Hy an euch.

Ich hatte/hab mir ebenfalls den Trojaner eingefangen der den Desktop veränder (fatal error, trojan-spy usw.).

Hab mir die beiden reg von euch gennanten reg's geholt und "installiert". Funktioniert alles priema bis auf dass ich immer noch nicht den Hintergrund ändern kann. Die Liste mit Hintergrundobjeckten ist braun hinterlegt und kann nicht angewählt werden.

Service Pack 2 (wenn ich mir das richtige gedownloaded hab) dass ein unerwartetes Betriebssystem auf meinem Rechner läuft. Häh?

Und zusätzlich krieg ich andauernd Systemwarnungen von wegen Spyware und ne ganze Menge PopUp's.

Antivirenprogramm hab ich mom. keins installiert. (Hab AntiVir und Bitdefender drüber laufen lassen => Keine Erfolge)

Hier wie immer meine Log:



Logfile of HijackThis v1.99.1
Scan saved at 11:23:36, on 01.06.2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SLEE401.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\popuper.exe
C:\WINDOWS\System32\msole32.exe
C:\WINDOWS\System32\shnlog.exe
C:\WINDOWS\System32\intmonp.exe
C:\WINDOWS\System32\RunDll32.exe
D:\Programme\Logitech\iTouch\iTouch.exe
C:\WINDOWS\System32\intmon.exe
C:\bsw.exe
C:\Programme\Mozilla Firefox\firefox.exe
D:\Eigene Dateien\Programme\Anti\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = h*tp://www.startsearches.net/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = h*tp://www.startsearches.net/bar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = h*tp://www.startsearches.net/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = h*tp://www.startsearches.net/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = h*tp://www.startsearches.net/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = h*tp://www.startsearches.net/search.php?qq=%1
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = h*tp://www.startsearches.net/
R3 - Default URLSearchHook is missing
O2 - BHO: VMHomepage Class - {FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF} - C:\WINDOWS\System32\hpCCD2.tmp
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AVGCtrl] "D:\Programme\AVPersonal\AVGNT.EXE" /min
O4 - HKLM\..\Run: [zBrowser Launcher] D:\Programme\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [MSN Messenger] C:\WINDOWS\System32\msmsgs.exe
O4 - HKCU\..\Run: [WindowsFY] c:\bsw.exe
O4 - Global Startup: Microsoft Office.lnk = D:\Programme\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Microsoft AntiSpyware helper - {538899FE-EA90-429D-B663-A0EAC0B1B0DD} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {538899FE-EA90-429D-B663-A0EAC0B1B0DD} - (no file) (HKCU)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Steganos Live Encryption Engine (Version 401) [Service] (SLEE_401_SERVICE) - Unknown owner - C:\WINDOWS\System32\SLEE401.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\GEMEIN~1\SONYSH~1\AVLib\Sptisrv.exe


Wäre echt nicht schlecht wenn mir jemand durch dieses Wirrwar hindurch geleiten kann...

Vielen Dank jetzt schon mal

Hallo undoreal,

Du hast ihn noch!
Arbeite dies bitte genau durch:
http://www.trojaner-board.de/showthread.php?t=17863

Ein Antivir-Programm sollte man schon haben:
http://www.trojaner-info.de/soft_antivirus.shtml

Service Pack 2 ist bei Dir nicht installiert. Hol es schnellstmöglich nach.

Poste nach der Aktion ein neues Logfile.

dartus

Vielen Dank erst mal...
Anleitung war echt super. Funktioniert wieder alles. Leider findet eScan noch ne ganze Menge.
Könnte genau das sein, was cidre im Anhang vom Link den du mir geben hast sein.
Hab aber nicht verstanden was er meint.
Ausserdem kann ich immer noch nicht meinen Desktophintergrund ändern (jetzt ist er standard blau).
Komisch das Kaspersky nichts findet und ich kann mit eScan (FreewareVersion) ja die Datien nicht löschen.

Hier die HighJackThis log :

Logfile of HijackThis v1.99.1
Scan saved at 11:48:09, on 02.06.2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\RunDll32.exe
D:\Programme\Logitech\iTouch\iTouch.exe
C:\WINDOWS\System32\SLEE401.exe
C:\WINDOWS\System32\taskmgr.exe
C:\Programme\Mozilla Firefox\firefox.exe
D:\Eigene Dateien\Programme\Anti\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = h*tp://www.startsearches.net/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = h*tp://www.startsearches.net/bar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = h*tp://www.startsearches.net/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = h*tp://www.startsearches.net/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = h*tp://www.startsearches.net/search.php?qq=%1
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = h*tp://www.startsearches.net/search.php?qq=%1
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = h*tp://www.startsearches.net/
R3 - Default URLSearchHook is missing
O2 - BHO: VMHomepage Class - {FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF} - C:\WINDOWS\System32\hp44E8.tmp (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AVGCtrl] "D:\Programme\AVPersonal\AVGNT.EXE" /min
O4 - HKLM\..\Run: [zBrowser Launcher] D:\Programme\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [MSN Messenger] C:\WINDOWS\System32\msmsgs.exe
O4 - HKLM\..\Run: [KAVPersonal50] "D:\Programme\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
O4 - HKCU\..\Run: [WindowsFY] c:\bsw.exe
O4 - Global Startup: Microsoft Office.lnk = D:\Programme\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Microsoft AntiSpyware helper - {538899FE-EA90-429D-B663-A0EAC0B1B0DD} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {538899FE-EA90-429D-B663-A0EAC0B1B0DD} - (no file) (HKCU)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: kavsvc - Kaspersky Lab - D:\Programme\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: Steganos Live Encryption Engine (Version 401) [Service] (SLEE_401_SERVICE) - Unknown owner - C:\WINDOWS\System32\SLEE401.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\GEMEIN~1\SONYSH~1\AVLib\Sptisrv.exe



ff

Und hier die eScan log :

Thu Jun 02 09:49:43 2005 => **********************************************************
Thu Jun 02 09:49:43 2005 => MicroWorld AntiVirus & Spyware Toolkit Utility.
Thu Jun 02 09:49:43 2005 => Copyright © 2003-2005, MicroWorld Technologies Inc.
Thu Jun 02 09:49:43 2005 => **********************************************************
Thu Jun 02 09:49:43 2005 => Version 6.2.9 (C:\WINDOWS\TEMP\mwavscan.com)
Thu Jun 02 09:49:43 2005 => Log File: C:\WINDOWS\TEMP\MWAV.LOG
Thu Jun 02 09:49:43 2005 => MWAV Registered: FALSE.
Thu Jun 02 09:49:43 2005 => MWAV Mode: Only Scan files.
Thu Jun 02 09:49:43 2005 => Latest Date of files inside MWAV: 29 May 2005 13:10:21.
Thu Jun 02 09:49:45 2005 => AV Library Loaded...
Thu Jun 02 09:49:45 2005 => MWAV doing self scanning...
Thu Jun 02 09:49:45 2005 => Scanning File C:\WINDOWS\TEMP\kavss.exe
Thu Jun 02 09:49:45 2005 => Scanning File C:\WINDOWS\TEMP\Getvlist.exe
Thu Jun 02 09:49:45 2005 => Scanning File C:\WINDOWS\TEMP\kavss.dll
Thu Jun 02 09:49:45 2005 => Scanning File C:\WINDOWS\TEMP\kavssdi.dll
Thu Jun 02 09:49:45 2005 => Scanning File C:\WINDOWS\TEMP\kavssi.dll
Thu Jun 02 09:49:45 2005 => Scanning File C:\WINDOWS\TEMP\kavvlg.dll
Thu Jun 02 09:49:45 2005 => Scanning File C:\WINDOWS\TEMP\msvlclnt.dll
Thu Jun 02 09:49:45 2005 => Scanning File C:\WINDOWS\TEMP\ipc.dll
Thu Jun 02 09:49:45 2005 => Scanning File C:\WINDOWS\TEMP\main.avi
Thu Jun 02 09:49:45 2005 => Scanning File C:\WINDOWS\TEMP\virus.avi
Thu Jun 02 09:49:45 2005 => MWAV files are clean.
Thu Jun 02 09:49:51 2005 => Virus Database Date: 2005/05/29
Thu Jun 02 09:49:51 2005 => Virus Database Count: 132253
Thu Jun 02 09:49:58 2005 => AV Library Unloaded (3)...
Thu Jun 02 10:02:53 2005 => **********************************************************
Thu Jun 02 10:02:53 2005 => MicroWorld AntiVirus & Spyware Toolkit Utility.
Thu Jun 02 10:02:53 2005 => Copyright © 2003-2005, MicroWorld Technologies Inc.
Thu Jun 02 10:02:53 2005 => **********************************************************
Thu Jun 02 10:02:53 2005 => Version 6.2.9 (C:\WINDOWS\TEMP\mwavscan.com)
Thu Jun 02 10:02:53 2005 => Log File: C:\WINDOWS\TEMP\MWAV.LOG
Thu Jun 02 10:02:53 2005 => Last Scan Date and Time: 02.06.2005 09:55:02
Thu Jun 02 10:02:53 2005 => MWAV Registered: FALSE.
Thu Jun 02 10:02:53 2005 => MWAV Mode: Only Scan files.
Thu Jun 02 10:02:53 2005 => Latest Date of files inside MWAV: 29 May 2005 13:10:21.
Thu Jun 02 10:02:55 2005 => AV Library Loaded...
Thu Jun 02 10:02:55 2005 => MWAV doing self scanning...
Thu Jun 02 10:02:55 2005 => Scanning File C:\WINDOWS\TEMP\kavss.exe
Thu Jun 02 10:02:55 2005 => Scanning File C:\WINDOWS\TEMP\Getvlist.exe
Thu Jun 02 10:02:55 2005 => Scanning File C:\WINDOWS\TEMP\kavss.dll
Thu Jun 02 10:02:55 2005 => Scanning File C:\WINDOWS\TEMP\kavssdi.dll
Thu Jun 02 10:02:55 2005 => Scanning File C:\WINDOWS\TEMP\kavssi.dll
Thu Jun 02 10:02:55 2005 => Scanning File C:\WINDOWS\TEMP\kavvlg.dll
Thu Jun 02 10:02:55 2005 => Scanning File C:\WINDOWS\TEMP\msvlclnt.dll
Thu Jun 02 10:02:55 2005 => Scanning File C:\WINDOWS\TEMP\ipc.dll
Thu Jun 02 10:02:55 2005 => Scanning File C:\WINDOWS\TEMP\main.avi
Thu Jun 02 10:02:55 2005 => Scanning File C:\WINDOWS\TEMP\virus.avi
Thu Jun 02 10:02:55 2005 => MWAV files are clean.
Thu Jun 02 10:02:57 2005 => Virus Database Date: 2005/05/29
Thu Jun 02 10:02:57 2005 => Virus Database Count: 132253

Thu Jun 02 10:03:13 2005 => **********************************************************
Thu Jun 02 10:03:13 2005 => MicroWorld AntiVirus & Spyware Toolkit Utility.
Thu Jun 02 10:03:13 2005 => Copyright © 2003-2005, MicroWorld Technologies Inc.
Thu Jun 02 10:03:13 2005 =>
Thu Jun 02 10:03:13 2005 => Support: support@mwti.net
Thu Jun 02 10:03:13 2005 => Web: http://www.mwti.net
Thu Jun 02 10:03:13 2005 => **********************************************************
Thu Jun 02 10:03:13 2005 => Version 6.2.9 (C:\WINDOWS\TEMP\mwavscan.com)
Thu Jun 02 10:03:13 2005 => Log File: C:\WINDOWS\TEMP\MWAV.LOG
Thu Jun 02 10:03:13 2005 => User Account: janphilip
Thu Jun 02 10:03:13 2005 => Windows Root Folder: C:\WINDOWS
Thu Jun 02 10:03:13 2005 => Windows Sys32 Folder: C:\WINDOWS\System32
Thu Jun 02 10:03:13 2005 => OS: Windows NT
Thu Jun 02 10:03:13 2005 => Latest Date of files inside MWAV: 29 May 2005 13:10:21.

Thu Jun 02 10:03:13 2005 => Options Selected by User:
Thu Jun 02 10:03:13 2005 => Memory Check: Enabled
Thu Jun 02 10:03:13 2005 => Registry Check: Enabled
Thu Jun 02 10:03:13 2005 => StartUp Folder Check: Enabled
Thu Jun 02 10:03:13 2005 => System Folder Check: Enabled
Thu Jun 02 10:03:13 2005 => System Area Check: Disabled
Thu Jun 02 10:03:13 2005 => Services Check: Enabled
Thu Jun 02 10:03:13 2005 => Drive Check Option Disabled
Thu Jun 02 10:03:13 2005 => Folder Check: Disabled

Thu Jun 02 10:03:13 2005 => ***** Scanning Memory Files *****
Thu Jun 02 10:03:13 2005 => Scanning File C:\WINDOWS\System32\smss.exe
Thu Jun 02 10:03:13 2005 => Scanning File C:\WINDOWS\System32\ntdll.dll
Thu Jun 02 10:03:13 2005 => Scanning File C:\WINDOWS\SYSTEM32\CSRSS.EXE
Thu Jun 02 10:03:13 2005 => Scanning File C:\WINDOWS\system32\CSRSRV.dll
Thu Jun 02 10:03:13 2005 => Scanning File C:\WINDOWS\system32\basesrv.dll
Thu Jun 02 10:03:13 2005 => Scanning File C:\WINDOWS\system32\winsrv.dll
Thu Jun 02 10:03:13 2005 => Scanning File C:\WINDOWS\system32\USER32.dll
Thu Jun 02 10:03:13 2005 => Scanning File C:\WINDOWS\system32\KERNEL32.dll
Thu Jun 02 10:03:13 2005 => Scanning File C:\WINDOWS\system32\GDI32.dll
Thu Jun 02 10:03:13 2005 => Scanning File C:\WINDOWS\system32\ADVAPI32.dll
Thu Jun 02 10:03:13 2005 => Scanning File C:\WINDOWS\system32\RPCRT4.dll
Thu Jun 02 10:03:13 2005 => Scanning File C:\WINDOWS\System32\sxs.dll
Thu Jun 02 10:03:13 2005 => Scanning File C:\WINDOWS\SYSTEM32\WINLOGON.EXE
Thu Jun 02 10:03:13 2005 => Scanning File C:\WINDOWS\system32\msvcrt.dll
Thu Jun 02 10:03:13 2005 => Scanning File C:\WINDOWS\system32\USERENV.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\NDdeApi.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\CRYPT32.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\MSASN1.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\Secur32.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\WINSTA.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\PROFMAP.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\NETAPI32.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\REGAPI.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\WS2_32.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\WS2HELP.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\AUTHZ.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\PSAPI.DLL
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\VERSION.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\SETUPAPI.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\System32\MSGINA.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\SHELL32.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\SHLWAPI.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\COMCTL32.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\System32\ODBC32.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\comdlg32.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.10.0_x-ww_f7fb5805\comctl32.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\System32\odbcint.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\System32\SHSVCS.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\sfc.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\System32\sfc_os.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\System32\WINTRUST.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\ole32.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\IMAGEHLP.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\System32\WINSCARD.DLL
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\System32\WTSAPI32.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\System32\uxtheme.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\System32\WINMM.dll
Thu Jun 02 10:03:14 2005 => Scanning File C:\WINDOWS\system32\Ati2evxx.dll
Thu Jun 02 10:03:15 2005 => Scanning File C:\WINDOWS\system32\cscdll.dll
Thu Jun 02 10:03:15 2005 => Scanning File C:\WINDOWS\system32\WlNotify.dll
Thu Jun 02 10:03:15 2005 => Scanning File C:\WINDOWS\System32\WINSPOOL.DRV
Thu Jun 02 10:03:15 2005 => Scanning File C:\WINDOWS\system32\MPR.dll
Thu Jun 02 10:03:15 2005 => Scanning File C:\WINDOWS\System32\rsaenh.dll
Thu Jun 02 10:03:15 2005 => Scanning File C:\WINDOWS\System32\SAMLIB.dll
Thu Jun 02 10:03:15 2005 => Scanning File C:\WINDOWS\system32\msv1_0.dll
Thu Jun 02 10:03:15 2005 => Scanning File C:\WINDOWS\System32\cscui.dll
Thu Jun 02 10:03:15 2005 => Scanning File C:\WINDOWS\System32\wdmaud.drv
Thu Jun 02 10:03:15 2005 => Scanning File C:\WINDOWS\System32\msacm32.drv
Thu Jun 02 10:03:15 2005 => Scanning File C:\WINDOWS\System32\MSACM32.dll
Thu Jun 02 10:03:15 2005 => Scanning File C:\WINDOWS\System32\midimap.dll
Thu Jun 02 10:03:15 2005 => Scanning File C:\WINDOWS\System32\NTMARTA.DLL
Thu Jun 02 10:03:15 2005 => Scanning File C:\WINDOWS\system32\WLDAP32.dll
Thu Jun 02 10:03:15 2005 => Scanning File C:\WINDOWS\System32\COMRes.dll
Thu Jun 02 10:03:15 2005 => Scanning File C:\WINDOWS\system32\OLEAUT32.dll
Thu Jun 02 10:03:15 2005 => Scanning File C:\WINDOWS\System32\CLBCATQ.DLL
Thu Jun 02 10:03:15 2005 => Scanning File C:\WINDOWS\system32\services.exe
Thu Jun 02 10:03:15 2005 => Scanning File C:\WINDOWS\system32\SCESRV.dll
Thu Jun 02 10:03:15 2005 => Scanning File C:\WINDOWS\system32\umpnpmgr.dll
Thu Jun 02 10:03:15 2005 => Scanning File C:\WINDOWS\system32\NCObjAPI.DLL
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\eventlog.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\lsass.exe
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\LSASRV.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\SAMSRV.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\cryptdll.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\DNSAPI.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\NTDSAPI.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\msprivs.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\kerberos.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\netlogon.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\w32time.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\MSVCP60.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\iphlpapi.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\schannel.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\wdigest.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\scecli.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\ipsecsvc.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\oakley.DLL
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\WINIPSEC.DLL
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\pstorsvc.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\mswsock.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\System32\wshtcpip.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\psbase.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\System32\dssenh.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\System32\Ati2evxx.exe
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\System32\Ati2edxx.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Jun 02 10:03:16 2005 => Scanning File c:\windows\system32\rpcss.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\System32\winrnr.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\rasadhlp.dll
Thu Jun 02 10:03:16 2005 => Scanning File c:\windows\system32\dhcpcsvc.dll
Thu Jun 02 10:03:16 2005 => Scanning File c:\windows\system32\wzcsvc.dll
Thu Jun 02 10:03:16 2005 => Scanning File c:\windows\system32\rtutils.dll
Thu Jun 02 10:03:16 2005 => Scanning File c:\windows\system32\WMI.dll
Thu Jun 02 10:03:16 2005 => Scanning File c:\windows\system32\ESENT.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\System32\rastls.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\System32\ATL.DLL
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\System32\CRYPTUI.dll
Thu Jun 02 10:03:16 2005 => Scanning File C:\WINDOWS\system32\WININET.dll
Thu Jun 02 10:03:17 2005 => Scanning File C:\WINDOWS\System32\MPRAPI.dll
Thu Jun 02 10:03:17 2005 => Scanning File C:\WINDOWS\System32\ACTIVEDS.dll
Thu Jun 02 10:03:17 2005 => Scanning File C:\WINDOWS\System32\adsldpc.dll
Thu Jun 02 10:03:17 2005 => Scanning File C:\WINDOWS\System32\RASAPI32.dll
Thu Jun 02 10:03:17 2005 => Scanning File C:\WINDOWS\System32\rasman.dll
Thu Jun 02 10:03:17 2005 => Scanning File C:\WINDOWS\System32\TAPI32.dll
Thu Jun 02 10:03:17 2005 => Scanning File C:\WINDOWS\System32\raschap.dll
Thu Jun 02 10:03:17 2005 => Scanning File c:\windows\system32\schedsvc.dll
Thu Jun 02 10:03:17 2005 => Scanning File C:\WINDOWS\System32\MSIDLE.DLL
Thu Jun 02 10:03:17 2005 => Scanning File c:\windows\system32\audiosrv.dll
Thu Jun 02 10:03:17 2005 => Scanning File c:\windows\system32\wkssvc.dll
Thu Jun 02 10:03:17 2005 => Scanning File c:\windows\system32\cryptsvc.dll
Thu Jun 02 10:03:17 2005 => Scanning File c:\windows\system32\certcli.dll
Thu Jun 02 10:03:17 2005 => Scanning File c:\windows\system32\dmserver.dll
Thu Jun 02 10:03:17 2005 => Scanning File c:\windows\system32\ersvc.dll
Thu Jun 02 10:03:17 2005 => Scanning File c:\windows\system32\es.dll
Thu Jun 02 10:03:17 2005 => Scanning File c:\windows\pchealth\helpctr\binaries\pchsvc.dll
Thu Jun 02 10:03:17 2005 => Scanning File c:\windows\system32\srvsvc.dll
Thu Jun 02 10:03:17 2005 => Scanning File c:\windows\system32\msgsvc.dll
Thu Jun 02 10:03:17 2005 => Scanning File c:\windows\system32\seclogon.dll
Thu Jun 02 10:03:17 2005 => Scanning File c:\windows\system32\srsvc.dll
Thu Jun 02 10:03:17 2005 => Scanning File c:\windows\system32\POWRPROF.dll
Thu Jun 02 10:03:17 2005 => Scanning File c:\windows\system32\trkwks.dll
Thu Jun 02 10:03:17 2005 => Scanning File c:\windows\system32\wbem\wmisvc.dll
Thu Jun 02 10:03:17 2005 => Scanning File c:\windows\system32\wbem\wbemcomn.dll
Thu Jun 02 10:03:17 2005 => Scanning File C:\WINDOWS\System32\VSSAPI.DLL
Thu Jun 02 10:03:17 2005 => Scanning File c:\windows\system32\mspmspsv.dll
Thu Jun 02 10:03:17 2005 => Scanning File c:\windows\system32\wuauserv.dll
Thu Jun 02 10:03:17 2005 => Scanning File C:\WINDOWS\System32\wuaueng.dll
Thu Jun 02 10:03:17 2005 => Scanning File C:\WINDOWS\System32\ADVPACK.dll
Thu Jun 02 10:03:17 2005 => Scanning File c:\windows\system32\sens.dll
Thu Jun 02 10:03:17 2005 => Scanning File c:\windows\system32\browser.dll
Thu Jun 02 10:03:17 2005 => Scanning File C:\WINDOWS\system32\comsvcs.dll
Thu Jun 02 10:03:18 2005 => Scanning File C:\WINDOWS\system32\MTXCLU.DLL
Thu Jun 02 10:03:18 2005 => Scanning File C:\WINDOWS\system32\WSOCK32.dll
Thu Jun 02 10:03:18 2005 => Scanning File C:\WINDOWS\system32\colbact.DLL
Thu Jun 02 10:03:18 2005 => Scanning File C:\WINDOWS\System32\CLUSAPI.DLL
Thu Jun 02 10:03:18 2005 => Scanning File C:\WINDOWS\System32\RESUTILS.DLL
Thu Jun 02 10:03:18 2005 => Scanning File C:\WINDOWS\System32\mtxoci.dll
Thu Jun 02 10:03:18 2005 => Scanning File c:\windows\system32\termsrv.dll
Thu Jun 02 10:03:18 2005 => Scanning File c:\windows\system32\ICAAPI.dll
Thu Jun 02 10:03:18 2005 => Scanning File c:\windows\system32\mstlsapi.dll
Thu Jun 02 10:03:18 2005 => Scanning File C:\WINDOWS\system32\WBEM\wbemcore.dll
Thu Jun 02 10:03:18 2005 => Scanning File C:\WINDOWS\system32\WBEM\esscli.dll
Thu Jun 02 10:03:18 2005 => Scanning File C:\WINDOWS\system32\WBEM\FastProx.dll
Thu Jun 02 10:03:18 2005 => Scanning File c:\windows\system32\netman.dll
Thu Jun 02 10:03:18 2005 => Scanning File C:\WINDOWS\system32\NETSHELL.dll
Thu Jun 02 10:03:18 2005 => Scanning File C:\WINDOWS\system32\credui.dll
Thu Jun 02 10:03:18 2005 => Scanning File C:\WINDOWS\System32\wbem\wmiutils.dll
Thu Jun 02 10:03:18 2005 => Scanning File C:\WINDOWS\System32\wbem\repdrvfs.dll
Thu Jun 02 10:03:19 2005 => Scanning File C:\WINDOWS\System32\wbem\wmiprvsd.dll
Thu Jun 02 10:03:20 2005 => Scanning File C:\WINDOWS\System32\wbem\wbemess.dll
Thu Jun 02 10:03:20 2005 => Scanning File C:\WINDOWS\System32\upnp.dll
Thu Jun 02 10:03:20 2005 => Scanning File C:\WINDOWS\System32\SSDPAPI.dll
Thu Jun 02 10:03:20 2005 => Scanning File C:\WINDOWS\System32\hnetcfg.dll
Thu Jun 02 10:03:20 2005 => Scanning File C:\WINDOWS\System32\netcfgx.dll
Thu Jun 02 10:03:20 2005 => Scanning File C:\WINDOWS\System32\rasmans.dll
Thu Jun 02 10:03:20 2005 => Scanning File c:\windows\system32\tapisrv.dll
Thu Jun 02 10:03:20 2005 => Scanning File C:\WINDOWS\System32\msi.dll
Thu Jun 02 10:03:20 2005 => Scanning File C:\WINDOWS\System32\RASDLG.dll
Thu Jun 02 10:03:20 2005 => Scanning File C:\WINDOWS\System32\rastapi.dll
Thu Jun 02 10:03:20 2005 => Scanning File C:\WINDOWS\System32\unimdm.tsp
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\System32\uniplat.dll
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\System32\kmddsp.tsp
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\System32\ndptsp.tsp
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\System32\ipconf.tsp
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\System32\h323.tsp
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\System32\hidphone.tsp
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\System32\HID.DLL
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\System32\rasppp.dll
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\System32\ntlsapi.dll
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\System32\winhttp.dll
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\System32\wbem\ncprov.dll
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\System32\wbem\wbemcons.dll
Thu Jun 02 10:03:21 2005 => Scanning File c:\windows\system32\dnsrslvr.dll
Thu Jun 02 10:03:21 2005 => Scanning File c:\windows\system32\lmhsvc.dll
Thu Jun 02 10:03:21 2005 => Scanning File c:\windows\system32\webclnt.dll
Thu Jun 02 10:03:21 2005 => Scanning File c:\windows\system32\regsvc.dll
Thu Jun 02 10:03:21 2005 => Scanning File c:\windows\system32\ssdpsrv.dll
Thu Jun 02 10:03:21 2005 => Scanning File

ff

C:\WINDOWS\system32\spoolsv.exe
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\system32\SPOOLSS.DLL
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\system32\localspl.dll
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\system32\cnbjmon.dll
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\system32\pjlmon.dll
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\system32\tcpmon.dll
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\system32\usbmon.dll
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\system32\win32spl.dll
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\system32\NETRAP.dll
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\system32\inetpp.dll
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\system32\icmp.dll
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\Explorer.EXE
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\System32\BROWSEUI.dll
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\System32\SHDOCVW.dll
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\system32\appHelp.dll
Thu Jun 02 10:03:21 2005 => Scanning File C:\WINDOWS\System32\themeui.dll
Thu Jun 02 10:03:22 2005 => Scanning File C:\WINDOWS\System32\MSIMG32.dll
Thu Jun 02 10:03:22 2005 => Scanning File C:\WINDOWS\System32\actxprxy.dll
Thu Jun 02 10:03:22 2005 => Scanning File C:\WINDOWS\System32\LINKINFO.dll
Thu Jun 02 10:03:22 2005 => Scanning File C:\WINDOWS\System32\ntshrui.dll
Thu Jun 02 10:03:22 2005 => Scanning File C:\WINDOWS\system32\urlmon.dll
Thu Jun 02 10:03:22 2005 => Scanning File C:\WINDOWS\System32\webcheck.dll
Thu Jun 02 10:03:22 2005 => Scanning File C:\WINDOWS\System32\hhk.dll
Thu Jun 02 10:03:24 2005 => File C:\WINDOWS\System32\hhk.dll infected by "Trojan-Clicker.Win32.Agent.dj" Virus! Action Taken: No Action Taken.

Thu Jun 02 10:03:24 2005 => Scanning File C:\WINDOWS\System32\stobject.dll
Thu Jun 02 10:03:24 2005 => Scanning File C:\WINDOWS\System32\BatMeter.dll
Thu Jun 02 10:03:24 2005 => Scanning File D:\Programme\Logitech\iTouch\iTchHk.dll
Thu Jun 02 10:03:24 2005 => Scanning File C:\WINDOWS\System32\browselc.dll
Thu Jun 02 10:03:24 2005 => Scanning File C:\WINDOWS\System32\DUSER.dll
Thu Jun 02 10:03:24 2005 => Scanning File C:\WINDOWS\System32\drprov.dll
Thu Jun 02 10:03:24 2005 => Scanning File C:\WINDOWS\System32\ntlanman.dll
Thu Jun 02 10:03:24 2005 => Scanning File C:\WINDOWS\System32\NETUI0.dll
Thu Jun 02 10:03:24 2005 => Scanning File C:\WINDOWS\System32\NETUI1.dll
Thu Jun 02 10:03:24 2005 => Scanning File C:\WINDOWS\System32\davclnt.dll
Thu Jun 02 10:03:24 2005 => Scanning File C:\WINDOWS\System32\printui.dll
Thu Jun 02 10:03:24 2005 => Scanning File C:\WINDOWS\System32\CFGMGR32.dll
Thu Jun 02 10:03:24 2005 => Scanning File C:\WINDOWS\System32\shdoclc.dll
Thu Jun 02 10:03:25 2005 => Scanning File C:\WINDOWS\System32\shnlog.exe
Thu Jun 02 10:03:25 2005 => File C:\WINDOWS\System32\shnlog.exe infected by "Trojan-Clicker.Win32.Agent.dj" Virus! Action Taken: No Action Taken.

Thu Jun 02 10:03:25 2005 => Scanning File C:\WINDOWS\System32\RunDll32.exe
Thu Jun 02 10:03:25 2005 => Scanning File C:\WINDOWS\system\cmicnfg.cpl
Thu Jun 02 10:03:25 2005 => Scanning File C:\WINDOWS\System32\udaprop.dll
Thu Jun 02 10:03:25 2005 => Scanning File C:\WINDOWS\System32\intmon.exe
Thu Jun 02 10:03:25 2005 => File C:\WINDOWS\System32\intmon.exe infected by "Trojan-Clicker.Win32.Agent.dj" Virus! Action Taken: No Action Taken.

Thu Jun 02 10:03:25 2005 => Scanning File D:\Programme\Logitech\iTouch\iTouch.exe
Thu Jun 02 10:03:25 2005 => Scanning File C:\WINDOWS\System32\MFC42.DLL
Thu Jun 02 10:03:25 2005 => Scanning File C:\WINDOWS\System32\OLEPRO32.DLL
Thu Jun 02 10:03:25 2005 => Scanning File C:\WINDOWS\System32\MFC42LOC.DLL
Thu Jun 02 10:03:25 2005 => Scanning File D:\Programme\Logitech\iTouch\iTouchrc.dll
Thu Jun 02 10:03:25 2005 => Scanning File D:\Programme\Logitech\iTouch\kbdhook.dll
Thu Jun 02 10:03:25 2005 => Scanning File C:\WINDOWS\System32\SLEE401.exe
Thu Jun 02 10:03:25 2005 => Scanning File C:\WINDOWS\System32\msiexec.exe
Thu Jun 02 10:03:25 2005 => Scanning File C:\WINDOWS\System32\SRCLIENT.DLL
Thu Jun 02 10:03:25 2005 => Scanning File C:\WINDOWS\system32\WBEM\framedyn.dll
Thu Jun 02 10:03:25 2005 => Scanning File C:\WINDOWS\TEMP\mwavscan.com
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\TEMP\msvlclnt.dll
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\TEMP\kavssdi.dll
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\TEMP\kavssd.dll
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\TEMP\kavssi.dll
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\TEMP\ipc.dll
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\TEMP\RICHED32.DLL
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\TEMP\PSAPI.DLL
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\System32\VDMDBG.DLL
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\TEMP\kavss.exe
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\TEMP\kavss.dll

Thu Jun 02 10:03:26 2005 => ***** Scanning Registry Files *****

Thu Jun 02 10:03:26 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\system32\SHELL32.dll
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\system32\SHELL32.dll
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\System32\webcheck.dll
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\System32\stobject.dll

Thu Jun 02 10:03:26 2005 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad

Thu Jun 02 10:03:26 2005 => Scanning HKLM\SOFTWARE\Microsoft\Internet Explorer\Plugins\Extension

Thu Jun 02 10:03:26 2005 => Scanning HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\System32\msdxm.ocx

Thu Jun 02 10:03:26 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects
Thu Jun 02 10:03:26 2005 => {FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF} = C:\WINDOWS\System32\hp44E8.tmp
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\System32\hp44E8.tmp
Thu Jun 02 10:03:26 2005 => File C:\WINDOWS\System32\hp44E8.tmp infected by "Trojan-Clicker.Win32.Agent.dj" Virus! Action Taken: No Action Taken.


Thu Jun 02 10:03:26 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\System32\browseui.dll

Thu Jun 02 10:03:26 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\system32\mmsys.cpl
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\system32\icmui.dll
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\system32\rshx32.dll
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\system32\docprop.dll
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\system32\ntshrui.dll
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\System32\themeui.dll
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\system32\deskadp.dll
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\system32\deskmon.dll
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\system32\dssec.dll
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\system32\SlayerXP.dll
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\system32\shscrap.dll
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\system32\diskcopy.dll
Thu Jun 02 10:03:26 2005 => Scanning File C:\WINDOWS\system32\ntlanui2.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\icmui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\icmui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\printui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\dskquoui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\syncui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\hticons.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\fontext.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\icmui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\rshx32.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\ntshrui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\deskperf.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\cryptext.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\cryptext.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\NETSHELL.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\NETSHELL.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\wiashext.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\wiashext.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\wiashext.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\wiashext.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\wiashext.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\remotepg.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\wuaueng.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\wshext.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\oledb32.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\mstask.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\mstask.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\mstask.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shmedia.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shmedia.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shmedia.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shmedia.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shmedia.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shmedia.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\browseui.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\system32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shdocvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\sendmail.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\sendmail.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\occache.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\webcheck.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\webcheck.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\webcheck.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\webcheck.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\webcheck.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\webcheck.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\webcheck.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\webcheck.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\webcheck.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\webcheck.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\appwiz.cpl
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\appwiz.cpl
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\appwiz.cpl
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shimgvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shimgvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shimgvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shimgvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shimgvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\shimgvw.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\netplwiz.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\netplwiz.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\netplwiz.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\netplwiz.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\zipfldr.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\zipfldr.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\zipfldr.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\msieftp.dll
Thu Jun 02 10:03:27 2005 => Scanning File C:\WINDOWS\System32\docprop2.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\docprop2.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\docprop2.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\docprop2.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\docprop2.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\docprop2.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\dsquery.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\dsquery.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\dsquery.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\dsquery.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\dsuiext.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\dsuiext.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\mydocs.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\mydocs.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\mydocs.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\cscui.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\cscui.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\cscui.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\msagent\agentpsh.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\dfsshlex.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\photowiz.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\mmcshext.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\system32\cabview.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\PROGRA~1\OUTLOO~1\wabfind.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\wmpshell.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\wmpshell.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\wmpshell.dll
Thu Jun 02 10:03:28 2005 => Scanning File c:\PROGRA~1\STEGAN~1\SHREDD~1.DLL
Thu Jun 02 10:03:28 2005 => Scanning File c:\PROGRA~1\STEGAN~1\STEGAN~1.DLL
Thu Jun 02 10:03:28 2005 => Scanning File C:\Programme\WinAce\arcext.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\Programme\WinAce\arcext.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\Programme\WinAce\arcext.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\Programme\WinAce\arcext.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\cdfview.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\cdfview.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\cdfview.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\cdfview.dll
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\System32\cdfview.dll

Thu Jun 02 10:03:28 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows

Thu Jun 02 10:03:28 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\Explorer.exe
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\system32\userinit.exe
Thu Jun 02 10:03:28 2005 => Scanning File C:\WINDOWS\system32\gptext.dll
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\fdeploy.dll
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\dskquota.dll
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\gptext.dll
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\gptext.dll
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\scecli.dll
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\iedkcs32.dll
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\scecli.dll
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\appmgmts.dll
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\gptext.dll
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\Ati2evxx.dll
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\crypt32.dll
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\cryptnet.dll
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\cscdll.dll
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\wlnotify.dll
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\wlnotify.dll
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\sclgntfy.dll
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\WlNotify.dll
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\wlnotify.dll
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\wlnotify.dll

Thu Jun 02 10:03:29 2005 => Scanning HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Thu Jun 02 10:03:29 2005 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

Thu Jun 02 10:03:29 2005 => Scanning HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows

Thu Jun 02 10:03:29 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AEDEBUG
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\drwtsn32.exe

Thu Jun 02 10:03:29 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\ntsd.exe

Thu Jun 02 10:03:29 2005 => Scanning HKCU\Control Panel\Desktop
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\System32\logon.scr

Thu Jun 02 10:03:29 2005 => Scanning HKLM\SYSTEM\CurrentControlSet\Control\WOW
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\ntvdm.exe
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\ntvdm.exe


ff

Thu Jun 02 10:03:29 2005 => Scanning HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\inf\unregmp2.exe
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\shmgrate.exe
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\RunDLL32.exe
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\shmgrate.exe
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\rundll32.exe
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\regsvr32.exe
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\System32\rundll32.exe
Thu Jun 02 10:03:29 2005 => Scanning File C:\PROGRA~1\OUTLOO~1\setup50.exe
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\rundll32.exe
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\rundll32.exe
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\rundll32.exe
Thu Jun 02 10:03:29 2005 => Scanning File C:\PROGRA~1\OUTLOO~1\setup50.exe
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\regsvr32.exe
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\ie4uinit.exe

Thu Jun 02 10:03:29 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
Thu Jun 02 10:03:29 2005 => ERROR!!! Invalid Entry notepad.exe = msmsgs.exe (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run). No Action Taken.
Thu Jun 02 10:03:29 2005 => ERROR!!! Invalid Entry notepad2.exe = popuper.exe (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run). No Action Taken.
Thu Jun 02 10:03:29 2005 => ERROR!!! Invalid Entry winlogon.exe = msole32.exe (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run). No Action Taken.
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\shnlog.exe
Thu Jun 02 10:03:29 2005 => File C:\WINDOWS\system32\shnlog.exe infected by "Trojan-Clicker.Win32.Agent.dj" Virus! Action Taken: No Action Taken.


Thu Jun 02 10:03:29 2005 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

Thu Jun 02 10:03:29 2005 => Scanning HKLM\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Run

Thu Jun 02 10:03:29 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Run

Thu Jun 02 10:03:29 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\RunDll32.exe
Thu Jun 02 10:03:29 2005 => Scanning File C:\WINDOWS\system32\NeroCheck.exe
Thu Jun 02 10:03:30 2005 => ERROR!!! Invalid Entry AVGCtrl = "D:\Programme\AVPersonal\AVGNT.EXE" /min (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Run). No Action Taken.
Thu Jun 02 10:03:30 2005 => Scanning File D:\Programme\Logitech\iTouch\iTouch.exe
Thu Jun 02 10:03:30 2005 => ERROR!!! Invalid Entry MSN Messenger = C:\WINDOWS\System32\msmsgs.exe (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Run). No Action Taken.

Thu Jun 02 10:03:30 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

Thu Jun 02 10:03:30 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx

Thu Jun 02 10:03:30 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

Thu Jun 02 10:03:30 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce

Thu Jun 02 10:03:30 2005 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Thu Jun 02 10:03:30 2005 => ERROR!!! Invalid Entry WindowsFY = c:\bsw.exe (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Run). No Action Taken.

Thu Jun 02 10:03:30 2005 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

Thu Jun 02 10:03:30 2005 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx

Thu Jun 02 10:03:30 2005 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

Thu Jun 02 10:03:30 2005 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\Setup

Thu Jun 02 10:03:30 2005 => Scanning HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Thu Jun 02 10:03:30 2005 => Scanning File C:\WINDOWS\System32\CTFMON.EXE
Thu Jun 02 10:03:30 2005 => Scanning File C:\PROGRA~1\STEGAN~1\STEGAN~2.EXE
Thu Jun 02 10:03:30 2005 => Scanning File C:\PROGRA~1\STEGAN~1\safe.exe
Thu Jun 02 10:03:30 2005 => Scanning File C:\PROGRA~1\STEGAN~1\spm.exe

Thu Jun 02 10:03:30 2005 => Scanning HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

Thu Jun 02 10:03:30 2005 => Scanning HKCR\txtfile\shell\open\command

Thu Jun 02 10:03:30 2005 => Scanning HKCR\comfile\shell\open\command

Thu Jun 02 10:03:30 2005 => Scanning HKCR\exefile\shell\open\command

Thu Jun 02 10:03:30 2005 => Scanning HKCR\dllfile\shell\open\command

Thu Jun 02 10:03:30 2005 => Scanning HKCR\batfile\shell\open\command

Thu Jun 02 10:03:30 2005 => Scanning HKCR\piffile\shell\open\command

Thu Jun 02 10:03:30 2005 => Scanning HKCR\scrfile\shell\open\command

Thu Jun 02 10:03:30 2005 => Scanning HKCR\scrfile\shell\config\command

Thu Jun 02 10:03:30 2005 => Scanning HKCR\regfile\shell\open\command

Thu Jun 02 10:03:30 2005 => Scanning HKCR\htmlfile\shell\open\command
Thu Jun 02 10:03:30 2005 => Scanning File C:\PROGRA~1\INTERN~1\iexplore.exe

Thu Jun 02 10:03:30 2005 => Scanning HKCR\htafile\shell\open\command
Thu Jun 02 10:03:30 2005 => Scanning File C:\WINDOWS\System32\mshta.exe

Thu Jun 02 10:03:30 2005 => Scanning HKCR\jsfile\shell\open\command
Thu Jun 02 10:03:30 2005 => Scanning File C:\WINDOWS\System32\WScript.exe

Thu Jun 02 10:03:30 2005 => Scanning HKCR\jsefile\shell\open\command
Thu Jun 02 10:03:30 2005 => Scanning File C:\WINDOWS\System32\WScript.exe

Thu Jun 02 10:03:30 2005 => Scanning HKCR\vbsfile\shell\open\command
Thu Jun 02 10:03:30 2005 => Scanning File C:\WINDOWS\System32\WScript.exe

Thu Jun 02 10:03:30 2005 => Scanning HKCR\vbefile\shell\open\command
Thu Jun 02 10:03:30 2005 => Scanning File C:\WINDOWS\System32\WScript.exe

Thu Jun 02 10:03:30 2005 => Scanning HKCR\wshfile\shell\open\command
Thu Jun 02 10:03:30 2005 => Scanning File C:\WINDOWS\System32\WScript.exe

Thu Jun 02 10:03:30 2005 => Scanning HKCR\wsffile\shell\open\command
Thu Jun 02 10:03:30 2005 => Scanning File C:\WINDOWS\System32\WScript.exe

Thu Jun 02 10:03:30 2005 => ***** Scanning StartUp Folders *****

Thu Jun 02 10:03:30 2005 => ***** Scanning C:\Dokumente und Einstellungen\janphilip\Startmenü\Programme\Autostart Folder *****
Thu Jun 02 10:03:30 2005 => Scanning Folder: C:\Dokumente und Einstellungen\janphilip\Startmenü\Programme\Autostart\*.*
Thu Jun 02 10:03:30 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Startmenü\Programme\Autostart\desktop.ini

Thu Jun 02 10:03:30 2005 => ***** Scanning C:\Dokumente und Einstellungen\janphilip\Desktop Folder *****
Thu Jun 02 10:03:30 2005 => Scanning Folder: C:\Dokumente und Einstellungen\janphilip\Desktop\*.*
Thu Jun 02 10:03:30 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\e-mail addis.txt
Thu Jun 02 10:03:30 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\hijackthis.log
Thu Jun 02 10:03:30 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\OxpSp2.exe
Thu Jun 02 10:03:35 2005 => Scanning Folder: C:\Dokumente und Einstellungen\janphilip\Desktop\Programm-Shortcuts\*.*
Thu Jun 02 10:03:35 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\Programm-Shortcuts\AntiVir.lnk
Thu Jun 02 10:03:35 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\Programm-Shortcuts\foobar2000.lnk
Thu Jun 02 10:03:35 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\Programm-Shortcuts\G3 Torrent.lnk
Thu Jun 02 10:03:35 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\Programm-Shortcuts\GameSpy Arcade.lnk
Thu Jun 02 10:03:35 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\Programm-Shortcuts\Nero StartSmart.lnk
Thu Jun 02 10:03:35 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\Programm-Shortcuts\Net MD Registrierung.url
Thu Jun 02 10:03:35 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\Programm-Shortcuts\PowerDVD.lnk
Thu Jun 02 10:03:35 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\Programm-Shortcuts\SonicStage.lnk
Thu Jun 02 10:03:35 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\Programm-Shortcuts\Steganos Security Suite 5.lnk
Thu Jun 02 10:03:35 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\Programm-Shortcuts\WinAce Archiver.lnk
Thu Jun 02 10:03:35 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\Programm-Shortcuts\xp-AntiSpy.lnk
Thu Jun 02 10:03:35 2005 => Scanning Folder: C:\Dokumente und Einstellungen\janphilip\Desktop\Spiele-Shortcuts\*.*
Thu Jun 02 10:03:35 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\Spiele-Shortcuts\Age of Empires II.lnk
Thu Jun 02 10:03:35 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\Spiele-Shortcuts\Counter-Strike.lnk
Thu Jun 02 10:03:35 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\Spiele-Shortcuts\Launch Empire Earth II.lnk
Thu Jun 02 10:03:35 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\Spiele-Shortcuts\Play with POD-Bot 2.5.lnk
Thu Jun 02 10:03:35 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\Spiele-Shortcuts\Splinter Cell Pandora Tomorrow spielen.lnk
Thu Jun 02 10:03:35 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\Spiele-Shortcuts\Stronghold.lnk
Thu Jun 02 10:03:35 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\Spiele-Shortcuts\The Conquerors.lnk
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\Spiele-Shortcuts\Verknüpfung mit DungeonSiege.lnk
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\Spiele-Shortcuts\Verknüpfung mit W40k.lnk
Thu Jun 02 10:03:36 2005 => Scanning Folder: C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\*.*
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php.htm
Thu Jun 02 10:03:36 2005 => Scanning Folder: C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\*.*
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\ads.htm
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\collapse_tcat.gif
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\collapse_thead.gif
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\escan-lic-1.jpg
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\escan-lic-2.jpg
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\escan-lic-4.jpg
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\escan-lic-5.jpg
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\eScan-lic-6.jpg
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\fah.gif
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\icon1.gif
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\menu_open.gif
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\mode_hybrid.gif
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\mode_linear.gif
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\mode_threaded.gif
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\navbits_finallink.gif
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\navbits_start.gif
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\obenx.jpg
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\post_old.gif
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\printer.gif


ff

Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\quote.gif
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\sendtofriend.gif
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\show_ads
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\str.gif
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\style-dabc3254-00001.css
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\threadclosed.gif
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\untenx2.jpg
Thu Jun 02 10:03:36 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\user_online.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\vbulletin_global.js
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\vbulletin_md5.js
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\escananleitung.php_dateien\vbulletin_menu.js
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showpost.php.htm
Thu Jun 02 10:03:37 2005 => Scanning Folder: C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showpost.php_dateien\*.*
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showpost.php_dateien\icon1.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showpost.php_dateien\post_old.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showpost.php_dateien\quote.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showpost.php_dateien\str.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showpost.php_dateien\style-dabc3254-00001.css
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showpost.php_dateien\user_offline.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showpost.php_dateien\vbulletin_global.js
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showpost.php_dateien\vbulletin_menu.js
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php.htm
Thu Jun 02 10:03:37 2005 => Scanning Folder: C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\*.*
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\ads.htm
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\biggrin.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\collapse_thead.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\fah.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\frown.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\heulen.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\icon1.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\menu_open.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\mode_hybrid.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\mode_linear.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\mode_threaded.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\navbits_finallink.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\navbits_start.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\obenx.jpg
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\post_old.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\printer.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\quote.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\reply.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\sendtofriend.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\show_ads
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\smile.gif
Thu Jun 02 10:03:37 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\str.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\sts.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\style-dabc3254-00001.css
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\untenx2.jpg
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\user_offline.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\vbulletin_global.js
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\vbulletin_md5.js
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread.php_dateien\vbulletin_menu.js
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php.htm
Thu Jun 02 10:03:38 2005 => Scanning Folder: C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\*.*
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\ads.htm
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\collapse_tcat.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\collapse_thead.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\dedies-HJT11.jpg
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\dedies-HJT21.jpg
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\dedies-HJT31.jpg
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\dedies-HJT41.jpg
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\dedies-HJT51.jpg
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\dedies-HJT7.jpg
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\dedies-HJT8.jpg
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\fah.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\icon1.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\menu_open.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\mode_hybrid.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\mode_linear.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\mode_threaded.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\navbits_finallink.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\navbits_start.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\obenx.jpg
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\post_old.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\printer.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\quote.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\sendtofriend.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\show_ads
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\str.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\style-dabc3254-00001.css
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\threadclosed.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\untenx2.jpg
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\user_offline.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\vbulletin_global.js
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\vbulletin_md5.js
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread2.php_dateien\vbulletin_menu.js
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php.htm
Thu Jun 02 10:03:38 2005 => Scanning Folder: C:\Dokumente und

ff

Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\*.*
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\ads.htm
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\collapse_tcat.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\collapse_thead.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\daumenhoch.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\fah.gif
Thu Jun 02 10:03:38 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\icon1.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\icon16.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\im_yahoo.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\kloppen.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\menu_open.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\mode_hybrid.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\mode_linear.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\mode_threaded.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\navbits_finallink.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\navbits_start.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\obenx.jpg
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\post_old.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\printer.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\quote.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\reply.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\sendtofriend.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\show_ads
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\str.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\sts.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\style-dabc3254-00001.css
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\untenx2.jpg
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\user_offline.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\vbulletin_global.js
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\vbulletin_md5.js
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread3fürmich.php_dateien\vbulletin_menu.js
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php.htm
Thu Jun 02 10:03:39 2005 => Scanning Folder: C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\*.*
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\ads.htm
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\collapse_thead.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\daumenhoch.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\fah.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\icon1.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\menu_open.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\mode_hybrid.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\mode_linear.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\mode_threaded.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\navbits_finallink.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\navbits_start.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\obenx.jpg
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\post_old.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\printer.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\quote.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\sendtofriend.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\show_ads
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\str.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\sts.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\style-dabc3254-00001.css
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\threadclosed.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\untenx2.jpg
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\user_offline.gif
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\vbulletin_global.js
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\vbulletin_md5.js
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\janphilip\Desktop\TrojaInfo\showthread4fürmich.php_dateien\vbulletin_menu.js

Thu Jun 02 10:03:39 2005 => ***** Scanning C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart Folder *****
Thu Jun 02 10:03:39 2005 => Scanning Folder: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\*.*
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\desktop.ini
Thu Jun 02 10:03:39 2005 => Scanning File C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk

Thu Jun 02 10:03:39 2005 => ***** Scanning Service Files *****
Thu Jun 02 10:03:39 2005 => Scanning HKLM\SYSTEM\CurrentControlSet\Services
Thu Jun 02 10:03:39 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ACPI.sys
Thu Jun 02 10:03:39 2005 => Scanning File C:\WINDOWS\System32\drivers\aec.sys
Thu Jun 02 10:03:39 2005 => Scanning File C:\WINDOWS\System32\drivers\afd.sys
Thu Jun 02 10:03:39 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Jun 02 10:03:39 2005 => Scanning File C:\WINDOWS\System32\alg.exe
Thu Jun 02 10:03:39 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\amdk7.sys
Thu Jun 02 10:03:39 2005 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Jun 02 10:03:39 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\asyncmac.sys
Thu Jun 02 10:03:39 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\atapi.sys
Thu Jun 02 10:03:39 2005 => Scanning File C:\WINDOWS\System32\Ati2evxx.exe
Thu Jun 02 10:03:39 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ati2mtag.sys
Thu Jun 02 10:03:39 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\atmarpc.sys
Thu Jun 02 10:03:39 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Jun 02 10:03:39 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\audstub.sys
Thu Jun 02 10:03:39 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Jun 02 10:03:39 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Jun 02 10:03:39 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\cdrom.sys
Thu Jun 02 10:03:39 2005 => Scanning File C:\WINDOWS\system32\cisvc.exe
Thu Jun 02 10:03:39 2005 => Scanning File C:\WINDOWS\system32\clipsrv.exe
Thu Jun 02 10:03:39 2005 => Scanning File C:\WINDOWS\System32\drivers\cmuda.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\dllhost.exe
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\disk.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\dmadmin.exe
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\drivers\dmboot.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\dmio.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\drivers\DMusic.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\drivers\drmkaud.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\system32\services.exe
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\fdc.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\flpydisk.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ftdisk.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\gameenum.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\msgpc.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\i8042prt.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\imapi.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\imapi.exe
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ipfltdrv.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ipinip.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ipnat.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ipsec.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\irenum.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\isapnp.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\itchfltr.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\kbdclass.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\drivers\kmixer.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\mnmsrvc.exe
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\mouclass.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\mrxdav.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\mrxsmb.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\msdtc.exe
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\msiexec.exe
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\drivers\MSKSSRV.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\drivers\MSPCLOCK.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\drivers\MSPQM.sys
Thu Jun 02 10:03:40 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ndistapi.sys
Thu Jun 02 10:03:41 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ndisuio.sys
Thu Jun 02 10:03:41 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ndiswan.sys
Thu Jun 02 10:03:41 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\netbios.sys
Thu Jun 02 10:03:41 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\netbt.sys
Thu Jun 02 10:03:41 2005 => Scanning File C:\WINDOWS\system32\netdde.exe
Thu Jun 02 10:03:41 2005 => Scanning File C:\WINDOWS\system32\netdde.exe
Thu Jun 02 10:03:41 2005 => Scanning File C:\WINDOWS\System32\lsass.exe
Thu Jun 02 10:03:41 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Jun 02 10:03:41 2005 => Scanning File C:\WINDOWS\System32\Drivers\NETMDUSB.sys
Thu Jun 02 10:03:41 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Jun 02 10:03:41 2005 => Scanning File C:\WINDOWS\System32\lsass.exe
Thu Jun 02 10:03:41 2005 => Scanning File


Oh man! Das war echt lang.. Hoffe ich hab nicht nur Schrott gepostet..

Bis denn und danke..

undoreal

Hallo undoreal,

schau Dir bitte nochmal genau die Anleitung für Escan an.
Du musst eine Ordner namens "C:\bases_x" erstellen und dorthin die "mvav.exe" entpacken. Wende "find.bat" an. Das was Du gepostetest hast sind keine Funde, sondern zeigt nur was gescannt wurde.

Um den Bluescreen wegzubekommen, solltest Du genau dies durchführen.
Das wäre auch hilfreich.

dartus

Hey dartus.

Hab mir schon fast gedacht, dass es die falsche ist aber ich dachte die virus log wäre nur ein Auszug aus der scan log.
Wie auch immer. Anleitung zu eScan ist reichlich schwer oder ich zu blöd. Hab den Weg (Desktop) jetzt schon zum dritten Mal gemacht. Mit beiden reg's. Die haben bei mir nur bewirkt, dass ich zwar wie gesagt Farbe vom Desktop umstellen kann aber kein Hintergrundbild. Sonst scheint alles in Ordnung bis auf die Nachricht von eScan über Spyware.

Hier die Viruslog von eScan :

Object "Alexa Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "AltNet Spyware/Adware" found in File System! Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\System32\MSRTEDIT.DLL". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\Sony Shared\OpenMG\ekb\newekb020723.txt". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Ahead\CoverDesigner\covered-jpn.nls". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Programme\Ahead\Nero BackItUp\BackItUp-Jpn.nls". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" refers to invalid object "D:\Programme\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{99180163-DA16-101A-935C-444553540000}" refers to invalid object "recncl.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{a7cda720-84ee-11d0-b5c0-00001b3ca278}" refers to invalid object "D:\Programme\AVPersonal\AVShlExt.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF}" refers to invalid object "C:\WINDOWS\System32\hp44E8.tmp". Action Taken: No Action Taken.
Entry "HKCR\VMHomepage.1" refers to invalid object "{fbf3125a-347c-4f71-9c37-43cb9e8cf349}". Action Taken: No Action Taken.


PS: Warum zum Teufel findet Kaspersky denn nichts? (Gleiche Engin und "das beste Anti Programm überhaupt")