Probleme mit svchost

[REDACTED]

Hallo,

seid einiger Zeit meldet Avast ein URL:Mal mit svchost.

Anbei wie benötigt die Logs.

Sollten weitere Informationen benötigt werden, lasst mich dies bitte wissen.

Vielen Dank für eure Hilfe im Voraus!

[Asyn]

Ein Experte ist informiert.

Willkommen im Forum,
Asyn

[essexboy]

Could you let me know if this stops it

Du konntest lassen mich wissen, wenn diese es nicht mehr

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 

CreateRestorePoint:
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_ggbc_14_50_ff&cd=2XzuyEtN2Y1L1QzuyEtDtCyCyB0EtBzzzytC0CtC0F0BtCyCtN0D0Tzu0StCtDyBtAtN1L2XzutAtFyCtFtCtDtFtCtDtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2StBzytByCzyyCtCyBtGtA0F0CtCtGyB0BtDtAtG0D0A0F0CtGtBzztB0DtAtA0A0DyEtC0EyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0CyEtDtAtA0AyEtDtGzy0Fzz0EtGyE0ByCtAtG0AyCtDtDtG0DtAyBtB0D0ByByCtBtB0E0B2Q&cr=159421097&ir=
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_ggbc_14_50_ff&cd=2XzuyEtN2Y1L1QzuyEtDtCyCyB0EtBzzzytC0CtC0F0BtCyCtN0D0Tzu0StCtDyBtAtN1L2XzutAtFyCtFtCtDtFtCtDtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2StBzytByCzyyCtCyBtGtA0F0CtCtGyB0BtDtAtG0D0A0F0CtGtBzztB0DtAtA0A0DyEtC0EyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0CyEtDtAtA0AyEtDtGzy0Fzz0EtGyE0ByCtAtG0AyCtDtDtG0DtAyBtB0D0ByByCtBtB0E0B2Q&cr=159421097&ir=
SearchScopes: HKLM -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL = http://rocket-find.com/results.php?f=4&q={searchTerms}&a=rckt_dsites02_14_25_ff&cd=2XzuyEtN2Y1L1QzuyEtDtCyCyB0EtBzzzytC0CtC0F0BtCyCtN0D0Tzu0SzytDtBtN1L2XzutBtFtBtCtFyBtFtDtN1L1Czu0R1F1R1J1P2ZtN1L1G1B1V1N2Y1L1Qzu2SyD0B0E0DyEyE0EyDtG0FyE0BtDtGyC0FyCtAtGtDtDyCtDtGyEtCtCyEyEtC0DtA0C0B0E0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtC0E0B0C0F0ByCtGyE0C0D0AtGtAyByCyCtGtC0FtCzztGtBtCtC0F0F0AtCyEtAyCyByD2Q&cr=1322362930&ir=
SearchScopes: HKU\S-1-5-21-295413280-934710195-3912396064-1003 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_ggbc_14_50_ff&cd=2XzuyEtN2Y1L1QzuyEtDtCyCyB0EtBzzzytC0CtC0F0BtCyCtN0D0Tzu0StCtDyBtAtN1L2XzutAtFyCtFtCtDtFtCtDtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2StBzytByCzyyCtCyBtGtA0F0CtCtGyB0BtDtAtG0D0A0F0CtGtBzztB0DtAtA0A0DyEtC0EyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0CyEtDtAtA0AyEtDtGzy0Fzz0EtGyE0ByCtAtG0AyCtDtDtG0DtAyBtB0D0ByByCtBtB0E0B2Q&cr=159421097&ir=
EmptyTemp:
CMD: bitsadmin /reset /allusers

 
Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

• Close all open programs and internet browsers.
• Double click on AdwCleaner.exe to run the tool.
  
• Click on Scan.
  
• After the scan is complete click on "Clean"
• Confirm each time with Ok.
  
• Your computer will be rebooted automatically. A text file will open after the restart.
• Please post the content of that logfile with your next answer.
• You can find the logfile at C:\AdwCleaner[S1].txt as well.
  

[REDACTED]

Hello,

took some time until i could answer.

Enclosed the logfiles.

[essexboy]

Haben die Warnungen jetzt aufgehört.

Have the alerts now ceased .