Gruppenrichtlinie blockiert meinen PC

[REDACTED]

Hallo essexboy,
I can`t download the program. It is stopped by the malware filter...
But now I have a nother problem. Again may starting page is the "websearch" which I had after I catched the Trojan... Is it possible that my PC is infected again? I first try to contact a friend to delete this. After I will contact you again!

Marion

[DJBone]

@Mäxchen2: Warte bitte auf eine Antwort von essexboy und führe keine eigenständigen Malware Bereinigungen durch! Er ist ein qualifizierter Malware Experte.

DJBone

[Asyn]

1. It is stopped by the malware filter...
2. Is it possible that my PC is infected again?

1. Deaktiviere ihn temporär.
2. Dein PC war nie sauber, darauf deutet das Problem mit der Gruppenrichtlinie hin.

[essexboy]

If FRST is stopped by webshield then temporarily disable it
If it is stopped by windows then select   run 

[REDACTED]

Hello, now I did it... 

[essexboy]

After the reboot from this fix Avast should be up and running

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 

HKLM Group Policy restriction on software: C:\Program Files (x86)\Common Files\Symantec Shared <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\AVAST Software <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\AVAST Software <====== ATTENTION 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
2014-11-08 09:49 - 2014-11-08 09:49 - 00000000 ____D () C:\Users\Bäckerei\AppData\Local\{40794A65-4CFE-4CBE-B7F3-945B9B98B803}
2014-11-07 08:47 - 2014-11-07 08:47 - 00000000 ____D () C:\Users\Bäckerei\AppData\Local\{917DC340-D3C0-4763-94DB-00940FDF7FC2}
2014-10-15 07:38 - 2014-10-15 07:39 - 00000000 ____D () C:\Users\Bäckerei\AppData\Local\{B535739C-9F76-466B-8910-B4D3EF687A2E}
EmptyTemp:
CMD: bitsadmin /reset /allusers

 
Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

[REDACTED]

Hello essexboy,
I will try to do this in the next few days... because this PC is not at my home! Hope I will manage it...  thank you so much!

[essexboy]

No problem I look in here daily

[REDACTED]

Hi essexboy,
I have a Problem... I don`t understand what to do!
How can "run" the file FRST and what is "press FIX"?

Marion

[essexboy]

Start FRST
Ensure that the fixlist is in the same location
Press the Fix key on the right

[REDACTED]

So, hope I did it...
When restart the PC avast starts running 

And how can I delete the "websearch" starting side?

[essexboy]

What is that ?  Is it an unwanted search page ? If so in which browser

[REDACTED]

Ok, I try to explain...
This side is called "webssearches.com" and I cannot fix another side as starting webside like Google... in the internetoptions usually I can fix a side but although I wrote in "http://www.google.com/ " this webssearches.com side comes up first when I oben the Explorer...

Do you understand? Sorry my english is not so perfect...

[essexboy]

OK I understand

Could you run a fresh FRST scan for me please but this time tick shortcuts.txt as well and attach the logs.  This only happens in internet explorer

[REDACTED]

I just use the Internet Explorer. Suddenly I had a lot of commercials on my screen and this webssearches for starting side. So all the shit begins...