Home » Viren, Trojaner & Malware Forum » win32dir hat sich bei mir eingeschlichen / Viren gelöscht ? » Themenansicht
win32dir hat sich bei mir eingeschlichen / Viren gelöscht ? |
||
|---|---|---|
| #0
| ||
|
27.08.2005, 02:10
...neu hier
Beiträge: 3 |
||
 
|
|
|
|
27.08.2005, 07:34
Member
 Beiträge: 279 |
#2
Morgen,
Nunja, der ist ja auch nicht ganz komplett ;-) Bei Escancheck: Datei -> Escanlog einffügen -> MWAV.LOG auswählen -> OK ->In dem Escancheck Fenster sollten Nun alle möglichen Einträge zu finden sein -> ALLE selektieren -> "Dateien löschen" unten rechts anklicken Nun sollten die Dateien alle gelöscht sein.... Mache aber zusätzlich noch mal einen HJT scan: http://yourhighness.eddys-domain.de/hjtkurz.html MfG, __________ Yourhighness Yourhighness' Seite / Mein Blog (Englisch) |
|
|
|
|
|
|
27.08.2005, 11:27
...neu hier
Themenstarter Beiträge: 3 |
#3
Moin,
hier der Rest von heute nacht (konnte wohl nicht mehr richtig gucken): 258: Fri Aug 26 20:37:01 2005 => Entry "HKCR\TypeLib\{82B09260-0BD0-11D4-85C3-0001023CB076}" refers to invalid object "C:\Programme\Creative\LAVA Components\Lava3.DLL". Action Taken: No Action Taken. 259: Fri Aug 26 20:37:01 2005 => Entry "HKCR\TypeLib\{896E7419-3851-11D3-AA54-F19F172FE2E2}" refers to invalid object "C:\Programme\Creative\ShareDLL\ServProd\CTNMSP.DLL". Action Taken: No Action Taken. 260: Fri Aug 26 20:37:01 2005 => Entry "HKCR\TypeLib\{9E93C96F-CF0D-43F6-8BA8-B807A3370712}" refers to invalid object "d:\Programme\iTunes\iTunes.exe". Action Taken: No Action Taken. 261: Fri Aug 26 20:37:02 2005 => Entry "HKCR\TypeLib\{A48FE2DA-246B-4ABF-8BDE-97C48167FF90}" refers to invalid object "C:\Programme\MSI\Live Update 2\MSIDev.ocx". Action Taken: No Action Taken. 262: Fri Aug 26 20:37:02 2005 => Entry "HKCR\TypeLib\{B0528CD1-F67E-11D2-8F8E-00C04F4C3B9F}" refers to invalid object "C:\Programme\CREATIVE\CTCDDB\CDDBCONTROL.DLL". Action Taken: No Action Taken. 263: Fri Aug 26 20:37:02 2005 => Entry "HKCR\TypeLib\{B77A1DC6-F117-4ED4-9751-53CB5AE50EF2}" refers to invalid object "C:\WINDOWS\TEMP\VBE\MSForms.EXD". Action Taken: No Action Taken. 264: Fri Aug 26 20:37:02 2005 => Entry "HKCR\TypeLib\{BBADE3C0-5D96-11D4-A4EE-00A0C98E46CC}" refers to invalid object "C:\Programme\Creative\ShareDLL\ServProd\CTJBSP.DLL". Action Taken: No Action Taken. 265: Fri Aug 26 20:37:02 2005 => Entry "HKCR\TypeLib\{BEBECBFE-078B-11D3-87DB-00C0F02D00F6}" refers to invalid object "C:\Programme\Creative\ShareDLL\AudPlug\Amspvts.dll". Action Taken: No Action Taken. 266: Fri Aug 26 20:37:02 2005 => Entry "HKCR\TypeLib\{BF7E46B8-BF24-4ABD-98B7-62DE45FC5939}" refers to invalid object "F:\Programme\Pinnacle\Studio9\programs\Deko.ocx". Action Taken: No Action Taken. 267: Fri Aug 26 20:37:02 2005 => Entry "HKCR\TypeLib\{CC144BF1-2A0D-11D3-A9F4-0080488267EF}" refers to invalid object "C:\Programme\CREATIVE\CTCDDB\CTCDDB.DLL". Action Taken: No Action Taken. 268: Fri Aug 26 20:37:02 2005 => Entry "HKCR\TypeLib\{D0571F19-8904-40B6-8DDB-EBEA4F72B09D}" refers to invalid object "C:\Programme\ahead\nero\APHandler.dll". Action Taken: No Action Taken. 269: Fri Aug 26 20:37:02 2005 => Entry "HKCR\TypeLib\{D4EBCA6A-CB6F-4A8C-8715-20D078E20ADE}" refers to invalid object "J:\launch.ocx". Action Taken: No Action Taken. 270: Fri Aug 26 20:37:02 2005 => Entry "HKCR\TypeLib\{D8E7D41A-5852-11D2-8061-00A0C98F3C48}" refers to invalid object "C:\Programme\Creative\SBLive2k\Recorder\RecSvr.dll". Action Taken: No Action Taken. 271: Fri Aug 26 20:37:02 2005 => Entry "HKCR\TypeLib\{E0C3E880-1458-11D4-85C3-0001023CB076}" refers to invalid object "C:\Programme\Creative\LAVA Components\Lava3Aud.DLL". Action Taken: No Action Taken. 272: Fri Aug 26 20:37:02 2005 => Entry "HKCR\TypeLib\{EF6C6648-89B5-4D1E-AEDA-023C3D91179B}" refers to invalid object "C:\DOKUME~1\Soenke\LOKALE~1\Temp\Word8.0\MSForms.exd". Action Taken: No Action Taken. 273: Fri Aug 26 20:37:02 2005 => Entry "HKCR\TypeLib\{F0E9601C-41F2-11D3-ABC9-00C04FA34C58}" refers to invalid object "e:\netObject\NDom.dll". Action Taken: No Action Taken. 274: Fri Aug 26 20:37:02 2005 => Entry "HKCR\TypeLib\{F41CC1B0-1265-11D0-AFCE-00A024CE387B}" refers to invalid object "E:\netObject\NFusion.tlb". Action Taken: No Action Taken. 275: Fri Aug 26 20:37:02 2005 => Entry "HKCR\TypeLib\{F57B25DE-1945-4BE1-8B3D-A1065F8B31A9}" refers to invalid object "G:\player\WMMP.EXE". Action Taken: No Action Taken. 276: Fri Aug 26 20:37:02 2005 => Entry "HKCR\TypeLib\{FAE606D6-D573-11D2-8DD4-00A0C98E9FB1}" refers to invalid object "C:\WINDOWS\SYSTEM32\CTDEVCON.DLL". Action Taken: No Action Taken. 277: Fri Aug 26 20:37:02 2005 => Entry "HKCR\TypeLib\{FBC85E30-B858-11D2-BDFA-000000000000}" refers to invalid object "F:\Fibunet\fibunet.exe". Action Taken: No Action Taken. 278: Fri Aug 26 20:37:02 2005 => Entry "HKCR\.001" refers to invalid object "001file". Action Taken: No Action Taken. 279: Fri Aug 26 20:37:03 2005 => Entry "HKCR\.psp" refers to invalid object "PaintShopPro8.Image". Action Taken: No Action Taken. 280: Fri Aug 26 20:37:03 2005 => Entry "HKCR\.tub" refers to invalid object "PaintShopPro8.PictureTube". Action Taken: No Action Taken. 281: Fri Aug 26 20:37:03 2005 => Entry "HKCR\.xmd" refers to invalid object "xmd". Action Taken: No Action Taken. 282: Fri Aug 26 20:37:03 2005 => Entry "HKCR\abmFile\shell\open\command" refers to invalid object "F:\Programme\arcsoft\PhotoBase\PhotoBase.exe "%1"". Action Taken: No Action Taken. 283: Fri Aug 26 20:37:04 2005 => Entry "HKCR\albumFile\shell\open\command" refers to invalid object "F:\Programme\SDViewerDSC.exe "%1"". Action Taken: No Action Taken. 284: Fri Aug 26 20:37:04 2005 => Entry "HKCR\bkaFile\shell\open\command" refers to invalid object "F:\Programme\arcsoft\PhotoBase\PhotoBase.exe "%1"". Action Taken: No Action Taken. 285: Fri Aug 26 20:37:04 2005 => Entry "HKCR\cdbFile\shell\open\command" refers to invalid object "F:\Programme\arcsoft\PhotoBase\PhotoBase.exe "%1"". Action Taken: No Action Taken. 286: Fri Aug 26 20:37:05 2005 => Entry "HKCR\dvfFile\shell\open\command" refers to invalid object "F:\Programme\DVFPreview.exe "%1"". Action Taken: No Action Taken. 287: Fri Aug 26 20:37:06 2005 => Entry "HKCR\FPC2005\shell\open\command" refers to invalid object ""L:\Programme\Foto-Kalender-Druckerei 2005\FPC2005.exe" "%1"". Action Taken: No Action Taken. 288: Fri Aug 26 20:37:07 2005 => Entry "HKCR\Kalender-Druckerei-2005.Dokument\shell\open\command" refers to invalid object "l:\Programme\Foto-Kalender-Druckerei 2005\fpc2005.exe "%1"". Action Taken: No Action Taken. 289: Fri Aug 26 20:37:07 2005 => Entry "HKCR\Kalender-Druckerei-2005.Dokument1\shell\open\command" refers to invalid object "l:\Programme\Foto-Kalender-Druckerei 2005\fpc2005.exe "%1"". Action Taken: No Action Taken. 290: Fri Aug 26 20:37:07 2005 => Entry "HKCR\Maguma_Studio.PHPProject\shell\open\command" refers to invalid object ""f:\Programme\Maguma\studio\Maguma_Studio.exe" "%1"". Action Taken: No Action Taken. 291: Fri Aug 26 20:37:09 2005 => Entry "HKCR\psfFile\shell\open\command" refers to invalid object "F:\Programme\arcsoft\PhotoImpression\PhotoImpression.exe "%1"". Action Taken: No Action Taken. 292: Fri Aug 26 20:37:10 2005 => Entry "HKCR\RDOtherReports.CoPatientProfileReport.1" refers to invalid object "{B2D88861-7A8D-11d4-A207-00E0291C5B71}}". Action Taken: No Action Taken. 293: Fri Aug 26 20:37:10 2005 => Entry "HKCR\Shell.AutoplayForSDViewerDSC\shell\open\command" refers to invalid object "F:\Programme\SDViewerDSC.exe". Action Taken: No Action Taken. 294: Fri Aug 26 20:37:10 2005 => Entry "HKCR\Studio.Document\shell\open\command" refers to invalid object "F:\Programme\Pinnacle\Studio9\programs\studio.exe "%1"". Action Taken: No Action Taken. 295: Fri Aug 26 20:37:10 2005 => Entry "HKCR\Studio.Dokument\shell\open\command" refers to invalid object "F:\PROGRA~1\Pinnacle\Studio9\programs\studio.exe "%1"". Action Taken: No Action Taken. 296: Fri Aug 26 20:37:11 2005 => Entry "HKCR\ttlFile\shell\open\command" refers to invalid object "F:\Programme\DVFPreview.exe "%1"". Action Taken: No Action Taken. 297: Fri Aug 26 20:37:11 2005 => Entry "HKCR\Viewer\shell\open\command" refers to invalid object ""C:\Programme\Dell Photo AIO Printer 962\Dell Printer Fax Tools\viewer.exe" %1". Action Taken: No Action Taken. 298: Fri Aug 26 21:16:39 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\Soenke\Lokale Einstellungen\Temporary Internet Files\Content.IE5\M12TKL8R\cd-client-4_16_0-en[1].exe is Not Scanned 299: Fri Aug 26 22:10:07 2005 => Result: ERROR!!! File D:\Soenke\Spiele\Counter-Strike2\Cheating-Death\cdeath.exe is Not Scanned 300: Fri Aug 26 22:10:08 2005 => Result: ERROR!!! File D:\Soenke\Spiele\Counter-Strike2\Cheating-Death\4.16.0\cd.dll is Not Scanned -------------------------------------------------- -------- DATEIEN ZUM LÖSCHEN HINZUGEFÜGT --------- -------------------------------------------------- 1: C:\WINDOWS\System32\Rpcmon.exe => Backdoor.Win32.Codbot.am 2: C:\WINDOWS\System32\TFTP5328 => Backdoor.Win32.Rbot.zh 3: C:\WINDOWS\system32\TFTP5328 => Backdoor.Win32.Rbot.zh 4: C:\Dokumente und Einstellungen\Tim\Lokale Einstellungen\Temp\BDECache\bde5D.tmp => Trojan.Win32.Krepper.y 5: C:\Dokumente und Einstellungen\Soenke\Lokale Einstellungen\Temporary Internet Files\Content.IE5\SP27OLI3\connect[1].htm => Trojan-Downloader.JS.Small.ac 6: C:\Programme\AVPersonal\INFECTED\HWCLOCK.EXE.VIR => Backdoor.Win32.Small.eo 7: C:\System Volume Information\_restore{A6ABD9E2-7832-4FA3-9A8A-C1A1DA78299E}\RP479\A0165229.exe => Backdoor.Win32.Codbot.am 8: D:\Soenke\Downloads\mirc.exe => tagged:Client-IRC.Win32.mIRC.602. -------------------------------------------------- -------------------- Statistik ------------------- -------------------------------------------------- Fri Aug 26 23:01:47 2005 => Total Objects Scanned: 300941 Fri Aug 26 23:01:47 2005 => Total Virus(es) Found: 56 Fri Aug 26 23:01:47 2005 => Total Errors: 300 Fri Aug 26 23:01:47 2005 => Virus Database Date: 2005/08/26 Fri Aug 26 23:01:47 2005 => Virus Database Count: 145789 Fri Aug 26 23:15:49 2005 => Total Objects Scanned: 300941 Fri Aug 26 23:15:49 2005 => Total Virus(es) Found: 56 Fri Aug 26 23:15:49 2005 => Total Errors: 300 HijackThis result Logfile of HijackThis v1.99.1 Scan saved at 23:37:20, on 26.08.2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE D:\Programme\FilZip\filzip.exe C:\DOKUME~1\ADMINI~1\LOKALE~1\Temp\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - Default URLSearchHook is missing O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: URLLink Class - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Programme\NewDotNet\newdotnet6_38.dll O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programme\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll O2 - BHO: 0190/0900 Warner Browser Helper - {D2F63D33-C571-41E9-9525-A17CA1804D3B} - C:\PROGRA~1\0900WA~1\0190WA~1\whelper1.dll O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Programme\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Programme\Canon\Easy-WebPrint\Toolband.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Programme\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [anvshell] anvshell.exe O4 - HKLM\..\Run: [Disc Detector] C:\Programme\Creative\ShareDLL\CtNotify.exe O4 - HKLM\..\Run: [McAfee Guardian] "C:\Programme\McAfee\McAfee Shared Components\Guardian\CMGrdian.exe" /SU O4 - HKLM\..\Run: [FLMMEDIONMOUSE] C:\Programme\Browser mouse\1.3\mouse32a.exe O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe -CheckReg O4 - HKLM\..\Run: [0190 Warner] C:\PROGRA~1\0900WA~1\0190WA~1\WARN0190.EXE O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~3.DLL,NewDotNetStartup -s O4 - HKLM\..\Run: [QuickTime Task] "D:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [SunJavaUpdateSched] K:\Programme\Java\jre1.5.0\bin\jusched.exe O4 - HKLM\..\Run: [RealTray] C:\Programme\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER O4 - HKLM\..\Run: [PivotSoftware] "C:\Programme\WinPortrait\wpctrl.exe" O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [AVGCtrl] C:\Programme\AVPersonal\AVGNT.EXE /min O4 - HKLM\..\Run: [AVSCHED32] C:\Programme\AVPersonal\AVSched32.EXE /min O4 - HKLM\..\Run: [DLBXCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLBXtime.dll,_RunDLLEntry@16 O4 - HKLM\..\Run: [dlbxmon.exe] "C:\Programme\Dell Photo AIO Printer 962\dlbxmon.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE O4 - Global Startup: Watch.lnk = C:\WINDOWS\twain_32\C6U14K\WATCH.exe O4 - Global Startup: Adobe Gamma Loader.lnk = ? O4 - Global Startup: Acrobat Assistant.lnk = C:\Programme\Adobe\Acrobat 6.0\Distillr\acrotray.exe O4 - Global Startup: NaturalColorLoad.lnk = ? O4 - Global Startup: Color Calibration.lnk = ? O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - K:\Programme\Java\jre1.5.0\bin\npjpi150.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - K:\Programme\Java\jre1.5.0\bin\npjpi150.dll O9 - Extra button: Mobilen Favoriten erstellen - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Programme\Microsoft ActiveSync\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Programme\Microsoft ActiveSync\INetRepl.dll O9 - Extra 'Tools' menuitem: Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Programme\Microsoft ActiveSync\INetRepl.dll O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - D:\Soenke\ICQ\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - D:\Soenke\ICQ\ICQ.exe O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\OFFICE11\REFIEBAR.DLL O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll O12 - Plugin for .UVR: C:\Programme\Internet Explorer\Plugins\NPUPano.dll O16 - DPF: {4E330863-6A11-11D0-BFD8-006097237877} (InstallFromTheWeb ActiveX Control) - http://tw.msi.com.tw/autobios/client/iftwclix.cab O16 - DPF: {6B4788E2-BAE8-11D2-A1B4-00400512739B} (PWMediaSendControl Class) - http://216.249.24.140/code/PWActiveXImgCtl.CAB O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall-Kontrolle) - http://housecall.trendmicro-europe.com/housecall/Xscan53.cab O16 - DPF: {8699D723-6DC6-47D3-B55C-489BA006B917} (WebInstall) - http://membersites.namezero.com/DOT-ANKE.CC-635041/de/webinstall.cab O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - O16 - DPF: {CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_03) - O17 - HKLM\System\CCS\Services\Tcpip\..\{2B60B758-E93C-4FC2-8889-B43F3E0E5F14}: NameServer = 212.7.148.65 212.7.148.97 O17 - HKLM\System\CCS\Services\Tcpip\..\{49A85D2C-D5B7-4CE4-A46D-D05290D72B5D}: NameServer = 192.168.120.252,192.168.120.253 O23 - Service: 0190/0900 Warner Überwachungsdienst (0190_0900_Warner_MonitorService) - Mirko Böer - C:\PROGRA~1\0900WA~1\0190WA~1\w0svc.exe O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Programme\AVPersonal\AVGUARD.EXE O23 - Service: Apache2 - Unknown owner - L:\apachefriends\xampp\apache\bin\Apache.exe" -k runservice (file missing) O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Programme\AVPersonal\AVWUPSRV.EXE O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE O23 - Service: AVM FRITZ!web Routing Service (de_serv) - AVM Berlin - C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe O23 - Service: dlbx_device - Dell - C:\WINDOWS\System32\dlbxcoms.exe O23 - Service: FileZilla Server FTP server (FileZilla Server) - Unknown owner - L:\apachefriends\xampp\FileZillaFTP\FileZillaServer.exe O23 - Service: GhostStartService - Symantec Corporation - C:\Programme\Symantec\Norton Ghost 2003\GhostStartService.exe O23 - Service: Hardware Clock Driver (hwclock) - Unknown owner - C:\WINDOWS\System32\hwclock.exe (file missing) O23 - Service: InterBaseGuardian - Inprise Corporation - C:\PROGRA~1\Borland\INTERB~1\Bin\IBGuard.EXE O23 - Service: InterBaseServer - Inprise Corporation - C:\PROGRA~1\Borland\INTERB~1\Bin\ibserver.exe O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Programme\Gemeinsame Dateien\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: McAfee Firewall - Unknown owner - C:\Programme\McAfee\McAfee Firewall\CPD.EXE" /SERVICE (file missing) O23 - Service: MySql - Unknown owner - l:/apachefriends/xampp/mysql/bin/mysqld-nt.exe O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Programme\Norton SystemWorks\Norton Utilities\NPROTECT.EXE O23 - Service: ASUS Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Remote Procedure Call (RPC) Monitoring (Rpcmon) - Unknown owner - C:\WINDOWS\System32\Rpcmon.exe (file missing) O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe Nach HijackThis und eScan: rkfiles result: C:\rkfiles PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, THERE MIGHT BE LEGIT FILES LISTED AND PLEASE BE CAREFUL WHILE FIXING. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE. Files Found in system Folder............ ------------------------ C:\WINDOWS\system32\apha.exe: UPX! C:\WINDOWS\system32\dfrg.msc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAwGpEc213 C:\WINDOWS\system32\CO2C40EN.DLL: dwProvSpec2 C:\WINDOWS\system32\dfrg.msc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAwGpEc213 C:\WINDOWS\system32\CO2C40EN.DLL: dwProvSpec2 Files Found in all users startup Folder............ ------------------------ C:\WINDOWS\system32\apha.exe: UPX! Files Found in all users windows Folder............ ------------------------ C:\WINDOWS\uscscsi.dll: UPX! C:\WINDOWS\vsapi32.dll: UPX!t4 Finished bye und hier HijackThis von heute morgen: Logfile of HijackThis v1.99.1 Scan saved at 11:28:39, on 27.08.2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\anvshell.exe C:\Programme\Creative\ShareDLL\CtNotify.exe C:\Programme\McAfee\McAfee Shared Components\Guardian\CMGrdian.exe C:\Programme\Browser mouse\1.3\mouse32a.exe C:\PROGRA~1\0900WA~1\0190WA~1\WARN0190.EXE C:\WINDOWS\System32\rundll32.exe D:\Programme\QuickTime\qttask.exe K:\Programme\Java\jre1.5.0\bin\jusched.exe C:\Programme\Creative\ShareDLL\MediaDet.Exe C:\Programme\Real\RealPlayer\RealPlay.exe C:\Programme\WinPortrait\wpctrl.exe C:\WINDOWS\SOUNDMAN.EXE C:\Programme\AVPersonal\AVGNT.EXE C:\Programme\AVPersonal\AVSched32.EXE C:\Programme\Dell Photo AIO Printer 962\dlbxmon.exe C:\WINDOWS\System32\ctfmon.exe C:\Programme\McAfee\McAfee Shared Components\Instant Updater\RuLaunch.exe D:\Programme\ATnotes\ATnotes.exe C:\Programme\Microsoft ActiveSync\WCESCOMM.EXE C:\PROGRA~1\MOZILLA.ORG\MOZILLA\MOZILLA.EXE C:\WINDOWS\twain_32\C6U14K\WATCH.exe C:\Programme\Adobe\Acrobat 6.0\Distillr\acrotray.exe C:\Programme\SEC\Natural Color\NaturalColorLoad.exe C:\Programme\SEC\MagicTune 2.5\GammaTray.exe L:\apachefriends\xampp\mysql\bin\winmysqladmin.exe C:\Programme\OpenOffice.org 1.9.62\program\soffice.exe C:\Programme\WinPortrait\floater.exe C:\PROGRA~1\0900WA~1\0190WA~1\w0svc.exe C:\WINDOWS\System32\alg.exe C:\Programme\AVPersonal\AVGUARD.EXE L:\apachefriends\xampp\apache\bin\Apache.exe C:\Programme\AVPersonal\AVWUPSRV.EXE C:\WINDOWS\System32\CTsvcCDA.EXE L:\apachefriends\xampp\FileZillaFTP\FileZillaServer.exe C:\Programme\Symantec\Norton Ghost 2003\GhostStartService.exe C:\PROGRA~1\Borland\INTERB~1\Bin\IBGuard.EXE l:\apachefriends\xampp\mysql\bin\mysqld-nt.exe C:\Programme\Norton SystemWorks\Norton Utilities\NPROTECT.EXE L:\apachefriends\xampp\apache\bin\Apache.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\tcpsvcs.exe C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\MsPMSPSv.exe C:\Programme\McAfee\McAfee Firewall\CPD.EXE C:\Programme\McAfee\McAfee Firewall\CPD.EXE C:\PROGRA~1\Borland\INTERB~1\Bin\ibserver.exe C:\WINDOWS\System32\dlbxcoms.exe C:\Programme\Internet Explorer\IEXPLORE.EXE D:\Dieter\Downloads\Viren\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dascheberg.de/ O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: URLLink Class - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Programme\NewDotNet\newdotnet6_38.dll O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programme\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll O2 - BHO: 0190/0900 Warner Browser Helper - {D2F63D33-C571-41E9-9525-A17CA1804D3B} - C:\PROGRA~1\0900WA~1\0190WA~1\whelper1.dll O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Programme\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Programme\Canon\Easy-WebPrint\Toolband.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Programme\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [anvshell] anvshell.exe O4 - HKLM\..\Run: [Disc Detector] C:\Programme\Creative\ShareDLL\CtNotify.exe O4 - HKLM\..\Run: [McAfee Guardian] "C:\Programme\McAfee\McAfee Shared Components\Guardian\CMGrdian.exe" /SU O4 - HKLM\..\Run: [FLMMEDIONMOUSE] C:\Programme\Browser mouse\1.3\mouse32a.exe O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe -CheckReg O4 - HKLM\..\Run: [0190 Warner] C:\PROGRA~1\0900WA~1\0190WA~1\WARN0190.EXE O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~3.DLL,NewDotNetStartup -s O4 - HKLM\..\Run: [QuickTime Task] "D:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [SunJavaUpdateSched] K:\Programme\Java\jre1.5.0\bin\jusched.exe O4 - HKLM\..\Run: [RealTray] C:\Programme\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER O4 - HKLM\..\Run: [PivotSoftware] "C:\Programme\WinPortrait\wpctrl.exe" O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [AVGCtrl] C:\Programme\AVPersonal\AVGNT.EXE /min O4 - HKLM\..\Run: [AVSCHED32] C:\Programme\AVPersonal\AVSched32.EXE /min O4 - HKLM\..\Run: [DLBXCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLBXtime.dll,_RunDLLEntry@16 O4 - HKLM\..\Run: [dlbxmon.exe] "C:\Programme\Dell Photo AIO Printer 962\dlbxmon.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [McAfee.InstantUpdate.Monitor] "C:\Programme\McAfee\McAfee Shared Components\Instant Updater\RuLaunch.exe" /STARTMONITOR O4 - HKCU\..\Run: [ATnotes.exe] D:\Programme\ATnotes\ATnotes.exe O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programme\Microsoft ActiveSync\WCESCOMM.EXE" O4 - HKCU\..\Run: [NBJ] "C:\Programme\ahead\Nero BackItUp\NBJ.exe" O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\PROGRA~1\MOZILLA.ORG\MOZILLA\MOZILLA.EXE" -turbo O4 - HKCU\..\Run: [asustweakenable] C:\Programme\ASUS\Tweaking Utilities\ATweak.exe /start O4 - Startup: WinMySQLadmin.lnk = L:\apachefriends\xampp\mysql\bin\winmysqladmin.exe O4 - Startup: OpenOffice.org 1.9.62.lnk = C:\Programme\OpenOffice.org 1.9.62\program\quickstart.exe O4 - Global Startup: Watch.lnk = C:\WINDOWS\twain_32\C6U14K\WATCH.exe O4 - Global Startup: Adobe Gamma Loader.lnk = ? O4 - Global Startup: Acrobat Assistant.lnk = C:\Programme\Adobe\Acrobat 6.0\Distillr\acrotray.exe O4 - Global Startup: NaturalColorLoad.lnk = ? O4 - Global Startup: Color Calibration.lnk = ? O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://D:\PROGRA~1\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - K:\Programme\Java\jre1.5.0\bin\npjpi150.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - K:\Programme\Java\jre1.5.0\bin\npjpi150.dll O9 - Extra button: Mobilen Favoriten erstellen - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Programme\Microsoft ActiveSync\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Programme\Microsoft ActiveSync\INetRepl.dll O9 - Extra 'Tools' menuitem: Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Programme\Microsoft ActiveSync\INetRepl.dll O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - D:\Soenke\ICQ\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - D:\Soenke\ICQ\ICQ.exe O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\OFFICE11\REFIEBAR.DLL O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll O12 - Plugin for .UVR: C:\Programme\Internet Explorer\Plugins\NPUPano.dll O16 - DPF: {4E330863-6A11-11D0-BFD8-006097237877} (InstallFromTheWeb ActiveX Control) - http://tw.msi.com.tw/autobios/client/iftwclix.cab O16 - DPF: {6B4788E2-BAE8-11D2-A1B4-00400512739B} (PWMediaSendControl Class) - http://216.249.24.140/code/PWActiveXImgCtl.CAB O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall-Kontrolle) - http://housecall.trendmicro-europe.com/housecall/Xscan53.cab O16 - DPF: {8699D723-6DC6-47D3-B55C-489BA006B917} (WebInstall) - http://membersites.namezero.com/DOT-ANKE.CC-635041/de/webinstall.cab O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - O16 - DPF: {CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_03) - O17 - HKLM\System\CCS\Services\Tcpip\..\{2B60B758-E93C-4FC2-8889-B43F3E0E5F14}: NameServer = 212.7.148.65 212.7.148.97 O17 - HKLM\System\CCS\Services\Tcpip\..\{49A85D2C-D5B7-4CE4-A46D-D05290D72B5D}: NameServer = 192.168.120.252,192.168.120.253 O23 - Service: 0190/0900 Warner Überwachungsdienst (0190_0900_Warner_MonitorService) - Mirko Böer - C:\PROGRA~1\0900WA~1\0190WA~1\w0svc.exe O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Programme\AVPersonal\AVGUARD.EXE O23 - Service: Apache2 - Unknown owner - L:\apachefriends\xampp\apache\bin\Apache.exe" -k runservice (file missing) O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Programme\AVPersonal\AVWUPSRV.EXE O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE O23 - Service: AVM FRITZ!web Routing Service (de_serv) - AVM Berlin - C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe O23 - Service: dlbx_device - Dell - C:\WINDOWS\System32\dlbxcoms.exe O23 - Service: FileZilla Server FTP server (FileZilla Server) - Unknown owner - L:\apachefriends\xampp\FileZillaFTP\FileZillaServer.exe O23 - Service: GhostStartService - Symantec Corporation - C:\Programme\Symantec\Norton Ghost 2003\GhostStartService.exe O23 - Service: Hardware Clock Driver (hwclock) - Unknown owner - C:\WINDOWS\System32\hwclock.exe (file missing) O23 - Service: InterBaseGuardian - Inprise Corporation - C:\PROGRA~1\Borland\INTERB~1\Bin\IBGuard.EXE O23 - Service: InterBaseServer - Inprise Corporation - C:\PROGRA~1\Borland\INTERB~1\Bin\ibserver.exe O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Programme\Gemeinsame Dateien\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: McAfee Firewall - Unknown owner - C:\Programme\McAfee\McAfee Firewall\CPD.EXE" /SERVICE (file missing) O23 - Service: MySql - Unknown owner - l:/apachefriends/xampp/mysql/bin/mysqld-nt.exe O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Programme\Norton SystemWorks\Norton Utilities\NPROTECT.EXE O23 - Service: ASUS Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Remote Procedure Call (RPC) Monitoring (Rpcmon) - Unknown owner - C:\WINDOWS\System32\Rpcmon.exe (file missing) O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe Dieser Beitrag wurde am 27.08.2005 um 11:37 Uhr von dascheberg editiert.
|
|
|
|
|
|
|
27.08.2005, 17:00
Ehrenmitglied
 Beiträge: 29434 |
#4
Start -- Ausfuehren -- schreib rein: cmd
kopiere rein: sc stop hwclock klicke "enter" und warte ein bisschen, dann kopiere rein: sc delete hwclock klicke "enter" kopiere rein: del C:\WINDOWS\System32\hwclock.exe Klicke "enter Den folgenden Text in den Editor (Start - Zubehör - Editor) kopieren und als fixme.reg mit 'Speichern unter' auf dem Desktop. Gebe bei Dateityp 'Alle Dateien' an. Du solltest jetzt auf dem Desktop diese Datei finden. REGEDIT4 [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_HWCLOCK] [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\hwclock] [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_HWCLOCK] [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\hwclock] [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hwclock] #öffne das HijackThis-->> Button "scan" -->> Häkchen setzen -->> Button "Fix checked" -->> PC neustarten R3 - Default URLSearchHook is missing O2 - BHO: URLLink Class - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Programme\NewDotNet\newdotnet6_38.dll O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~3.DLL,NewDotNetStartup -s O16 - DPF: {6B4788E2-BAE8-11D2-A1B4-00400512739B} (PWMediaSendControl Class) - http://216.249.24.140/code/PWActiveXImgCtl.CAB O16 - DPF: {8699D723-6DC6-47D3-B55C-489BA006B917} (WebInstall) - http://membersites.namezero.com/DOT-ANKE.CC-635041/de/webinstall.cab O23 - Service: Apache2 - Unknown owner - L:\apachefriends\xampp\apache\bin\Apache.exe" -k runservice (file missing) O23 - Service: Hardware Clock Driver (hwclock) - Unknown owner - C:\WINDOWS\System32\hwclock.exe (file missing) O23 - Service: McAfee Firewall - Unknown owner - C:\Programme\McAfee\McAfee Firewall\CPD.EXE" /SERVICE (file missing) O23 - Service: Remote Procedure Call (RPC) Monitoring (Rpcmon) - Unknown owner - C:\WINDOWS\System32\Rpcmon.exe (file missing) NEUSTART Computer in den abgesicherten Modus neustarten (F8 beim Starten drücken). Die Datei "fixme.reg" auf dem Desktop doppelklicken. und sofort wieder neustarten __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
27.08.2005, 17:09
Ehrenmitglied
Beiträge: 29434 |
#5
einzelne "exe" ueberpruefen
http://www.virustotal.com/flash/index_en.html C:\WINDOWS\system32\dlbxcoms.exe Oben auf der Seite auf Durchsuchen klicken --> Datei aussuchen --> Doppelklick auf die zu prüfende Datei --> klick auf Submit... jetzt abwarten und danach das Ergebnis abkopieren und hier im Beitrag posten Deinstallieren: "Start -> Einstellungen -> Systemsteuerung -> Software" NEWDOT (oder New.net) •KillBox http://bilder.informationsarchiv.net/Nikitas_Tools/KillBox.zip Anleitung: (bebildert) http://virus-protect.org/killbox.html •Delete File on Reboot <--anhaken und klicke auf das rote Kreuz, wenn gefragt wird, ob "Do you want to reboot? "----> klicke auf "no",und kopiere das naechste rein, erst beim letzten auf "yes" C:\WINDOWS\system32\apha.exe C:\WINDOWS\System32\hwclock.exe C:\WINDOWS\System32\Rpcmon.exe C:\WINDOWS\NDNuninstall4_88.exe C:\WINDOWS\NDNuninstall4_94.exe C:\WINDOWS\NDNuninstall5_20.exe C:\WINDOWS\NDNuninstall5_40.exe C:\WINDOWS\NDNuninstall5_48.exe C:\WINDOWS\NDNuninstall5_64.exe C:\WINDOWS\NDNuninstall6_38.exe C:\WINDOWS\NDNuninstall6_10.exe C:\WINDOWS\NDNuninstall6_22.exe C:\WINDOWS\NDNuninstall6_10.exe C:\WINDOWS\NDNuninstall6_22.exe C:\Programme\NewDotNet\uninstall6_38.exe C:\WINDOWS\iun6002.exe C:\Dokumente und Einstellungen\Tim\Lokale Einstellungen\Temp\BDECache\bde3E.tmp C:\Dokumente und Einstellungen\Tim\Lokale Einstellungen\Temp\BDECache\bde43.tmp C:\Dokumente und Einstellungen\Tim\Lokale Einstellungen\Temp\BDECache\bde53.tmp C:\Dokumente und Einstellungen\Tim\Lokale Einstellungen\Temp\BDECache\bde55.tmp C:\Dokumente und Einstellungen\Tim\Lokale Einstellungen\Temp\upd5C.tmp C:\Programme\MediaLoads Enhanced\ME1.DLL C:\Programme\MediaLoads Enhanced\ME2.DLL C:\Programme\UCmore\UCMIE.dll C:\Programme\MLH\dating.exe C:\Programme\SaveNow\SaveNow.exe PC neustarten •AboutBuster http://virus-protect.org/antispywaretools.html Alle Dateien in einen Ordner entpacken, die Readme Datei lesen, dann das Programm (im abgesicherten Modus) ausführen. Ad-aware SE Personal http://virus-protect.org/antispywaretools.html Laden--> Updaten-->Konfigurieren http://virus-protect.org/adaware.html #VOR jedem Scanvorgang das Programm Updaten! waehrend des Scanvorganges müssen ALLE sonstige Anwendungen beendet werden und alle Browserfenster müssen geschlossen sein! scannen-->PC neustarten--> noch mal scannen CCleaner--> loesche alle *temp-Datein http://virus-protect.org/temp.html __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
27.08.2005, 17:16
Ehrenmitglied
Beiträge: 29434 |
#6
•Download Registry Search Tool :
http://www.billsway.com/vbspage/vbsfiles/RegSrch.zip Doppelklick:regsrch.vbs hwclock Press 'OK' warten, bis die Suche beendet ist. (Ergebnis bitte posten) __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
28.08.2005, 00:42
...neu hier
Themenstarter Beiträge: 3 |
#7
Moin,
Danke für die Hilfe. Hatte mir heute eScan gekauft und heute mittag schon mal weiter gemacht. Leider kann seitdem der Hostname (unter Windows XP) nicht mehr aufgelöst werden, so dass ich nun unter Linux erst wieder ins Forum komme. Meine nächsten postings kommen somit erst gegen morgen (28.08.) nachtmittags, die Familie will auch noch anderes von mir. Erstmal Dank, melde mich wieder. |
|
|
|
|
|
|
28.08.2005, 10:54
Ehrenmitglied
Beiträge: 29434 |
#8
im Grunde solltest du nicht reinigen...der pC ist total verseucht....formatiere, das geht schneller und ist sicherer
 __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
Um auf dieses Thema zu ANTWORTEN
bitte erst » hier kostenlos registrieren!!
bitte erst » hier kostenlos registrieren!!
Folgende Themen könnten Dich auch interessieren:
Seite(n): 1
Copyright © 2024, Protecus.de - Protecus Team - Impressum / Mediadaten
eScan result:
--------------------------------------------------
-------------------- INFECTED --------------------
--------------------------------------------------
1: Fri Aug 26 20:34:15 2005 => File C:\WINDOWS\System32\Rpcmon.exe infected by "Backdoor.Win32.Codbot.am" Virus! Action Taken: No Action Taken.
2: Fri Aug 26 20:34:59 2005 => File C:\WINDOWS\System32\Rpcmon.exe infected by "Backdoor.Win32.Codbot.am" Virus! Action Taken: No Action Taken.
3: Fri Aug 26 20:35:04 2005 => System found infected with alexa Spyware/Adware ({c95fe080-8f5d-11d2-a20b-00aa003c157a})! Action taken: No Action Taken.
4: Fri Aug 26 20:35:11 2005 => System found infected with WebInstall Dialer Spyware ({8699D723-6DC6-47D3-B55C-489BA006B917})! Action taken: No Action Taken.
5: Fri Aug 26 20:35:29 2005 => System found infected with bargainbuddy Spyware/Adware (flash.exe)! Action taken: No Action Taken.
6: Fri Aug 26 20:35:41 2005 => Offending file found: \index.html
7: Fri Aug 26 20:35:41 2005 => System found infected with EasySearch Spyware/Adware (index.html)! Action taken: No Action Taken.
8: Fri Aug 26 20:36:04 2005 => Offending file found: C:\WINDOWS\iun6002.exe
9: Fri Aug 26 20:36:04 2005 => System found infected with zipitpro Spyware/Adware (C:\WINDOWS\iun6002.exe)! Action taken: No Action Taken.
10: Fri Aug 26 20:36:26 2005 => System found infected with Win32.Decisive.A Spyware/Adware (server.exe)! Action taken: No Action Taken.
11: Fri Aug 26 20:36:33 2005 => Offending file found: C:\WINDOWS\System32\bdesecureinstall.cab
12: Fri Aug 26 20:36:33 2005 => System found infected with BDE Spyware/Adware (bdesecureinstall.cab)! Action taken: No Action Taken.
13: Fri Aug 26 20:39:24 2005 => File C:\WINDOWS\System32\TFTP5328 infected by "Backdoor.Win32.Rbot.zh" Virus! Action Taken: No Action Taken.
14: Fri Aug 26 20:47:28 2005 => File C:\WINDOWS\system32\TFTP5328 infected by "Backdoor.Win32.Rbot.zh" Virus! Action Taken: No Action Taken.
15: Fri Aug 26 21:06:55 2005 => File C:\Dokumente und Einstellungen\Tim\Lokale Einstellungen\Temp\BDECache\bde5D.tmp infected by "Trojan.Win32.Krepper.y" Virus! Action Taken: No Action Taken.
16: Fri Aug 26 21:17:39 2005 => File C:\Dokumente und Einstellungen\Soenke\Lokale Einstellungen\Temporary Internet Files\Content.IE5\SP27OLI3\connect[1].htm infected by "Trojan-Downloader.JS.Small.ac" Virus! Action Taken: No Action Taken.
17: Fri Aug 26 21:38:42 2005 => Scanning Folder: C:\Programme\AVPersonal\INFECTED\*.*
18: Fri Aug 26 21:38:42 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\HWCLOCK.EXE.VIR
19: Fri Aug 26 21:38:42 2005 => File C:\Programme\AVPersonal\INFECTED\HWCLOCK.EXE.VIR infected by "Backdoor.Win32.Small.eo" Virus! Action Taken: No Action Taken.
20: Fri Aug 26 21:43:54 2005 => File C:\System Volume Information\_restore{A6ABD9E2-7832-4FA3-9A8A-C1A1DA78299E}\RP479\A0165229.exe infected by "Backdoor.Win32.Codbot.am" Virus! Action Taken: No Action Taken.
--------------------------------------------------
--------------------- TAGGED ---------------------
--------------------------------------------------
1: Fri Aug 26 20:34:26 2005 => File C:\Programme\NewDotNet\newdotnet6_38.dll tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
2: Fri Aug 26 20:37:19 2005 => File C:\WINDOWS\NDNuninstall4_88.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
3: Fri Aug 26 20:37:20 2005 => File C:\WINDOWS\NDNuninstall4_94.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
4: Fri Aug 26 20:37:20 2005 => File C:\WINDOWS\NDNuninstall5_20.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
5: Fri Aug 26 20:37:21 2005 => File C:\WINDOWS\NDNuninstall5_40.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
6: Fri Aug 26 20:37:21 2005 => File C:\WINDOWS\NDNuninstall5_48.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
7: Fri Aug 26 20:37:24 2005 => File C:\WINDOWS\NDNuninstall5_64.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
8: Fri Aug 26 20:37:26 2005 => File C:\WINDOWS\NDNuninstall6_38.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
9: Fri Aug 26 20:37:26 2005 => File C:\WINDOWS\NDNuninstall6_10.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
10: Fri Aug 26 20:37:27 2005 => File C:\WINDOWS\NDNuninstall6_22.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
11: Fri Aug 26 20:55:48 2005 => File C:\WINDOWS\NDNuninstall4_88.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
12: Fri Aug 26 20:55:48 2005 => File C:\WINDOWS\NDNuninstall4_94.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
13: Fri Aug 26 20:55:48 2005 => File C:\WINDOWS\NDNuninstall5_20.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
14: Fri Aug 26 20:55:51 2005 => File C:\WINDOWS\NDNuninstall5_40.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
15: Fri Aug 26 20:55:52 2005 => File C:\WINDOWS\NDNuninstall5_48.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
16: Fri Aug 26 20:55:56 2005 => File C:\WINDOWS\NDNuninstall5_64.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
17: Fri Aug 26 20:55:58 2005 => File C:\WINDOWS\NDNuninstall6_38.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
18: Fri Aug 26 20:55:58 2005 => File C:\WINDOWS\NDNuninstall6_10.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
19: Fri Aug 26 20:56:04 2005 => File C:\WINDOWS\NDNuninstall6_22.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
20: Fri Aug 26 21:06:54 2005 => File C:\Dokumente und Einstellungen\Tim\Lokale Einstellungen\Temp\BDECache\bde3E.tmp tagged as "not-a-virus:AdWare.Brilliandigital.a". Action Taken: No Action Taken.
21: Fri Aug 26 21:06:54 2005 => File C:\Dokumente und Einstellungen\Tim\Lokale Einstellungen\Temp\BDECache\bde43.tmp tagged as "not-a-virus:AdWare.BrilliantDigital.e". Action Taken: No Action Taken.
22: Fri Aug 26 21:06:55 2005 => File C:\Dokumente und Einstellungen\Tim\Lokale Einstellungen\Temp\BDECache\bde53.tmp tagged as "not-a-virus:AdWare.BrilliantDigital.3120". Action Taken: No Action Taken.
23: Fri Aug 26 21:06:55 2005 => File C:\Dokumente und Einstellungen\Tim\Lokale Einstellungen\Temp\BDECache\bde55.tmp tagged as "not-a-virus:AdWare.BrilliantDigital.3120". Action Taken: No Action Taken.
24: Fri Aug 26 21:06:56 2005 => File C:\Dokumente und Einstellungen\Tim\Lokale Einstellungen\Temp\upd5C.tmp tagged as "not-a-virus:AdWare.MediaPops.b". Action Taken: No Action Taken.
25: Fri Aug 26 21:31:22 2005 => File C:\Programme\MediaLoads Enhanced\ME1.DLL tagged as "not-a-virus:AdWare.MediaPops.b". Action Taken: No Action Taken.
26: Fri Aug 26 21:31:22 2005 => File C:\Programme\MediaLoads Enhanced\ME2.DLL tagged as "not-a-virus:AdWare.MediaPops.b". Action Taken: No Action Taken.
27: Fri Aug 26 21:35:05 2005 => File C:\Programme\NewDotNet\uninstall6_38.exe tagged as "not-a-virus:AdWare.NewDotNet". Action Taken: No Action Taken.
28: Fri Aug 26 21:37:07 2005 => File C:\Programme\MLH\dating.exe tagged as "not-a-virus
29: Fri Aug 26 21:37:13 2005 => File C:\Programme\UCmore\UCMIE.dll tagged as "not-a-virus:AdWare.ToolBar.Ucmore.a". Action Taken: No Action Taken.
30: Fri Aug 26 21:40:09 2005 => File C:\Programme\SaveNow\SaveNow.exe tagged as "not-a-virus:AdWare.SaveNow.ar". Action Taken: No Action Taken.
31: Fri Aug 26 22:09:26 2005 => File D:\Soenke\Downloads\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.602. No Action Taken.
32: Fri Aug 26 22:09:50 2005 => File D:\Soenke\altes kazaa\kmd171_de.exe tagged as "not-a-virus:AdWare.Cydoor". Action Taken: No Action Taken.
33: Fri Aug 26 22:45:05 2005 => Scanning File K:\Programme\Java\docs\api\org\omg\IOP\TaggedComponent.html
34: Fri Aug 26 22:45:05 2005 => Scanning File K:\Programme\Java\docs\api\org\omg\IOP\TaggedComponentHelper.html
35: Fri Aug 26 22:45:05 2005 => Scanning File K:\Programme\Java\docs\api\org\omg\IOP\TaggedComponentHolder.html
36: Fri Aug 26 22:45:05 2005 => Scanning File K:\Programme\Java\docs\api\org\omg\IOP\TaggedProfile.html
37: Fri Aug 26 22:45:05 2005 => Scanning File K:\Programme\Java\docs\api\org\omg\IOP\TaggedProfileHelper.html
38: Fri Aug 26 22:45:05 2005 => Scanning File K:\Programme\Java\docs\api\org\omg\IOP\TaggedProfileHolder.html
39: Fri Aug 26 22:45:06 2005 => Scanning File K:\Programme\Java\docs\api\org\omg\IOP\class-use\TaggedProfileHolder.html
40: Fri Aug 26 22:45:06 2005 => Scanning File K:\Programme\Java\docs\api\org\omg\IOP\class-use\TaggedProfileHelper.html
41: Fri Aug 26 22:45:06 2005 => Scanning File K:\Programme\Java\docs\api\org\omg\IOP\class-use\TaggedComponentHolder.html
42: Fri Aug 26 22:45:06 2005 => Scanning File K:\Programme\Java\docs\api\org\omg\IOP\class-use\TaggedComponentHelper.html
43: Fri Aug 26 22:45:08 2005 => Scanning File K:\Programme\Java\docs\api\org\omg\IOP\class-use\TaggedComponent.html
44: Fri Aug 26 22:45:08 2005 => Scanning File K:\Programme\Java\docs\api\org\omg\IOP\class-use\TaggedProfile.html
--------------------------------------------------
--------------------- ERRORS ---------------------
--------------------------------------------------
1: Fri Aug 26 20:34:48 2005 => ERROR!!! Invalid Entry System32\DRIVERS\bsstor.sys in SYSTEM\CurrentControlSet\Services\BsStor...
2: Fri Aug 26 20:34:52 2005 => ERROR!!! Invalid Entry \??\G:\INSTALL\GMSIPCI.SYS in SYSTEM\CurrentControlSet\Services\GMSIPCI...
3: Fri Aug 26 20:34:52 2005 => ERROR!!! Invalid Entry C:\WINDOWS\System32\hwclock.exe in SYSTEM\CurrentControlSet\Services\hwclock...
4: Fri Aug 26 20:35:02 2005 => ERROR!!! Invalid Entry \??\C:\WINDOWS\System32\NTACCESS.SYS in SYSTEM\CurrentControlSet\Services\WEBNTACCESS...
5: Fri Aug 26 20:36:34 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "J:\Office\Assistnt\logo.act". Action Taken: No Action Taken.
6: Fri Aug 26 20:36:34 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "J:\Office\Assistnt\scribble.act". Action Taken: No Action Taken.
7: Fri Aug 26 20:36:34 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "J:\Office\Assistnt\dot.act". Action Taken: No Action Taken.
8: Fri Aug 26 20:36:35 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "J:\Office\Assistnt\mnature.act". Action Taken: No Action Taken.
9: Fri Aug 26 20:36:35 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "J:\Office\Assistnt\hoverbot.act". Action Taken: No Action Taken.
10: Fri Aug 26 20:36:35 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "J:\Office\Assistnt\will.act". Action Taken: No Action Taken.
11: Fri Aug 26 20:36:35 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "J:\Office\Assistnt\powerpup.act". Action Taken: No Action Taken.
12: Fri Aug 26 20:36:35 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "J:\Office\Assistnt\genius.act". Action Taken: No Action Taken.
13: Fri Aug 26 20:36:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "F:\Programme\Pinnacle\Studio9\programs\vdrdec.dll". Action Taken: No Action Taken.
14: Fri Aug 26 20:36:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "F:\Programme\Pinnacle\Studio9\OEM\hhupd.exe". Action Taken: No Action Taken.
15: Fri Aug 26 20:36:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\BDEdit.exe" refers to invalid object "". Action Taken: No Action Taken.
16: Fri Aug 26 20:36:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\BilanzPlus.exe" refers to invalid object "F:\Programme\K-Lab\BilanzanalysePlus\BilanzPlus.exe". Action Taken: No Action Taken.
17: Fri Aug 26 20:36:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\CLaunch.exe" refers to invalid object "". Action Taken: No Action Taken.
18: Fri Aug 26 20:36:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\CMGrdian.exe" refers to invalid object "". Action Taken: No Action Taken.
19: Fri Aug 26 20:36:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\Schedwiz.exe" refers to invalid object "". Action Taken: No Action Taken.
20: Fri Aug 26 20:36:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\SDViewerDSC.exe" refers to invalid object "F:\Programme\SDViewerDSC.exe". Action Taken: No Action Taken.
21: Fri Aug 26 20:36:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\Studio.EXE" refers to invalid object "F:\Programme\Pinnacle\Studio9\Programs\Studio.EXE". Action Taken: No Action Taken.
22: Fri Aug 26 20:36:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\ahead\CoverDesigner\". Action Taken: No Action Taken.
23: Fri Aug 26 20:36:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\ahead\Nero\WaveEditor\". Action Taken: No Action Taken.
24: Fri Aug 26 20:36:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\ahead Nero\". Action Taken: No Action Taken.
25: Fri Aug 26 20:36:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\ahead Nero\Nero ToolKit\". Action Taken: No Action Taken.
26: Fri Aug 26 20:36:42 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Norton Ghost 2003\". Action Taken: No Action Taken.
27: Fri Aug 26 20:36:43 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\Adobe\Acrobat 6.0\TempIccProfiles\". Action Taken: No Action Taken.
28: Fri Aug 26 20:36:43 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\Adobe\Acrobat 6.0\TempIccProfiles\Non-Recommended\". Action Taken: No Action Taken.
29: Fri Aug 26 20:36:43 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PROject MT\PRMT\6.0\SMARTOOL\". Action Taken: No Action Taken.
30: Fri Aug 26 20:36:43 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PROject MT\PRMT\6.0\". Action Taken: No Action Taken.
31: Fri Aug 26 20:36:43 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PROject MT\PRMT\". Action Taken: No Action Taken.
32: Fri Aug 26 20:36:43 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PROject MT\". Action Taken: No Action Taken.
33: Fri Aug 26 20:36:43 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PROject MT\PRMT\6.0\EG\". Action Taken: No Action Taken.
34: Fri Aug 26 20:36:43 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PROject MT\PRMT\6.0\GE\". Action Taken: No Action Taken.
35: Fri Aug 26 20:36:43 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\Dieter\Startmenü\Programme\PHP-Writer\". Action Taken: No Action Taken.
36: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\". Action Taken: No Action Taken.
37: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\". Action Taken: No Action Taken.
38: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\". Action Taken: No Action Taken.
39: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\". Action Taken: No Action Taken.
40: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\". Action Taken: No Action Taken.
41: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\DB\". Action Taken: No Action Taken.
42: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\DB\SQL\". Action Taken: No Action Taken.
43: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Tutor\". Action Taken: No Action Taken.
44: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Tutor\Startseite\". Action Taken: No Action Taken.
45: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\VS\". Action Taken: No Action Taken.
46: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Zs\". Action Taken: No Action Taken.
47: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\". Action Taken: No Action Taken.
48: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\DB\". Action Taken: No Action Taken.
49: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\DB\SQL\". Action Taken: No Action Taken.
50: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Zs\". Action Taken: No Action Taken.
51: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\InfoArchiv\". Action Taken: No Action Taken.
52: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\InfoArchiv\Tutor\". Action Taken: No Action Taken.
53: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\InfoArchiv\Tutor\Startseite\". Action Taken: No Action Taken.
54: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\StartCenter\". Action Taken: No Action Taken.
55: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\StartCenter\Hilfe\". Action Taken: No Action Taken.
56: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\StartCenter\Hilfe\Start\". Action Taken: No Action Taken.
57: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\StartCenter\Hilfe\start_\". Action Taken: No Action Taken.
58: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\StartCenter\InfoTexte\". Action Taken: No Action Taken.
59: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\StartCenter\InfoTexte\Infocenter\". Action Taken: No Action Taken.
60: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\". Action Taken: No Action Taken.
61: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Tutor\". Action Taken: No Action Taken.
62: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Tutor\Startseite\". Action Taken: No Action Taken.
63: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\". Action Taken: No Action Taken.
64: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Beratung\". Action Taken: No Action Taken.
65: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Controlling\". Action Taken: No Action Taken.
66: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Controlling\Rating\". Action Taken: No Action Taken.
67: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Finanzierung\". Action Taken: No Action Taken.
68: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Finanzierung\Beteiligungskapital\". Action Taken: No Action Taken.
69: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Finanzierung\Eigenkapital\". Action Taken: No Action Taken.
70: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Finanzierung\Finanzierungsbeispiele\". Action Taken: No Action Taken.
71: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Finanzierung\Finanzierungsfehler\". Action Taken: No Action Taken.
72: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Finanzierung\Förderprogramme\". Action Taken: No Action Taken.
73: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Finanzierung\Kredite\". Action Taken: No Action Taken.
74: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Finanzierung\Leasing\". Action Taken: No Action Taken.
75: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Finanzierung\Sicherheiten\". Action Taken: No Action Taken.
76: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Forderungen\". Action Taken: No Action Taken.
77: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Gründerperson\". Action Taken: No Action Taken.
78: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Gründerperson\Arbeitslose Gründer\". Action Taken: No Action Taken.
79: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Gründerperson\Gründerinnen\". Action Taken: No Action Taken.
80: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Gründerperson\Gründerperson allgemein\". Action Taken: No Action Taken.
81: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Gründungsarten\". Action Taken: No Action Taken.
82: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Gründungsarten\Franchise\". Action Taken: No Action Taken.
83: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Gründungsarten\Nachfolge\". Action Taken: No Action Taken.
84: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Gründungsarten\Neugründung\". Action Taken: No Action Taken.
85: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Konzept\". Action Taken: No Action Taken.
86: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Kooperation\". Action Taken: No Action Taken.
87: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Kostenrechnung\". Action Taken: No Action Taken.
88: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Liquidität\". Action Taken: No Action Taken.
89: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Markt\". Action Taken: No Action Taken.
90: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Markt\E-Commerce\". Action Taken: No Action Taken.
91: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Markt\Marketing\". Action Taken: No Action Taken.
92: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Markt\Marktforschung\". Action Taken: No Action Taken.
93: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Personal\". Action Taken: No Action Taken.
94: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Personal\Mitarbeiter einstellen\". Action Taken: No Action Taken.
95: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Personal\Mitarbeiter führen\". Action Taken: No Action Taken.
96: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Preiskalkulation\". Action Taken: No Action Taken.
97: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Preiskalkulation\Handel\". Action Taken: No Action Taken.
98: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Preiskalkulation\Handwerk\". Action Taken: No Action Taken.
99: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Preiskalkulation\Preis\". Action Taken: No Action Taken.
100: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Qualifikation\". Action Taken: No Action Taken.
101: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Rechtsformen\". Action Taken: No Action Taken.
102: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Rechtsformen\Rechtsformen\". Action Taken: No Action Taken.
103: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Rechtsformen\Rechtsformwechsel\". Action Taken: No Action Taken.
104: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Standort\". Action Taken: No Action Taken.
105: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Steuern\". Action Taken: No Action Taken.
106: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Umweltschutz\". Action Taken: No Action Taken.
107: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Unternehmenskrisen\". Action Taken: No Action Taken.
108: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Versicherungen\". Action Taken: No Action Taken.
109: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Workshop\Dokumente\Verträge\". Action Taken: No Action Taken.
110: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\unp\". Action Taken: No Action Taken.
111: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\PCLernen\". Action Taken: No Action Taken.
112: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Hilfe\". Action Taken: No Action Taken.
113: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Hilfe\Allgemeines\". Action Taken: No Action Taken.
114: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Hilfe\Auswertungen\". Action Taken: No Action Taken.
115: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Hilfe\Business-Plan\". Action Taken: No Action Taken.
116: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Hilfe\Finanzen\". Action Taken: No Action Taken.
117: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Hilfe\Grafik\". Action Taken: No Action Taken.
118: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\". Action Taken: No Action Taken.
119: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\Auswertungen\". Action Taken: No Action Taken.
120: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\Auswertungen\Finanzierungsplan\". Action Taken: No Action Taken.
121: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\Auswertungen\Kapitalbedarfsplan\". Action Taken: No Action Taken.
122: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\Auswertungen\Liquiditaetsvorschau\". Action Taken: No Action Taken.
123: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\Auswertungen\Rentabilitaetsvorschau\". Action Taken: No Action Taken.
124: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\BusinessPlan\". Action Taken: No Action Taken.
125: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\BusinessPlan\BusinessPlan definieren\". Action Taken: No Action Taken.
126: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\BusinessPlan\BusinessPlan eingeben\". Action Taken: No Action Taken.
127: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\BusinessPlan\BusinessPlan Vorschau\". Action Taken: No Action Taken.
128: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\Finanzen\". Action Taken: No Action Taken.
129: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\Finanzen\Budgetdaten\". Action Taken: No Action Taken.
130: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\Finanzen\Eigene Mittel\". Action Taken: No Action Taken.
131: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\Finanzen\Investitionen\". Action Taken: No Action Taken.
132: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\Finanzen\Kredite\". Action Taken: No Action Taken.
133: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\Finanzen\Umsaetze planen\". Action Taken: No Action Taken.
134: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\Finanzen\Unternehmerlohn\". Action Taken: No Action Taken.
135: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\Grafiken\". Action Taken: No Action Taken.
136: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\Grafiken\Kosten\". Action Taken: No Action Taken.
137: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\Grafiken\Kosten detailliert\". Action Taken: No Action Taken.
138: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\Grafiken\Umsaetze\". Action Taken: No Action Taken.
139: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\Grafiken\Umsatzrentabilitaet\". Action Taken: No Action Taken.
140: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Gruenden\Tutor\Startseite\". Action Taken: No Action Taken.
141: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\". Action Taken: No Action Taken.
142: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Allgemeines\". Action Taken: No Action Taken.
143: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Auswerten\". Action Taken: No Action Taken.
144: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Auswerten\Bilanz\". Action Taken: No Action Taken.
145: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Auswerten\BwA\". Action Taken: No Action Taken.
146: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Auswerten\GuV\". Action Taken: No Action Taken.
147: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Auswerten\Statusreport\". Action Taken: No Action Taken.
148: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Bewertung\". Action Taken: No Action Taken.
149: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Bewertung\Texte\". Action Taken: No Action Taken.
150: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Bewertung\Unternehmenswert\". Action Taken: No Action Taken.
151: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Bewertung\Unternehmenswert\Bewertungsmethoden\". Action Taken: No Action Taken.
152: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Bewertung\Unternehmenswert\Bewertungsmethoden\DCF-Verfahren\". Action Taken: No Action Taken.
153: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Bewertung\Unternehmenswert\Bewertungsmethoden\Ertragswertmethode\". Action Taken: No Action Taken.
154: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Bewertung\Unternehmenswert\Bewertungsmethoden\Mittelwertmethode\". Action Taken: No Action Taken.
155: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Bewertung\Unternehmenswert\Bewertungsmethoden\Substanzwertmethode\". Action Taken: No Action Taken.
156: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Bewertung\Unternehmenswert\Due Diligence\". Action Taken: No Action Taken.
157: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Bewertung\Unternehmenswert\Due Diligence\Auswerten\". Action Taken: No Action Taken.
158: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Bewertung\Unternehmenswert\Due Diligence\Erstellen\". Action Taken: No Action Taken.
159: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\". Action Taken: No Action Taken.
160: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\Istdaten\". Action Taken: No Action Taken.
161: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\Istdaten\Controlling\". Action Taken: No Action Taken.
162: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\Istdaten\Controlling\Cah Flow\". Action Taken: No Action Taken.
163: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\Istdaten\Controlling\Finanzstruktur\". Action Taken: No Action Taken.
164: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\Istdaten\Controlling\Krisenindizes\". Action Taken: No Action Taken.
165: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\Istdaten\Controlling\Liquiditaet\". Action Taken: No Action Taken.
166: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\Istdaten\Controlling\Produktivitaet\". Action Taken: No Action Taken.
167: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\Istdaten\Controlling\Rentabilitaet\". Action Taken: No Action Taken.
168: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\Istdaten\Finanzen\". Action Taken: No Action Taken.
169: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\Istdaten\Finanzen\Banken_Konten\". Action Taken: No Action Taken.
170: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\Istdaten\Finanzen\Budgetdaten\". Action Taken: No Action Taken.
171: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\Istdaten\Finanzen\Forderungen\". Action Taken: No Action Taken.
172: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\Istdaten\Finanzen\Forderungen_buchen\". Action Taken: No Action Taken.
173: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\Istdaten\Finanzen\Halbfertige_Leistungen\". Action Taken: No Action Taken.
174: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\Istdaten\Finanzen\Investitionen\". Action Taken: No Action Taken.
175: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\Istdaten\Finanzen\Kredite\". Action Taken: No Action Taken.
176: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\Istdaten\Finanzen\Unternehmerlohn\". Action Taken: No Action Taken.
177: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\Istdaten\Finanzen\Verbindindlichkeiten\". Action Taken: No Action Taken.
178: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\Istdaten\Finanzen\Verbindlichkeiten_bezahlen\". Action Taken: No Action Taken.
179: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\PlandatenI_II\". Action Taken: No Action Taken.
180: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\PlandatenI_II\Controlling\". Action Taken: No Action Taken.
181: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\PlandatenI_II\Controlling\Cash Flow\". Action Taken: No Action Taken.
182: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\PlandatenI_II\Controlling\Finanzstruktur\". Action Taken: No Action Taken.
183: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\PlandatenI_II\Controlling\Krisenindizes\". Action Taken: No Action Taken.
184: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\PlandatenI_II\Controlling\Liquiditaet\". Action Taken: No Action Taken.
185: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\PlandatenI_II\Controlling\Produktivitaet\". Action Taken: No Action Taken.
186: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\PlandatenI_II\Controlling\Rentabilitaet\". Action Taken: No Action Taken.
187: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\PlandatenI_II\Finanzen\". Action Taken: No Action Taken.
188: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\PlandatenI_II\Finanzen\Banken_Konten\". Action Taken: No Action Taken.
189: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\PlandatenI_II\Finanzen\Budgetdaten\". Action Taken: No Action Taken.
190: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\PlandatenI_II\Finanzen\Investitionen\". Action Taken: No Action Taken.
191: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\PlandatenI_II\Finanzen\Kredite\". Action Taken: No Action Taken.
192: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\PlandatenI_II\Finanzen\Umsatzdaten\". Action Taken: No Action Taken.
193: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Modus\PlandatenI_II\Finanzen\Unternehmerlohn\". Action Taken: No Action Taken.
194: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Rating\". Action Taken: No Action Taken.
195: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Rating\RatingAnalyst\". Action Taken: No Action Taken.
196: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "F:\Programme\BMWA\Swp7\A2c\Fuehren\Hilfe\Rating\RatingCheck\". Action Taken: No Action Taken.
197: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Office\". Action Taken: No Action Taken.
198: Fri Aug 26 20:36:44 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Office\Microsoft Office Tools\". Action Taken: No Action Taken.
199: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Shared Tools\clippit.act" refers to invalid object "D:\programme\Office\Actors\CLIPPIT.ACT". Action Taken: No Action Taken.
200: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Shared Tools\hlink.srg" refers to invalid object "D:\programme\Office\HLINK.SRG". Action Taken: No Action Taken.
201: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Shared Tools\misc.srg" refers to invalid object "D:\programme\Office\MISC.SRG". Action Taken: No Action Taken.
202: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Shared Tools\MSACCESS80" refers to invalid object "D:\programme\Office\MSACCESS.EXE". Action Taken: No Action Taken.
203: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Shared Tools\mso97.dll" refers to invalid object "D:\programme\Office\MSO97.DLL". Action Taken: No Action Taken.
204: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Shared Tools\msroute.dll" refers to invalid object "D:\programme\Office\MSROUTE.DLL". Action Taken: No Action Taken.
205: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Shared Tools\osa.exe" refers to invalid object "D:\programme\Office\OSA.EXE". Action Taken: No Action Taken.
206: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Shared Tools\osaintl.dll" refers to invalid object "D:\programme\Office\OSAINTL.DLL". Action Taken: No Action Taken.
207: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Shared Tools\recncl.dll" refers to invalid object "C:\WINDOWS\System32\RECNCL.DLL". Action Taken: No Action Taken.
208: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Shared Tools\VBA Off97 Help" refers to invalid object "D:\programme\Office\VBAOFF8.HLP". Action Taken: No Action Taken.
209: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Shared Tools\Wrkgadm80" refers to invalid object "C:\WINDOWS\System32\WRKGADM.EXE". Action Taken: No Action Taken.
210: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Shared Tools\xlrec.dll" refers to invalid object "C:\WINDOWS\System32\XLREC.DLL". Action Taken: No Action Taken.
211: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "0900Warner". Action Taken: No Action Taken.
212: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "AVG7Uninstall". Action Taken: No Action Taken.
213: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "bdeplayer". Action Taken: No Action Taken.
214: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "CANONBJ_Deinstall_CNMCP49.DLL". Action Taken: No Action Taken.
215: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "DATA BECKER Die große CD-Druckerei". Action Taken: No Action Taken.
216: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "DATA BECKER Foto-Kalender-Druckerei 2005". Action Taken: No Action Taken.
217: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "DownloadWare". Action Taken: No Action Taken.
218: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "EPSON Printer and Utilities". Action Taken: No Action Taken.
219: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "FirstLook". Action Taken: No Action Taken.
220: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Half-Life: Counter-Strike". Action Taken: No Action Taken.
221: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "jv16 PowerTools_is1". Action Taken: No Action Taken.
222: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Launcher". Action Taken: No Action Taken.
223: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Office8.0". Action Taken: No Action Taken.
224: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "StarMoney 3.0 S-Edition". Action Taken: No Action Taken.
225: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "TextBridge Classic 2.0". Action Taken: No Action Taken.
226: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "WeatherCast". Action Taken: No Action Taken.
227: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{43B6667D-7520-4186-B05B-F5C0494C495D}". Action Taken: No Action Taken.
228: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{7D9B8EE1-7E8E-411C-8F36-2A26D2D20D5F}". Action Taken: No Action Taken.
229: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{90280407-6000-11D3-8CFE-0050048383C9}". Action Taken: No Action Taken.
230: Fri Aug 26 20:36:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{A4D7B764-4140-11D4-88EB-0050DA3579C0}". Action Taken: No Action Taken.
231: Fri Aug 26 20:36:47 2005 => Entry "HKCR\CLSID\{04F0A7D0-FBC7-4213-AF0C-E51B6A68BEDD}" refers to invalid object "F:\PROGRA~1\Pinnacle\Studio9\programs\KNOBCO~1.OCX". Action Taken: No Action Taken.
232: Fri Aug 26 20:36:49 2005 => Entry "HKCR\CLSID\{2ABFA82C-A201-4752-AAE8-F2BB57A65795}" refers to invalid object "F:\Programme\arcsoft\PhotoImpression\photoimpression.exe /StiDevice:%1 /StiEvent:%2". Action Taken: No Action Taken.
233: Fri Aug 26 20:36:50 2005 => Entry "HKCR\CLSID\{399CB6C4-7312-11D2-B4D9-00105A0422DF}" refers to invalid object "F:\PROGRA~1\Pinnacle\Studio9\programs\HHACTI~1.DLL". Action Taken: No Action Taken.
234: Fri Aug 26 20:36:50 2005 => Entry "HKCR\CLSID\{40AF8200-4E6E-11D4-878D-00C0F6B0D1A7}" refers to invalid object "F:\Programme\arcsoft\PhotoImpression\Modules\Browser\ezrgb24.ax". Action Taken: No Action Taken.
235: Fri Aug 26 20:36:50 2005 => Entry "HKCR\CLSID\{40AF8201-4E6E-11D4-878D-00C0F6B0D1A7}" refers to invalid object "F:\Programme\arcsoft\PhotoImpression\Modules\Browser\ezrgb24.ax". Action Taken: No Action Taken.
236: Fri Aug 26 20:36:50 2005 => Entry "HKCR\CLSID\{44BE1747-DC65-4261-904F-17CA43E212B4}" refers to invalid object "J:\launch.ocx". Action Taken: No Action Taken.
237: Fri Aug 26 20:36:53 2005 => Entry "HKCR\CLSID\{79DE98BA-C039-4B74-873F-6F7597AB79F6}" refers to invalid object "F:\Fibunet\FNCOMSRV.dll". Action Taken: No Action Taken.
238: Fri Aug 26 20:36:54 2005 => Entry "HKCR\CLSID\{911A99A6-2D4A-423B-A4F2-2F9F43F1F66D}" refers to invalid object "F:\PROGRA~1\Pinnacle\Studio9\programs\Deko.ocx". Action Taken: No Action Taken.
239: Fri Aug 26 20:36:55 2005 => Entry "HKCR\CLSID\{9419B6A2-9D73-11D4-BB79-B0BBF3DE2E23}" refers to invalid object "f:\Programme\Maguma\tools\PHPDbgPS.dll". Action Taken: No Action Taken.
240: Fri Aug 26 20:36:55 2005 => Entry "HKCR\CLSID\{9419B6C1-9D73-11D4-BB79-B0BBF3DE2E23}" refers to invalid object "f:\PROGRA~1\Maguma\tools\DBGLIS~1.EXE". Action Taken: No Action Taken.
241: Fri Aug 26 20:36:55 2005 => Entry "HKCR\CLSID\{959F94FD-DD1E-11D2-B559-00105A0422DF}" refers to invalid object "F:\PROGRA~1\Pinnacle\Studio9\programs\HHACTI~1.DLL". Action Taken: No Action Taken.
242: Fri Aug 26 20:36:55 2005 => Entry "HKCR\CLSID\{A6616B31-4860-41E2-98E3-CA7649AF172F}" refers to invalid object "J:\launch.ocx". Action Taken: No Action Taken.
243: Fri Aug 26 20:36:55 2005 => Entry "HKCR\CLSID\{A8A29223-F193-11D4-A58B-000022FEA246}" refers to invalid object "F:\Programme\Maguma\studio\Maguma_Studio.exe". Action Taken: No Action Taken.
244: Fri Aug 26 20:36:56 2005 => Entry "HKCR\CLSID\{B02C2E24-78AB-447C-AE84-25F82607B44D}" refers to invalid object "F:\Fibunet\FNCOMSRV.dll". Action Taken: No Action Taken.
245: Fri Aug 26 20:36:57 2005 => Entry "HKCR\CLSID\{C35E169A-B341-45FB-8BFD-2E2C5CC3B6E8}" refers to invalid object "F:\PROGRA~1\Pinnacle\Studio9\programs\Deko.ocx". Action Taken: No Action Taken.
246: Fri Aug 26 20:36:58 2005 => Entry "HKCR\CLSID\{D98E820F-6ACD-4dc0-921E-9841E3D8B4A7}" refers to invalid object "G:\player\WMMP.EXE". Action Taken: No Action Taken.
247: Fri Aug 26 20:36:58 2005 => Entry "HKCR\CLSID\{DED77360-A576-4EAD-961A-6B4BCC3EA9E8}" refers to invalid object "F:\PROGRA~1\Pinnacle\Studio9\programs\KNOBCO~1.OCX". Action Taken: No Action Taken.
248: Fri Aug 26 20:36:59 2005 => Entry "HKCR\CLSID\{E8244BEF-0200-4A1A-BE4E-35A4A9F51C3F}" refers to invalid object "F:\Programme\arcsoft\PhotoImpression\share\pihook.dll". Action Taken: No Action Taken.
249: Fri Aug 26 20:36:59 2005 => Entry "HKCR\CLSID\{F4C6D6E0-A8FB-4281-BE24-1662D646FE2B}" refers to invalid object "G:\player\WMMP.EXE". Action Taken: No Action Taken.
250: Fri Aug 26 20:37:00 2005 => Entry "HKCR\CLSID\{FBC85E33-B858-11D2-BDFA-000000000000}" refers to invalid object "F:\Fibunet\fibunet.exe". Action Taken: No Action Taken.
251: Fri Aug 26 20:37:00 2005 => Entry "HKCR\CLSID\{FBE840E5-13A5-4cff-B2A9-4D1E64A17FF2}" refers to invalid object "G:\player\WMMP.EXE". Action Taken: No Action Taken.
252: Fri Aug 26 20:37:00 2005 => Entry "HKCR\TypeLib\{0B3A6E45-78BF-4335-BBFF-A2F14F897D55}" refers to invalid object "F:\Programme\Pinnacle\Studio9\programs\KnobControl.ocx". Action Taken: No Action Taken.
253: Fri Aug 26 20:37:01 2005 => Entry "HKCR\TypeLib\{1316B7D5-1C49-4E6E-8B59-107D67D65E5D}" refers to invalid object "C:\DOKUME~1\Dieter\LOKALE~1\Temp\Word8.0\MSForms.EXD". Action Taken: No Action Taken.
254: Fri Aug 26 20:37:01 2005 => Entry "HKCR\TypeLib\{399CB6B4-7312-11D2-B4D9-00105A0422DF}" refers to invalid object "F:\Programme\Pinnacle\Studio9\programs\HHActiveX.dll". Action Taken: No Action Taken.
255: Fri Aug 26 20:37:01 2005 => Entry "HKCR\TypeLib\{513700C0-15DA-11D4-9EEE-00A0C98F3C48}" refers to invalid object "C:\Programme\Creative\ShareDLL\ServProd\CTPROGHELP.DLL". Action Taken: No Action Taken.
256: Fri Aug 26 20:37:01 2005 => Entry "HKCR\TypeLib\{6C46C50C-9A89-4D7B-854A-5CA6B2E4EF99}" refers to invalid object "F:\Fibunet\FNCOMSRV.dll". Action Taken: No Action Taken.
257: Fri Aug 26 20:37:01 2005 => Entry "HKCR\TypeLib\{8297A5A5-5113-11D3-B276-00C04F8EC2