Home » Spyware & Browser Hijacker Support Forum » Internet Explorer 6 Öffnet keine seiten mehr! » Themenansicht
Internet Explorer 6 Öffnet keine seiten mehr! |
|
|---|---|
|
20.10.2005, 15:26
Member
Beiträge: 11 |
|
 
|
|
|
26.10.2005, 16:57
Member
 Beiträge: 4730 |
#2
Hallo!
Du hast da ein paar hässliche Dinger drauf. Öffne HijackThis, mache vor folgende Einträge ein Häkchen und klicke auf "fix checked": R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cesexoalkuggimy.net/ABkCLDymyxEX6VkSofHVSSX8CjVifCesTsiMSJoCNyE.html O2 - BHO: (no name) - {6D933955-8E63-EF63-B616-2DC29155E570} - C:\DOKUME~1\CHRIST~1\ANWEND~1\ANTIPL~1\build fork.exe O4 - HKLM\..\Run: [MessengerPlus3] "C:\Programme\MessengerPlus! 3\MsgPlus.exe" O4 - HKLM\..\Run: [BearShare] "C:\Programme\BearShare\BearShare.exe" /pause O4 - HKLM\..\Run: [Magspollblehbalm] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aim peak mags poll\user aim.exe O4 - HKCU\..\Run: [Film Curb] C:\DOKUME~1\CHRIST~1\ANWEND~1\FRAGAC~1\Tons Okay Mail.exe O4 - HKCU\..\Run: [MessengerPlus3] "C:\Programme\MessengerPlus! 3\MsgPlus.exe" /WinStart O17 - HKLM\System\CCS\Services\Tcpip\..\{6AA146BE-A73E-4C57-86E0-94F36D51008F}: NameServer = 222.222.222.222,222.222.222.221 (der Grund, warum keine Seiten mehr geöffnet werden) O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) Deinstalliere Messenger Plus!3 und Bearshare. Außerdem vertraue ich Anti-Blaxx nicht. Lösche mit Killbox (http://managor.de/killbox.htm) folgende Dateien: C:\DOKUME~1\CHRIST~1\ANWEND~1\FRAGAC~1\Tons Okay Mail.exe C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aim peak mags poll\user aim.exe C:\DOKUME~1\CHRIST~1\ANWEND~1\ANTIPL~1\build fork.exe Hinweis: hier wurden einige Pfade nach dem 8.1-Dateinamensystem mit einem Tilde (~) abgekürzt. Da musst Du selbst schauen, welcher Pfad es ist. Mache einen Scan mit eScanCheck und berichte: http://managor.de/escan.htm __________ Dies ist eine Signatur! Persönlicher Service: Du kommst aus Berlin? Dann melde Dich per PN bei mir, evtl. können wir einen Termin vereinbaren. Der Grabsteinschubser |
|
|
|
|
27.10.2005, 15:35
Member
Themenstarter Beiträge: 11 |
#3
Hab alles gemacht und dann gescannt. Is übrigends nen gebrauchter pc. hab ich von kollegen abgekauft. wusste schon das der mir son vervirten pc gibt -.-
Den pfad C:\DOKUME~1\CHRIST~1\ANWEND~1\FRAGAC~1\Tons Okay Mail.exe ich konnte zwar den ordner finden .. musste nur verstecke ordner einblenden ... aber die Tons Okay Mail.exe kann ich in dem ordner nicht finden :-/ ... hier mein eScan Log: EDIT: ist noch nicht fertig es läuft immernoch ... läuft schon saulange .. und langsam ... schon seid 2 stunden dabei .. is eScan immer so langsam? mittlerweile ca 47500 Pbjekte hatta durchsucht! So nun zum LOG: -------------------------------------------------- -------------------- INFECTED -------------------- -------------------------------------------------- 1: Thu Oct 27 16:45:23 2005 => System found infected with spywareno!/spysheriff Commercial KeyLogger ({0c1f87ae-ae62-11d3-911c-00105a17b608})! Action taken: No Action Taken. 2: Thu Oct 27 16:45:23 2005 => System found infected with spywareno!/spysheriff Commercial KeyLogger ({39fda070-61ba-11d2-ad84-00105a17b608})! Action taken: No Action Taken. 3: Thu Oct 27 16:45:23 2005 => System found infected with spywareno!/spysheriff Commercial KeyLogger ({4f99a075-5227-11d2-ad06-00105a17b608})! Action taken: No Action Taken. 4: Thu Oct 27 16:45:23 2005 => System found infected with bearshare Spyware/Adware ({558ec983-bedb-9168-b2de-31dbf0ee543e})! Action taken: No Action Taken. 5: Thu Oct 27 16:45:24 2005 => System found infected with bearshare Spyware/Adware ({9f95f736-0f62-4214-a4b4-caa6738d4c07})! Action taken: No Action Taken. 6: Thu Oct 27 16:45:24 2005 => System found infected with spywareno!/spysheriff Commercial KeyLogger ({a1eedaa7-c4d8-11d2-ad9c-00105a17b608})! Action taken: No Action Taken. 7: Thu Oct 27 16:45:24 2005 => System found infected with spywareno!/spysheriff Commercial KeyLogger ({b22fe43c-d1e8-432a-a862-9f83d5f04732})! Action taken: No Action Taken. 8: Thu Oct 27 16:45:24 2005 => System found infected with spywareno!/spysheriff Commercial KeyLogger ({ca4fc24b-c65c-11d1-aa6f-000000000000})! Action taken: No Action Taken. 9: Thu Oct 27 16:45:24 2005 => System found infected with spywareno!/spysheriff Commercial KeyLogger ({ddd136ce-517b-11d2-ad03-00105a17b608})! Action taken: No Action Taken. 10: Thu Oct 27 16:45:24 2005 => System found infected with spywareno!/spysheriff Commercial KeyLogger ({e9d55102-9683-11d2-ba68-0040053687fe})! Action taken: No Action Taken. 11: Thu Oct 27 16:45:24 2005 => System found infected with alexa Spyware/Adware ({c95fe080-8f5d-11d2-a20b-00aa003c157a})! Action taken: No Action Taken. 12: Thu Oct 27 16:45:24 2005 => System found infected with alexa Spyware/Adware ({c95fe080-8f5d-11d2-a20b-00aa003c157a})! Action taken: No Action Taken. 13: Thu Oct 27 16:45:25 2005 => System found infected with bearshare Spyware/Adware ({905d0df2-3a0a-4d94-853c-54a12a745905})! Action taken: No Action Taken. 14: Thu Oct 27 16:45:26 2005 => System found infected with whenu.savenow Spyware/Adware ({c285d18d-43a2-4aef-83fb-bf280e660a97})! Action taken: No Action Taken. 15: Thu Oct 27 16:45:26 2005 => System found infected with alexa Spyware/Adware ({c95fe080-8f5d-11d2-a20b-00aa003c157a})! Action taken: No Action Taken. 16: Thu Oct 27 16:45:30 2005 => Offending file found: C:\WINDOWS\DOWNLO~1\popcaploader.dll 17: Thu Oct 27 16:45:30 2005 => System found infected with downloader-ak Trojan-Downloader (popcaploader.dll)! Action taken: No Action Taken. 18: Thu Oct 27 16:45:30 2005 => Offending file found: C:\WINDOWS\System32\h@tkeysh@@k.dll 19: Thu Oct 27 16:45:30 2005 => System found infected with h@tkeysh@@k Spyware/Adware (h@tkeysh@@k.dll)! Action taken: No Action Taken. 20: Thu Oct 27 16:45:54 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Eigene Dateien\postal2\help\install.htm 21: Thu Oct 27 16:45:54 2005 => System found infected with lop.com Spyware/Adware (install.htm)! Action taken: No Action Taken. 22: Thu Oct 27 16:45:54 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Eigene Dateien\postal2\help\troubleshooting.htm 23: Thu Oct 27 16:45:54 2005 => System found infected with imesh Spyware/Adware (troubleshooting.htm)! Action taken: No Action Taken. 24: Thu Oct 27 16:45:54 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Eigene Dateien\stronghold 2 demo\config.dat 25: Thu Oct 27 16:45:55 2005 => System found infected with startsurfing Spyware/Adware (config.dat)! Action taken: No Action Taken. 26: Thu Oct 27 16:45:58 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Lokale Einstellungen\temporary internet files\content.ie5\3jboae6a\adswrapper[1].js 27: Thu Oct 27 16:45:58 2005 => System found infected with whenu.savenow Spyware/Adware (adswrapper[1].js)! Action taken: No Action Taken. 28: Thu Oct 27 16:46:00 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Lokale Einstellungen\temporary internet files\content.ie5\bd9aktvb\adspopup2[1].js 29: Thu Oct 27 16:46:00 2005 => System found infected with whenu.savenow Spyware/Adware (adspopup2[1].js)! Action taken: No Action Taken. 30: Thu Oct 27 16:46:00 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Lokale Einstellungen\temporary internet files\content.ie5\bd9aktvb\adswrapper[1].js 31: Thu Oct 27 16:46:00 2005 => System found infected with whenu.savenow Spyware/Adware (adswrapper[1].js)! Action taken: No Action Taken. 32: Thu Oct 27 16:46:01 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Lokale Einstellungen\temporary internet files\content.ie5\nuykrsbr\adsend[1].js 33: Thu Oct 27 16:46:01 2005 => System found infected with whenu.savenow Spyware/Adware (adsend[1].js)! Action taken: No Action Taken. 34: Thu Oct 27 16:46:01 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Lokale Einstellungen\temporary internet files\content.ie5\nuykrsbr\adswrapper[1].js 35: Thu Oct 27 16:46:01 2005 => System found infected with whenu.savenow Spyware/Adware (adswrapper[1].js)! Action taken: No Action Taken. 36: Thu Oct 27 16:46:03 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Lokale Einstellungen\Temporary Internet Files\content.ie5\3jboae6a\adswrapper[1].js 37: Thu Oct 27 16:46:03 2005 => System found infected with whenu.savenow Spyware/Adware (adswrapper[1].js)! Action taken: No Action Taken. 38: Thu Oct 27 16:46:03 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Lokale Einstellungen\Temporary Internet Files\content.ie5\bd9aktvb\adspopup2[1].js 39: Thu Oct 27 16:46:03 2005 => System found infected with whenu.savenow Spyware/Adware (adspopup2[1].js)! Action taken: No Action Taken. 40: Thu Oct 27 16:46:03 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Lokale Einstellungen\Temporary Internet Files\content.ie5\bd9aktvb\adswrapper[1].js 41: Thu Oct 27 16:46:03 2005 => System found infected with whenu.savenow Spyware/Adware (adswrapper[1].js)! Action taken: No Action Taken. 42: Thu Oct 27 16:46:04 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Lokale Einstellungen\Temporary Internet Files\content.ie5\nuykrsbr\adsend[1].js 43: Thu Oct 27 16:46:04 2005 => System found infected with whenu.savenow Spyware/Adware (adsend[1].js)! Action taken: No Action Taken. 44: Thu Oct 27 16:46:04 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Lokale Einstellungen\Temporary Internet Files\content.ie5\nuykrsbr\adswrapper[1].js 45: Thu Oct 27 16:46:04 2005 => System found infected with whenu.savenow Spyware/Adware (adswrapper[1].js)! Action taken: No Action Taken. 46: Thu Oct 27 16:46:17 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Eigene Dateien\postal2\help\install.htm 47: Thu Oct 27 16:46:17 2005 => System found infected with lop.com Spyware/Adware (install.htm)! Action taken: No Action Taken. 48: Thu Oct 27 16:46:17 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Eigene Dateien\postal2\help\troubleshooting.htm 49: Thu Oct 27 16:46:17 2005 => System found infected with imesh Spyware/Adware (troubleshooting.htm)! Action taken: No Action Taken. 50: Thu Oct 27 16:46:18 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Eigene Dateien\stronghold 2 demo\config.dat 51: Thu Oct 27 16:46:18 2005 => System found infected with startsurfing Spyware/Adware (config.dat)! Action taken: No Action Taken. 52: Thu Oct 27 16:46:18 2005 => System found infected with cws.therealsearch Spyware/Adware (waol.exe)! Action taken: No Action Taken. 53: Thu Oct 27 16:46:18 2005 => System found infected with cws.therealsearch Spyware/Adware (waol.exe)! Action taken: No Action Taken. 54: Thu Oct 27 16:46:18 2005 => Offending file found: C:\WINDOWS\iun6002.exe 55: Thu Oct 27 16:46:18 2005 => System found infected with zipitpro Spyware/Adware (C:\WINDOWS\iun6002.exe)! Action taken: No Action Taken. 56: Thu Oct 27 16:55:12 2005 => File C:\!Submit\ball tick.exe infected by "Trojan-Downloader.Win32.Swizzor.df" Virus! Action Taken: No Action Taken. 57: Thu Oct 27 16:55:13 2005 => File C:\!Submit\grim debug.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 58: Thu Oct 27 16:55:14 2005 => File C:\!Submit\knob browse.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 59: Thu Oct 27 16:55:14 2005 => File C:\!Submit\magscamp.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 60: Thu Oct 27 16:55:15 2005 => File C:\!Submit\manager upload.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 61: Thu Oct 27 16:55:15 2005 => File C:\!Submit\part bits.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 62: Thu Oct 27 17:19:11 2005 => File C:\Dokumente und Einstellungen\Christoph\Anwendungsdaten\Frag acid nurb\dfhtviym.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 63: Thu Oct 27 17:19:13 2005 => File C:\Dokumente und Einstellungen\Christoph\Anwendungsdaten\Frag acid nurb\haztqtse.exe infected by "Trojan-Downloader.Win32.Swizzor.df" Virus! Action Taken: No Action Taken. 64: Thu Oct 27 17:19:15 2005 => File C:\Dokumente und Einstellungen\Christoph\Anwendungsdaten\Frag acid nurb\jxtqhmke.exe infected by "Trojan-Downloader.Win32.Swizzor.dj" Virus! Action Taken: No Action Taken. 65: Thu Oct 27 17:19:16 2005 => File C:\Dokumente und Einstellungen\Christoph\Anwendungsdaten\Frag acid nurb\kybzljhu.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 66: Thu Oct 27 17:19:17 2005 => File C:\Dokumente und Einstellungen\Christoph\Anwendungsdaten\Frag acid nurb\lmxfmorm.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 67: Thu Oct 27 17:19:18 2005 => File C:\Dokumente und Einstellungen\Christoph\Anwendungsdaten\Frag acid nurb\MultiKnobOwnsBash.exe infected by "Trojan-Downloader.Win32.Swizzor.dr" Virus! Action Taken: No Action Taken. 68: Thu Oct 27 17:19:19 2005 => File C:\Dokumente und Einstellungen\Christoph\Anwendungsdaten\Frag acid nurb\pop 32 locks.exe infected by "Trojan-Downloader.Win32.Swizzor.cb" Virus! Action Taken: No Action Taken. 69: Thu Oct 27 17:19:22 2005 => File C:\Dokumente und Einstellungen\Christoph\Anwendungsdaten\Frag acid nurb\vyuiumjd.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 70: Thu Oct 27 17:19:23 2005 => File C:\Dokumente und Einstellungen\Christoph\Anwendungsdaten\Frag acid nurb\wyzxnkxx.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 71: Thu Oct 27 17:19:23 2005 => File C:\Dokumente und Einstellungen\Christoph\Anwendungsdaten\Frag acid nurb\xdusmmce.exe infected by "Trojan-Downloader.Win32.Swizzor.ca" Virus! Action Taken: No Action Taken. -------------------------------------------------- --------------------- TAGGED --------------------- -------------------------------------------------- 1: Thu Oct 27 16:55:16 2005 => File C:\!Submit\user aim.exe tagged as "not-a-virus:AdWare.Win32.Lop.ad". Action Taken: No Action Taken. 2: Thu Oct 27 16:56:05 2005 => File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aim peak mags poll\IntraFlap.exe tagged as "not-a-virus:AdWare.Win32.Lop.ab". Action Taken: No Action Taken. 3: Thu Oct 27 16:56:06 2005 => File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aim peak mags poll\longbeep.exe tagged as "not-a-virus:AdWare.Win32.Lop.ad". Action Taken: No Action Taken. 4: Thu Oct 27 16:56:06 2005 => File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aim peak mags poll\MFCD REF.exe tagged as "not-a-virus:AdWare.Win32.Lop.z". Action Taken: No Action Taken. 5: Thu Oct 27 16:56:07 2005 => File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aim peak mags poll\oozefrag.exe tagged as "not-a-virus:AdWare.Win32.Lop.p". Action Taken: No Action Taken. 6: Thu Oct 27 16:56:08 2005 => File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aim peak mags poll\Plus lies.exe tagged as "not-a-virus:AdWare.Win32.Lop.z". Action Taken: No Action Taken. 7: Thu Oct 27 16:56:08 2005 => File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aim peak mags poll\SECT 64.exe tagged as "not-a-virus:AdWare.Win32.Lop.p". Action Taken: No Action Taken. 8: Thu Oct 27 16:56:09 2005 => File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aim peak mags poll\TRANS ERROR.exe tagged as "not-a-virus:AdWare.Win32.Lop.ab". Action Taken: No Action Taken. 9: Thu Oct 27 17:19:10 2005 => File C:\Dokumente und Einstellungen\Christoph\Anwendungsdaten\Frag acid nurb\cnucrxcp.exe tagged as "not-a-virus:AdWare.Win32.Lop.ab". Action Taken: No Action Taken. 10: Thu Oct 27 17:19:12 2005 => File C:\Dokumente und Einstellungen\Christoph\Anwendungsdaten\Frag acid nurb\grfnxgce.exe tagged as "not-a-virus:AdWare.Win32.Lop.z". Action Taken: No Action Taken. 11: Thu Oct 27 17:19:14 2005 => File C:\Dokumente und Einstellungen\Christoph\Anwendungsdaten\Frag acid nurb\hngcawqy.exe tagged as "not-a-virus:AdWare.Win32.Lop.ab". Action Taken: No Action Taken. 12: Thu Oct 27 17:19:14 2005 => File C:\Dokumente und Einstellungen\Christoph\Anwendungsdaten\Frag acid nurb\jkoyrong.exe tagged as "not-a-virus:AdWare.Win32.Lop.ad". Action Taken: No Action Taken. 13: Thu Oct 27 17:19:18 2005 => File C:\Dokumente und Einstellungen\Christoph\Anwendungsdaten\Frag acid nurb\pjwuewek.exe tagged as "not-a-virus:AdWare.Win32.Lop.p". Action Taken: No Action Taken. 14: Thu Oct 27 17:19:20 2005 => File C:\Dokumente und Einstellungen\Christoph\Anwendungsdaten\Frag acid nurb\shjidrqm.exe tagged as "not-a-virus:AdWare.Win32.Lop.p". Action Taken: No Action Taken. 15: Thu Oct 27 17:19:21 2005 => File C:\Dokumente und Einstellungen\Christoph\Anwendungsdaten\Frag acid nurb\tqvpctbv.exe tagged as "not-a-virus:AdWare.Win32.Lop.ad". Action Taken: No Action Taken. 16: Thu Oct 27 17:19:24 2005 => File C:\Dokumente und Einstellungen\Christoph\Anwendungsdaten\Frag acid nurb\zmcdyccy.exe tagged as "not-a-virus:AdWare.Win32.Lop.z". Action Taken: No Action Taken. 17: Thu Oct 27 18:15:11 2005 => File C:\Dokumente und Einstellungen\Christoph\Eigene Dateien\mirc616\32.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken. 18: Thu Oct 27 18:15:12 2005 => File C:\Dokumente und Einstellungen\Christoph\Eigene Dateien\mirc616.zip tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken. 19: Thu Oct 27 18:57:01 2005 => File C:\mIRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken. -------------------------------------------------- --------------------- ERRORS --------------------- -------------------------------------------------- 1: Thu Oct 27 16:44:42 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\Christoph\Desktop\Crescent.ace is Not Scanned 2: Thu Oct 27 16:44:49 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\Christoph\Desktop\Neuer Ordner\c.rar is Not Scanned 3: Thu Oct 27 16:44:49 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\Christoph\Desktop\Neuer Ordner\Doak.rar is Not Scanned 4: Thu Oct 27 16:44:49 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\Christoph\Desktop\Neuer Ordner\Fttf.rar is Not Scanned 5: Thu Oct 27 16:44:51 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\Christoph\Desktop\Neuer Ordner\Sksd.rar is Not Scanned 6: Thu Oct 27 16:44:51 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\Christoph\Desktop\Neuer Ordner\Txf.rar is Not Scanned 7: Thu Oct 27 16:45:11 2005 => ERROR!!! Invalid Entry \??\C:\DOKUME~1\CHRIST~1\LOKALE~1\Temp\kbeepm.sys in SYSTEM\CurrentControlSet\Services\kbeepm... 8: Thu Oct 27 16:45:18 2005 => ERROR!!! Invalid Entry \??\C:\Programme\SiSoftware\SiSoftware Sandra Lite 2005.SR2a\Sandra.sys in SYSTEM\CurrentControlSet\Services\SANDRA... 9: Thu Oct 27 16:45:18 2005 => ERROR!!! Invalid Entry C:\Programme\SiSoftware\SiSoftware Sandra Lite 2005.SR2a\RpcDataSrv.exe in SYSTEM\CurrentControlSet\Services\SandraDataSrv... 10: Thu Oct 27 16:45:18 2005 => ERROR!!! Invalid Entry C:\Programme\SiSoftware\SiSoftware Sandra Lite 2005.SR2a\RpcSandraSrv.exe in SYSTEM\CurrentControlSet\Services\SandraTheSrv... 11: Thu Oct 27 16:46:20 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\Help\UWLogo.bmp". Action Taken: No Action Taken. 12: Thu Oct 27 16:46:20 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\Maps\Entry.aao". Action Taken: No Action Taken. 13: Thu Oct 27 16:46:20 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\Sounds\S-Aircraft.uax". Action Taken: No Action Taken. 14: Thu Oct 27 16:46:20 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\Packages.MD5". Action Taken: No Action Taken. 15: Thu Oct 27 16:46:20 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\Textures\Coronas.utx". Action Taken: No Action Taken. 16: Thu Oct 27 16:46:20 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\AGP.dll". Action Taken: No Action Taken. 17: Thu Oct 27 16:46:20 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\ALAudio.dll". Action Taken: No Action Taken. 18: Thu Oct 27 16:46:20 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\Core.dll". Action Taken: No Action Taken. 19: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\D3DDrv.dll". Action Taken: No Action Taken. 20: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\Editor.dll". Action Taken: No Action Taken. 21: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\Engine.dll". Action Taken: No Action Taken. 22: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\Fire.dll". Action Taken: No Action Taken. 23: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\IpDrv.dll". Action Taken: No Action Taken. 24: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\ogg.dll". Action Taken: No Action Taken. 25: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\vorbis.dll". Action Taken: No Action Taken. 26: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\vorbisfile.dll". Action Taken: No Action Taken. 27: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\Window.dll". Action Taken: No Action Taken. 28: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\WinDrv.dll". Action Taken: No Action Taken. 29: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\ArmyOps.exe". Action Taken: No Action Taken. 30: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\AGP_Utils.dll". Action Taken: No Action Taken. 31: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\StaticMeshes\M-attachments.usx". Action Taken: No Action Taken. 32: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\Server.exe". Action Taken: No Action Taken. 33: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\defOpenAL32.dll". Action Taken: No Action Taken. 34: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\Animations\A-charactersCiv.ukx". Action Taken: No Action Taken. 35: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\XInterface.dll". Action Taken: No Action Taken. 36: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\descriptions\Mod_Acog_4x.txt". Action Taken: No Action Taken. 37: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\pb\pbcls.dll". Action Taken: No Action Taken. 38: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\Briefings\10_history.txt". Action Taken: No Action Taken. 39: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\ImpersonatorLib_rd.dll". Action Taken: No Action Taken. 40: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\pb\pbag.dll". Action Taken: No Action Taken. 41: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\pb\pbcl.dll". Action Taken: No Action Taken. 42: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\pb\pbsv.dll". Action Taken: No Action Taken. 43: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\pb\pbags.dll". Action Taken: No Action Taken. 44: Thu Oct 27 16:46:21 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\AGP_Interface.u". Action Taken: No Action Taken. 45: Thu Oct 27 16:46:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\SeeMePlayMe.exe". Action Taken: No Action Taken. 46: Thu Oct 27 16:46:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\ArcadeInstallARMYGAME14d.EXE". Action Taken: No Action Taken. 47: Thu Oct 27 16:46:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\xfire_installer_12482.exe". Action Taken: No Action Taken. 48: Thu Oct 27 16:46:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\AASMInstaller.msi". Action Taken: No Action Taken. 49: Thu Oct 27 16:46:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\Sounds\S-Talking.uax". Action Taken: No Action Taken. 50: Thu Oct 27 16:46:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\IFC23.DLL". Action Taken: No Action Taken. 51: Thu Oct 27 16:46:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\AGP_Interface.dll". Action Taken: No Action Taken. 52: Thu Oct 27 16:46:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\pb\pbweb.exe". Action Taken: No Action Taken. 53: Thu Oct 27 16:46:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\AGP_Vehicles.dll". Action Taken: No Action Taken. 54: Thu Oct 27 16:46:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\dbghelp.dll". Action Taken: No Action Taken. 55: Thu Oct 27 16:46:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\SpeedTreeRT.DLL". Action Taken: No Action Taken. 56: Thu Oct 27 16:46:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\Videos\SF_A-Team_Videos.exe". Action Taken: No Action Taken. 57: Thu Oct 27 16:46:22 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\AASM 1-1 Setup.exe". Action Taken: No Action Taken. 58: Thu Oct 27 16:46:23 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\System32\MSIMRT.DLL". Action Taken: No Action Taken. 59: Thu Oct 27 16:46:23 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\System32\MSIMRT16.DLL". Action Taken: No Action Taken. 60: Thu Oct 27 16:46:23 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\System32\MSIMRT32.DLL". Action Taken: No Action Taken. 61: Thu Oct 27 16:46:23 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\System32\MSIMUSIC.DLL". Action Taken: No Action Taken. 62: Thu Oct 27 16:46:23 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\System32\pxsfs.dll". Action Taken: No Action Taken. 63: Thu Oct 27 16:46:24 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\01\Intel32\iKernel.dll". Action Taken: No Action Taken. 64: Thu Oct 27 16:46:24 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\01\Intel32\Setup.dll". Action Taken: No Action Taken. 65: Thu Oct 27 16:46:24 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\01\Intel32\iscript.dll". Action Taken: No Action Taken. 66: Thu Oct 27 16:46:24 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\01\Intel32\ctor.dll". Action Taken: No Action Taken. 67: Thu Oct 27 16:46:24 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\01\Intel32\iuser.dll". Action Taken: No Action Taken. 68: Thu Oct 27 16:46:24 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\01\Intel32\IGDI.dll". Action Taken: No Action Taken. 69: Thu Oct 27 16:46:24 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\NeroCoverDesigner_fra.chm". Action Taken: No Action Taken. 70: Thu Oct 27 16:46:24 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-deu.nls". Action Taken: No Action Taken. 71: Thu Oct 27 16:46:24 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-jpn.nls". Action Taken: No Action Taken. 72: Thu Oct 27 16:46:24 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Deu.nls". Action Taken: No Action Taken. 73: Thu Oct 27 16:46:24 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\NeroBackItUp_Fra.chm". Action Taken: No Action Taken. 74: Thu Oct 27 16:46:24 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero StartSmart\NeroStartSmart_deu.chm". Action Taken: No Action Taken. 75: Thu Oct 27 16:46:24 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero StartSmart\NeroStartSmart_fra.chm". Action Taken: No Action Taken. 76: Thu Oct 27 16:46:24 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero StartSmart\NeroStartSmart_jpn.chm". Action Taken: No Action Taken. 77: Thu Oct 27 16:46:24 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Jpn.nls". Action Taken: No Action Taken. 78: Thu Oct 27 16:46:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Adobe\Photoshop Album\Kataloge\My Catalog.psa". Action Taken: No Action Taken. 79: Thu Oct 27 16:46:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\442.exe" refers to invalid object "C:\Programme\SCi Games\442 - Fussball Manager\442.exe". Action Taken: No Action Taken. 80: Thu Oct 27 16:46:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\BF1942.exe" refers to invalid object "C:\Programme\EA GAMES\Battlefield 1942\Mods\XPack2\BF1942.exe". Action Taken: No Action Taken. 81: Thu Oct 27 16:46:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\HijackThis.exe" refers to invalid object "C:\DOKUME~1\CHRIST~1\LOKALE~1\Temp\Rar$EX00.906\hijackthis.exe". Action Taken: No Action Taken. 82: Thu Oct 27 16:46:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\yourapp.Exe" refers to invalid object "C:\Programme\ZOO Digital Publishing\Psi Ops\YourApp.exe". Action Taken: No Action Taken. 83: Thu Oct 27 16:46:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\". Action Taken: No Action Taken. 84: Thu Oct 27 16:46:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\Briefings\". Action Taken: No Action Taken. 85: Thu Oct 27 16:46:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\System\". Action Taken: No Action Taken. 86: Thu Oct 27 16:46:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\Demos\". Action Taken: No Action Taken. 87: Thu Oct 27 16:46:25 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\System\pb\". Action Taken: No Action Taken. 88: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\Maps\". Action Taken: No Action Taken. 89: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\System\Videos\". Action Taken: No Action Taken. 90: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\Help\". Action Taken: No Action Taken. 91: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\StaticMeshes\". Action Taken: No Action Taken. 92: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\Animations\". Action Taken: No Action Taken. 93: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\Textures\". Action Taken: No Action Taken. 94: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\Sounds\". Action Taken: No Action Taken. 95: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\System\Config\". Action Taken: No Action Taken. 96: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\System\save\". Action Taken: No Action Taken. 97: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\System\descriptions\". Action Taken: No Action Taken. 98: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\System\pb\htm\". Action Taken: No Action Taken. 99: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\System\lipsincdata\Controllers\". Action Taken: No Action Taken. 100: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\System\lipsincdata\". Action Taken: No Action Taken. 101: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\System\lipsincdata\Mappings\". Action Taken: No Action Taken. 102: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\Music\". Action Taken: No Action Taken. 103: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\Movies\". Action Taken: No Action Taken. 104: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\KarmaData\". Action Taken: No Action Taken. 105: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\America's Army\". Action Taken: No Action Taken. 106: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army Server Manager\". Action Taken: No Action Taken. 107: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army Server Manager\LeagueInfo\". Action Taken: No Action Taken. 108: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\America's Army Server Manager\". Action Taken: No Action Taken. 109: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\". Action Taken: No Action Taken. 110: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\". Action Taken: No Action Taken. 111: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Badges\". Action Taken: No Action Taken. 112: Thu Oct 27 16:46:26 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Banners\". Action Taken: No Action Taken. 113: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Data\". Action Taken: No Action Taken. 114: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\". Action Taken: No Action Taken. 115: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Data\". Action Taken: No Action Taken. 116: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\". Action Taken: No Action Taken. 117: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Data\". Action Taken: No Action Taken. 118: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\". Action Taken: No Action Taken. 119: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\". Action Taken: No Action Taken. 120: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\". Action Taken: No Action Taken. 121: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\". Action Taken: No Action Taken. 122: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Logfiles\". Action Taken: No Action Taken. 123: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Movies\". Action Taken: No Action Taken. 124: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Patch\". Action Taken: No Action Taken. 125: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Playback\". Action Taken: No Action Taken. 126: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Profiles\". Action Taken: No Action Taken. 127: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\ScreenShots\". Action Taken: No Action Taken. 128: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Stats\". Action Taken: No Action Taken. 129: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\Chinese\". Action Taken: No Action Taken. 130: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\Czech\". Action Taken: No Action Taken. 131: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\English\". Action Taken: No Action Taken. 132: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\English_Chinese\". Action Taken: No Action Taken. 133: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\French\". Action Taken: No Action Taken. 134: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\Italian\". Action Taken: No Action Taken. 135: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\Korean\". Action Taken: No Action Taken. 136: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\Korean adult\". Action Taken: No Action Taken. 137: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\Polish\". Action Taken: No Action Taken. 138: Thu Oct 27 16:46:27 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\Russian\". Action Taken: No Action Taken. 139: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\Slovak\". Action Taken: No Action Taken. 140: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\Spanish\". Action Taken: No Action Taken. 141: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\Chinese\". Action Taken: No Action Taken. 142: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\Czech\". Action Taken: No Action Taken. 143: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\English\". Action Taken: No Action Taken. 144: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\English_Chinese\". Action Taken: No Action Taken. 145: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\French\". Action Taken: No Action Taken. 146: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\Italian\". Action Taken: No Action Taken. 147: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\Korean\". Action Taken: No Action Taken. 148: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\Korean adult\". Action Taken: No Action Taken. 149: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\Polish\". Action Taken: No Action Taken. 150: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\Russian\". Action Taken: No Action Taken. 151: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\Slovak\". Action Taken: No Action Taken. 152: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\Spanish\". Action Taken: No Action Taken. 153: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\Chinese\". Action Taken: No Action Taken. 154: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\Czech\". Action Taken: No Action Taken. 155: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\English\". Action Taken: No Action Taken. 156: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\English_Chinese\". Action Taken: No Action Taken. 157: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\French\". Action Taken: No Action Taken. 158: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\Italian\". Action Taken: No Action Taken. 159: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\Korean\". Action Taken: No Action Taken. 160: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\Korean adult\". Action Taken: No Action Taken. 161: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\Polish\". Action Taken: No Action Taken. 162: Thu Oct 27 16:46:28 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\Russian\". Action Taken: No Action Taken. 163: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\Slovak\". Action Taken: No Action Taken. 164: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\Spanish\". Action Taken: No Action Taken. 165: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Chinese\". Action Taken: No Action Taken. 166: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\". Action Taken: No Action Taken. 167: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Czech\". Action Taken: No Action Taken. 168: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\English\". Action Taken: No Action Taken. 169: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\English_Chinese\". Action Taken: No Action Taken. 170: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\French\". Action Taken: No Action Taken. 171: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Italian\". Action Taken: No Action Taken. 172: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Korean\". Action Taken: No Action Taken. 173: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Korean adult\". Action Taken: No Action Taken. 174: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Polish\". Action Taken: No Action Taken. 175: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Russian\". Action Taken: No Action Taken. 176: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Slovak\". Action Taken: No Action Taken. 177: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Spanish\". Action Taken: No Action Taken. 178: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Movies\". Action Taken: No Action Taken. 179: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\German\". Action Taken: No Action Taken. 180: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\German\". Action Taken: No Action Taken. 181: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\German\". Action Taken: No Action Taken. 182: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Locale\German\". Action Taken: No Action Taken. 183: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Locale\". Action Taken: No Action Taken. 184: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\German\". Action Taken: No Action Taken. 185: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Drivers\". Action Taken: No Action Taken. 186: Thu Oct 27 16:46:29 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Movies\DOWMissions\". Action Taken: No Action Taken. 187: Thu Oct 27 16:46:30 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\The Kreed (de)\". Action Taken: No Action Taken. 188: Thu Oct 27 16:46:30 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\The Kreed (de)\saves\". Action Taken: No Action Taken. 189: Thu Oct 27 16:46:30 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".016". Action Taken: No Action Taken. 190: Thu Oct 27 16:46:31 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".bak". Action Taken: No Action Taken. 191: Thu Oct 27 16:46:31 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".MCO". Action Taken: No Action Taken. 192: Thu Oct 27 16:46:31 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".mdf". Action Taken: No Action Taken. 193: Thu Oct 27 16:46:31 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".mdmp". Action Taken: No Action Taken. 194: Thu Oct 27 16:46:31 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".mds". Action Taken: No Action Taken. 195: Thu Oct 27 16:46:31 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".script". Action Taken: No Action Taken. 196: Thu Oct 27 16:46:31 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".sec". Action Taken: No Action Taken. 197: Thu Oct 27 16:46:31 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".sfd". Action Taken: No Action Taken. 198: Thu Oct 27 16:46:31 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".sps". Action Taken: No Action Taken. 199: Thu Oct 27 16:46:31 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".utx". Action Taken: No Action Taken. 200: Thu Oct 27 16:46:31 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".w32". Action Taken: No Action Taken. 201: Thu Oct 27 16:46:31 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Anti-Blaxx_is1". Action Taken: No Action Taken. 202: Thu Oct 27 16:46:31 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "BearShare". Action Taken: No Action Taken. 203: Thu Oct 27 16:46:31 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "BrothersInArms". Action Taken: No Action Taken. 204: Thu Oct 27 16:46:31 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Mozilla Firefox (1.0.4)". Action Taken: No Action Taken. 205: Thu Oct 27 16:46:31 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Mozilla Firefox (1.0.6)". Action Taken: No Action Taken. 206: Thu Oct 27 16:46:31 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{61249874-492D-4028-AAA4-939F15D162E5}". Action Taken: No Action Taken. 207: Thu Oct 27 16:46:31 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{8BECF123-B0EF-4E51-B7F3-923EFE15CC4A}". Action Taken: No Action Taken. 208: Thu Oct 27 16:46:31 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{ABEB838C-A1A7-4C5D-B7E1-8B4314600813}". Action Taken: No Action Taken. 209: Thu Oct 27 16:46:32 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{D992240F-649B-4DF7-8EC5-323D59ACC18B}". Action Taken: No Action Taken. 210: Thu Oct 27 16:46:32 2005 => Entry "HKCR\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}" refers to invalid object "C:\WINDOWS\System32\xvid.ax". Action Taken: No Action Taken. 211: Thu Oct 27 16:46:33 2005 => Entry "HKCR\CLSID\{238D0F23-5DC9-45A6-9BE2-666160C324DD}" refers to invalid object "C:\Programme\Allok AVI to DVD SVCD VCD Converter\RealMedia.dll". Action Taken: No Action Taken. 212: Thu Oct 27 16:46:34 2005 => Entry "HKCR\CLSID\{3C78B8E2-6C4D-11D1-ADE2-0000F8754B99}" refers to invalid object "C:\Programme\Smart Video Converter\viscomwave.dll". Action Taken: No Action Taken. 213: Thu Oct 27 16:46:35 2005 => Entry "HKCR\CLSID\{4B4B40F0-C9DF-11D4-AA54-00104B49C4F0}" refers to invalid object "E:\R2ctlNS.OCX". Action Taken: No Action Taken. 214: Thu Oct 27 16:46:36 2005 => Entry "HKCR\CLSID\{64697678-0000-0010-8000-00AA00389B71}" refers to invalid object "C:\WINDOWS\System32\xvid.ax". Action Taken: No Action Taken. 215: Thu Oct 27 16:46:36 2005 => Entry "HKCR\CLSID\{765035B3-5944-4A94-806B-20EE3415F26F}" refers to invalid object "C:\Programme\Allok AVI to DVD SVCD VCD Converter\RealMedia.dll". Action Taken: No Action Taken. 216: Thu Oct 27 16:46:37 2005 => Entry "HKCR\CLSID\{941A4793-A705-4312-8DFC-C11CA05F397E}" refers to invalid object "C:\Programme\Allok AVI to DVD SVCD VCD Converter\RealMedia.dll". Action Taken: No Action Taken. 217: Thu Oct 27 16:46:38 2005 => Entry "HKCR\CLSID\{9F95F736-0F62-4214-A4B4-CAA6738D4C07}" refers to invalid object "C:\Programme\BearShare\RunMSC.dll". Action Taken: No Action Taken. 218: Thu Oct 27 16:46:38 2005 => Entry "HKCR\CLSID\{AB1D8565-40E9-4616-984D-98465687E82C}" refers to invalid object "C:\Programme\Messenger\msgsc.dll". Action Taken: No Action Taken. 219: Thu Oct 27 16:46:39 2005 => Entry "HKCR\CLSID\{B69003B3-C55E-4b48-836C-BC5946FC3B28}" refers to invalid object "C:\Programme\Messenger\msgsc.dll". Action Taken: No Action Taken. 220: Thu Oct 27 16:46:40 2005 => Entry "HKCR\CLSID\{E0B8F398-BB08-4298-87F0-34502693902E}" refers to invalid object ""C:\Programme\Messenger\msmsgs.exe"". Action Taken: No Action Taken. 221: Thu Oct 27 16:46:40 2005 => Entry "HKCR\CLSID\{E21BE468-5C18-43EB-B0CC-DB93A847D769}" refers to invalid object "C:\Programme\Allok AVI to DVD SVCD VCD Converter\RealMedia.dll". Action Taken: No Action Taken. 222: Thu Oct 27 16:46:40 2005 => Entry "HKCR\CLSID\{E3A3B1D9-5675-43c0-BF04-37BE11939FB7}" refers to invalid object ""C:\Programme\Messenger\msmsgs.exe"". Action Taken: No Action Taken. 223: Thu Oct 27 16:46:41 2005 => Entry "HKCR\CLSID\{FB7199AB-79BF-11d2-8D94-0000F875C541}" refers to invalid object "C:\Programme\Messenger\msgsc.dll". Action Taken: No Action Taken. 224: Thu Oct 27 16:46:42 2005 => Entry "HKCR\TypeLib\{4B4B40F2-C9DF-11D4-AA54-00104B49C4F0}" refers to invalid object "E:\R2ctlNS.OCX". Action Taken: No Action Taken. 225: Thu Oct 27 16:46:42 2005 => Entry "HKCR\TypeLib\{53CED51D-432B-45B2-A3E0-0CE2C24235D4}" refers to invalid object "C:\Programme\Messenger\msmsgs.exe". Action Taken: No Action Taken. 226: Thu Oct 27 16:46:42 2005 => Entry "HKCR\TypeLib\{905D0DF2-3A0A-4D94-853C-54A12A745905}" refers to invalid object "C:\Programme\BearShare\RunMSC.dll". Action Taken: No Action Taken. 227: Thu Oct 27 16:46:43 2005 => Entry "HKCR\TypeLib\{E02AD29E-80F5-46C6-B416-9B3EBDDF057E}" refers to invalid object "C:\Programme\Messenger\msmsgs.exe". Action Taken: No Action Taken. 228: Thu Oct 27 16:46:43 2005 => Entry "HKCR\.386" refers to invalid object "vxdfile". Action Taken: No Action Taken. 229: Thu Oct 27 16:46:43 2005 => Entry "HKCR\.acl" refers to invalid object "ACLFile". Action Taken: No Action Taken. 230: Thu Oct 27 16:46:43 2005 => Entry "HKCR\.aw" refers to invalid object "AWFile". Action Taken: No Action Taken. 231: Thu Oct 27 16:46:43 2005 => Entry "HKCR\.bc!" refers to invalid object "BitLordUnfinishedFile". Action Taken: No Action Taken. 232: Thu Oct 27 16:46:43 2005 => Entry "HKCR\.bkf" refers to invalid object "msbackupfile". Action Taken: No Action Taken. 233: Thu Oct 27 16:46:43 2005 => Entry "HKCR\.col" refers to invalid object "COLFile". Action Taken: No Action Taken. 234: Thu Oct 27 16:46:43 2005 => Entry "HKCR\.det" refers to invalid object "DETFile". Action Taken: No Action Taken. 235: Thu Oct 27 16:46:43 2005 => Entry "HKCR\.elm" refers to invalid object "ELMFile". Action Taken: No Action Taken. 236: Thu Oct 27 16:46:43 2005 => Entry "HKCR\.ffa" refers to invalid object "FFAFile". Action Taken: No Action Taken. 237: Thu Oct 27 16:46:43 2005 => Entry "HKCR\.ffl" refers to invalid object "FFLFile". Action Taken: No Action Taken. 238: Thu Oct 27 16:46:44 2005 => Entry "HKCR\.fft" refers to invalid object "FFTFile". Action Taken: No Action Taken. 239: Thu Oct 27 16:46:44 2005 => Entry "HKCR\.ffx" refers to invalid object "FFXFile". Action Taken: No Action Taken. 240: Thu Oct 27 16:46:44 2005 => Entry "HKCR\.frg" refers to invalid object "Access.Fragment". Action Taken: No Action Taken. 241: Thu Oct 27 16:46:44 2005 => Entry "HKCR\.gst" refers to invalid object "MSMap.Datainst.8". Action Taken: No Action Taken. 242: Thu Oct 27 16:46:44 2005 => Entry "HKCR\.ldb" refers to invalid object "Access.LockFile.9". Action Taken: No Action Taken. 243: Thu Oct 27 16:46:44 2005 => Entry "HKCR\.lex" refers to invalid object "LEXFile". Action Taken: No Action Taken. 244: Thu Oct 27 16:46:44 2005 => Entry "HKCR\.mks" refers to invalid object "mks_auto_file". Action Taken: No Action Taken. 245: Thu Oct 27 16:46:44 2005 => Entry "HKCR\.opc" refers to invalid object "OPCFile". Action Taken: No Action Taken. 246: Thu Oct 27 16:46:44 2005 => Entry "HKCR\.pcb" refers to invalid object "PCBFile". Action Taken: No Action Taken. 247: Thu Oct 27 16:46:44 2005 => Entry "HKCR\.pip" refers to invalid object "PIPFile". Action Taken: No Action Taken. 248: Thu Oct 27 16:46:44 2005 => Entry "HKCR\.plr" refers to invalid object "plr_auto_file". Action Taken: No Action Taken. 249: Thu Oct 27 16:46:44 2005 => Entry "HKCR\.psavi" refers to invalid object "SIMpool.avi". Action Taken: No Action Taken. 250: Thu Oct 27 16:46:44 2005 => Entry "HKCR\.sll" refers to invalid object "SSLFile". Action Taken: No Action Taken. 251: Thu Oct 27 16:46:45 2005 => Entry "HKCR\.stf" refers to invalid object "STFFile". Action Taken: No Action Taken. 252: Thu Oct 27 16:46:45 2005 => Entry "HKCR\.torrent" refers to invalid object "bittorrent". Action Taken: No Action Taken. 253: Thu Oct 27 16:46:45 2005 => Entry "HKCR\.tuw" refers to invalid object "TUWFile". Action Taken: No Action Taken. 254: Thu Oct 27 16:46:45 2005 => Entry "HKCR\.uip" refers to invalid object Dieser Beitrag wurde am 27.10.2005 um 22:27 Uhr von Chrissi623 editiert.
|
|
|
|
|
27.10.2005, 19:23
Member
Beiträge: 4730 |
#4
Ui, das sieht ja nett aus
 Lösche (ggf. mit Killbox, falls es so nicht geht): C:\!Submit\ C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aim peak mags poll\ C:\WINDOWS\iun6002.exe C:\Dokumente und Einstellungen\Christoph\Desktop\win32_rbmm.zip C:\WINDOWS\DOWNLO~1\popcaploader.dll C:\WINDOWS\System32\h@tkeysh@@k.dll Lösche alle temporären Dateien mit CCleaner: http://virus-protect.org/temp.html Säubere Dein System mit Ewido und berichte: http://virus-protect.org/ewido.html __________ Dies ist eine Signatur! Persönlicher Service: Du kommst aus Berlin? Dann melde Dich per PN bei mir, evtl. können wir einen Termin vereinbaren. Der Grabsteinschubser |
|
|
|
|
27.10.2005, 23:56
Member
Themenstarter Beiträge: 11 |
#5
So hab dann mal das alles manuell gelöscht und neugestartet !Submit war wieder da .. Frag Acid Nurb auch und Aim peak mags poll ... auch ... hab dann mit Killbox nochmals gemacht, dann stand da "could not delete files" also hab ich mit reboot gemacht und bis her sind se weg ich hoffe es bleibt auch so beim nächsten neustart
hier is mein ewido scan-log: --------------------------------------------------------- ewido security suite - Scan Report --------------------------------------------------------- + Erstellt am: 23:57:16, 27.10.2005 + Report-Checksumme: BAABAE97 + Scanergebnis: HKLM\SOFTWARE\Classes\CLSID\{9F95F736-0F62-4214-A4B4-CAA6738D4C07} -> Spyware.SaveNow : Gesäubert mit Backup HKLM\SOFTWARE\Classes\Interface\{C285D18D-43A2-4AEF-83FB-BF280E660A97} -> Spyware.SaveNow : Gesäubert mit Backup HKLM\SOFTWARE\Classes\RunMSC.Loader\CLSID\\ -> Spyware.SaveNow : Gesäubert mit Backup HKLM\SOFTWARE\Classes\RunMSC.Loader.1\CLSID\\ -> Spyware.SaveNow : Gesäubert mit Backup HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Spyware.Alexa : Gesäubert mit Backup HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Spyware.Alexa : Gesäubert mit Backup HKU\S-1-5-21-746137067-413027322-839522115-1005\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Spyware.Alexa : Gesäubert mit Backup HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Spyware.Alexa : Fehler beim Säubern C:\Dokumente und Einstellungen\Benutzerwechsel\Cookies\benutzerwechsel@2o7[1].txt -> Spyware.Cookie.2o7 : Gesäubert mit Backup C:\Dokumente und Einstellungen\Benutzerwechsel\Cookies\benutzerwechsel@adtech[1].txt -> Spyware.Cookie.Adtech : Gesäubert mit Backup C:\Dokumente und Einstellungen\Benutzerwechsel\Cookies\benutzerwechsel@as1.falkag[1].txt -> Spyware.Cookie.Falkag : Gesäubert mit Backup C:\Dokumente und Einstellungen\Benutzerwechsel\Cookies\benutzerwechsel@atdmt[1].txt -> Spyware.Cookie.Atdmt : Gesäubert mit Backup C:\Dokumente und Einstellungen\Benutzerwechsel\Cookies\benutzerwechsel@axa.addcontrol[2].txt -> Spyware.Cookie.Addcontrol : Gesäubert mit Backup C:\Dokumente und Einstellungen\Benutzerwechsel\Cookies\benutzerwechsel@counter7.sextracker[1].txt -> Spyware.Cookie.Sextracker : Gesäubert mit Backup C:\Dokumente und Einstellungen\Benutzerwechsel\Cookies\benutzerwechsel@cs.sexcounter[2].txt -> Spyware.Cookie.Sexcounter : Gesäubert mit Backup C:\Dokumente und Einstellungen\Benutzerwechsel\Cookies\benutzerwechsel@ivwbox[2].txt -> Spyware.Cookie.Ivwbox : Gesäubert mit Backup C:\Dokumente und Einstellungen\Benutzerwechsel\Cookies\benutzerwechsel@sextracker[1].txt -> Spyware.Cookie.Sextracker : Gesäubert mit Backup C:\Dokumente und Einstellungen\Benutzerwechsel\Cookies\benutzerwechsel@tradedoubler[2].txt -> Spyware.Cookie.Tradedoubler : Gesäubert mit Backup C:\Dokumente und Einstellungen\Benutzerwechsel\Cookies\benutzerwechsel@valueclick[1].txt -> Spyware.Cookie.Valueclick : Gesäubert mit Backup C:\Programme\VVSN\Neuer Ordner\VVSN.exe -> Adware.SaveNow : Gesäubert mit Backup ::Report Ende ***EDIT*** : !Submit, Frag Acid Nurb und Aim peak mags poll sind wieder da .. lassen sich net wirklich löschen .. kommen immer wieder o.O was tun? mit killbox funzt das nicht ... "avast antivir" erkennt die nicht ... "Antivir" erkennt die nicht .. "AdAware" irgendwie auch nicht ... "Spybot Search and Destroy" bin ich gerade bei .***EDIT2***. : Spy Bot Hat keine gefunden "Gratulation Keine Spione Gefunden" ... was sind das dann für dinger? bekomm die nichtmehr vom system o.O Dieser Beitrag wurde am 28.10.2005 um 00:46 Uhr von Chrissi623 editiert.
|
|
|
|
|
28.10.2005, 14:33
Member
Beiträge: 4730 |
#6
Halte Dich an die Anweisungen unter http://virus-protect.org/datfindbat.html. Daraus werden vier Log-Dateien resultieren, aus denen Du alle Einträge der vergangenen drei Wochen hier rein kopierst (vor jedem Eintrag steht ein Datum).
__________ Dies ist eine Signatur! Persönlicher Service: Du kommst aus Berlin? Dann melde Dich per PN bei mir, evtl. können wir einen Termin vereinbaren. Der Grabsteinschubser |
|
|
|
|
28.10.2005, 14:48
Member
Themenstarter Beiträge: 11 |
#7
Hoffe das ich des richtig gemacht habe .. hab die anleitung befolgt ..
1.) 28.10.2005 13:56 206.400 Status.MPF 28.10.2005 13:56 28.936 nvapps.xml 23.10.2005 18:41 2.206 wpa.dbl 17.10.2005 13:37 235.168 FNTCACHE.DAT 09.10.2005 21:19 98.304 CmdLineExt.dll 09.10.2005 18:03 124.690 mswinsck.ocx 16.08.2005 21:01 21.840 SIntfNT.dll 16.08.2005 21:01 17.212 SIntf32.dll 16.08.2005 21:01 12.067 SIntf16.dll 15.08.2005 15:15 36.864 frapsvid.dll 13.08.2005 21:41 118.784 sirenacm.dll 2.) 28.10.2005 14:48 978 TmpICQMagic_{05736BBE-C20F-4F10-A6DE-4DB1E3564B0E}7176.html 28.10.2005 14:40 16.384 ~DFC6DE.tmp 28.10.2005 14:40 512 ~DFC6CD.tmp 28.10.2005 14:40 512 ~DFC6EB.tmp 28.10.2005 14:40 16.384 ~DFC6A2.tmp 28.10.2005 14:40 16.384 ~DFC6C0.tmp 28.10.2005 14:40 512 ~DFC691.tmp 28.10.2005 14:40 512 ~DFC6AF.tmp 28.10.2005 14:40 16.384 ~DFC684.tmp 28.10.2005 14:39 983 TmpICQMagic_{EC202595-1DFD-4301-A1EA-13C1E331B505}7236.html 28.10.2005 14:36 59.218 TFR133.tmp 28.10.2005 14:36 56.657 TFR132.tmp 28.10.2005 14:36 46.660 TFR12C.tmp 28.10.2005 14:36 20.560 TFR12A.tmp 28.10.2005 14:36 40.950 TFR125.tmp 28.10.2005 14:36 67.994 TFR122.tmp 28.10.2005 14:36 46.021 TFR11E.tmp 28.10.2005 14:36 67.560 TFR10F.tmp 28.10.2005 14:36 21.122 TFR10A.tmp 28.10.2005 14:36 23.427 TFR107.tmp 28.10.2005 14:36 71.682 TFR105.tmp 28.10.2005 14:36 10.225 TFR101.tmp 28.10.2005 14:36 35.574 TFR100.tmp 28.10.2005 14:36 32.204 TFRFF.tmp 28.10.2005 14:36 27.777 TFRFE.tmp 28.10.2005 14:32 16.384 ~DFEDC8.tmp 28.10.2005 14:32 512 ~DFEDD5.tmp 28.10.2005 14:32 16.384 ~DFEDA8.tmp 28.10.2005 14:32 512 ~DFEDB7.tmp 28.10.2005 14:32 512 ~DFED97.tmp 28.10.2005 14:32 16.384 ~DFED8A.tmp 28.10.2005 14:32 16.384 ~DFED6C.tmp 28.10.2005 14:32 512 ~DFED79.tmp 28.10.2005 14:02 512 ~DF1127.tmp 28.10.2005 14:02 16.384 ~DF1138.tmp 28.10.2005 14:02 512 ~DF1145.tmp 28.10.2005 14:02 16.384 ~DF10DC.tmp 28.10.2005 14:02 16.384 ~DF111A.tmp 28.10.2005 14:02 512 ~DF1109.tmp 28.10.2005 14:02 16.384 ~DF10FC.tmp 28.10.2005 14:02 512 ~DF10EB.tmp 28.10.2005 13:59 4 PMShared 28.10.2005 13:58 16.384 ~DF215C.tmp 28.10.2005 13:58 16.384 ~DF5CC.tmp 28.10.2005 13:58 512 ~DF63C.tmp 28.10.2005 13:56 204 jusched.log 46 Datei(en) 865.832 Bytes 0 Verzeichnis(se), 3.247.529.984 Bytes frei 3.) 28.10.2005 13:59 728 win.ini 28.10.2005 13:54 159 wiadebug.log 28.10.2005 13:54 50 wiaservc.log 28.10.2005 04:10 2.048 bootstat.dat 28.10.2005 03:29 1.125 winamp.ini 28.10.2005 01:22 116 NeroDigital.ini 27.10.2005 22:54 578 M3JPEG.INI 27.10.2005 15:34 4.017.613 REGBK00.ZIP 26.10.2005 01:53 40 smartvideoconverter.ini 13.10.2005 20:57 99.965 UninstallFirefox.exe 13.10.2005 20:57 4.824 mozver.dat 09.10.2005 08:47 16 popcinfo.dat 4.) 28.10.2005 14:50 0 sys.txt 28.10.2005 14:49 4.807 system.txt 28.10.2005 14:49 2.574 systemtemp.txt 28.10.2005 14:48 101.510 system32.txt 28.10.2005 04:10 805.306.368 pagefile.sys 27.10.2005 19:30 5 AVPCallback.log 12.10.2005 00:02 34.308 BASSMOD.DLL 14.09.2005 21:41 0 .m3u .... was nun? |
|
|
|
|
28.10.2005, 15:23
Member
Beiträge: 4730 |
#8
Joar, da fehlen jetzt zwar die Pfandangaben, aber ich sehe dennoch, welcher Auszug aus welchem Log ist
 Ich vermute aber, dass ich jetzt weiß, wo das Problem lag. Mir fiel gerade auf, dass ich wohl was übersehen hatte. Also quasi nochmal den ganzen Mist: Lösche: C:\!Submit\ C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aim peak mags poll\ C:\Dokumente und Einstellungen\Christoph\Anwendungsdaten\Frag acid nurb\ C:\DOKUME~1\CHRIST~1\ANWEND~1\ANTIPL~1\ Die beiden letzten Ordner "Frag Acid Nurb" und "Anti...???" (hier musste mal schauen, wie der richtig heißt) hatte ich vergessen oder übersehen. Die müssen natürlich auch komplett gelöscht werden. Sorry Bitte mache einen erneuten Scan mit eScanCheck. Gehe dazu aber in den abgesicherten Modus, dann sollte es etwas schneller gehen. __________ Dies ist eine Signatur! Persönlicher Service: Du kommst aus Berlin? Dann melde Dich per PN bei mir, evtl. können wir einen Termin vereinbaren. Der Grabsteinschubser |
|
|
|
|
29.10.2005, 15:27
Member
Themenstarter Beiträge: 11 |
#9
Is ja nicht schlimm Anti und Frag Acid hatte ich schon gelöscht da hab ich mir schon gedacht das das keine normalen ordner sind
hier ist dann mein eScan log: -------------------------------------------------- -------------------- INFECTED -------------------- -------------------------------------------------- 1: Sat Oct 29 13:20:19 2005 => System found infected with spywareno!/spysheriff Commercial KeyLogger ({0c1f87ae-ae62-11d3-911c-00105a17b608})! Action taken: No Action Taken. 2: Sat Oct 29 13:20:19 2005 => System found infected with spywareno!/spysheriff Commercial KeyLogger ({39fda070-61ba-11d2-ad84-00105a17b608})! Action taken: No Action Taken. 3: Sat Oct 29 13:20:19 2005 => System found infected with spywareno!/spysheriff Commercial KeyLogger ({4f99a075-5227-11d2-ad06-00105a17b608})! Action taken: No Action Taken. 4: Sat Oct 29 13:20:19 2005 => System found infected with bearshare Spyware/Adware ({558ec983-bedb-9168-b2de-31dbf0ee543e})! Action taken: No Action Taken. 5: Sat Oct 29 13:20:19 2005 => System found infected with spywareno!/spysheriff Commercial KeyLogger ({a1eedaa7-c4d8-11d2-ad9c-00105a17b608})! Action taken: No Action Taken. 6: Sat Oct 29 13:20:20 2005 => System found infected with spywareno!/spysheriff Commercial KeyLogger ({b22fe43c-d1e8-432a-a862-9f83d5f04732})! Action taken: No Action Taken. 7: Sat Oct 29 13:20:20 2005 => System found infected with spywareno!/spysheriff Commercial KeyLogger ({ca4fc24b-c65c-11d1-aa6f-000000000000})! Action taken: No Action Taken. 8: Sat Oct 29 13:20:20 2005 => System found infected with spywareno!/spysheriff Commercial KeyLogger ({ddd136ce-517b-11d2-ad03-00105a17b608})! Action taken: No Action Taken. 9: Sat Oct 29 13:20:20 2005 => System found infected with spywareno!/spysheriff Commercial KeyLogger ({e9d55102-9683-11d2-ba68-0040053687fe})! Action taken: No Action Taken. 10: Sat Oct 29 13:20:20 2005 => System found infected with bearshare Spyware/Adware ({905d0df2-3a0a-4d94-853c-54a12a745905})! Action taken: No Action Taken. 11: Sat Oct 29 13:20:41 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Eigene Dateien\postal2\help\install.htm 12: Sat Oct 29 13:20:41 2005 => System found infected with lop.com Spyware/Adware (install.htm)! Action taken: No Action Taken. 13: Sat Oct 29 13:20:41 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Eigene Dateien\postal2\help\troubleshooting.htm 14: Sat Oct 29 13:20:41 2005 => System found infected with imesh Spyware/Adware (troubleshooting.htm)! Action taken: No Action Taken. 15: Sat Oct 29 13:20:42 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Eigene Dateien\stronghold 2 demo\config.dat 16: Sat Oct 29 13:20:42 2005 => System found infected with startsurfing Spyware/Adware (config.dat)! Action taken: No Action Taken. 17: Sat Oct 29 13:20:44 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Lokale Einstellungen\temporary internet files\content.ie5\0vajqh6t\adswrapper[1].js 18: Sat Oct 29 13:20:44 2005 => System found infected with whenu.savenow Spyware/Adware (adswrapper[1].js)! Action taken: No Action Taken. 19: Sat Oct 29 13:20:44 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Lokale Einstellungen\temporary internet files\content.ie5\lf6ypwsj\adsend[1].js 20: Sat Oct 29 13:20:44 2005 => System found infected with whenu.savenow Spyware/Adware (adsend[1].js)! Action taken: No Action Taken. 21: Sat Oct 29 13:20:44 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Lokale Einstellungen\temporary internet files\content.ie5\ogz2q932\adspopup2[1].js 22: Sat Oct 29 13:20:45 2005 => System found infected with whenu.savenow Spyware/Adware (adspopup2[1].js)! Action taken: No Action Taken. 23: Sat Oct 29 13:20:45 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Lokale Einstellungen\Temporary Internet Files\content.ie5\0vajqh6t\adswrapper[1].js 24: Sat Oct 29 13:20:45 2005 => System found infected with whenu.savenow Spyware/Adware (adswrapper[1].js)! Action taken: No Action Taken. 25: Sat Oct 29 13:20:45 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Lokale Einstellungen\Temporary Internet Files\content.ie5\lf6ypwsj\adsend[1].js 26: Sat Oct 29 13:20:45 2005 => System found infected with whenu.savenow Spyware/Adware (adsend[1].js)! Action taken: No Action Taken. 27: Sat Oct 29 13:20:45 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Lokale Einstellungen\Temporary Internet Files\content.ie5\ogz2q932\adspopup2[1].js 28: Sat Oct 29 13:20:45 2005 => System found infected with whenu.savenow Spyware/Adware (adspopup2[1].js)! Action taken: No Action Taken. 29: Sat Oct 29 13:21:02 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Eigene Dateien\postal2\help\install.htm 30: Sat Oct 29 13:21:02 2005 => System found infected with lop.com Spyware/Adware (install.htm)! Action taken: No Action Taken. 31: Sat Oct 29 13:21:02 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Eigene Dateien\postal2\help\troubleshooting.htm 32: Sat Oct 29 13:21:02 2005 => System found infected with imesh Spyware/Adware (troubleshooting.htm)! Action taken: No Action Taken. 33: Sat Oct 29 13:21:03 2005 => Offending file found: C:\Dokumente und Einstellungen\Christoph\Eigene Dateien\stronghold 2 demo\config.dat 34: Sat Oct 29 13:21:03 2005 => System found infected with startsurfing Spyware/Adware (config.dat)! Action taken: No Action Taken. 35: Sat Oct 29 13:21:03 2005 => System found infected with cws.therealsearch Spyware/Adware (waol.exe)! Action taken: No Action Taken. 36: Sat Oct 29 13:21:03 2005 => System found infected with cws.therealsearch Spyware/Adware (waol.exe)! Action taken: No Action Taken. 37: Sat Oct 29 15:05:05 2005 => File C:\RECYCLER\S-1-5-21-746137067-413027322-839522115-1005\Dc1\dfhtviym.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 38: Sat Oct 29 15:05:06 2005 => File C:\RECYCLER\S-1-5-21-746137067-413027322-839522115-1005\Dc1\haztqtse.exe infected by "Trojan-Downloader.Win32.Swizzor.df" Virus! Action Taken: No Action Taken. 39: Sat Oct 29 15:05:07 2005 => File C:\RECYCLER\S-1-5-21-746137067-413027322-839522115-1005\Dc1\jxtqhmke.exe infected by "Trojan-Downloader.Win32.Swizzor.dj" Virus! Action Taken: No Action Taken. 40: Sat Oct 29 15:05:07 2005 => File C:\RECYCLER\S-1-5-21-746137067-413027322-839522115-1005\Dc1\kybzljhu.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 41: Sat Oct 29 15:05:07 2005 => File C:\RECYCLER\S-1-5-21-746137067-413027322-839522115-1005\Dc1\lmxfmorm.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 42: Sat Oct 29 15:05:07 2005 => File C:\RECYCLER\S-1-5-21-746137067-413027322-839522115-1005\Dc1\MultiKnobOwnsBash.exe infected by "Trojan-Downloader.Win32.Swizzor.dr" Virus! Action Taken: No Action Taken. 43: Sat Oct 29 15:05:08 2005 => File C:\RECYCLER\S-1-5-21-746137067-413027322-839522115-1005\Dc1\pop 32 locks.exe infected by "Trojan-Downloader.Win32.Swizzor.cb" Virus! Action Taken: No Action Taken. 44: Sat Oct 29 15:05:08 2005 => File C:\RECYCLER\S-1-5-21-746137067-413027322-839522115-1005\Dc1\vyuiumjd.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 45: Sat Oct 29 15:10:33 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0146487.exe infected by "Trojan-Downloader.Win32.Swizzor.bo" Virus! Action Taken: No Action Taken. 46: Sat Oct 29 15:10:37 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0146552.exe infected by "Trojan-Downloader.Win32.Swizzor.bo" Virus! Action Taken: No Action Taken. 47: Sat Oct 29 15:10:37 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0146553.exe infected by "Trojan-Downloader.Win32.Swizzor.df" Virus! Action Taken: No Action Taken. 48: Sat Oct 29 15:10:37 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0146554.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 49: Sat Oct 29 15:10:37 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0146555.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 50: Sat Oct 29 15:10:38 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0146556.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 51: Sat Oct 29 15:10:38 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0146557.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 52: Sat Oct 29 15:10:38 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0146558.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 53: Sat Oct 29 15:10:40 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147508.exe infected by "Trojan-Downloader.Win32.Swizzor.ca" Virus! Action Taken: No Action Taken. 54: Sat Oct 29 15:10:41 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147509.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 55: Sat Oct 29 15:10:42 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147520.exe infected by "Trojan-Downloader.Win32.Swizzor.df" Virus! Action Taken: No Action Taken. 56: Sat Oct 29 15:10:42 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147521.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 57: Sat Oct 29 15:10:42 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147522.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 58: Sat Oct 29 15:10:42 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147523.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 59: Sat Oct 29 15:10:42 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147524.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 60: Sat Oct 29 15:10:43 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147525.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 61: Sat Oct 29 15:10:43 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147527.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 62: Sat Oct 29 15:10:43 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147528.exe infected by "Trojan-Downloader.Win32.Swizzor.ca" Virus! Action Taken: No Action Taken. 63: Sat Oct 29 15:10:51 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147692.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 64: Sat Oct 29 15:10:52 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147694.exe infected by "Trojan-Downloader.Win32.Swizzor.df" Virus! Action Taken: No Action Taken. 65: Sat Oct 29 15:10:52 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147698.exe infected by "Trojan-Downloader.Win32.Swizzor.dj" Virus! Action Taken: No Action Taken. 66: Sat Oct 29 15:10:53 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147699.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 67: Sat Oct 29 15:10:53 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147700.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. 68: Sat Oct 29 15:10:54 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147703.exe infected by "Trojan-Downloader.Win32.Swizzor.dr" Virus! Action Taken: No Action Taken. 69: Sat Oct 29 15:10:54 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147707.exe infected by "Trojan-Downloader.Win32.Swizzor.cb" Virus! Action Taken: No Action Taken. 70: Sat Oct 29 15:10:56 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147712.exe infected by "Trojan-Downloader.Win32.Swizzor.de" Virus! Action Taken: No Action Taken. -------------------------------------------------- --------------------- TAGGED --------------------- -------------------------------------------------- 1: Sat Oct 29 13:26:41 2005 => File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aim peak mags poll\IntraFlap.exe tagged as "not-a-virus:AdWare.Win32.Lop.ab". Action Taken: No Action Taken. 2: Sat Oct 29 13:26:42 2005 => File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aim peak mags poll\longbeep.exe tagged as "not-a-virus:AdWare.Win32.Lop.ad". Action Taken: No Action Taken. 3: Sat Oct 29 13:26:43 2005 => File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aim peak mags poll\MFCD REF.exe tagged as "not-a-virus:AdWare.Win32.Lop.z". Action Taken: No Action Taken. 4: Sat Oct 29 13:26:43 2005 => File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aim peak mags poll\oozefrag.exe tagged as "not-a-virus:AdWare.Win32.Lop.p". Action Taken: No Action Taken. 5: Sat Oct 29 13:26:44 2005 => File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aim peak mags poll\Plus lies.exe tagged as "not-a-virus:AdWare.Win32.Lop.z". Action Taken: No Action Taken. 6: Sat Oct 29 13:26:45 2005 => File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aim peak mags poll\SECT 64.exe tagged as "not-a-virus:AdWare.Win32.Lop.p". Action Taken: No Action Taken. 7: Sat Oct 29 13:26:46 2005 => File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aim peak mags poll\TRANS ERROR.exe tagged as "not-a-virus:AdWare.Win32.Lop.ab". Action Taken: No Action Taken. 8: Sat Oct 29 14:21:19 2005 => File C:\Dokumente und Einstellungen\Christoph\Eigene Dateien\mirc616\32.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken. 9: Sat Oct 29 14:21:20 2005 => File C:\Dokumente und Einstellungen\Christoph\Eigene Dateien\mirc616.zip tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken. 10: Sat Oct 29 14:36:57 2005 => File C:\mIRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken. 11: Sat Oct 29 15:05:05 2005 => File C:\RECYCLER\S-1-5-21-746137067-413027322-839522115-1005\Dc1\cnucrxcp.exe tagged as "not-a-virus:AdWare.Win32.Lop.ab". Action Taken: No Action Taken. 12: Sat Oct 29 15:05:06 2005 => File C:\RECYCLER\S-1-5-21-746137067-413027322-839522115-1005\Dc1\grfnxgce.exe tagged as "not-a-virus:AdWare.Win32.Lop.z". Action Taken: No Action Taken. 13: Sat Oct 29 15:05:06 2005 => File C:\RECYCLER\S-1-5-21-746137067-413027322-839522115-1005\Dc1\hngcawqy.exe tagged as "not-a-virus:AdWare.Win32.Lop.ab". Action Taken: No Action Taken. 14: Sat Oct 29 15:05:07 2005 => File C:\RECYCLER\S-1-5-21-746137067-413027322-839522115-1005\Dc1\jkoyrong.exe tagged as "not-a-virus:AdWare.Win32.Lop.ad". Action Taken: No Action Taken. 15: Sat Oct 29 15:05:08 2005 => File C:\RECYCLER\S-1-5-21-746137067-413027322-839522115-1005\Dc1\pjwuewek.exe tagged as "not-a-virus:AdWare.Win32.Lop.p". Action Taken: No Action Taken. 16: Sat Oct 29 15:05:08 2005 => File C:\RECYCLER\S-1-5-21-746137067-413027322-839522115-1005\Dc1\shjidrqm.exe tagged as "not-a-virus:AdWare.Win32.Lop.p". Action Taken: No Action Taken. 17: Sat Oct 29 15:05:08 2005 => File C:\RECYCLER\S-1-5-21-746137067-413027322-839522115-1005\Dc1\tqvpctbv.exe tagged as "not-a-virus:AdWare.Win32.Lop.ad". Action Taken: No Action Taken. 18: Sat Oct 29 15:06:26 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP61\A0123106.exe tagged as "not-a-virus:AdWare.Win32.SaveNow.z". Action Taken: No Action Taken. 19: Sat Oct 29 15:06:27 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP61\A0124132.exe tagged as "not-a-virus:AdWare.Win32.SaveNow.z". Action Taken: No Action Taken. 20: Sat Oct 29 15:06:48 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP66\A0126557.exe tagged as not-a-virus:Server-Proxy.Win32.Hltv. No Action Taken. 21: Sat Oct 29 15:09:12 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP73\A0136803.exe tagged as "not-a-virus:AdWare.Win32.SaveNow.z". Action Taken: No Action Taken. 22: Sat Oct 29 15:10:05 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0141308.exe tagged as "not-a-virus:AdWare.Win32.SaveNow.z". Action Taken: No Action Taken. 23: Sat Oct 29 15:10:32 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0146477.exe tagged as "not-a-virus:AdWare.Win32.SaveNow.z". Action Taken: No Action Taken. 24: Sat Oct 29 15:10:32 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0146484.exe tagged as "not-a-virus:AdWare.Win32.Lop.ad". Action Taken: No Action Taken. 25: Sat Oct 29 15:10:40 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147507.exe tagged as "not-a-virus:AdWare.Win32.Lop.z". Action Taken: No Action Taken. 26: Sat Oct 29 15:10:43 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147526.exe tagged as "not-a-virus:AdWare.Win32.Lop.ad". Action Taken: No Action Taken. 27: Sat Oct 29 15:10:44 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147529.exe tagged as "not-a-virus:AdWare.Win32.Lop.z". Action Taken: No Action Taken. 28: Sat Oct 29 15:10:47 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147600.exe tagged as "not-a-virus:AdWare.Win32.SaveNow.z". Action Taken: No Action Taken. 29: Sat Oct 29 15:10:51 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147691.exe tagged as "not-a-virus:AdWare.Win32.Lop.ab". Action Taken: No Action Taken. 30: Sat Oct 29 15:10:51 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147693.exe tagged as "not-a-virus:AdWare.Win32.Lop.z". Action Taken: No Action Taken. 31: Sat Oct 29 15:10:52 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147695.exe tagged as "not-a-virus:AdWare.Win32.Lop.ab". Action Taken: No Action Taken. 32: Sat Oct 29 15:10:52 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147696.exe tagged as "not-a-virus:AdWare.Win32.Lop.ab". Action Taken: No Action Taken. 33: Sat Oct 29 15:10:52 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147697.exe tagged as "not-a-virus:AdWare.Win32.Lop.ad". Action Taken: No Action Taken. 34: Sat Oct 29 15:10:53 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147701.exe tagged as "not-a-virus:AdWare.Win32.Lop.ad". Action Taken: No Action Taken. 35: Sat Oct 29 15:10:53 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147702.exe tagged as "not-a-virus:AdWare.Win32.Lop.z". Action Taken: No Action Taken. 36: Sat Oct 29 15:10:54 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147704.exe tagged as "not-a-virus:AdWare.Win32.Lop.p". Action Taken: No Action Taken. 37: Sat Oct 29 15:10:54 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147705.exe tagged as "not-a-virus:AdWare.Win32.Lop.p". Action Taken: No Action Taken. 38: Sat Oct 29 15:10:54 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147706.exe tagged as "not-a-virus:AdWare.Win32.Lop.z". Action Taken: No Action Taken. 39: Sat Oct 29 15:10:55 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147708.exe tagged as "not-a-virus:AdWare.Win32.Lop.p". Action Taken: No Action Taken. 40: Sat Oct 29 15:10:55 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147709.exe tagged as "not-a-virus:AdWare.Win32.Lop.p". Action Taken: No Action Taken. 41: Sat Oct 29 15:10:55 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147710.exe tagged as "not-a-virus:AdWare.Win32.Lop.ad". Action Taken: No Action Taken. 42: Sat Oct 29 15:10:56 2005 => File C:\System Volume Information\_restore{1D19702F-AB42-4EA1-9FBB-74E6D8614BF9}\RP75\A0147711.exe tagged as "not-a-virus:AdWare.Win32.Lop.ab". Action Taken: No Action Taken. -------------------------------------------------- --------------------- ERRORS --------------------- -------------------------------------------------- 1: Sat Oct 29 13:19:34 2005 => ERROR!!! Invalid Entry LDM = C:\Programme\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Run). No Action Taken. 2: Sat Oct 29 13:19:39 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\Christoph\Desktop\Crescent.ace is Not Scanned 3: Sat Oct 29 13:19:46 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\Christoph\Desktop\Neuer Ordner\c.rar is Not Scanned 4: Sat Oct 29 13:19:46 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\Christoph\Desktop\Neuer Ordner\Doak.rar is Not Scanned 5: Sat Oct 29 13:19:47 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\Christoph\Desktop\Neuer Ordner\Fttf.rar is Not Scanned 6: Sat Oct 29 13:19:49 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\Christoph\Desktop\Neuer Ordner\Sksd.rar is Not Scanned 7: Sat Oct 29 13:19:49 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\Christoph\Desktop\Neuer Ordner\Txf.rar is Not Scanned 8: Sat Oct 29 13:20:08 2005 => ERROR!!! Invalid Entry \??\C:\DOKUME~1\CHRIST~1\LOKALE~1\Temp\kbeepm.sys in SYSTEM\CurrentControlSet\Services\kbeepm... 9: Sat Oct 29 13:20:14 2005 => ERROR!!! Invalid Entry \??\C:\Programme\SiSoftware\SiSoftware Sandra Lite 2005.SR2a\Sandra.sys in SYSTEM\CurrentControlSet\Services\SANDRA... 10: Sat Oct 29 13:20:14 2005 => ERROR!!! Invalid Entry C:\Programme\SiSoftware\SiSoftware Sandra Lite 2005.SR2a\RpcDataSrv.exe in SYSTEM\CurrentControlSet\Services\SandraDataSrv... 11: Sat Oct 29 13:20:14 2005 => ERROR!!! Invalid Entry C:\Programme\SiSoftware\SiSoftware Sandra Lite 2005.SR2a\RpcSandraSrv.exe in SYSTEM\CurrentControlSet\Services\SandraTheSrv... 12: Sat Oct 29 13:21:05 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\Help\UWLogo.bmp". Action Taken: No Action Taken. 13: Sat Oct 29 13:21:05 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\Maps\Entry.aao". Action Taken: No Action Taken. 14: Sat Oct 29 13:21:05 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\Sounds\S-Aircraft.uax". Action Taken: No Action Taken. 15: Sat Oct 29 13:21:05 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\Packages.MD5". Action Taken: No Action Taken. 16: Sat Oct 29 13:21:05 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\Textures\Coronas.utx". Action Taken: No Action Taken. 17: Sat Oct 29 13:21:05 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\AGP.dll". Action Taken: No Action Taken. 18: Sat Oct 29 13:21:05 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\ALAudio.dll". Action Taken: No Action Taken. 19: Sat Oct 29 13:21:05 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\Core.dll". Action Taken: No Action Taken. 20: Sat Oct 29 13:21:05 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\D3DDrv.dll". Action Taken: No Action Taken. 21: Sat Oct 29 13:21:05 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\Editor.dll". Action Taken: No Action Taken. 22: Sat Oct 29 13:21:05 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\Engine.dll". Action Taken: No Action Taken. 23: Sat Oct 29 13:21:05 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\Fire.dll". Action Taken: No Action Taken. 24: Sat Oct 29 13:21:05 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\IpDrv.dll". Action Taken: No Action Taken. 25: Sat Oct 29 13:21:05 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\ogg.dll". Action Taken: No Action Taken. 26: Sat Oct 29 13:21:05 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\vorbis.dll". Action Taken: No Action Taken. 27: Sat Oct 29 13:21:05 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\vorbisfile.dll". Action Taken: No Action Taken. 28: Sat Oct 29 13:21:05 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\Window.dll". Action Taken: No Action Taken. 29: Sat Oct 29 13:21:05 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\WinDrv.dll". Action Taken: No Action Taken. 30: Sat Oct 29 13:21:05 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\ArmyOps.exe". Action Taken: No Action Taken. 31: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\AGP_Utils.dll". Action Taken: No Action Taken. 32: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\StaticMeshes\M-attachments.usx". Action Taken: No Action Taken. 33: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\Server.exe". Action Taken: No Action Taken. 34: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\defOpenAL32.dll". Action Taken: No Action Taken. 35: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\Animations\A-charactersCiv.ukx". Action Taken: No Action Taken. 36: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\XInterface.dll". Action Taken: No Action Taken. 37: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\descriptions\Mod_Acog_4x.txt". Action Taken: No Action Taken. 38: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\pb\pbcls.dll". Action Taken: No Action Taken. 39: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\Briefings\10_history.txt". Action Taken: No Action Taken. 40: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\ImpersonatorLib_rd.dll". Action Taken: No Action Taken. 41: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\pb\pbag.dll". Action Taken: No Action Taken. 42: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\pb\pbcl.dll". Action Taken: No Action Taken. 43: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\pb\pbsv.dll". Action Taken: No Action Taken. 44: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\pb\pbags.dll". Action Taken: No Action Taken. 45: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\AGP_Interface.u". Action Taken: No Action Taken. 46: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\SeeMePlayMe.exe". Action Taken: No Action Taken. 47: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\ArcadeInstallARMYGAME14d.EXE". Action Taken: No Action Taken. 48: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\xfire_installer_12482.exe". Action Taken: No Action Taken. 49: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\AASMInstaller.msi". Action Taken: No Action Taken. 50: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\Sounds\S-Talking.uax". Action Taken: No Action Taken. 51: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\IFC23.DLL". Action Taken: No Action Taken. 52: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\AGP_Interface.dll". Action Taken: No Action Taken. 53: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\pb\pbweb.exe". Action Taken: No Action Taken. 54: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\AGP_Vehicles.dll". Action Taken: No Action Taken. 55: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\dbghelp.dll". Action Taken: No Action Taken. 56: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\SpeedTreeRT.DLL". Action Taken: No Action Taken. 57: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\System\Videos\SF_A-Team_Videos.exe". Action Taken: No Action Taken. 58: Sat Oct 29 13:21:06 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\America's Army\AASM 1-1 Setup.exe". Action Taken: No Action Taken. 59: Sat Oct 29 13:21:07 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\System32\MSIMRT.DLL". Action Taken: No Action Taken. 60: Sat Oct 29 13:21:08 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\System32\MSIMRT16.DLL". Action Taken: No Action Taken. 61: Sat Oct 29 13:21:08 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\System32\MSIMRT32.DLL". Action Taken: No Action Taken. 62: Sat Oct 29 13:21:08 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\System32\MSIMUSIC.DLL". Action Taken: No Action Taken. 63: Sat Oct 29 13:21:08 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\System32\pxsfs.dll". Action Taken: No Action Taken. 64: Sat Oct 29 13:21:08 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\01\Intel32\iKernel.dll". Action Taken: No Action Taken. 65: Sat Oct 29 13:21:08 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\01\Intel32\Setup.dll". Action Taken: No Action Taken. 66: Sat Oct 29 13:21:08 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\01\Intel32\iscript.dll". Action Taken: No Action Taken. 67: Sat Oct 29 13:21:08 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\01\Intel32\ctor.dll". Action Taken: No Action Taken. 68: Sat Oct 29 13:21:08 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\01\Intel32\iuser.dll". Action Taken: No Action Taken. 69: Sat Oct 29 13:21:08 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\InstallShield\Professional\RunTime\10\01\Intel32\IGDI.dll". Action Taken: No Action Taken. 70: Sat Oct 29 13:21:08 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\NeroCoverDesigner_fra.chm". Action Taken: No Action Taken. 71: Sat Oct 29 13:21:09 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-deu.nls". Action Taken: No Action Taken. 72: Sat Oct 29 13:21:09 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-jpn.nls". Action Taken: No Action Taken. 73: Sat Oct 29 13:21:09 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Deu.nls". Action Taken: No Action Taken. 74: Sat Oct 29 13:21:09 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\NeroBackItUp_Fra.chm". Action Taken: No Action Taken. 75: Sat Oct 29 13:21:09 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero StartSmart\NeroStartSmart_deu.chm". Action Taken: No Action Taken. 76: Sat Oct 29 13:21:09 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero StartSmart\NeroStartSmart_fra.chm". Action Taken: No Action Taken. 77: Sat Oct 29 13:21:09 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero StartSmart\NeroStartSmart_jpn.chm". Action Taken: No Action Taken. 78: Sat Oct 29 13:21:09 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Jpn.nls". Action Taken: No Action Taken. 79: Sat Oct 29 13:21:09 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Adobe\Photoshop Album\Kataloge\My Catalog.psa". Action Taken: No Action Taken. 80: Sat Oct 29 13:21:09 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\442.exe" refers to invalid object "C:\Programme\SCi Games\442 - Fussball Manager\442.exe". Action Taken: No Action Taken. 81: Sat Oct 29 13:21:09 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\BF1942.exe" refers to invalid object "C:\Programme\EA GAMES\Battlefield 1942\Mods\XPack2\BF1942.exe". Action Taken: No Action Taken. 82: Sat Oct 29 13:21:09 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\HijackThis.exe" refers to invalid object "C:\DOKUME~1\CHRIST~1\LOKALE~1\Temp\Rar$EX00.906\hijackthis.exe". Action Taken: No Action Taken. 83: Sat Oct 29 13:21:10 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\yourapp.Exe" refers to invalid object "C:\Programme\ZOO Digital Publishing\Psi Ops\YourApp.exe". Action Taken: No Action Taken. 84: Sat Oct 29 13:21:10 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\". Action Taken: No Action Taken. 85: Sat Oct 29 13:21:10 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\Briefings\". Action Taken: No Action Taken. 86: Sat Oct 29 13:21:10 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\System\". Action Taken: No Action Taken. 87: Sat Oct 29 13:21:10 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\Demos\". Action Taken: No Action Taken. 88: Sat Oct 29 13:21:10 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\System\pb\". Action Taken: No Action Taken. 89: Sat Oct 29 13:21:10 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\Maps\". Action Taken: No Action Taken. 90: Sat Oct 29 13:21:10 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\System\Videos\". Action Taken: No Action Taken. 91: Sat Oct 29 13:21:10 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\Help\". Action Taken: No Action Taken. 92: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\StaticMeshes\". Action Taken: No Action Taken. 93: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\Animations\". Action Taken: No Action Taken. 94: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\Textures\". Action Taken: No Action Taken. 95: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\Sounds\". Action Taken: No Action Taken. 96: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\System\Config\". Action Taken: No Action Taken. 97: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\System\save\". Action Taken: No Action Taken. 98: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\System\descriptions\". Action Taken: No Action Taken. 99: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\System\pb\htm\". Action Taken: No Action Taken. 100: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\System\lipsincdata\Controllers\". Action Taken: No Action Taken. 101: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\System\lipsincdata\". Action Taken: No Action Taken. 102: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\System\lipsincdata\Mappings\". Action Taken: No Action Taken. 103: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\Music\". Action Taken: No Action Taken. 104: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\Movies\". Action Taken: No Action Taken. 105: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army\KarmaData\". Action Taken: No Action Taken. 106: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\America's Army\". Action Taken: No Action Taken. 107: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army Server Manager\". Action Taken: No Action Taken. 108: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\America's Army Server Manager\LeagueInfo\". Action Taken: No Action Taken. 109: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\America's Army Server Manager\". Action Taken: No Action Taken. 110: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\". Action Taken: No Action Taken. 111: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\". Action Taken: No Action Taken. 112: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Badges\". Action Taken: No Action Taken. 113: Sat Oct 29 13:21:11 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Banners\". Action Taken: No Action Taken. 114: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Data\". Action Taken: No Action Taken. 115: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\". Action Taken: No Action Taken. 116: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Data\". Action Taken: No Action Taken. 117: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\". Action Taken: No Action Taken. 118: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Data\". Action Taken: No Action Taken. 119: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\". Action Taken: No Action Taken. 120: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\". Action Taken: No Action Taken. 121: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\". Action Taken: No Action Taken. 122: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\". Action Taken: No Action Taken. 123: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Logfiles\". Action Taken: No Action Taken. 124: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Movies\". Action Taken: No Action Taken. 125: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Patch\". Action Taken: No Action Taken. 126: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Playback\". Action Taken: No Action Taken. 127: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Profiles\". Action Taken: No Action Taken. 128: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\ScreenShots\". Action Taken: No Action Taken. 129: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Stats\". Action Taken: No Action Taken. 130: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\Chinese\". Action Taken: No Action Taken. 131: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\Czech\". Action Taken: No Action Taken. 132: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\English\". Action Taken: No Action Taken. 133: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\English_Chinese\". Action Taken: No Action Taken. 134: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\French\". Action Taken: No Action Taken. 135: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\Italian\". Action Taken: No Action Taken. 136: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\Korean\". Action Taken: No Action Taken. 137: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\Korean adult\". Action Taken: No Action Taken. 138: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\Polish\". Action Taken: No Action Taken. 139: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\Russian\". Action Taken: No Action Taken. 140: Sat Oct 29 13:21:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\Slovak\". Action Taken: No Action Taken. 141: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\Spanish\". Action Taken: No Action Taken. 142: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\Chinese\". Action Taken: No Action Taken. 143: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\Czech\". Action Taken: No Action Taken. 144: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\English\". Action Taken: No Action Taken. 145: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\English_Chinese\". Action Taken: No Action Taken. 146: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\French\". Action Taken: No Action Taken. 147: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\Italian\". Action Taken: No Action Taken. 148: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\Korean\". Action Taken: No Action Taken. 149: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\Korean adult\". Action Taken: No Action Taken. 150: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\Polish\". Action Taken: No Action Taken. 151: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\Russian\". Action Taken: No Action Taken. 152: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\Slovak\". Action Taken: No Action Taken. 153: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\Spanish\". Action Taken: No Action Taken. 154: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\Chinese\". Action Taken: No Action Taken. 155: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\Czech\". Action Taken: No Action Taken. 156: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\English\". Action Taken: No Action Taken. 157: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\English_Chinese\". Action Taken: No Action Taken. 158: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\French\". Action Taken: No Action Taken. 159: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\Italian\". Action Taken: No Action Taken. 160: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\Korean\". Action Taken: No Action Taken. 161: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\Korean adult\". Action Taken: No Action Taken. 162: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\Polish\". Action Taken: No Action Taken. 163: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\Russian\". Action Taken: No Action Taken. 164: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\Slovak\". Action Taken: No Action Taken. 165: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\Spanish\". Action Taken: No Action Taken. 166: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Chinese\". Action Taken: No Action Taken. 167: Sat Oct 29 13:21:13 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\". Action Taken: No Action Taken. 168: Sat Oct 29 13:21:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Czech\". Action Taken: No Action Taken. 169: Sat Oct 29 13:21:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\English\". Action Taken: No Action Taken. 170: Sat Oct 29 13:21:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\English_Chinese\". Action Taken: No Action Taken. 171: Sat Oct 29 13:21:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\French\". Action Taken: No Action Taken. 172: Sat Oct 29 13:21:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Italian\". Action Taken: No Action Taken. 173: Sat Oct 29 13:21:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Korean\". Action Taken: No Action Taken. 174: Sat Oct 29 13:21:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Korean adult\". Action Taken: No Action Taken. 175: Sat Oct 29 13:21:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Polish\". Action Taken: No Action Taken. 176: Sat Oct 29 13:21:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Russian\". Action Taken: No Action Taken. 177: Sat Oct 29 13:21:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Slovak\". Action Taken: No Action Taken. 178: Sat Oct 29 13:21:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Spanish\". Action Taken: No Action Taken. 179: Sat Oct 29 13:21:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Movies\". Action Taken: No Action Taken. 180: Sat Oct 29 13:21:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Engine\Locale\German\". Action Taken: No Action Taken. 181: Sat Oct 29 13:21:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\GraphicsOptions\Locale\German\". Action Taken: No Action Taken. 182: Sat Oct 29 13:21:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Locale\German\". Action Taken: No Action Taken. 183: Sat Oct 29 13:21:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Locale\German\". Action Taken: No Action Taken. 184: Sat Oct 29 13:21:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\Locale\". Action Taken: No Action Taken. 185: Sat Oct 29 13:21:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\BugReport\German\". Action Taken: No Action Taken. 186: Sat Oct 29 13:21:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\Drivers\". Action Taken: No Action Taken. 187: Sat Oct 29 13:21:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\THQ\Dawn of War\W40k\Movies\DOWMissions\". Action Taken: No Action Taken. 188: Sat Oct 29 13:21:15 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\The Kreed (de)\". Action Taken: No Action Taken. 189: Sat Oct 29 13:21:15 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\The Kreed (de)\saves\". Action Taken: No Action Taken. 190: Sat Oct 29 13:21:17 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".016". Action Taken: No Action Taken. 191: Sat Oct 29 13:21:17 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".bak". Action Taken: No Action Taken. 192: Sat Oct 29 13:21:18 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".info". Action Taken: No Action Taken. 193: Sat Oct 29 13:21:18 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".MCO". Action Taken: No Action Taken. 194: Sat Oct 29 13:21:18 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".mdf". Action Taken: No Action Taken. 195: Sat Oct 29 13:21:18 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".mdmp". Action Taken: No Action Taken. 196: Sat Oct 29 13:21:18 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".mds". Action Taken: No Action Taken. 197: Sat Oct 29 13:21:18 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".script". Action Taken: No Action Taken. 198: Sat Oct 29 13:21:18 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".sec". Action Taken: No Action Taken. 199: Sat Oct 29 13:21:18 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".sfd". Action Taken: No Action Taken. 200: Sat Oct 29 13:21:18 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".sps". Action Taken: No Action Taken. 201: Sat Oct 29 13:21:18 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".utx". Action Taken: No Action Taken. 202: Sat Oct 29 13:21:18 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".vcd". Action Taken: No Action Taken. 203: Sat Oct 29 13:21:18 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".w32". Action Taken: No Action Taken. 204: Sat Oct 29 13:21:18 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Anti-Blaxx_is1". Action Taken: No Action Taken. 205: Sat Oct 29 13:21:18 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "BearShare". Action Taken: No Action Taken. 206: Sat Oct 29 13:21:19 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "BrothersInArms". Action Taken: No Action Taken. 207: Sat Oct 29 13:21:19 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Mozilla Firefox (1.0.4)". Action Taken: No Action Taken. 208: Sat Oct 29 13:21:19 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Mozilla Firefox (1.0.6)". Action Taken: No Action Taken. 209: Sat Oct 29 13:21:19 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{61249874-492D-4028-AAA4-939F15D162E5}". Action Taken: No Action Taken. 210: Sat Oct 29 13:21:19 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{8BECF123-B0EF-4E51-B7F3-923EFE15CC4A}". Action Taken: No Action Taken. 211: Sat Oct 29 13:21:19 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{ABEB838C-A1A7-4C5D-B7E1-8B4314600813}". Action Taken: No Action Taken. 212: Sat Oct 29 13:21:19 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{D992240F-649B-4DF7-8EC5-323D59ACC18B}". Action Taken: No Action Taken. 213: Sat Oct 29 13:21:19 2005 => Entry "HKCR\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}" refers to invalid object "C:\WINDOWS\System32\xvid.ax". Action Taken: No Action Taken. 214: Sat Oct 29 13:21:21 2005 => Entry "HKCR\CLS |
|
|
|
|
29.10.2005, 15:34
Member
Beiträge: 4730 |
#10
Papierkorb leeren! Systemwiederherstellung deaktivieren (Systemsteuerun -> System -> Systemwiederherstellung).
Dann gehe in den abgesicherten Modus und Lösche dort den Ordner C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aim peak mags poll\ Spybot S&D ausführen und alle gefundenen Probleme damit beheben. Danach poste ein erneutes HJT-Log. __________ Dies ist eine Signatur! Persönlicher Service: Du kommst aus Berlin? Dann melde Dich per PN bei mir, evtl. können wir einen Termin vereinbaren. Der Grabsteinschubser |
|
|
|
|
29.10.2005, 16:52
Member
Themenstarter Beiträge: 11 |
#11
Jo oka alles gemacht
EDIT:Bis auf spybot -.- sry ... ich werden den post nachher aktualisieren Mein HJT-Log: Logfile of HijackThis v1.99.1 Scan saved at 17:17:24, on 29.10.2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Programme\Gemeinsame Dateien\AOL\ACS\AOLAcsd.exe C:\WINDOWS\Explorer.EXE C:\Programme\Alwil Software\Avast4\aswUpdSv.exe C:\Programme\Alwil Software\Avast4\ashServ.exe C:\Programme\ewido\security suite\ewidoctrl.exe C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\Programme\Java\jre1.5.0_02\bin\jusched.exe C:\WINDOWS\SOUNDMAN.EXE C:\Programme\Alcatel\SpeedTouch USB\Dragdiag.exe C:\Programme\Alwil Software\Avast4\ashWebSv.exe C:\Programme\Gemeinsame Dateien\AOL\ACS\AOLDial.exe C:\Programme\Alwil Software\Avast4\ashMaiSv.exe C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe C:\Programme\Gemeinsame Dateien\Logitech\QCDriver3\LVCOMS.EXE C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe C:\Programme\Logitech\ImageStudio\LogiTray.exe C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe C:\Programme\QuickTime\qttask.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Programme\ICQLite\ICQLite.exe C:\Programme\Winamp\winampa.exe C:\WINDOWS\System32\RUNDLL32.EXE C:\Programme\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe C:\WINDOWS\System32\ctfmon.exe C:\Programme\MSN Messenger\msnmsgr.exe C:\Programme\Spybot - Search & Destroy\TeaTimer.exe C:\Programme\Outlook Express\msimn.exe C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\Dokumente und Einstellungen\Christoph\Eigene Dateien\Eigene Musik\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_02\bin\jusched.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Programme\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon O4 - HKLM\..\Run: [AOLDialer] C:\Programme\Gemeinsame Dateien\AOL\ACS\AOLDial.exe O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe O4 - HKLM\..\Run: [CleanIt] C:\Programme\CleanIt\cleanit.exe O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [LVCOMS] C:\Programme\Gemeinsame Dateien\Logitech\QCDriver3\LVCOMS.EXE O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Programme\Logitech\ImageStudio\ISStart.exe O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Programme\Logitech\ImageStudio\LogiTray.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -minimize O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [WinampAgent] C:\Programme\Winamp\winampa.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Programme\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [Steam] "c:\programme\steam\steam.exe" -silent O4 - HKCU\..\Run: [LDM] C:\Programme\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Programme\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -trayboot O4 - Startup: Xfire.lnk = C:\Programme\Xfire\Xfire.exe O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: AOL 9.0 Tray-Symbol.lnk = C:\Programme\AOL 9.0\aoltray.exe O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Programme\ICQToolbar\toolbaru.dll/SEARCH.HTML O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{D2476AEE-4952-4A23-871D-4969F3FD58E0}: NameServer = 205.188.146.145 O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\Programme\Gemeinsame Dateien\AOL\ACS\AOLAcsd.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Programme\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Programme\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Programme\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Programme\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: ewido security suite control - ewido networks - C:\Programme\ewido\security suite\ewidoctrl.exe O23 - Service: Macromedia Licensing Service - Macromedia - C:\Programme\Gemeinsame Dateien\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: McAfee.com Personal Firewall Service (MpfService) - McAfee.com Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Sandra Data Service (SandraDataSrv) - Unknown owner - C:\Programme\SiSoftware\SiSoftware Sandra Lite 2005.SR2a\RpcDataSrv.exe (file missing) O23 - Service: Sandra Service (SandraTheSrv) - Unknown owner - C:\Programme\SiSoftware\SiSoftware Sandra Lite 2005.SR2a\RpcSandraSrv.exe (file missing) Dieser Beitrag wurde am 29.10.2005 um 17:13 Uhr von Chrissi623 editiert.
|
|
|
|
|
29.10.2005, 16:58
Member
Beiträge: 4730 |
#12
Joar, sieht alles gut aus
Wie sieht's mit Deinem Problem aus? Wenn der IE (den Du, außer für die WindowsUpdates, nicht nutzen solltest, sondern lieber einen alternativen Browser wie Firefox) immer noch keine Seiten aufrufen möchte, schaue mal nach, ob er durch Deine Firewall blockiert wird. Außerdem slltest Du WindowsUpdate mal durchführen und alle verfügbaren Updates installieren. Nachtrag: Ok, da kommt wohl gleich noch was hinterher? __________ Dies ist eine Signatur! Persönlicher Service: Du kommst aus Berlin? Dann melde Dich per PN bei mir, evtl. können wir einen Termin vereinbaren. Der Grabsteinschubser |
|
|
|
|
29.10.2005, 17:21
Member
Themenstarter Beiträge: 11 |
#13
Ja ich habe meine log aktualisiert .. Spybor hat 60 probleme gefunden und gelöst
mein log steht nun oben... mein INet explorer benutze ich dann net ... hab SP1 drauf ... soll ich bei SP1 bleiben oder sollt ich SP2 oder Sp3 drauf machen? und danke .. meine firewall hat den echt blockiert .. naja hät ich den post net öffnen müssen, aber war dann doch besser ^^ hat sich ja rausgestellt das ich mehr als nur dieses problem hatte danke für deine hilfeEDIT: was soll ich machen .. irgendwie funzt windowas-update nicht .. ***EDIT2:*** Hat sich erledigt funzt .. naja dann habsch ja alles geschaft was ich wollte danke dir diese schritte hab ich gemacht (funzt aber net): Die Site kann den Vorgang nicht fortsetzen, da mindestens einer der folgenden Windows-Dienste nicht ausgeführt wird: Automatische Updates (Mit diesem Dienst kann die Site wichtige Updates für Ihren Computer suchen, downloaden und installieren.) Intelligenter Hintergrundübertragungsdienst (BITS) (Mit diesem Dienst können Updates schneller und auch bei Unterbrechung der Verbindung problemlos gedownloadet werden.) Ereignisprotokoll (Mit diesem Dienst werden die Updateaktivitäten protokolliert, um bei Bedarf die Problembehandlung zu erleichtern.) So stellen Sie sicher, dass diese Dienste ausgeführt werden 1. Klicken Sie auf Start und dann auf Ausführen. 2. Geben Sie services.msc ein, und klicken Sie auf OK. 3. Doppelklicken Sie in der Liste der Dienste auf Automatische Updates, und klicken Sie dann auf Eigenschaften. 4. Wählen Sie in der Liste Starttyp die Option Automatisch, und klicken Sie auf Übernehmen. 5. Stellen Sie sicher, dass Gestartet als Dienststatus angezeigt wird. Wenn der Dienstatus Beendet ist, klicken Sie auf Starten. 6. Doppelklicken Sie in der Liste der Dienste auf Intelligenter Hintergrundübertragungsdienst, und klicken Sie dann auf Eigenschaften. 7. Wählen Sie in der Liste Starttyp die Option Manuell, und klicken Sie auf Übernehmen. 8. Stellen Sie sicher, dass der Dienststatus Gestartet lautet. Wenn der Dienstatus Beendet ist, klicken Sie auf Starten. 9. Doppelklicken Sie in der Liste der Dienste auf Ereignisprotokoll, und klicken Sie dann auf Eigenschaften. 10. Wählen Sie in der Liste Starttyp die Option Automatisch, und klicken Sie auf Übernehmen. 11. Stellen Sie sicher, dass der Dienststatus Gestartet lautet. Wenn der Dienstatus Beendet ist, klicken Sie auf Starten. Dieser Beitrag wurde am 29.10.2005 um 17:42 Uhr von Chrissi623 editiert.
|
|
|
|
|
30.10.2005, 18:37
Ehrenmitglied
 Beiträge: 29434 |
#14
Chrissi623
Start -- alle Programme -- Zubehör -- Editor und kopiere folgenden Text rein: dir %Windir%\tasks /a h > files.txt notepad files.txt - Speichern als: findjobs.bat - abspeichern unter : Dateityp: alle Dateien - speichere auf dem Desktop - Locate findjobs.bat-- doppelklick auf die bat-Datei , der Editor öffnet sich -- poste den Text __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
30.10.2005, 18:43
Member
Themenstarter Beiträge: 11 |
#15
Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: C06C-9847 Verzeichnis von C:\WINDOWS\tasks 28.08.2005 03:22 <DIR> . 28.08.2005 03:22 <DIR> .. 02.04.2003 13:00 65 desktop.ini 28.08.2005 03:22 274 E09B26FE94ECEABE.job 24.05.2005 14:57 6 SA.DAT 3 Datei(en) 345 Bytes Verzeichnis von C:\Dokumente und Einstellungen\Christoph\Desktop |
|
|
|
Um auf dieses Thema zu ANTWORTEN
bitte erst » hier kostenlos registrieren!!
bitte erst » hier kostenlos registrieren!!
Folgende Themen könnten Dich auch interessieren:
Copyright © 2024, Protecus.de - Protecus Team - Impressum / Mediadaten
Was ich denke is das irgend nen virus auf meiner platte ist der des blockiert oder so! ich habe mal HiJackThis drüber laufen lassen.
und es wird ein komischer und sehr langer link angezeigt Wie folgt: http://www.cesexoalkuggimy.net/ABkCLDymyxEX6VkSofHVSSX8CjVifCesTsiMSJoCNyE.html
Hier Mal Die LogFile:
Logfile of HijackThis v1.99.1
Scan saved at 15:14:45, on 20.10.2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Gemeinsame Dateien\AOL\ACS\AOLAcsd.exe
C:\Programme\Alwil Software\Avast4\aswUpdSv.exe
C:\Programme\Alwil Software\Avast4\ashServ.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Alwil Software\Avast4\ashWebSv.exe
C:\Programme\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\Java\jre1.5.0_02\bin\jusched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Programme\Alcatel\SpeedTouch USB\Dragdiag.exe
C:\Programme\Gemeinsame Dateien\AOL\ACS\AOLDial.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\Programme\Gemeinsame Dateien\Logitech\QCDriver3\LVCOMS.EXE
C:\Programme\Logitech\ImageStudio\LogiTray.exe
C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
C:\Programme\QuickTime\qttask.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Programme\MessengerPlus! 3\MsgPlus.exe
C:\Programme\ICQLite\ICQLite.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Programme\Winamp\winampa.exe
C:\Programme\VVSN\VVSN.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\Programme\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Programme\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\PROGRA~1\MSNMES~1\msnmsgr.exe
C:\Programme\Xfire\Xfire.exe
C:\Programme\Teamspeak2_RC2\TeamSpeak.exe
C:\Programme\Steam\Steam.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\Dokumente und Einstellungen\Christoph\Eigene Dateien\Eigene Musik\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cesexoalkuggimy.net/ABkCLDymyxEX6VkSofHVSSX8CjVifCesTsiMSJoCNyE.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {6D933955-8E63-EF63-B616-2DC29155E570} - C:\DOKUME~1\CHRIST~1\ANWEND~1\ANTIPL~1\build fork.exe
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Programme\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [AOLDialer] C:\Programme\Gemeinsame Dateien\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [CleanIt] C:\Programme\CleanIt\cleanit.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [LVCOMS] C:\Programme\Gemeinsame Dateien\Logitech\QCDriver3\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Programme\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Programme\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Programme\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -minimize
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [BearShare] "C:\Programme\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [Magspollblehbalm] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aim peak mags poll\user aim.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Programme\Winamp\winampa.exe
O4 - HKLM\..\Run: [Anti-Blaxx Manager] C:\Programme\Anti-Blaxx\Anti-Blaxx.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Programme\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] "c:\programme\steam\steam.exe" -silent
O4 - HKCU\..\Run: [LDM] C:\Programme\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [Film Curb] C:\DOKUME~1\CHRIST~1\ANWEND~1\FRAGAC~1\Tons Okay Mail.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Programme\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\MSNMES~1\msnmsgr.exe" /background
O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -trayboot
O4 - Startup: Xfire.lnk = C:\Programme\Xfire\Xfire.exe
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: AOL 9.0 Tray-Symbol.lnk = C:\Programme\AOL 9.0\aoltray.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Programme\ICQToolbar\toolbaru.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {14F65762-96FB-44B9-8DAC-93845F377A0E} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/de/filesharingctrl.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://arcade.icq.com/carlo/zuma/popcaploader_v5.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{6AA146BE-A73E-4C57-86E0-94F36D51008F}: NameServer = 222.222.222.222,222.222.222.221
O17 - HKLM\System\CCS\Services\Tcpip\..\{D2476AEE-4952-4A23-871D-4969F3FD58E0}: NameServer = 205.188.146.145
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\Programme\Gemeinsame Dateien\AOL\ACS\AOLAcsd.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Programme\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Programme\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Programme\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Programme\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Macromedia Licensing Service - Macromedia - C:\Programme\Gemeinsame Dateien\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: McAfee.com Personal Firewall Service (MpfService) - McAfee.com Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - Unknown owner - C:\Programme\SiSoftware\SiSoftware Sandra Lite 2005.SR2a\RpcDataSrv.exe (file missing)
O23 - Service: Sandra Service (SandraTheSrv) - Unknown owner - C:\Programme\SiSoftware\SiSoftware Sandra Lite 2005.SR2a\RpcSandraSrv.exe (file missing)
Sollte ich die platte formatieren oder kann ich dieses problem auch so lösen?