21:59:11
Scan Zeit: 0:12:33


Soll ich noch was tun???

. . . D A N K E . . . D A N K K E . . .

#21 es muesste wieder alles i.o. sein
pass in Zukunft besser auf, nicht alle Software ist empfehlenswert
__________
MfG Sabina

rund um die PC-Sicherheit

#22 OK, DANKE SCHÖN DIR

Alles gute . . . bis zum nächsten Mal vielleicht auch nicht.

[/i]