Virus Win32:Dropper-gen [Drp]

[REDACTED]

Was ist das bitte schön für ein Zeichensalat 

ich glaube nicht, dass das normal ist ich meine ist ja alles txt format....

So ich gehe nun auf arbeit und beoabchte von dort aus weiter....

[Asyn]

Was ist das bitte schön für ein Zeichensalat 

Bitte die OTL-Logs im ANSI-Format speichern/posten..!!

[REDACTED]

Was ist das bitte schön für ein Zeichensalat 

Bitte die OTL-Logs im ANSI-Format speichern/posten..!!

Wie?

[Asyn]

Wie?

Siehe Screenshot von Essexboy.

[DJBone]

Was ist das bitte schön für ein Zeichensalat 

Bitte die OTL-Logs im ANSI-Format speichern/posten..!!

Wie?

https://forum.avast.com/index.php?topic=151151.msg1098409#msg1098409

DJBone

[REDACTED]

So anbei die beiden txt vom OTL im ANSI Format. Interessant wäre noch was beim aswMBR rausgekommen ist.

[DJBone]

essexboy (Malware Spezialist) wurde von mir informiert. Seine Anweisungen sind auf englisch, aber einfach verständlich. Ansonsten können wir auch weiterhelfen beim Übersetzen.

DJBone

[REDACTED]

Ok danke für die Hilfe mal schauen was essexboy findet. Vllt war es auch ne falschmeldung von avast....

[essexboy]

What was the file name and location that Avast found ?

Was war den Dateinamen und den Speicherort, die Avast gefunden?

Please download Farbar Recovery Scan Tool and save it to your Desktop.
 
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
 

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  
• Select both shortcut  and additions at the bottom
• Press Scan button.
  
  
• It will produce a log called FRST.txt in the same directory the tool is run from. 
  
• Please attach all 3 logs generated.

[REDACTED]

according to you post the location and scan result as .Jpeg

[REDACTED]

according to your post the .txt´s from FRST64 in the attachment

[essexboy]

OK that looks good, Avast stopped some bundled software.  It was the CHIP downloader but I am not sure what else was in it .  Are you experiencing any problems 

OK, das sieht gut aus, Avast hielt einige mitgelieferte Software. Es war der CHIP-Downloader, aber ich bin mir nicht sicher, was sonst noch drin ist. Sie haben Probleme

[REDACTED]

I have no problems, but i want to get sure that nothing else happens...
Should i reset my system?

[essexboy]

I have no problems, but i want to get sure that nothing else happens...
Should i reset my system?

No there is no need for that

Subject to no further problems   

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems 

Now the best part of the day ----- Your log now appears clean  :thumbsup:

A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset  System Restore points:

Download and run Delfix




Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

CryptoPrevent install this programme to lock down and prevent crypto ransome ware



Malwarebytes.

Update and run weekly to keep your system clean


It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To learn more about how to protect yourself while on the internet read this little guide  Best security practices Keep safe  :wave:

[REDACTED]

But the question is why recognize avast this virus a month later and that after a manual activation of avast scan and not automatically? Next thing is, that we browser security from avast sending this page as safe.
And if i install cryptoprevent and malwarebytes i have three running programms for security: There are no complications?