"Bedrohung Blockiert" Mehrmals Täglich.

Non-English Boards Deutsch
1

Hallo,

Seit gestern bekomme ich in unregelmäßigen Abständen (30min-1,5Std) eine Meldung von Avast, dass eine Bedrohung blockiert werde.
In meinen Benachrichtigungen Steht: “Bedrohung Blockiert Objekt:smb//204.12.226.27/nsacve-2017-0144_EternalBlue”
(Ich hätte ein Bild in die Anhänge hinzugefügt aber ich hab die Maximale Anzahl erreicht)

Dadurch, dass diese Meldnug sehr oft kommt habe ich recht viel Angst und hoffe hier auf Hilfe :-
Ich habe schon einen anderen Post gesehen wo ein User fast/genau das gleiche Problem hatte aber in der Hilfe steht ja
“Die Fixes werden exakt für das spezielle Problem auf deinem System erstellt, keinenfalls auf anderen Systemen anwenden”
weshalb ich mal lieber vorsichtig war.

Ich nehme an ich habe Irgendwie ein Virus da die Meldung immer wieder erscheint?! Ansonsten was kann ich tuen um diese meldung weg zu bekommen? Ich bin recht unerfahren.

LG

2

Hallo und Willkommen im Forum! :slight_smile:

Ein Malware Experte wurde informiert. Bitte hab etwas Geduld.

DJBone

Edit: Rechtschreibfehler

3

FIRST >>>>

Please go to START (Windows Orb) >> Control Panel >> Uninstall a Program or Programs and Features and remove the following (if listed):

chip 1-click download service

To do so, left clicking on the name once and then click Uninstall/Change at the bar above the list window.

Follow the prompts of the uninstaller BUT please read carefully any questions it asks before answering; some uninstallers will try and deceive you into keeping the software.

SECOND >>>>

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Fix with Farbar Recovery Scan Tool

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[b] This fix was created for this user for use on that particular machine.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[/b]
Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

4

Thank you very much to work on my Problem. Im not a native English speaker so exause me for some grammatical mistakes etc…

To the first part: Done

To the second part:
FRST and Fixlist.txt was on the same Location.
I selected “Run as Administrator” und pressed the “Fix” button.
After a while Avast Blocked FRST. The location was as far I noticed the location of the tool, the Infektion was “FRST.exe”.
I didnt find the Fixlog on my Desktop so I thought I give it another try but it seems like the FRST.exe is deletet or something. Well I guess Avast did smt to that. However I found a Fixlog.txt in my music folder. I dont knowe if its fully complete but I think you will find out ;).

5

The Fixlist.txt log is complete and is the proper file; it appears the script ran as well as can be expected. How is your system running now? Are you still getting ExternalBlue warnings?

I noticed in the FRST scan logs that you had Norton and Avira on your system in some time past. There are still leftover parts of these software on your system. Please download and run the following Removal Tools to help clean your system:

Norton - Norton Removal Tool

Avira - KB for manual uninstall

6

No warnings anymore, Im very happy :slight_smile:

I did read them aswell and was very wondred what kind of software I still have on my system, thank you for the removal links. I thinks I realy should clean up my system more strictly.

Once more: Thank you very much, I had a very bad feeling with that EternalBlue thing and had no idea how to fix!