Home » Spyware & Browser Hijacker Support Forum » AdWare.Lop -Verseuchung wegen: MessengerPlus3 » Themenansicht
AdWare.Lop -Verseuchung wegen: MessengerPlus3Thema ist geschlossen! |
||
|---|---|---|
Thema ist geschlossen! |
||
| #0
| ||
|
23.06.2005, 15:54
...neu hier
Beiträge: 2 |
||
 
|
|
|
|
23.06.2005, 19:48
Moderator
 Beiträge: 6466 |
#2
Bitte neueste Version von Hijackthis verwenden, anschließend das Log unter www.hijackthis.de prüfen und nachdem Du vorab mal die eindeutig kritischen Punkte gefixt hast- hier das Logfile nochmals posten.
__________ Durchsuchen --> Aussuchen --> Untersuchen |
|
|
|
|
|
|
23.06.2005, 23:56
Ehrenmitglied
 Beiträge: 29434 |
#3
LOP.COM-Verseuchung wegen: MessengerPlus3
Im Windows-Explorer->Extras->Ordneroptionen->den Reiter "Ansicht"->Versteckte Dateien und Ordner-> "alle Dateien und Ordner anzeigen" aktivieren + Im Windows-Explorer->Extras->Ordneroptionen->den Reiter "Ansicht"->Dateien und Ordner-> "Geschützte Systemdateien ausblenden (empfohlen)" deaktivieren ----------------------------------------------------------------------------------------------- #öffne das HijackThis-->> Button "scan" -->> Häkchen setzen -->> Button "Fix checked" -->> PC neustarten R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://kitksjmktad.net/vsH0mbSjQq5vf5/W/gGZYleqzLwgyeLHQtAdEN0d76jYoWKU7p1idR7kGcGcO3lC.html O2 - BHO: (no name) - {3CC17A41-57C5-9F29-0E56-C0AE57E6ED91} - C:\DOKUME~1\Bob\ANWEND~1\DUMBIN~1\Managerbib.exe O2 - BHO: (no name) - {67028FE7-CA1B-9B71-586F-DB489333755D} - C:\DOKUME~1\Bob\ANWEND~1\DUMBIN~1\Managerbib.exe O2 - BHO: (no name) - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Programme\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll O2 - BHO: (no name) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\MSN Apps\MSN Toolbar\01.02.4000.1001\de\msntb.dll O2 - BHO: (no name) - {E3215F20-3212-11D6-9F8B-00D0B743919D} - (no file) O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\MSN Apps\MSN Toolbar\01.02.4000.1001\de\msntb.dll O4 - HKLM\..\Run: [msnappau] "C:\Programme\MSN Apps\Updater\01.02.3000.1001\de\msnappau.exe" O4 - HKLM\..\Run: [SPAMfighter Agent] "C:\Programme\SPAMfighter\SFAgent.exe" update delay 60 O4 - HKLM\..\Run: [MessengerPlus3] "C:\Programme\MessengerPlus! 3\MsgPlus.exe" O4 - HKLM\..\Run: [insidelitesecondsave] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\pokemediainsidelite\LogoMove.exe O4 - HKLM\..\Run: [STOPzilla] C:\Programme\STOPzilla!\STOPzilla.exe /autostart O4 - HKLM\..\Run: [2 global bone gpl] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nurb Glue 2 Global\dale bone.exe O4 - HKCU\..\Run: [locks test] C:\DOKUME~1\Bob\ANWEND~1\BAITIN~1\Scr second.exe O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/raptisoftgameloader.cab O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab O16 - DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} - http://sib1.od2.com/common/Member/ClientInstall/10.00.0036/OCI/setup.exe PC neustarten--> in den abgesicherten mODUS •Deinstallieren: "Start -> Einstellungen -> Systemsteuerung -> Software" STOPzilla! MessengerPlus3 (un lade das nie wieder !!!!!!!!!!!!!!!) SPAMfighter Loeschen: C:\Dokumente und Einstellungen\Bob\Anwendungsdaten\DUMBIN~1\Managerbib.exe C:\Dokumente und Einstellungen\Bob\Anwendungsdaten\BAITIN~1\Scr second.exe C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\pokemediainsidelite\LogoMove.exe C:\Programme\STOPzilla!\ C:\Programme\SPAMfighter C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nurb Glue 2 Global\dale bone.exe ClaerProg..lade die neuste Version <1.5.1 http://virus-protect.org/temp.html <und saeubere den Browser. Das Programm löscht die Surfspuren des Internet Explorers ab Version 5.0, des Netscape/Mozilla und des Opera: - Verlauf - Temporäre Internetfiles (Cache) - URLs - index.dat  arbeite das ab: http://virus-protect.org/escan.html __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
26.06.2005, 13:29
...neu hier
Themenstarter Beiträge: 2 |
#4
hey, super Anleitung, hat alles reibungslos geklappt und die Lop Toolbars sind weg, nix mehr da. Nur warum musste ich SPAMfighter auch löschen, das war eigentlich sehr nützlich, hat immer alle spammails im outlook entfernt. Gibts da guten Ersatz?
Hier ist noch der E-scan, ist ein bisschen gross: -------------------------------------------------- -------------------- INFECTED -------------------- -------------------------------------------------- 1: Sun Jun 26 11:52:12 2005 => System found infected with iSearch Spyware/Adware (patch.exe)! Action taken: No Action Taken. 2: Sun Jun 26 11:55:04 2005 => File C:\DOKUME~1\Bob\LOKALE~1\Temp\backup-20050625-141609-152.dll infected by "Trojan-Downloader.Win32.Swizzor.bo" Virus! Action Taken: No Action Taken. 3: Sun Jun 26 11:55:04 2005 => File C:\DOKUME~1\Bob\LOKALE~1\Temp\backup-20050625-141609-633.dll infected by "Trojan-Downloader.Win32.Swizzor.bo" Virus! Action Taken: No Action Taken. 4: Sun Jun 26 11:57:21 2005 => File C:\Dokumente und Einstellungen\Bob\Anwendungsdaten\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-3c78e1fc-5c274c67.class infected by "Trojan.Java.ClassLoader.Dummy.c" Virus! Action Taken: No Action Taken. 5: Sun Jun 26 12:00:16 2005 => File C:\Dokumente und Einstellungen\Bob\Lokale Einstellungen\Temp\backup-20050625-141609-152.dll infected by "Trojan-Downloader.Win32.Swizzor.bo" Virus! Action Taken: No Action Taken. 6: Sun Jun 26 12:00:16 2005 => File C:\Dokumente und Einstellungen\Bob\Lokale Einstellungen\Temp\backup-20050625-141609-633.dll infected by "Trojan-Downloader.Win32.Swizzor.bo" Virus! Action Taken: No Action Taken. 7: Sun Jun 26 12:21:16 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0675758D.zip infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. 8: Sun Jun 26 12:21:16 2005 => File C:\Programme\Norton AntiVirus\Quarantine\067B4986.zip infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. 9: Sun Jun 26 12:21:16 2005 => File C:\Programme\Norton AntiVirus\Quarantine\06821D7F.class infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. 10: Sun Jun 26 12:21:16 2005 => File C:\Programme\Norton AntiVirus\Quarantine\06897178.class infected by "Trojan.Java.ClassLoader.Dummy.a" Virus! Action Taken: No Action Taken. 11: Sun Jun 26 12:21:16 2005 => File C:\Programme\Norton AntiVirus\Quarantine\068C1B74.class infected by "Exploit.Java.Bytverify" Virus! Action Taken: No Action Taken. 12: Sun Jun 26 12:21:16 2005 => File C:\Programme\Norton AntiVirus\Quarantine\072B77CE.class infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. 13: Sun Jun 26 12:21:17 2005 => File C:\Programme\Norton AntiVirus\Quarantine\08BE7355.class infected by "Exploit.Java.Bytverify" Virus! Action Taken: No Action Taken. 14: Sun Jun 26 12:21:18 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0AEB645C.zip infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. 15: Sun Jun 26 12:21:18 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0AEE0E58.zip infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. 16: Sun Jun 26 12:21:18 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0AF56251.class infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. 17: Sun Jun 26 12:21:18 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0AFB364A.class infected by "Trojan.Java.ClassLoader.Dummy.a" Virus! Action Taken: No Action Taken. 18: Sun Jun 26 12:21:18 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0AFF6046.class infected by "Exploit.Java.Bytverify" Virus! Action Taken: No Action Taken. 19: Sun Jun 26 12:21:19 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0F7F314D.zip infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. 20: Sun Jun 26 12:21:19 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0F825B49.zip infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. 21: Sun Jun 26 12:21:19 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0F860546.class infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. 22: Sun Jun 26 12:21:19 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0F8F033B.class infected by "Trojan.Java.ClassLoader.Dummy.a" Virus! Action Taken: No Action Taken. 23: Sun Jun 26 12:21:19 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0F932D37.class infected by "Exploit.Java.Bytverify" Virus! Action Taken: No Action Taken. 24: Sun Jun 26 12:21:20 2005 => File C:\Programme\Norton AntiVirus\Quarantine\106E2018.zip infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. 25: Sun Jun 26 12:21:21 2005 => File C:\Programme\Norton AntiVirus\Quarantine\13887AAF.htm infected by "Exploit.HTML.Mht" Virus! Action Taken: No Action Taken. 26: Sun Jun 26 12:21:21 2005 => File C:\Programme\Norton AntiVirus\Quarantine\138E4EA8.zip infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. 27: Sun Jun 26 12:21:21 2005 => File C:\Programme\Norton AntiVirus\Quarantine\139522A0.class infected by "Trojan.Java.ClassLoader.Dummy.e" Virus! Action Taken: No Action Taken. 28: Sun Jun 26 12:21:21 2005 => File C:\Programme\Norton AntiVirus\Quarantine\13963385.htm infected by "Exploit.VBS.Phel.a" Virus! Action Taken: No Action Taken. 29: Sun Jun 26 12:21:21 2005 => File C:\Programme\Norton AntiVirus\Quarantine\139A5D82.zip infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. 30: Sun Jun 26 12:21:21 2005 => File C:\Programme\Norton AntiVirus\Quarantine\139B7699.class infected by "Exploit.Java.Bytverify" Virus! Action Taken: No Action Taken. 31: Sun Jun 26 12:21:21 2005 => File C:\Programme\Norton AntiVirus\Quarantine\139D077E.class infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. 32: Sun Jun 26 12:21:21 2005 => File C:\Programme\Norton AntiVirus\Quarantine\13A45B77.class infected by "Trojan.Java.ClassLoader.Dummy.a" Virus! Action Taken: No Action Taken. 33: Sun Jun 26 12:21:22 2005 => File C:\Programme\Norton AntiVirus\Quarantine\13A70573.class infected by "Exploit.Java.Bytverify" Virus! Action Taken: No Action Taken. 34: Sun Jun 26 12:21:24 2005 => File C:\Programme\Norton AntiVirus\Quarantine\172F4159.class infected by "Trojan-Downloader.Java.OpenConnection.v" Virus! Action Taken: No Action Taken. 35: Sun Jun 26 12:21:27 2005 => File C:\Programme\Norton AntiVirus\Quarantine\239E2002.class infected by "Trojan.Java.ClassLoader.Dummy.a" Virus! Action Taken: No Action Taken. 36: Sun Jun 26 12:21:28 2005 => File C:\Programme\Norton AntiVirus\Quarantine\2A884BD2.zip infected by "Exploit.Java.Bytverify" Virus! Action Taken: No Action Taken. 37: Sun Jun 26 12:21:29 2005 => File C:\Programme\Norton AntiVirus\Quarantine\2D566547.class infected by "Trojan-Downloader.Java.OpenConnection.v" Virus! Action Taken: No Action Taken. 38: Sun Jun 26 12:21:31 2005 => File C:\Programme\Norton AntiVirus\Quarantine\34985454.class infected by "Exploit.Java.Bytverify" Virus! Action Taken: No Action Taken. 39: Sun Jun 26 12:21:39 2005 => File C:\Programme\Norton AntiVirus\Quarantine\4899353E.class infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. 40: Sun Jun 26 12:21:39 2005 => File C:\Programme\Norton AntiVirus\Quarantine\498F7A55.class infected by "Trojan.Java.ClassLoader.Dummy.a" Virus! Action Taken: No Action Taken. 41: Sun Jun 26 12:21:39 2005 => File C:\Programme\Norton AntiVirus\Quarantine\4AEE5DBB.htm infected by "Trojan-Downloader.JS.Psyme.ap" Virus! Action Taken: No Action Taken. 42: Sun Jun 26 12:21:39 2005 => File C:\Programme\Norton AntiVirus\Quarantine\4AF107B8.htm infected by "Trojan-Downloader.JS.Psyme.ap" Virus! Action Taken: No Action Taken. 43: Sun Jun 26 12:21:39 2005 => File C:\Programme\Norton AntiVirus\Quarantine\4B122B94.zip infected by "Trojan.Java.Needy.c" Virus! Action Taken: No Action Taken. 44: Sun Jun 26 12:21:39 2005 => File C:\Programme\Norton AntiVirus\Quarantine\4B7F21E7.class infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. 45: Sun Jun 26 12:21:39 2005 => File C:\Programme\Norton AntiVirus\Quarantine\4B824BE3.class infected by "Exploit.Java.Bytverify" Virus! Action Taken: No Action Taken. 46: Sun Jun 26 12:21:40 2005 => File C:\Programme\Norton AntiVirus\Quarantine\4E083852.zip infected by "Trojan.Java.Needy.c" Virus! Action Taken: No Action Taken. 47: Sun Jun 26 12:21:42 2005 => File C:\Programme\Norton AntiVirus\Quarantine\53906A6A.zip infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. 48: Sun Jun 26 12:21:42 2005 => File C:\Programme\Norton AntiVirus\Quarantine\53973E63.zip infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. 49: Sun Jun 26 12:21:42 2005 => File C:\Programme\Norton AntiVirus\Quarantine\539A685F.class infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. 50: Sun Jun 26 12:21:42 2005 => File C:\Programme\Norton AntiVirus\Quarantine\53A46654.class infected by "Trojan.Java.ClassLoader.Dummy.a" Virus! Action Taken: No Action Taken. 51: Sun Jun 26 12:21:42 2005 => File C:\Programme\Norton AntiVirus\Quarantine\53A71051.class infected by "Exploit.Java.Bytverify" Virus! Action Taken: No Action Taken. 52: Sun Jun 26 12:21:45 2005 => File C:\Programme\Norton AntiVirus\Quarantine\61F6567A.zip infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. 53: Sun Jun 26 12:21:45 2005 => File C:\Programme\Norton AntiVirus\Quarantine\622F3AEC.class infected by "Trojan.Java.ClassLoader.Dummy.a" Virus! Action Taken: No Action Taken. 54: Sun Jun 26 12:21:45 2005 => File C:\Programme\Norton AntiVirus\Quarantine\62967E22.class infected by "Trojan.Java.ClassLoader.Dummy.a" Virus! Action Taken: No Action Taken. 55: Sun Jun 26 12:21:46 2005 => File C:\Programme\Norton AntiVirus\Quarantine\66F865A2.class infected by "Exploit.Java.Bytverify" Virus! Action Taken: No Action Taken. 56: Sun Jun 26 12:21:48 2005 => File C:\Programme\Norton AntiVirus\Quarantine\6C7162DB.class infected by "Trojan-Downloader.Java.OpenConnection.v" Virus! Action Taken: No Action Taken. 57: Sun Jun 26 12:21:50 2005 => File C:\Programme\Norton AntiVirus\Quarantine\763865F4.class infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. 58: Sun Jun 26 12:21:50 2005 => File C:\Programme\Norton AntiVirus\Quarantine\78035C45.class infected by "Trojan-Downloader.Java.OpenConnection.v" Virus! Action Taken: No Action Taken. 59: Sun Jun 26 12:32:13 2005 => File C:\System Volume Information\_restore{6E552EB0-34C2-4EDC-B565-AFD2B3EB8443}\RP306\A0054687.exe infected by "Trojan-Downloader.Win32.Swizzor.ca" Virus! Action Taken: No Action Taken. 60: Sun Jun 26 12:32:14 2005 => File C:\System Volume Information\_restore{6E552EB0-34C2-4EDC-B565-AFD2B3EB8443}\RP306\A0054688.exe infected by "Trojan-Downloader.Win32.Swizzor.cb" Virus! Action Taken: No Action Taken. 61: Sun Jun 26 12:32:14 2005 => File C:\System Volume Information\_restore{6E552EB0-34C2-4EDC-B565-AFD2B3EB8443}\RP306\A0054689.exe infected by "Trojan-Downloader.Win32.Swizzor.bo" Virus! Action Taken: No Action Taken. 62: Sun Jun 26 12:32:30 2005 => File C:\System Volume Information\_restore{6E552EB0-34C2-4EDC-B565-AFD2B3EB8443}\RP312\A0057086.exe infected by "Trojan-Downloader.Win32.Swizzor.bo" Virus! Action Taken: No Action Taken. 63: Sun Jun 26 12:32:32 2005 => File C:\System Volume Information\_restore{6E552EB0-34C2-4EDC-B565-AFD2B3EB8443}\RP312\A0057123.exe infected by "Trojan-Downloader.Win32.Swizzor.ca" Virus! Action Taken: No Action Taken. 64: Sun Jun 26 12:32:33 2005 => File C:\System Volume Information\_restore{6E552EB0-34C2-4EDC-B565-AFD2B3EB8443}\RP312\A0057126.exe infected by "Trojan-Downloader.Win32.Swizzor.cb" Virus! Action Taken: No Action Taken. -------------------------------------------------- --------------------- TAGGED --------------------- -------------------------------------------------- 1: Sun Jun 26 11:50:05 2005 => File C:\Dokumente und Einstellungen\Bob\Desktop\Downloads\AudioGrabber 1.82 Final\agsetup.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. 2: Sun Jun 26 11:50:09 2005 => File C:\Dokumente und Einstellungen\Bob\Desktop\Downloads\mirc616.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.16. No Action Taken. 3: Sun Jun 26 11:55:21 2005 => File C:\DOKUME~1\Bob\LOKALE~1\Temp\rjftyvxj.exe tagged as "not-a-virus:AdWare.Lop.m". Action Taken: No Action Taken. 4: Sun Jun 26 11:55:23 2005 => File C:\DOKUME~1\Bob\LOKALE~1\Temp\sfancgwj.exe tagged as "not-a-virus:AdWare.Lop.m". Action Taken: No Action Taken. 5: Sun Jun 26 11:55:52 2005 => File C:\DOKUME~1\Bob\LOKALE~1\Temp\xdkdktcz.exe tagged as "not-a-virus:AdWare.Lop.m". Action Taken: No Action Taken. 6: Sun Jun 26 11:56:31 2005 => File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nurb Glue 2 Global\4 Internet.exe tagged as "not-a-virus:AdWare.Lop.p". Action Taken: No Action Taken. 7: Sun Jun 26 11:58:03 2005 => File C:\Dokumente und Einstellungen\Bob\Desktop\Downloads\AudioGrabber 1.82 Final\agsetup.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. 8: Sun Jun 26 11:58:07 2005 => File C:\Dokumente und Einstellungen\Bob\Desktop\Downloads\mirc616.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.16. No Action Taken. 9: Sun Jun 26 12:00:29 2005 => File C:\Dokumente und Einstellungen\Bob\Lokale Einstellungen\Temp\rjftyvxj.exe tagged as "not-a-virus:AdWare.Lop.m". Action Taken: No Action Taken. 10: Sun Jun 26 12:00:30 2005 => File C:\Dokumente und Einstellungen\Bob\Lokale Einstellungen\Temp\sfancgwj.exe tagged as "not-a-virus:AdWare.Lop.m". Action Taken: No Action Taken. 11: Sun Jun 26 12:00:55 2005 => File C:\Dokumente und Einstellungen\Bob\Lokale Einstellungen\Temp\xdkdktcz.exe tagged as "not-a-virus:AdWare.Lop.m". Action Taken: No Action Taken. 12: Sun Jun 26 12:01:41 2005 => File C:\mIRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.16. No Action Taken. 13: Sun Jun 26 12:11:59 2005 => File C:\Programme\GameSpy Arcade\UNWISE.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. 14: Sun Jun 26 12:17:20 2005 => File C:\Programme\Lavasoft\Ad-Aware SE Personal\UNWISE.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. 15: Sun Jun 26 12:32:13 2005 => File C:\System Volume Information\_restore{6E552EB0-34C2-4EDC-B565-AFD2B3EB8443}\RP306\A0054685.exe tagged as "not-a-virus:AdWare.Lop". Action Taken: No Action Taken. 16: Sun Jun 26 12:32:13 2005 => File C:\System Volume Information\_restore{6E552EB0-34C2-4EDC-B565-AFD2B3EB8443}\RP306\A0054686.exe tagged as "not-a-virus:AdWare.Lop.m". Action Taken: No Action Taken. 17: Sun Jun 26 12:32:15 2005 => File C:\System Volume Information\_restore{6E552EB0-34C2-4EDC-B565-AFD2B3EB8443}\RP307\A0054737.exe tagged as "not-a-virus:AdWare.Lop.m". Action Taken: No Action Taken. 18: Sun Jun 26 12:32:17 2005 => File C:\System Volume Information\_restore{6E552EB0-34C2-4EDC-B565-AFD2B3EB8443}\RP308\A0054787.exe tagged as "not-a-virus:AdWare.GAIN.Network.a". Action Taken: No Action Taken. 19: Sun Jun 26 12:32:30 2005 => File C:\System Volume Information\_restore{6E552EB0-34C2-4EDC-B565-AFD2B3EB8443}\RP312\A0057087.exe tagged as "not-a-virus:AdWare.Lop.p". Action Taken: No Action Taken. 20: Sun Jun 26 12:32:31 2005 => File C:\System Volume Information\_restore{6E552EB0-34C2-4EDC-B565-AFD2B3EB8443}\RP312\A0057088.exe tagged as "not-a-virus:AdWare.Lop.p". Action Taken: No Action Taken. 21: Sun Jun 26 12:32:32 2005 => File C:\System Volume Information\_restore{6E552EB0-34C2-4EDC-B565-AFD2B3EB8443}\RP312\A0057124.exe tagged as "not-a-virus:AdWare.Lop.p". Action Taken: No Action Taken. 22: Sun Jun 26 12:32:33 2005 => File C:\System Volume Information\_restore{6E552EB0-34C2-4EDC-B565-AFD2B3EB8443}\RP312\A0057125.exe tagged as "not-a-virus:AdWare.Lop.p". Action Taken: No Action Taken. 23: Sun Jun 26 12:32:33 2005 => File C:\System Volume Information\_restore{6E552EB0-34C2-4EDC-B565-AFD2B3EB8443}\RP312\A0057127.exe tagged as "not-a-virus:AdWare.Lop.p". Action Taken: No Action Taken. 24: Sun Jun 26 12:32:36 2005 => File C:\System Volume Information\_restore{6E552EB0-34C2-4EDC-B565-AFD2B3EB8443}\RP312\A0057194.exe tagged as "not-a-virus:AdWare.Lop". Action Taken: No Action Taken. 25: Sun Jun 26 12:54:27 2005 => File C:\WINDOWS\system32\Macromed\Shockwave 8\UNWISE.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. 26: Sun Jun 26 12:56:26 2005 => File D:\Old Docs\Downloads\AudioGrabber 1.82 Final\agsetup.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. -------------------------------------------------- --------------------- ERRORS --------------------- -------------------------------------------------- 1: Sun Jun 26 11:33:16 2005 => ERROR!!! Invalid Entry locks test = C:\DOKUME~1\Bob\ANWEND~1\BAITIN~1\Scr second.exe (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Run). No Action Taken. 2: Sun Jun 26 11:52:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINDOWS\Downloaded Program Files\axload.dll". Action Taken: No Action Taken. 3: Sun Jun 26 11:52:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINDOWS\Downloaded Program Files\Banksht2.dll". Action Taken: No Action Taken. 4: Sun Jun 26 11:52:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINDOWS\Downloaded Program Files\MessengerStatsPAClient.dll". Action Taken: No Action Taken. 5: Sun Jun 26 11:52:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINDOWS\Downloaded Program Files\MsnMessengerSetupDownloader.ocx". Action Taken: No Action Taken. 6: Sun Jun 26 11:52:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINDOWS\System32\iuctl.dll". Action Taken: No Action Taken. 7: Sun Jun 26 11:52:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\System32\iuctl.dll". Action Taken: No Action Taken. 8: Sun Jun 26 11:52:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\System32\MSXML3A.DLL". Action Taken: No Action Taken. 9: Sun Jun 26 11:52:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\Real\GToolbar\BarControl.dll". Action Taken: No Action Taken. 10: Sun Jun 26 11:52:12 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\Real\GToolbar\GoogleToolbar.dll". Action Taken: No Action Taken. 11: Sun Jun 26 11:52:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Adobe\Photoshop Album\Kataloge\My Catalog.psa". Action Taken: No Action Taken. 12: Sun Jun 26 11:52:14 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\System32\pxwma.dll". Action Taken: No Action Taken. 13: Sun Jun 26 11:52:16 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\Downloaded Program Files\MsnMessengerSetupDownloader.ocx". Action Taken: No Action Taken. 14: Sun Jun 26 11:52:16 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\Downloaded Program Files\MessengerStatsPAClient.dll". Action Taken: No Action Taken. 15: Sun Jun 26 11:52:16 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\Downloaded Program Files\Banksht2.dll". Action Taken: No Action Taken. 16: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{00782156-43A5-4567-B187-37F3AF98FE67}" refers to invalid object "AcEPlotCommon.dll". Action Taken: No Action Taken. 17: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{0473E417-9F6B-4B4E-9BB4-EA8EF2A0B237}" refers to invalid object "AcDrCommon.dll". Action Taken: No Action Taken. 18: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{04B9D34D-6CA0-4972-AE24-144623BC0D1B}" refers to invalid object "AcEPlotRenderer.dll". Action Taken: No Action Taken. 19: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{04D47EE2-EA15-41BD-A1E7-990331C7CECD}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 20: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{07F4D811-C1F7-46FD-BD81-4A4B2CD58CE1}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 21: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{0849281F-857E-44E2-AA67-EB5B7A8A4DA7}" refers to invalid object "AcEPlotCore.dll". Action Taken: No Action Taken. 22: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{087CF7BD-9343-4946-8BEE-44578710527E}" refers to invalid object "acETransmitui.arx". Action Taken: No Action Taken. 23: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{0A684F12-A26F-42F8-B16F-9EC25B372353}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 24: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{117A2298-A910-41E9-B6A6-5D31B8F609EB}" refers to invalid object "AcMPolygonCOM.dll". Action Taken: No Action Taken. 25: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{12B5E8F7-D104-3F64-9E1D-AAB6F7C7BC33}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 26: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{12ED1E87-AA15-48F9-844B-A4E47D0D0569}" refers to invalid object "ProjectPointClient.dll". Action Taken: No Action Taken. 27: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{151E6750-4079-4609-9FD3-AD68B60F8B65}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 28: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{15CC9D07-16B4-11D6-A4C1-001083782B8E}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 29: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{160229B0-00CE-42F4-97CC-72EED76A12E5}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 30: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{174B3E36-396B-4C6C-860C-C063C136E5BF}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 31: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{184FDC14-2458-4E90-ADB2-6B239826D217}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 32: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{1855F960-0154-4256-9FF7-7650FF50538F}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 33: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{196841AB-566B-4D81-9AAF-BDCEB3FEFB6E}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 34: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{19BE29E8-A9FF-4B59-97AA-02DE9DE4DF59}" refers to invalid object "AcDrCommon.dll". Action Taken: No Action Taken. 35: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{1A6C7634-6585-45F1-B33A-2B21724D2238}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 36: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{1A9C010F-29CE-4755-85A6-C11DD1FD1F2E}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 37: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}" refers to invalid object "AcETransmit.dll". Action Taken: No Action Taken. 38: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{1EFD6A40-3999-11CF-9150-00AA0059F70D}" refers to invalid object "D:\Programme\Empire Interactive\Mashed Demo\MCI32.OCX". Action Taken: No Action Taken. 39: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{1FA1D9C3-A91A-4995-9C6A-7F6B83E07800}" refers to invalid object "AcTcTools.arx". Action Taken: No Action Taken. 40: Sun Jun 26 11:52:17 2005 => Entry "HKCR\CLSID\{21D3E63B-2CEF-4A83-B2D0-D64DB6772112}" refers to invalid object "AcSmNav.arx". Action Taken: No Action Taken. 41: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{23B36DFA-25C6-449C-A1C9-3E0F94371ECB}" refers to invalid object "vl.arx". Action Taken: No Action Taken. 42: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{23C79E27-9A43-4A25-BF25-501888F37F26}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 43: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{2430821E-E213-4A90-B38A-77F090B65339}" refers to invalid object "acdchatch.arx". Action Taken: No Action Taken. 44: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{2464FDD3-E3C5-4715-8977-3024BE535F0C}" refers to invalid object "acmted.arx". Action Taken: No Action Taken. 45: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{24F2614A-D524-44C8-8A51-57DC9D51A4F6}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 46: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{252C3FFD-5114-4D0C-BFA5-BBE62A740C0A}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 47: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{2579DAF4-BA52-434A-857A-D03C5095A43C}" refers to invalid object "AcDrCommon.dll". Action Taken: No Action Taken. 48: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{2590FEFF-1F68-4691-9834-C96F2817DBC9}" refers to invalid object "AcObjClassImp.arx". Action Taken: No Action Taken. 49: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{25DE6B7C-2219-4CD9-9E37-0C56F47EA7D4}" refers to invalid object "vl.arx". Action Taken: No Action Taken. 50: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{25E11127-A908-4F2E-B272-A43ECF73D652}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 51: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{2973F7C7-0D14-44B8-A634-18CD70119EB8}" refers to invalid object "AcDrCommon.dll". Action Taken: No Action Taken. 52: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{29FF67FF-8050-480f-9F30-CC41635F2F9D}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken. 53: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{2A9A858F-79E8-4BE6-B205-E7D41B137114}" refers to invalid object "csp16.dll". Action Taken: No Action Taken. 54: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{2AADC298-8C6C-4DF5-ABA6-07F8E21303BA}" refers to invalid object "AcEPlotCommon.dll". Action Taken: No Action Taken. 55: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{2AE7120B-CEE4-47A5-9B50-EF9F3ADE24AC}" refers to invalid object "AcTcTools.arx". Action Taken: No Action Taken. 56: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{2AF455A6-9012-4D01-9E02-A8E5680E1E7E}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 57: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{2CB2F785-7736-3581-AC7C-C734C1498138}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 58: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{2D29F8DF-372D-4027-B638-8938F1587691}" refers to invalid object "AcMPolygonCOM.dll". Action Taken: No Action Taken. 59: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{2D71332F-560F-4060-B599-3375E7E47783}" refers to invalid object "AcEPlotCore.dll". Action Taken: No Action Taken. 60: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{2E759BFF-9723-408F-BBE0-6A798135B3CC}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 61: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{2FAA8BEA-AB1B-479A-97B2-6E7AAB38750E}" refers to invalid object "Acopm.arx". Action Taken: No Action Taken. 62: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{31DBB451-9109-41EA-854C-B25905225AEA}" refers to invalid object "Acpi.arx". Action Taken: No Action Taken. 63: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{31F87CA6-498C-425f-BD0A-339141E2A58C}" refers to invalid object "AcProject16.dll". Action Taken: No Action Taken. 64: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{352450CA-4793-3608-8BF3-3EEA430EB898}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 65: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{375DD1E5-11C0-4606-80F9-FB9D8978E0B7}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 66: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{3775D2E0-7C5D-11CF-899E-00AA00688B10}" refers to invalid object "D:\Programme\Empire Interactive\Mashed Demo\MCI32.OCX". Action Taken: No Action Taken. 67: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{3AB8DCCE-A4F4-464E-9BE2-49C46518402B}" refers to invalid object "AcDmPropertyEditors.arx". Action Taken: No Action Taken. 68: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{3AB8DCCF-A4F4-464E-9BE2-49C46518402C}" refers to invalid object "AcDmPropertyEditors.arx". Action Taken: No Action Taken. 69: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{3C7F7161-53CD-4DFD-8A7E-DD3513C253DB}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 70: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{3D0A034C-1028-4AA1-B2E7-99E52473C7D4}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 71: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{3EFB8E83-DFA7-4705-A9CF-27287E5F14B4}" refers to invalid object "AcSmNav.arx". Action Taken: No Action Taken. 72: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291}" refers to invalid object "AcETransmit.dll". Action Taken: No Action Taken. 73: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{3FF3D4A0-C89A-4C2B-9847-3DB02BC22F33}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 74: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{43F4168B-C1C3-43E0-BFE4-B703447E2AA2}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 75: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{43FD41DE-D16A-44AD-847F-70C08743BDDB}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 76: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{442D12A1-2641-11d2-90FB-006008A1F441}" refers to invalid object "a3d.dll". Action Taken: No Action Taken. 77: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{45029A0D-EAA5-4618-ABA5-86F3FEEBC8C4}" refers to invalid object "AcEPlotCore.dll". Action Taken: No Action Taken. 78: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{45D4C0E8-5896-420D-A27C-6A9793497065}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 79: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{46F375E5-2D7E-4C5A-9438-222713012BDC}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 80: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA}" refers to invalid object "AcETransmit.dll". Action Taken: No Action Taken. 81: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{47426477-BD24-47B4-8F79-4B739488B39D}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 82: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{47B1A6D8-48F2-469A-B52E-6CFB87D01666}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 83: Sun Jun 26 11:52:18 2005 => Entry "HKCR\CLSID\{47C32803-2322-4B65-B546-CEF4867A29A6}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 84: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{49E0BE0A-39E0-4932-B7BE-F249D56ACD31}" refers to invalid object "csp16.dll". Action Taken: No Action Taken. 85: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{4B72D1F6-14EC-4442-9BD6-BADF80B009F3}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 86: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{4C0AFFDF-F919-4A04-A3B0-E048DF7907C2}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 87: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{4C17F79D-0C15-40FD-B8BD-D3F7B5F13DAB}" refers to invalid object "acdcimages.arx". Action Taken: No Action Taken. 88: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{4C480BB3-ECB5-4BF3-BD26-B69A05B11980}" refers to invalid object "AcDrCommon.dll". Action Taken: No Action Taken. 89: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{4C7D3572-08DA-408F-AAB6-3C1A25E230EA}" refers to invalid object "AcTcTools.arx". Action Taken: No Action Taken. 90: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{4D0BBBEF-B91D-46AC-A3C0-BEBB947FADE6}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 91: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{4DE4AD7B-6F4A-441E-98EE-8B1DF0F8BDC4}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 92: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{4EEF602A-59C4-465B-B191-D0D18FC5669D}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 93: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{50446CFC-B0CF-432A-BA08-5D1CBDF090C8}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 94: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{50A6E6B7-BF09-40BA-9BC0-2D0915F8E4BD}" refers to invalid object "AcEPlotCommon.dll". Action Taken: No Action Taken. 95: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{5149A9AC-E7E5-43C7-A78F-A80A53783A8D}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 96: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{526F2FB5-3C09-4AC7-B85F-BBF4AF0C321A}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 97: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{53A0CDD1-85DB-4A31-935B-02DC85DEC824}" refers to invalid object "AcEPlotCore.dll". Action Taken: No Action Taken. 98: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{54F4FDEB-0565-4E6C-9E17-B086D8EB5988}" refers to invalid object "AcDrCommon.dll". Action Taken: No Action Taken. 99: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B}" refers to invalid object "AcETransmit.dll". Action Taken: No Action Taken. 100: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{55CF0D68-EBD0-4D54-B138-98CCF7BCCB20}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 101: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{56B33EE5-A0C8-4FCC-878D-55D5459C2202}" refers to invalid object "AcProject16.dll". Action Taken: No Action Taken. 102: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{56F7B847-C084-4592-B7D9-8DCA4F2E8E3F}" refers to invalid object "AcTcTools.arx". Action Taken: No Action Taken. 103: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{58683F4B-E026-4945-856C-B28BC1CC2997}" refers to invalid object "acdclayouts.arx". Action Taken: No Action Taken. 104: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{586B5241-824A-4782-B979-F7EE45273A2C}" refers to invalid object "AcDrCommon.dll". Action Taken: No Action Taken. 105: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{58E75994-81AC-4D23-8685-DB85C91E8F8F}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 106: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{5903AA09-83E7-4EC6-B75B-65D682388798}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 107: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{5923C86F-5E02-4DED-8552-4C9EB49D1B45}" refers to invalid object "AcEPlotCommon.dll". Action Taken: No Action Taken. 108: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{5D38618F-91BF-4051-A9F8-DD3603D9E506}" refers to invalid object "ProjectPointClient.dll". Action Taken: No Action Taken. 109: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{5D41236F-4888-4DAD-8B73-09DF4320FCBB}" refers to invalid object "AcEPlotCore.dll". Action Taken: No Action Taken. 110: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{5D4ACD67-7FD8-4089-9EB7-EF145EBFF3C9}" refers to invalid object "AcTcTools.arx". Action Taken: No Action Taken. 111: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{5D7B80B6-3670-4ADB-B5E2-7B3CEA6CCD80}" refers to invalid object "AcProject16.dll". Action Taken: No Action Taken. 112: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{5E303963-5DA0-4A8C-81E1-8E8C227EE369}" refers to invalid object "AcObjClassImp.arx". Action Taken: No Action Taken. 113: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{5F113180-B226-4EE1-9B3C-059147155BE2}" refers to invalid object "vl.arx". Action Taken: No Action Taken. 114: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{5FE9BF0E-C458-430F-AB9E-0913D056B39B}" refers to invalid object "acETransmitui.arx". Action Taken: No Action Taken. 115: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{600DFAE3-319F-407C-813A-8FEE8B6CD923}" refers to invalid object "AcEPlotRenderer.dll". Action Taken: No Action Taken. 116: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{609D182C-79AB-458D-A107-DF2368812FFB}" refers to invalid object "ProjectPointClient.dll". Action Taken: No Action Taken. 117: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{60F068A4-8FF0-42D2-87CC-CBBD8C97F91A}" refers to invalid object "AcStMgr.dll". Action Taken: No Action Taken. 118: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{613DF36A-190B-4A0A-A1CA-F91463379C6D}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 119: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{6159C2A0-F4DE-4416-966B-C766BB8C8C60}" refers to invalid object "ProjectPointClient.dll". Action Taken: No Action Taken. 120: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{615F2CF0-C283-4FF9-B839-FAB43A957885}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 121: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{61889A04-5A84-462F-91E3-FCF5D6011386}" refers to invalid object "AcStMgr.dll". Action Taken: No Action Taken. 122: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{61F1B194-8BD7-49B9-9B5E-8E6102B545C0}" refers to invalid object "AcDrCommon.dll". Action Taken: No Action Taken. 123: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{62FDCD8F-87CF-11D6-A55B-0060B0875CB4}" refers to invalid object "AcStLay.dll". Action Taken: No Action Taken. 124: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{62FDCD91-87CF-11D6-A55B-0060B0875CB4}" refers to invalid object "AcStDStyle.dll". Action Taken: No Action Taken. 125: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{6494BB2C-9E51-4E2D-9396-94BE47A9F6DC}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 126: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{65D10D07-1DEA-461E-A828-003EED48A43D}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 127: Sun Jun 26 11:52:19 2005 => Entry "HKCR\CLSID\{682E7978-812E-4F58-81E8-7067899D2328}" refers to invalid object "cao16.dll". Action Taken: No Action Taken. 128: Sun Jun 26 11:52:20 2005 => Entry "HKCR\CLSID\{6A4379DC-17DA-46F6-8044-A2B92F4168AB}" refers to invalid object "acdcdimstyles.arx". Action Taken: No Action Taken. 129: Sun Jun 26 11:52:20 2005 => Entry "HKCR\CLSID\{6C2269DC-77B6-4908-8D0C-4E3CF1036FA7}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 130: Sun Jun 26 11:52:20 2005 => Entry "HKCR\CLSID\{6C8C8217-60FA-43EE-A844-3ECC323BB16E}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 131: Sun Jun 26 11:52:20 2005 => Entry "HKCR\CLSID\{6CFA013D-9ECB-4C64-9F1F-850D73C01A0B}" refers to invalid object "AcSmNav.arx". Action Taken: No Action Taken. 132: Sun Jun 26 11:52:20 2005 => Entry "HKCR\CLSID\{6F11097F-B60D-48CC-9BB7-4DC75517107D}" refers to invalid object "ProjectPointClient.dll". Action Taken: No Action Taken. 133: Sun Jun 26 11:52:20 2005 => Entry "HKCR\CLSID\{6FA79072-CFB7-4745-8D27-C5BCC0FF37C7}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 134: Sun Jun 26 11:52:20 2005 => Entry "HKCR\CLSID\{6FA888E1-7D5A-4E6F-B06E-3434DD217D03}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 135: Sun Jun 26 11:52:20 2005 => Entry "HKCR\CLSID\{7020D670-DF25-47E3-9BFB-E269B4029559}" refers to invalid object "WSCommCntrAcCon.arx". Action Taken: No Action Taken. 136: Sun Jun 26 11:52:20 2005 => Entry "HKCR\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken. 137: Sun Jun 26 11:52:20 2005 => Entry "HKCR\CLSID\{7169F451-E1F5-4B29-B267-8A8A0E6435CE}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 138: Sun Jun 26 11:52:20 2005 => Entry "HKCR\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3}" refers to invalid object "AcETransmit.dll". Action Taken: No Action Taken. 139: Sun Jun 26 11:52:20 2005 => Entry "HKCR\CLSID\{73A2C661-DD2D-4340-9D3A-7ED93F6A3158}" refers to invalid object "acETransmitui.arx". Action Taken: No Action Taken. 140: Sun Jun 26 11:52:20 2005 => Entry "HKCR\CLSID\{7528300E-DC20-4650-BB67-DA0ADAD6F9EE}" refers to invalid object "AcObjClassImp.arx". Action Taken: No Action Taken. 141: Sun Jun 26 11:52:20 2005 => Entry "HKCR\CLSID\{758C6B6F-E553-42E1-BC76-22DE2D80F7EF}" refers to invalid object "AcEPlotRenderer.dll". Action Taken: No Action Taken. 142: Sun Jun 26 11:52:20 2005 => Entry "HKCR\CLSID\{785C0F04-2F05-476A-A523-3886591B5AD4}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 143: Sun Jun 26 11:52:20 2005 => Entry "HKCR\CLSID\{79047464-B441-435B-80E8-21E0095CC741}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 144: Sun Jun 26 11:52:21 2005 => Entry "HKCR\CLSID\{7A051850-9B71-492D-8B82-474C3A2B0570}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 145: Sun Jun 26 11:52:21 2005 => Entry "HKCR\CLSID\{7C21FF74-D9D0-4C6B-9C25-1D41B58F4776}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 146: Sun Jun 26 11:52:21 2005 => Entry "HKCR\CLSID\{7C39017A-0875-45D2-AEE1-8CE5FA00A9BD}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 147: Sun Jun 26 11:52:21 2005 => Entry "HKCR\CLSID\{7C66BE02-EB10-4D63-AE3E-B47326EBC821}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 148: Sun Jun 26 11:52:21 2005 => Entry "HKCR\CLSID\{7C672133-53DB-4FBF-BA5C-E017F83D866B}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 149: Sun Jun 26 11:52:21 2005 => Entry "HKCR\CLSID\{7E1D816A-6300-494B-AA72-8334650C5399}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 150: Sun Jun 26 11:52:21 2005 => Entry "HKCR\CLSID\{7E7D8243-4A38-42F5-A152-0629315D7B2B}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 151: Sun Jun 26 11:52:21 2005 => Entry "HKCR\CLSID\{7ECFDADD-4D10-4EE0-8B4B-E4441562B99D}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 152: Sun Jun 26 11:52:21 2005 => Entry "HKCR\CLSID\{7F962213-845A-4E01-9CC7-8498DF226400}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 153: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{7FFD8B60-5083-4C30-A642-AE08CD6B75E7}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 154: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{80F11EE2-7D24-4929-91AF-DB046C90D811}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 155: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{8221CC89-8C65-4C50-85FE-53005DE1B3B0}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 156: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{8236E827-1066-39D0-A668-B01872D0EEA2}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 157: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{8298d101-f992-43b7-8eca-5052d885b995}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken. 158: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{83809F95-F7BB-49CD-9B88-AF845E262AC0}" refers to invalid object "AdFTP.dll". Action Taken: No Action Taken. 159: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{83D4679F-B6D7-11D2-BF36-00C04FB90A03}" refers to invalid object "C:\PROGRA~1\MESSEN~1\rtcimsp.dll". Action Taken: No Action Taken. 160: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{83E53FB0-C3F9-44C8-8917-1A79D89B90AA}" refers to invalid object "Acopm.arx". Action Taken: No Action Taken. 161: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{841C6AD6-6305-40EF-954A-4E640C441D9A}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 162: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{86508E78-0E54-4AE3-A648-74C4A17817BA}" refers to invalid object "acdim.arx". Action Taken: No Action Taken. 163: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{86C923E2-046B-4681-9621-6FDEF0EB4928}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 164: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{86F97DA6-DB20-414D-9E17-6E9043977C32}" refers to invalid object "WSCommCntrUI1.dll". Action Taken: No Action Taken. 165: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{87492213-63E9-4D80-B315-3D8194F8F176}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 166: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{8753FADF-A8C0-4F12-B49F-2E137012AE6C}" refers to invalid object "ProjectPointClient.dll". Action Taken: No Action Taken. 167: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{891BBE9C-F28F-48BB-87D2-80016268F6AD}" refers to invalid object "AcDrCommon.dll". Action Taken: No Action Taken. 168: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{89EF6CAA-5E61-4E9F-BD27-02216EE949CD}" refers to invalid object "AcDrCommon.dll". Action Taken: No Action Taken. 169: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{8AE5BFE8-9F94-494B-87B9-DFF35E28920B}" refers to invalid object "AcDrCommon.dll". Action Taken: No Action Taken. 170: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{8B539C81-CB02-4E75-B09F-C9ABB138246E}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 171: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{8BA21FDA-27B1-4877-B8CB-255266619AC1}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 172: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{8C77B6E2-46A5-4041-90A5-ECFF70A4B875}" refers to invalid object "AcStETransmit.arx". Action Taken: No Action Taken. 173: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{8F0155F1-BE87-47FD-9888-56CDBB72919D}" refers to invalid object "vl.arx". Action Taken: No Action Taken. 174: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{907F9836-6B47-43F2-853D-43DB01BC3CD5}" refers to invalid object "ProjectPointClient.dll". Action Taken: No Action Taken. 175: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{92FA2C24-253C-11d2-90FB-006008A1F441}" refers to invalid object "a3dapi.dll". Action Taken: No Action Taken. 176: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{93023A42-4399-463F-AB7B-29776E3573E5}" refers to invalid object "acdcxrefs.arx". Action Taken: No Action Taken. 177: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{9307A809-170D-4A75-B8EC-D3C462D2F4DB}" refers to invalid object "Acopm.arx". Action Taken: No Action Taken. 178: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{94684377-17FE-452E-9A51-7AABFFFE40BA}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 179: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{9505D6DC-6B3E-483C-AB22-67369EF30225}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 180: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{96455E4D-80A8-400D-8D3A-3A7D92B54581}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 181: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{965F8AA1-215C-407C-A581-CFC64B073E4F}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 182: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{979F9A0A-9738-40FC-A216-84BD6DD27A88}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 183: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{97B6DC06-B77F-498B-8647-918893DFF6F9}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 184: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{97E9824E-0AAF-4045-8003-7C58B0F13CD5}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 185: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{98EEC9A9-7F09-48E0-B615-984801A634CB}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 186: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{99798E83-5AA5-432D-886E-D9F29AD6B617}" refers to invalid object "ProjectPointClient.dll". Action Taken: No Action Taken. 187: Sun Jun 26 11:52:22 2005 => Entry "HKCR\CLSID\{99CD9966-D002-425D-AB7A-04E500546DB6}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 188: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{9A924FFC-7D57-481D-B254-C892E7E37425}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 189: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{9B706F88-2A5E-44F5-9A8E-2BBF75708823}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 190: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{9C057DFC-A5D8-4EE4-ACF3-48BE085EF4BC}" refers to invalid object "AcInetUI.dll". Action Taken: No Action Taken. 191: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{9D736334-2AF0-4BD2-98B0-8AF68BC1E2A1}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 192: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{9E416B3E-02BC-4312-A77D-78F7AD8C31A1}" refers to invalid object "acETransmitui.arx". Action Taken: No Action Taken. 193: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{A05B8828-D41A-457F-B9A6-254D62A2369C}" refers to invalid object "AcEPlotRenderer.dll". Action Taken: No Action Taken. 194: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{A117FEB5-6122-4207-B02D-C6574DD30729}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 195: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{A3CE677E-5566-4798-B7AF-4F7ED56CC9F7}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 196: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{A58F47CC-FF65-4152-B0B1-666C643A5BFC}" refers to invalid object "AcETransmit.dll". Action Taken: No Action Taken. 197: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{A5935BA4-F591-413D-905C-66E2F2AF0735}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 198: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{A610AC29-F739-4C2A-9400-70AF488A3C23}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 199: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{A6E28B64-42C3-4518-B926-65AB6BDB2CF1}" refers to invalid object "AcDrCommon.dll". Action Taken: No Action Taken. 200: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken. 201: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{AA055959-C7F1-4CFD-A2D1-8881D547E79C}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 202: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{AC616378-FC04-4FCC-AB22-DB2D8622AA4C}" refers to invalid object "acETransmitui.arx". Action Taken: No Action Taken. 203: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{AD8D5EEF-2D87-489F-BE7C-10D9A9C23A3C}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 204: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{AE1348D9-6BC1-4F2E-8903-7E894E0B7199}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 205: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{AF0F641B-9CCE-4474-8582-EFE0A38410FC}" refers to invalid object "AcTcTools.arx". Action Taken: No Action Taken. 206: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{AF2B061F-DE61-421E-A4C7-9DCC77B001F4}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 207: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{B171FBE5-2002-4F93-B71A-24D1749BA6F1}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 208: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{B17C17E0-382C-4A3F-8D27-BAC759D66781}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 209: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{B300A5BE-819A-4F6A-A452-DD115F4981D1}" refers to invalid object "AcObjClassImp.arx". Action Taken: No Action Taken. 210: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{B34E3425-00AC-4C25-8800-EB5C80BF97F7}" refers to invalid object "vl.arx". Action Taken: No Action Taken. 211: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{B3922BE8-7DE6-49C7-A6CD-CA35899C499F}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 212: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{B4245981-1737-491D-9BA1-88D628259F4F}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 213: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{B47196BC-D4AB-41BB-A771-543D67CFC9F5}" refers to invalid object "AcETransmit.dll". Action Taken: No Action Taken. 214: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{B5B91160-9818-4E96-BD97-B981A7AF8E06}" refers to invalid object "AcFocusCtrl16.dll". Action Taken: No Action Taken. 215: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{B68C9A08-89A0-4A9D-A3CE-7951EBE5E08F}" refers to invalid object "AcDrCommon.dll". Action Taken: No Action Taken. 216: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{B7866F36-CA7E-4495-80A0-457435A5EA19}" refers to invalid object "AcDrCommon.dll". Action Taken: No Action Taken. 217: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{B89CCEBE-5B33-4646-9CD2-D1DCFDA16242}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 218: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{BB38C5A6-BB24-4986-9782-2FCD6437B1B1}" refers to invalid object "AcStMgr.dll". Action Taken: No Action Taken. 219: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{BB8CA337-87D3-11D6-A55B-0060B0875CB4}" refers to invalid object "AcStLtype.dll". Action Taken: No Action Taken. 220: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{BB8CA339-87D3-11D6-A55B-0060B0875CB4}" refers to invalid object "AcStTStyle.dll". Action Taken: No Action Taken. 221: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{BD41FC2A-1A19-47B2-A361-D64CD9833AD5}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 222: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{BD41FC2B-1A19-47B2-A361-D64CD9833AD5}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 223: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{BE67D23F-E36A-11D5-B4E5-00B0D03E954A}" refers to invalid object "AcTc.dll". Action Taken: No Action Taken. 224: Sun Jun 26 11:52:23 2005 => Entry "HKCR\CLSID\{BECFA513-0C01-458E-B468-657849849E33}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 225: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{C0F0AB90-05BF-4555-AE09-8AC5EC775309}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 226: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{C118EE4F-3692-4B1F-BBC7-1F1911E64910}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 227: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{C14AD0AE-7C2D-48E7-B8FC-2D48AD9149D1}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 228: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{C1A8AF25-1257-101B-8FB0-0020AF039CA3}" refers to invalid object "D:\Programme\Empire Interactive\Mashed Demo\MCI32.OCX". Action Taken: No Action Taken. 229: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{C1B19206-6E9A-49F2-A937-6F804AF4C477}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 230: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{C1FA096D-C442-3B7F-90C9-7299B16A2989}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 231: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{C3E6AAC1-5DA2-48A9-ACC4-666EDD788084}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 232: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{C48D6DB4-09BB-442A-899D-7B85B1011FB9}" refers to invalid object "AcSmNav.arx". Action Taken: No Action Taken. 233: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{C504B291-944A-4828-9CFC-D3727B651AC7}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 234: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{C64EA053-7634-4466-89CF-AFDAB92C8F1B}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 235: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{C6CB13D4-3E36-4AB8-80D2-FC202CBB0ACD}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 236: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{C8298CDD-FB72-40A1-B39A-5A51E13EBEC6}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 237: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{C8710257-8A07-4E19-855B-FD685D8939A7}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 238: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{C8F4366D-BAC6-4463-9F42-C2627D8E86FB}" refers to invalid object "acdcsymbols.arx". Action Taken: No Action Taken. 239: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{C9AB9290-FC5A-458B-AEB4-BDF9BE6A5E55}" refers to invalid object "AcTcTools.arx". Action Taken: No Action Taken. 240: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{C9B1F283-9A3A-4BEA-B425-34D3E868CD78}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 241: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{CA665E1B-2ACF-4984-B9B6-04965AFEBF0C}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 242: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{CC54D9C4-CB60-46F3-9B0C-7B4565B26824}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 243: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{CC7F3967-6919-42E6-A2ED-6FFA0697AFBB}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 244: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{CD5C7ABB-9A0C-4C3A-B0C7-73296AFF7EC1}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 245: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{CEDD7570-F7B8-40D1-98C6-38B8D26CCFD6}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 246: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{D02729A2-65C5-470A-93B0-17715C9D6555}" refers to invalid object "AcTcTools.arx". Action Taken: No Action Taken. 247: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{D0C90C35-1ADD-40F5-8B5D-90DE4E6DACB8}" refers to invalid object "ProjectPointClient.dll". Action Taken: No Action Taken. 248: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{D15AAEC7-3F91-487A-9558-910CF4ACFE2F}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 249: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{D3F43638-64EF-417F-98C4-D41439051A23}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 250: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{D4AC5178-7768-4F83-9865-D4F1AA0333E5}" refers to invalid object "acdctextstyles.arx". Action Taken: No Action Taken. 251: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{D54C093F-BABF-419A-8C7F-F4BEE70267F6}" refers to invalid object "AcEPlotCore.dll". Action Taken: No Action Taken. 252: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22}" refers to invalid object "AcETransmit.dll". Action Taken: No Action Taken. 253: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{D621630B-0BFA-480E-94EF-2EEA1BD58D51}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 254: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{D6E617DD-97D4-41DD-BD2F-56C1FFBF8BFD}" refers to invalid object "acdclinetypes.arx". Action Taken: No Action Taken. 255: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{D7EC585A-02A5-45E7-8792-7F1A9175E7F8}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 256: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{D7F62684-30B2-4652-8460-C12FBC7E9D2E}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 257: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{D8538A54-4BBD-42B8-8C5F-FAC5CA7B4CA4}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 258: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{D8ED77BE-9062-4E7C-9402-962BE0C836C4}" refers to invalid object "AcEPlotCommon.dll". Action Taken: No Action Taken. 259: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{d8f1eee0-f634-11cf-8700-00a0245d918b}" refers to invalid object "a3d.dll". Action Taken: No Action Taken. 260: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{DAB9A45B-39DA-46D9-ADE6-A2D49DDBE577}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 261: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{DB09FC5C-EB2A-49D0-ADA5-C771FD61862C}" refers to invalid object "cao16.dll". Action Taken: No Action Taken. 262: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{DDE306CA-B5C1-4C92-AFAB-2B37D01A717F}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 263: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{DEC6F1C3-58C3-49D0-A3E8-4C9A730B8190}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 264: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{E186066F-8228-48F9-B0CF-5164FE23CC4A}" refers to invalid object "acETransmitui.arx". Action Taken: No Action Taken. 265: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{E2CD2B06-5B97-41D9-AA27-18AC0F98505F}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 266: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{E2E8A2A9-935D-4BB5-9347-717DDAEB327F}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 267: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{E4048BDD-B397-4A27-ABEB-ED0F88B41756}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 268: Sun Jun 26 11:52:24 2005 => Entry "HKCR\CLSID\{E4727F6D-8534-4CC5-8731-FEC2D7570F4C}" refers to invalid object "achlnkui.arx". Action Taken: No Action Taken. 269: Sun Jun 26 11:52:25 2005 => Entry "HKCR\CLSID\{E4A55764-4C3D-405E-BCCB-8C81AB6DBCFC}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 270: Sun Jun 26 11:52:25 2005 => Entry "HKCR\CLSID\{E4F2A54A-AF3A-4366-ACE0-F11F189D1A49}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 271: Sun Jun 26 11:52:25 2005 => Entry "HKCR\CLSID\{E57B2E09-8B70-4C6B-B70F-06886ABA4684}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 272: Sun Jun 26 11:52:25 2005 => Entry "HKCR\CLSID\{E616BB3D-C830-424E-966B-65C54F4C150C}" refers to invalid object "AcDmPropertyEditors.arx". Action Taken: No Action Taken. 273: Sun Jun 26 11:52:25 2005 => Entry "HKCR\CLSID\{E631D337-7F88-44C8-B63F-C9031292FB4E}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 274: Sun Jun 26 11:52:25 2005 => Entry "HKCR\CLSID\{E68312A2-580C-4F22-BCD9-2E0CE58CB135}" refers to invalid object "acismui.arx". Action Taken: No Action Taken. 275: Sun Jun 26 11:52:25 2005 => Entry "HKCR\CLSID\{E6FED699-B021-425F-9B7C-E631551E2E41}" refers to invalid object "ProjectPointClient.dll". Action Taken: No Action Taken. 276: Sun Jun 26 11:52:25 2005 => Entry "HKCR\CLSID\{E8009946-92BE-45CA-A2F6-22A607FE41D8}" refers to invalid object "AcStMgr.dll". Action Taken: No Action Taken. 277: Sun Jun 26 11:52:25 2005 => Entry "HKCR\CLSID\{EA6D6140-B967-4D4F-90A8-7F1B2E350B03}" refers to invalid object "AcStMgr.dll". Action Taken: No Action Taken. 278: Sun Jun 26 11:52:25 2005 => Entry "HKCR\CLSID\{EBF2737C-503C-417B-9157-BE52BD858BFF}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 279: Sun Jun 26 11:52:25 2005 => Entry "HKCR\CLSID\{EC5EB7D5-F7B0-43EB-BBFC-5B66535262C5}" refers to invalid object "cao16.dll". Action Taken: No Action Taken. 280: Sun Jun 26 11:52:25 2005 => Entry "HKCR\CLSID\{ECC7712B-3A38-440A-BBF5-531D811B16A5}" refers to invalid object "AcEPlotCore.dll". Action Taken: No Action Taken. 281: Sun Jun 26 11:52:25 2005 => Entry "HKCR\CLSID\{ECE597DD-A801-4B74-8BFD-E21A31460F6A}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 282: Sun Jun 26 11:52:25 2005 => Entry "HKCR\CLSID\{ECF0DB32-1396-4402-8231-0B4FC1124537}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 283: Sun Jun 26 11:52:25 2005 => Entry "HKCR\CLSID\{ED2490B2-06E6-4B7E-80D7-1ADAD6363694}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 284: Sun Jun 26 11:52:25 2005 => Entry "HKCR\CLSID\{EEE6A656-87AC-11D6-A55B-0060B0875CB4}" refers to invalid object "AcStMgr.dll". Action Taken: No Action Taken. 285: Sun Jun 26 11:52:25 2005 => Entry "HKCR\CLSID\{EEE6A65A-87AC-11D6-A55B-0060B0875CB4}" refers to invalid object "AcStMgr.dll". Action Taken: No Action Taken. 286: Sun Jun 26 11:52:25 2005 => Entry "HKCR\CLSID\{EF4A5D29-39FA-49C6-B7D3-F2D2D0423245}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 287: Sun Jun 26 11:52:25 2005 => Entry "HKCR\CLSID\{EF5A02F6-7908-407F-A945-2BCB2AE589AB}" refers to invalid object "AcPEXCtl.arx". Action Taken: No Action Taken. 288: Sun Jun 26 11:52:26 2005 => Entry "HKCR\CLSID\{F5586766-A8F5-4DA4-99D2-4FA1A45FDFBF}" refers to invalid object "AcEPlotViewer.dll". Action Taken: No Action Taken. 289: Sun Jun 26 11:52:26 2005 => Entry "HKCR\CLSID\{F5EF74D3-7179-4897-97C9-FB6AC324D85D}" refers to invalid object "AcTable.arx". Action Taken: No Action Taken. 290: Sun Jun 26 11:52:27 2005 => Entry "HKCR\CLSID\{f612954d-3b0b-4c56-9563-227b7be624b4}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken. 291: Sun Jun 26 11:52:27 2005 => Entry "HKCR\CLSID\{F6138459-F06F-4007-AB1E-9BC06F28E864}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 292: Sun Jun 26 11:52:27 2005 => Entry "HKCR\CLSID\{F65301D2-6C8D-42A2-9E20-50E21CD5A223}" refers to invalid object "axdb16.dll". Action Taken: No Action Taken. 293: Sun Jun 26 11:52:27 2005 => Entry "HKCR\CLSID\{F8683F4B-E026-4945-856C-B28BC1CC2997}" refers to invalid object "acdctblstys.arx". Action Taken: No Action Taken. 294: Sun Jun 26 11 |
|
|
|
|
|
|
26.06.2005, 17:32
Ehrenmitglied
Beiträge: 29434 |
#5
Bobinator
SPAMfighter --> kannst du wieder installieren, ich kannte das Tool nicht und im "Ueberschwang" der Reinigungsfreude......  Deaktivieren Wiederherstellung (dann aktiviere sie wieder) «XP Arbeitsplatz-->rechtsklick, dann auf Eigenschaften--->Reiter Systemwiederherstellung--->Häkchen setzen bei Systemwiederherstellung auf allen Laufwerken deaktivieren. ClaerProg..lade die neuste Version <1.5.1 http://virus-protect.org/temp.html <und saeubere den Browser. Das Programm löscht die Surfspuren des Internet Explorers ab Version 5.0, des Netscape/Mozilla und des Opera: - Verlauf - Temporäre Internetfiles (Cache) - index.dat •KillBox http://virus-protect.org/killbox.html •Delete File on Reboot <--anhaken und klicke auf das rote Kreuz, wenn gefragt wird, ob "Do you want to reboot? "----> klicke auf "no",und kopiere das naechste rein, erst beim letzten auf "yes" C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nurb Glue 2 Global\4 Internet.exe C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nurb Glue 2 Global C:\Dokumente und Einstellungen\Bob\Lokale Einstellungen\Temp\xdkdktcz.exe C:\Dokumente und Einstellungen\Bob\Lokale Einstellungen\Temp\sfancgwj.exe C:\Dokumente und Einstellungen\Bob\Lokale Einstellungen\Temp\xdkdktcz.exe PC neustarten + poste das neue Log vom HijackTis __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
22.10.2005, 00:01
Member
Beiträge: 47 |
#6
Hi!
Sry dassich hier einfach in den Thread reinposte, aber ich hab wahrscheinlich ein ähnliches Problem und wollte nicht gleich nen neuen Thread aufmachen. Ich hab es bereits mit ner pm an sabina versucht, da sie hier den Überblick zu haben scheint, bekam aber bis jetzt keine Antwort. Vllt kann mir jemand sagen an wen genau ich mich wenden sollte. Danke im Voraus -Razor |
|
|
|
|
|
|
22.10.2005, 22:22
Ehrenmitglied
Beiträge: 29434 |
#7
Hallo@razor_89
Hijackthis http://computercops.biz/zx/Merijn/hijackthis.zip http://virus-protect.org/hjtkurz.html Lade/entpacke HijackThis in einem Ordner --> None of the above just start the program --> Save--> Savelog -->es öffnet sich der Editor nun das KOMPLETTE Log mit rechtem Mausklick abkopieren und ins Forum mit rechtem Mausklick "einfügen" __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
23.10.2005, 16:43
Member
Beiträge: 47 |
#8
Hi Sabina!
Ich hätte inzwischen auch einen Escan-log zur Verfügung und zahlreiche Berichte der Datei DatFind.bat. Diesen Eintrag hier habe ich vorhin nicht bemerkt, sonst hätte ich bereits früher reagiert! Hier erstmal mein Logfile: (in einem anderen Forum habe ich gelesen es sei besser Dinge wie Links zu editieren, deshalb habe ich dies auch hier getan) Logfile of HijackThis v1.99.1 Scan saved at 16:41:13, on 23.10.2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Programme\iTunes\iTunesHelper.exe C:\Programme\Java\jre1.5.0_04\bin\jusched.exe C:\Programme\PC-Zeit\trap.exe C:\Programme\AVPersonal\AVGNT.EXE C:\WINDOWS\system32\ctfmon.exe C:\Programme\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe C:\Programme\Logitech\SetPoint\KEM.exe c:\progra~1\intern~1\iexplore.exe C:\Programme\Logitech\SetPoint\KHALMNPR.EXE C:\Programme\Internet Explorer\iexplore.exe C:\PROGRAMME\AVPERSONAL\AVGUARD.EXE C:\Programme\AVPersonal\AVWUPSRV.EXE C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\Programme\iPod\bin\iPodService.exe C:\Programme\ICQLite\ICQLite.exe C:\Programme\MSN Messenger\msnmsgr.exe C:\Programme\Mozilla Firefox\firefox.exe C:\Programme\Internet Explorer\iexplore.exe c:\programme\winamp\winamp.exe C:\Programme\BearShare\BearShare.exe C:\Programme\BearShare\BearShare.exe C:\WINDOWS\system32\NOTEPAD.EXE D:\Programme\Hijackthis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = h**p://www.ctvlgzxktdesxecefeoef.com/yYFbZRqvKiMjmYMWcw5n9zeV/aHtWmTlTVSe05jux0znikbSpIcWifVztko78Il2.jpg R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {58C4ED5B-BF92-4326-9409-8F8B11662515} - C:\DOKUME~1\razor\ANWEND~1\SOFTID~1\scr okay.exe (file missing) O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [iTunesHelper] C:\Programme\iTunes\iTunesHelper.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_04\bin\jusched.exe O4 - HKLM\..\Run: [NetPumper] "C:\NetPumper\NetPumperIEProxy.exe" O4 - HKLM\..\Run: [MessengerPlus3] "C:\Programme\Messenger Plus! 3\MsgPlus.exe" O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe O4 - HKLM\..\Run: [OyES4fH] C:\WINDOWS\ecwkj.exe O4 - HKLM\..\Run: [Power Scan] C:\Programme\Power Scan\powerscan.exe O4 - HKLM\..\Run: [liesballaxis4] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\drive junk lies ball\Grid Axis.exe O4 - HKLM\..\Run: [pczeit] "C:\Programme\PC-Zeit\trap.exe" O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe O4 - HKLM\..\Run: [AVGCtrl] "C:\Programme\AVPersonal\AVGNT.EXE" /min O4 - HKCU\..\Run: [title way] C:\DOKUME~1\razor\ANWEND~1\DVDDOW~1\Surfhopeoption.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [LDM] C:\Programme\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -trayboot O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Programme\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O4 - Global Startup: Logitech SetPoint.lnk = C:\Programme\Logitech\SetPoint\KEM.exe O8 - Extra context menu item: Download with NetPumper - C:\NetPumper\AddUrl.htm O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res: //C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Programme\IrfanView\Ebay\Ebay.htm O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (file missing) O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (file missing) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - h**p://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1098139004937 O16 - DPF: {D7A4D8FB-83F0-40E5-954F-88F48D15AE96} (ICQVideoWindow Class) - h**p://xtraz.icq.com/xtraz/activex/ICQVideoControl.cab O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - h**p://arcade.icq.com/carlo/zuma/popcaploader_v5.cab O16 - DPF: {FB48C7B0-EB66-4BE6-A1C5-9DDF3C37249A} (MCSendMessageHandler Class) - h**p://xtraz.icq.com/xtraz/activex/MISBH.cab O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\PROGRAMME\AVPERSONAL\AVGUARD.EXE O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Programme\AVPersonal\AVWUPSRV.EXE O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Programme\iPod\bin\iPodService.exe O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Programme\Gemeinsame Dateien\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe |
|
|
|
|
|
|
23.10.2005, 17:30
Ehrenmitglied
Beiträge: 29434 |
#9
Hallo@razor_89
öffne das HijackThis -- Button "scan" -- vor die Malware-Einträge Häkchen setzen -- Button "Fix checked" -- PC neustarten R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = h**p://www.ctvlgzxktdesxecefeoef.com/yYFbZRqvKiMjmYMWcw5n9zeV/aHtWmTlTVSe05jux0znikbSpIcWifVztko78Il2.jpg R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file) O4 - HKLM\..\Run: [NetPumper] "C:\NetPumper\NetPumperIEProxy.exe" O4 - HKLM\..\Run: [MessengerPlus3] "C:\Programme\Messenger Plus! 3\MsgPlus.exe" O4 - HKLM\..\Run: [OyES4fH] C:\WINDOWS\ecwkj.exe O4 - HKLM\..\Run: [Power Scan] C:\Programme\Power Scan\powerscan.exe O4 - HKLM\..\Run: [liesballaxis4] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\drive junk lies ball\Grid Axis.exe O4 - HKCU\..\Run: [title way] C:\DOKUME~1\razor\ANWEND~1\DVDDOW~1\Surfhopeoption.exe O4 - HKCU\..\Run: [LDM] C:\Programme\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe O8 - Extra context menu item: Download with NetPumper - C:\NetPumper\AddUrl.htm O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) PC neustarten deinstalliere: Power Scan NetPumper Messenger Plus! 3 CCleaner (loesche alle temporaeren Dateien ), hake auch index.dat an http://virus-protect.org/temp.html scanne mit escan und poste den scanreport http://virus-protect.org/escan.html __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
23.10.2005, 17:51
Member
Beiträge: 47 |
#10
Hi!
Ich habe jetzt alles so ausgeführt wie oben beschrieben, bis auf den escan. Bevor ich nämlich anfange diesen 1,5 Stunden andauernden scan durchzuführen, möchte ich zunächst wissen ob der scan den ich gestern bereits im abgesicherten Modus durchgeführt habe brauchbar ist oder ob ich einen neuen brauche und ob dieser ebenfalls im abgesicherten Modus gestartet werden sollte. Danke Razor |
|
|
|
|
|
|
23.10.2005, 17:53
Ehrenmitglied
Beiträge: 29434 |
#11
Zitat Wichtig: Sollte abschließend ein erneuter Scan mit eScan durchgeführt werden, dann ist es zwingend notwendig, daß die 'mwav.log' zuvor gelöscht wird, da diese nicht überschrieben, sondern nur erweitert wird!dann scanne im abgesicherten modus __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
23.10.2005, 19:49
Member
Beiträge: 47 |
#12
Escan ist fertig, umfasst aber als textdatei 16 MB und ist viel zu groß für das Forum (Firefox ist abgestürzt)
Reicht auch ein Teil des Reports? |
|
|
|
|
|
|
23.10.2005, 21:47
Ehrenmitglied
Beiträge: 29434 |
#13
refers to invalid object und die temporaeren brauchst du nicht mit abzukopieren
was interessiert: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
23.10.2005, 22:16
Member
Beiträge: 47 |
#14
Bin mir nich ganz sicher was genau jetzt benötigt wird un ob ich da überhaupt die richtige Datei hab O.o da steht so viel drinn...
Soll ich einfach alles mit C:\Dokumente und Einstellungen\All Users\Anwendungsdaten raussuchen? Hier mal die Übersicht: Sun Oct 23 19:33:13 2005 => ***** Scanning complete. ***** Sun Oct 23 19:33:13 2005 => Total Objects Scanned: 180656 Sun Oct 23 19:33:13 2005 => Total Virus(es) Found: 38 Sun Oct 23 19:33:13 2005 => Total Disinfected Files: 0 Sun Oct 23 19:33:13 2005 => Total Files Renamed: 0 Sun Oct 23 19:33:13 2005 => Total Deleted Objects: 0 Sun Oct 23 19:33:13 2005 => Total Errors: 195 Sun Oct 23 19:33:13 2005 => Time Elapsed: 01:34:18 Sun Oct 23 19:33:13 2005 => Virus Database Date: 2005/10/22 Sun Oct 23 19:33:13 2005 => Virus Database Count: 155555 Sun Oct 23 19:33:13 2005 => Scan Completed. Un irgendwie is da alles haargenau aufgelistet. Refers to invalid objekt findich da grad garnich dafür aber tausende von "Sun Oct 23 18:00:06 2005 => Scanning File....." und einige mit "Sun Oct 23 18:00:06 2005 => System found infected with......" Sry dassich so schwer von Begriff bin aber ich bitte nochmal um genauere Anweisungen... Gruß´ Razor [edit] welches sind die temporären? hab jetzt die refers to invalid etc gefunden! [/edit] Dieser Beitrag wurde am 23.10.2005 um 22:20 Uhr von razor_89 editiert.
|
|
|
|
|
|
|
23.10.2005, 22:24
Ehrenmitglied
Beiträge: 29434 |
#15
poste einfach alles. erst mal die haelfte, dann antworte ich und dann den zweiten teil
__________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
Um auf dieses Thema zu ANTWORTEN
bitte erst » hier kostenlos registrieren!!
bitte erst » hier kostenlos registrieren!!
Folgende Themen könnten Dich auch interessieren:
Copyright © 2024, Protecus.de - Protecus Team - Impressum / Mediadaten
Logfile of HijackThis v1.97.7
Scan saved at 15:50:09, on 23.06.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe
C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
C:\Programme\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Programme\Java\j2re1.4.2_04\bin\jusched.exe
C:\Programme\MSN Apps\Updater\01.02.3000.1001\de\msnappau.exe
C:\Programme\SPAMfighter\SFAgent.exe
C:\Programme\MessengerPlus! 3\MsgPlus.exe
C:\Programme\Messenger\msmsgs.exe
C:\Programme\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\Hewlett-Packard\Digital Imaging\bin\hposol08.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe
C:\Programme\Norton AntiVirus\navapsvc.exe
C:\Programme\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Dokumente und Einstellungen\Bob\Lokale Einstellungen\Temp\HijackThis.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\MSN Messenger\msnmsgr.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://kitksjmktad.net/vsH0mbSjQq5vf5/W/gGZYleqzLwgyeLHQtAdEN0d76jYoWKU7p1idR7kGcGcO3lC.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.de/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/de/srchasst/srchcust.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://home.microsoft.com/access/autosearch.asp?p=%s
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://windowsupdate.microsoft.com/
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {3CC17A41-57C5-9F29-0E56-C0AE57E6ED91} - C:\DOKUME~1\Bob\ANWEND~1\DUMBIN~1\Managerbib.exe
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {67028FE7-CA1B-9B71-586F-DB489333755D} - C:\DOKUME~1\Bob\ANWEND~1\DUMBIN~1\Managerbib.exe
O2 - BHO: (no name) - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Programme\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: (no name) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\MSN Apps\MSN Toolbar\01.02.4000.1001\de\msntb.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programme\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {E3215F20-3212-11D6-9F8B-00D0B743919D} - (no file)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programme\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\MSN Apps\MSN Toolbar\01.02.4000.1001\de\msntb.dll
O4 - HKLM\..\Run: [ccApp] "C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Programme\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Programme\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\j2re1.4.2_04\bin\jusched.exe
O4 - HKLM\..\Run: [msnappau] "C:\Programme\MSN Apps\Updater\01.02.3000.1001\de\msnappau.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [SPAMfighter Agent] "C:\Programme\SPAMfighter\SFAgent.exe" update delay 60
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Programme\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [insidelitesecondsave] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\pokemediainsidelite\LogoMove.exe
O4 - HKLM\..\Run: [STOPzilla] C:\Programme\STOPzilla!\STOPzilla.exe /autostart
O4 - HKLM\..\Run: [2 global bone gpl] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nurb Glue 2 Global\dale bone.exe
O4 - HKCU\..\Run: [locks test] C:\DOKUME~1\Bob\ANWEND~1\BAITIN~1\Scr second.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Programme\Gemeinsame Dateien\Autodesk Shared\acstart16.exe
O4 - Global Startup: hp psc 2000 Series.lnk = C:\Programme\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: officejet 6100.lnk = ?
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra 'Tools' menuitem: Sun Java Konsole (HKLM)
O9 - Extra button: Recherche-Assistent (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/raptisoftgameloader.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} - http://sib1.od2.com/common/Member/ClientInstall/10.00.0036/OCI/setup.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1114877272355
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38143.4944560185
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {E6938DD8-6D3E-435A-B4B5-DB39BB966A29} - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab