| |
| |||||||
Log-Analyse und Auswertung: Mein Papierkorb meldet (Dc1 kann nich gelöscht werden)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
17.03.2006, 14:00
| #1 |
| |  Mein Papierkorb meldet (Dc1 kann nich gelöscht werden) Hallo Ich hab da so ein Problem mit meinem Papierkrob. Immer wenn ich ihn leeren will, kommt dann eine Meldung, dass Dc1 nicht gelöscht werden kann. Nach einem Neustart ist der Papierkorb leer, aber nach dem 3 oder 4 Papierkorb Leerung kommt die Meldung wieder. Hier mal Mein HiJacK: Logfile of HijackThis v1.99.1 Scan saved at 13:54:56, on 17.03.2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Mixer.exe C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe C:\WINDOWS\system32\ctfmon.exe C:\Dokumente und Einstellungen\Zakaria\Eigene Dateien\Eigene Bilder und Videos\Eigene Bilder\libanon\Wallpaper.exe C:\PROGRA~1\Versatel\Versatel.exe C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\System32\svchost.exe C:\Programme\AntiVir PersonalEdition Classic\avguard.exe C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe C:\Programme\AntiVir PersonalEdition Classic\sched.exe C:\Programme\BitComet\BitComet.exe C:\Programme\Mozilla Firefox\firefox.exe C:\Dokumente und Einstellungen\0000\Desktop\hijackthis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://link0777.com/tracker/dtracker.asp?provider=1&version=19&redir=http://www.mazika.com R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.versatel.de/internet-cd/ O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [SSBkgdUpdate] C:\Programme\Gemeinsame Dateien\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16 O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [WallPaper] C:\Dokumente und Einstellungen\000000\Eigene Dateien\Eigene Bilder und Videos\Eigene Bilder\libanon\Wallpaper.exe /h O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Programme\Microsoft Works\WkDetect.exe O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe O14 - IERESET.INF: START_PAGE_URL=http://link0777.com/tracker/dtracker.asp?provider=1&version=19&redir=http://www.mazika.com O17 - HKLM\System\CCS\Services\Tcpip\..\{D26EC3D9-FD35-4191-95AE-9346D749F573}: NameServer = 212.7.148.65 212.7.148.97 O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: lxcg_device - Unknown owner - C:\WINDOWS\system32\lxcgcoms.exe O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Programme\TuneUp Utilities 2006\WinStylerThemeSvc.exe Danke im Voraus Geändert von hanes123 (17.03.2006 um 14:29 Uhr) |
|
17.03.2006, 14:00
| #2 |
  | Mein Papierkorb meldet (Dc1 kann nich gelöscht werden) hallo,
__________________beim logfile fehlt leider der kopf..
__________________ |
|
17.03.2006, 14:14
| #3 |
| > MalwareDB   | Mein Papierkorb meldet (Dc1 kann nich gelöscht werden) Hallo,
__________________scanne C:\Dokumente und Einstellungen\Zakaria\Eigene Dateien\Eigene Bilder und Videos\Eigene Bilder\libanon\Wallpaper.exe online bei Jotti und/oder Virustotal poste das Ergebnis hier. [edit]Hallo Feierfox, in dem Log endecke ich aber nix von Symantec? [/edit] Gruß Schrulli
__________________ Geändert von Schrulli (17.03.2006 um 14:24 Uhr) |
|
17.03.2006, 14:22
| #4 |
 | Mein Papierkorb meldet (Dc1 kann nich gelöscht werden) DC 1 dürfte von Norton Systemworks (?) kommen. Dessen Protect-Funktion für den Papierkorb. Abstellbar in den Eigenschaften des Papierkorbes.
__________________ Gruß Andy __________________ |
|
17.03.2006, 14:27
| #5 |
| | Mein Papierkorb meldet (Dc1 kann nich gelöscht werden) hallo aber ich benutzte Norton Systemworks gar nicht, und kann es auch nicht abschalten C:\Dokumente und Einstellungen\oooo\Eigene Dateien\Eigene Bilder und Videos\Eigene Bilder\libanon\Wallpaper.exe kann ich so viel zu sagen, dass ist ein prog. womit sich mein wallpapaer immer automatisch ändert. Denoch scannen? |
|
17.03.2006, 14:28
| #6 |
| | Mein Papierkorb meldet (Dc1 kann nich gelöscht werden) und ihr noch der "Kopf des logfiles" Logfile of HijackThis v1.99.1 Scan saved at 13:54:56, on 17.03.2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) |
|
17.03.2006, 14:38
| #7 | |
| > MalwareDB | Mein Papierkorb meldet (Dc1 kann nich gelöscht werden) Hallo, Zitat:
 [edit]Nimm Dir mal 2-3 Stunden Zeit und führe einen eScan durch, Anleitung in meiner Signatur verlinkt[/edit] Gruß Schrulli
__________________ If every computer is running a diverse ecosystem, crackers will have no choice but to resort to small-scale, targetted attacks, and the days of mass-market malware will be over[...]. Stuart Udall |
|
17.03.2006, 15:51
| #8 |
| | Mein Papierkorb meldet (Dc1 kann nich gelöscht werden) Hallo hat keiner eine andere lösung für mich als das Scannen mit dem escann Bitte hilft mir doch |
|
17.03.2006, 16:15
| #10 |
| | Mein Papierkorb meldet (Dc1 kann nich gelöscht werden) achso nein hab jetzt den escan vorgenommen, dachte aber mein Problem wäre schon bekannt oder so. |
|
17.03.2006, 16:18
| #11 |
| | Mein Papierkorb meldet (Dc1 kann nich gelöscht werden) Hier mein escan: Fri Mar 17 15:56:19 2006 => ********************************************************** Fri Mar 17 15:56:19 2006 => MicroWorld Anti Virus & Spyware Toolkit Utility. Fri Mar 17 15:56:19 2006 => Copyright © 2003-2006, MicroWorld Technologies Inc. Fri Mar 17 15:56:19 2006 => ********************************************************** Fri Mar 17 15:56:19 2006 => Source: C:\DOKUME~1\Zakaria\Desktop\mwav.exe Fri Mar 17 15:56:19 2006 => Version 8.2.1 (C:\DOKUME~1\Zakaria\LOKALE~1\Temp\mexe.com) Fri Mar 17 15:56:19 2006 => Log File: C:\DOKUME~1\Zakaria\LOKALE~1\Temp\MWAV.LOG Fri Mar 17 15:56:19 2006 => MWAV Registered: FALSE. Fri Mar 17 15:56:19 2006 => OS Type: Windows Workstation Fri Mar 17 15:56:19 2006 => Local Fixed Drives: c:\,d:\ Fri Mar 17 15:56:19 2006 => MWAV Mode: Only Scan files. Fri Mar 17 15:56:19 2006 => Latest Date of files inside MWAV: 14 Mar 2006 06:21:15. Fri Mar 17 15:56:23 2006 => AV Library Loaded... Fri Mar 17 15:56:23 2006 => MWAV doing self scanning... Fri Mar 17 15:56:23 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\kavss.exe Fri Mar 17 15:56:23 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\Getvlist.exe Fri Mar 17 15:56:24 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\kavss.dll Fri Mar 17 15:56:24 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\kavssdi.dll Fri Mar 17 15:56:24 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\kavssi.dll Fri Mar 17 15:56:24 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\kavvlg.dll Fri Mar 17 15:56:24 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\msvlclnt.dll Fri Mar 17 15:56:24 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\ipc.dll Fri Mar 17 15:56:24 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\main.avi Fri Mar 17 15:56:24 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\virus.avi Fri Mar 17 15:56:24 2006 => MWAV files are clean. Fri Mar 17 15:56:31 2006 => Virus Database Date: 3/14/2006 Fri Mar 17 15:56:31 2006 => Virus Database Count: 182276 Fri Mar 17 15:56:58 2006 => Downloading AntiVirus and Anti-Spyware Databases... Fri Mar 17 15:57:44 2006 => Downloads Successful... Fri Mar 17 15:57:50 2006 => Reload of AntiVirus Signatures successfully done. Fri Mar 17 15:57:50 2006 => Virus Database Date: 3/17/2006 Fri Mar 17 15:57:50 2006 => Virus Database Count: 178892 Fri Mar 17 15:57:53 2006 => AV Library Unloaded (3)... Fri Mar 17 16:05:49 2006 => ********************************************************** Fri Mar 17 16:05:49 2006 => MicroWorld Anti Virus & Spyware Toolkit Utility. Fri Mar 17 16:05:49 2006 => Copyright © 2003-2006, MicroWorld Technologies Inc. Fri Mar 17 16:05:49 2006 => ********************************************************** Fri Mar 17 16:05:49 2006 => Source: C:\DOKUME~1\Zakaria\Desktop\mwav.exe Fri Mar 17 16:05:49 2006 => Version 8.2.1 (C:\DOKUME~1\Zakaria\LOKALE~1\Temp\mexe.com) Fri Mar 17 16:05:49 2006 => Log File: C:\DOKUME~1\Zakaria\LOKALE~1\Temp\MWAV.LOG Fri Mar 17 16:05:49 2006 => MWAV Registered: FALSE. Fri Mar 17 16:05:49 2006 => OS Type: Windows Workstation Fri Mar 17 16:05:49 2006 => Local Fixed Drives: c:\,d:\ Fri Mar 17 16:05:49 2006 => MWAV Mode: Only Scan files. Fri Mar 17 16:05:49 2006 => Latest Date of files inside MWAV: 14 Mar 2006 06:21:15. Fri Mar 17 16:05:52 2006 => AV Library Loaded... Fri Mar 17 16:05:52 2006 => MWAV doing self scanning... Fri Mar 17 16:05:52 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\kavss.exe Fri Mar 17 16:05:52 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\Getvlist.exe Fri Mar 17 16:05:52 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\kavss.dll Fri Mar 17 16:05:52 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\kavssdi.dll Fri Mar 17 16:05:52 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\kavssi.dll Fri Mar 17 16:05:52 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\kavvlg.dll Fri Mar 17 16:05:52 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\msvlclnt.dll Fri Mar 17 16:05:52 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\ipc.dll Fri Mar 17 16:05:52 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\main.avi Fri Mar 17 16:05:52 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\virus.avi Fri Mar 17 16:05:52 2006 => MWAV files are clean. Fri Mar 17 16:05:52 2006 => Virus Database Date: 3/14/2006 Fri Mar 17 16:05:52 2006 => Virus Database Count: 182276 Fri Mar 17 16:06:08 2006 => ********************************************************** Fri Mar 17 16:06:08 2006 => MicroWorld Anti Virus & Spyware Toolkit Utility. Fri Mar 17 16:06:08 2006 => Copyright © 2003-2006, MicroWorld Technologies Inc. Fri Mar 17 16:06:08 2006 => Fri Mar 17 16:06:08 2006 => Support: support@mwti.net Fri Mar 17 16:06:08 2006 => Web: http://www.mwti.net Fri Mar 17 16:06:08 2006 => ********************************************************** Fri Mar 17 16:06:08 2006 => Version 8.2.1 (C:\DOKUME~1\Zakaria\LOKALE~1\Temp\mexe.com) Fri Mar 17 16:06:08 2006 => Log File: C:\DOKUME~1\Zakaria\LOKALE~1\Temp\MWAV.LOG Fri Mar 17 16:06:08 2006 => User Account: Zakaria Fri Mar 17 16:06:08 2006 => Windows Root Folder: C:\WINDOWS Fri Mar 17 16:06:08 2006 => Windows Sys32 Folder: C:\WINDOWS\system32 Fri Mar 17 16:06:08 2006 => OS: Windows XP Fri Mar 17 16:06:08 2006 => Latest Date of files inside MWAV: 14 Mar 2006 06:21:15. Fri Mar 17 16:06:08 2006 => Options Selected by User: Fri Mar 17 16:06:08 2006 => Memory Check: Enabled Fri Mar 17 16:06:08 2006 => Registry Check: Enabled Fri Mar 17 16:06:08 2006 => StartUp Folder Check: Disabled Fri Mar 17 16:06:08 2006 => System Folder Check: Disabled Fri Mar 17 16:06:08 2006 => System Area Check: Disabled Fri Mar 17 16:06:08 2006 => Services Check: Enabled Fri Mar 17 16:06:08 2006 => Drive Check: Disabled Fri Mar 17 16:06:08 2006 => All Drive Check :Enabled Fri Mar 17 16:06:08 2006 => Folder Check: Disabled Fri Mar 17 16:06:08 2006 => ***** Scanning Memory Files ***** Fri Mar 17 16:06:08 2006 => Scanning File C:\WINDOWS\System32\smss.exe Fri Mar 17 16:06:08 2006 => Scanning File C:\WINDOWS\system32\ntdll.dll Fri Mar 17 16:06:08 2006 => Scanning File C:\WINDOWS\SYSTEM32\CSRSS.EXE Fri Mar 17 16:06:08 2006 => Scanning File C:\WINDOWS\system32\CSRSRV.dll Fri Mar 17 16:06:09 2006 => Scanning File C:\WINDOWS\system32\basesrv.dll Fri Mar 17 16:06:09 2006 => Scanning File C:\WINDOWS\system32\winsrv.dll Fri Mar 17 16:06:09 2006 => Scanning File C:\WINDOWS\system32\GDI32.dll Fri Mar 17 16:06:09 2006 => Scanning File C:\WINDOWS\system32\KERNEL32.dll Fri Mar 17 16:06:09 2006 => Scanning File C:\WINDOWS\system32\USER32.dll Fri Mar 17 16:06:09 2006 => Scanning File C:\WINDOWS\system32\sxs.dll Fri Mar 17 16:06:09 2006 => Scanning File C:\WINDOWS\system32\ADVAPI32.dll Fri Mar 17 16:06:09 2006 => Scanning File C:\WINDOWS\system32\RPCRT4.dll Fri Mar 17 16:06:09 2006 => Scanning File C:\WINDOWS\SYSTEM32\WINLOGON.EXE Fri Mar 17 16:06:11 2006 => Scanning File C:\WINDOWS\system32\AUTHZ.dll Fri Mar 17 16:06:11 2006 => Scanning File C:\WINDOWS\system32\msvcrt.dll Fri Mar 17 16:06:11 2006 => Scanning File C:\WINDOWS\system32\CRYPT32.dll Fri Mar 17 16:06:11 2006 => Scanning File C:\WINDOWS\system32\MSASN1.dll Fri Mar 17 16:06:11 2006 => Scanning File C:\WINDOWS\system32\NDdeApi.dll Fri Mar 17 16:06:11 2006 => Scanning File C:\WINDOWS\system32\PROFMAP.dll Fri Mar 17 16:06:11 2006 => Scanning File C:\WINDOWS\system32\NETAPI32.dll Fri Mar 17 16:06:11 2006 => Scanning File C:\WINDOWS\system32\USERENV.dll Fri Mar 17 16:06:11 2006 => Scanning File C:\WINDOWS\system32\PSAPI.DLL Fri Mar 17 16:06:11 2006 => Scanning File C:\WINDOWS\system32\REGAPI.dll Fri Mar 17 16:06:12 2006 => Scanning File C:\WINDOWS\system32\Secur32.dll Fri Mar 17 16:06:12 2006 => Scanning File C:\WINDOWS\system32\SETUPAPI.dll Fri Mar 17 16:06:12 2006 => Scanning File C:\WINDOWS\system32\VERSION.dll Fri Mar 17 16:06:12 2006 => Scanning File C:\WINDOWS\system32\WINSTA.dll Fri Mar 17 16:06:12 2006 => Scanning File C:\WINDOWS\system32\WINTRUST.dll Fri Mar 17 16:06:12 2006 => Scanning File C:\WINDOWS\system32\IMAGEHLP.dll Fri Mar 17 16:06:12 2006 => Scanning File C:\WINDOWS\system32\WS2_32.dll Fri Mar 17 16:06:12 2006 => Scanning File C:\WINDOWS\system32\WS2HELP.dll Fri Mar 17 16:06:12 2006 => Scanning File C:\WINDOWS\system32\MSGINA.dll Fri Mar 17 16:06:13 2006 => Scanning File C:\WINDOWS\system32\SHELL32.dll Fri Mar 17 16:06:13 2006 => Scanning File C:\WINDOWS\system32\SHLWAPI.dll Fri Mar 17 16:06:13 2006 => Scanning File C:\WINDOWS\system32\COMCTL32.dll Fri Mar 17 16:06:13 2006 => Scanning File C:\WINDOWS\system32\ODBC32.dll Fri Mar 17 16:06:13 2006 => Scanning File C:\WINDOWS\system32\comdlg32.dll Fri Mar 17 16:06:13 2006 => Scanning File C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2649_x-ww_aac16c8b\comctl32.dll Fri Mar 17 16:06:13 2006 => Scanning File C:\WINDOWS\system32\odbcint.dll Fri Mar 17 16:06:14 2006 => Scanning File C:\WINDOWS\system32\SHSVCS.dll Fri Mar 17 16:06:14 2006 => Scanning File C:\WINDOWS\system32\sfc.dll Fri Mar 17 16:06:14 2006 => Scanning File C:\WINDOWS\system32\sfc_os.dll Fri Mar 17 16:06:14 2006 => Scanning File C:\WINDOWS\system32\ole32.dll Fri Mar 17 16:06:14 2006 => Scanning File C:\WINDOWS\system32\Apphelp.dll Fri Mar 17 16:06:14 2006 => Scanning File C:\WINDOWS\system32\WINMM.dll Fri Mar 17 16:06:14 2006 => Scanning File C:\WINDOWS\system32\cscdll.dll Fri Mar 17 16:06:14 2006 => Scanning File C:\WINDOWS\system32\WlNotify.dll Fri Mar 17 16:06:14 2006 => Scanning File C:\WINDOWS\system32\WinSCard.dll Fri Mar 17 16:06:14 2006 => Scanning File C:\WINDOWS\system32\WTSAPI32.dll Fri Mar 17 16:06:14 2006 => Scanning File C:\WINDOWS\system32\WINSPOOL.DRV Fri Mar 17 16:06:15 2006 => Scanning File C:\WINDOWS\system32\MPR.dll Fri Mar 17 16:06:15 2006 => Scanning File C:\WINDOWS\system32\rsaenh.dll Fri Mar 17 16:06:15 2006 => Scanning File C:\WINDOWS\system32\UxTheme.dll Fri Mar 17 16:06:15 2006 => Scanning File C:\WINDOWS\system32\SAMLIB.dll Fri Mar 17 16:06:15 2006 => Scanning File C:\WINDOWS\system32\cscui.dll Fri Mar 17 16:06:15 2006 => Scanning File C:\WINDOWS\system32\NTMARTA.DLL Fri Mar 17 16:06:15 2006 => Scanning File C:\WINDOWS\system32\WLDAP32.dll Fri Mar 17 16:06:15 2006 => Scanning File C:\WINDOWS\system32\COMRes.dll Fri Mar 17 16:06:15 2006 => Scanning File C:\WINDOWS\system32\OLEAUT32.dll Fri Mar 17 16:06:15 2006 => Scanning File C:\WINDOWS\system32\CLBCATQ.DLL Fri Mar 17 16:06:16 2006 => Scanning File C:\WINDOWS\system32\xpsp2res.dll Fri Mar 17 16:06:16 2006 => Scanning File C:\WINDOWS\system32\services.exe Fri Mar 17 16:06:16 2006 => Scanning File C:\WINDOWS\system32\SCESRV.dll Fri Mar 17 16:06:16 2006 => Scanning File C:\WINDOWS\system32\umpnpmgr.dll Fri Mar 17 16:06:17 2006 => Scanning File C:\WINDOWS\system32\NCObjAPI.DLL Fri Mar 17 16:06:17 2006 => Scanning File C:\WINDOWS\system32\MSVCP60.dll Fri Mar 17 16:06:17 2006 => Scanning File C:\WINDOWS\system32\ShimEng.dll Fri Mar 17 16:06:17 2006 => Scanning File C:\WINDOWS\AppPatch\AcGenral.DLL Fri Mar 17 16:06:17 2006 => Scanning File C:\WINDOWS\system32\MSACM32.dll Fri Mar 17 16:06:17 2006 => Scanning File C:\WINDOWS\system32\eventlog.dll Fri Mar 17 16:06:17 2006 => Scanning File C:\WINDOWS\system32\lsass.exe Fri Mar 17 16:06:17 2006 => Scanning File C:\WINDOWS\system32\LSASRV.dll Fri Mar 17 16:06:17 2006 => Scanning File C:\WINDOWS\system32\NTDSAPI.dll Fri Mar 17 16:06:18 2006 => Scanning File C:\WINDOWS\system32\DNSAPI.dll Fri Mar 17 16:06:18 2006 => Scanning File C:\WINDOWS\system32\SAMSRV.dll Fri Mar 17 16:06:18 2006 => Scanning File C:\WINDOWS\system32\cryptdll.dll Fri Mar 17 16:06:18 2006 => Scanning File C:\WINDOWS\system32\msprivs.dll Fri Mar 17 16:06:18 2006 => Scanning File C:\WINDOWS\system32\kerberos.dll Fri Mar 17 16:06:18 2006 => Scanning File C:\WINDOWS\system32\msv1_0.dll Fri Mar 17 16:06:18 2006 => Scanning File C:\WINDOWS\system32\iphlpapi.dll Fri Mar 17 16:06:18 2006 => Scanning File C:\WINDOWS\system32\netlogon.dll Fri Mar 17 16:06:18 2006 => Scanning File C:\WINDOWS\system32\w32time.dll Fri Mar 17 16:06:19 2006 => Scanning File C:\WINDOWS\system32\schannel.dll Fri Mar 17 16:06:19 2006 => Scanning File C:\WINDOWS\system32\wdigest.dll Fri Mar 17 16:06:19 2006 => Scanning File C:\WINDOWS\system32\scecli.dll Fri Mar 17 16:06:19 2006 => Scanning File C:\WINDOWS\system32\svchost.exe Fri Mar 17 16:06:19 2006 => Scanning File c:\windows\system32\rpcss.dll Fri Mar 17 16:06:19 2006 => Scanning File C:\WINDOWS\system32\mswsock.dll Fri Mar 17 16:06:19 2006 => Scanning File C:\WINDOWS\system32\hnetcfg.dll Fri Mar 17 16:06:19 2006 => Scanning File C:\WINDOWS\System32\wshtcpip.dll Fri Mar 17 16:06:19 2006 => Scanning File C:\WINDOWS\System32\winrnr.dll Fri Mar 17 16:06:19 2006 => Scanning File C:\WINDOWS\system32\rasadhlp.dll Fri Mar 17 16:06:19 2006 => Scanning File c:\windows\system32\cryptsvc.dll Fri Mar 17 16:06:20 2006 => Scanning File c:\windows\system32\certcli.dll Fri Mar 17 16:06:20 2006 => Scanning File c:\windows\system32\ATL.DLL Fri Mar 17 16:06:20 2006 => Scanning File C:\WINDOWS\system32\CRYPTUI.dll Fri Mar 17 16:06:20 2006 => Scanning File C:\WINDOWS\system32\WININET.dll Fri Mar 17 16:06:20 2006 => Scanning File c:\windows\system32\ESENT.dll Fri Mar 17 16:06:20 2006 => Scanning File c:\windows\system32\wbem\wmisvc.dll Fri Mar 17 16:06:20 2006 => Scanning File C:\WINDOWS\system32\VSSAPI.DLL Fri Mar 17 16:06:21 2006 => Scanning File c:\windows\system32\srsvc.dll Fri Mar 17 16:06:21 2006 => Scanning File c:\windows\system32\POWRPROF.dll Fri Mar 17 16:06:21 2006 => Scanning File c:\windows\pchealth\helpctr\binaries\pchsvc.dll Fri Mar 17 16:06:21 2006 => Scanning File C:\WINDOWS\System32\wbem\wbemcore.dll Fri Mar 17 16:06:21 2006 => Scanning File C:\WINDOWS\System32\wbem\esscli.dll Fri Mar 17 16:06:21 2006 => Scanning File C:\WINDOWS\System32\wbem\wbemcomn.dll Fri Mar 17 16:06:21 2006 => Scanning File C:\WINDOWS\System32\wbem\FastProx.dll Fri Mar 17 16:06:21 2006 => Scanning File C:\WINDOWS\System32\wbem\wmiutils.dll Fri Mar 17 16:06:21 2006 => Scanning File C:\WINDOWS\System32\wbem\repdrvfs.dll Fri Mar 17 16:06:21 2006 => Scanning File C:\WINDOWS\System32\wbem\wmiprvsd.dll Fri Mar 17 16:06:22 2006 => Scanning File C:\WINDOWS\System32\wbem\wbemess.dll Fri Mar 17 16:06:22 2006 => Scanning File C:\WINDOWS\System32\wbem\ncprov.dll Fri Mar 17 16:06:22 2006 => Scanning File C:\WINDOWS\System32\wbem\wbemcons.dll Fri Mar 17 16:06:22 2006 => Scanning File C:\WINDOWS\Explorer.EXE Fri Mar 17 16:06:22 2006 => Scanning File C:\WINDOWS\system32\BROWSEUI.dll Fri Mar 17 16:06:22 2006 => Scanning File C:\WINDOWS\system32\SHDOCVW.dll Fri Mar 17 16:06:22 2006 => Scanning File C:\WINDOWS\System32\themeui.dll Fri Mar 17 16:06:23 2006 => Scanning File C:\WINDOWS\System32\MSIMG32.dll Fri Mar 17 16:06:23 2006 => Scanning File C:\WINDOWS\System32\msutb.dll Fri Mar 17 16:06:23 2006 => Scanning File C:\WINDOWS\System32\MSCTF.dll Fri Mar 17 16:06:23 2006 => Scanning File C:\WINDOWS\system32\urlmon.dll Fri Mar 17 16:06:23 2006 => Scanning File C:\WINDOWS\system32\LINKINFO.dll Fri Mar 17 16:06:23 2006 => Scanning File C:\WINDOWS\system32\ntshrui.dll Fri Mar 17 16:06:23 2006 => Scanning File C:\WINDOWS\system32\NETSHELL.dll Fri Mar 17 16:06:23 2006 => Scanning File C:\WINDOWS\system32\credui.dll Fri Mar 17 16:06:24 2006 => Scanning File C:\WINDOWS\system32\rtutils.dll Fri Mar 17 16:06:24 2006 => Scanning File C:\WINDOWS\system32\browselc.dll Fri Mar 17 16:06:24 2006 => Scanning File C:\WINDOWS\System32\drprov.dll Fri Mar 17 16:06:24 2006 => Scanning File C:\WINDOWS\System32\ntlanman.dll Fri Mar 17 16:06:24 2006 => Scanning File C:\WINDOWS\System32\NETUI0.dll Fri Mar 17 16:06:24 2006 => Scanning File C:\WINDOWS\System32\NETUI1.dll Fri Mar 17 16:06:24 2006 => Scanning File C:\WINDOWS\System32\NETRAP.dll Fri Mar 17 16:06:24 2006 => Scanning File C:\WINDOWS\System32\davclnt.dll Fri Mar 17 16:06:24 2006 => Scanning File C:\WINDOWS\system32\MLANG.dll Fri Mar 17 16:06:24 2006 => Scanning File C:\WINDOWS\system32\msi.dll Fri Mar 17 16:06:25 2006 => Scanning File C:\PROGRA~1\Adobe\ACROBA~1.0\ActiveX\PDFShell.dll Fri Mar 17 16:06:25 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\mexe.com Fri Mar 17 16:06:25 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\msvlclnt.dll Fri Mar 17 16:06:25 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\kavssdi.dll Fri Mar 17 16:06:25 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\kavssd.dll Fri Mar 17 16:06:25 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\kavssi.dll Fri Mar 17 16:06:26 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\ipc.dll Fri Mar 17 16:06:26 2006 => Scanning File C:\WINDOWS\system32\RICHED32.DLL Fri Mar 17 16:06:26 2006 => Scanning File C:\WINDOWS\system32\RICHED20.dll Fri Mar 17 16:06:26 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\PSAPI.DLL Fri Mar 17 16:06:26 2006 => Scanning File C:\WINDOWS\system32\VDMDBG.DLL Fri Mar 17 16:06:26 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\kavss.exe Fri Mar 17 16:06:26 2006 => Scanning File C:\DOKUME~1\Zakaria\LOKALE~1\Temp\kavss.dll Fri Mar 17 16:06:26 2006 => ***** Scanning Registry Files ***** Fri Mar 17 16:06:26 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad Fri Mar 17 16:06:26 2006 => Scanning File C:\WINDOWS\system32\SHELL32.dll Fri Mar 17 16:06:26 2006 => Scanning File C:\WINDOWS\system32\SHELL32.dll Fri Mar 17 16:06:26 2006 => Scanning File C:\WINDOWS\System32\webcheck.dll Fri Mar 17 16:06:26 2006 => Scanning File C:\WINDOWS\System32\stobject.dll Fri Mar 17 16:06:26 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad Fri Mar 17 16:06:27 2006 => Scanning HKLM\SOFTWARE\Microsoft\Internet Explorer\Plugins\Extension Fri Mar 17 16:06:27 2006 => Scanning HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar Fri Mar 17 16:06:27 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects Fri Mar 17 16:06:27 2006 => {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} = C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll Fri Mar 17 16:06:27 2006 => Scanning File C:\PROGRA~1\Adobe\ACROBA~1.0\ActiveX\ACROIE~1.DLL Fri Mar 17 16:06:27 2006 => {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} = C:\Programme\Java\jre1.5.0_06\bin\ssv.dll Fri Mar 17 16:06:27 2006 => Scanning File C:\Programme\Java\jre1.5.0_06\bin\ssv.dll Fri Mar 17 16:06:27 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler Fri Mar 17 16:06:27 2006 => Scanning File C:\WINDOWS\System32\browseui.dll Fri Mar 17 16:06:27 2006 => Scanning File C:\WINDOWS\System32\browseui.dll Fri Mar 17 16:06:27 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved Fri Mar 17 16:06:27 2006 => Scanning File C:\PROGRA~1\ANTIVI~1\shlext.dll Fri Mar 17 16:06:27 2006 => Scanning File C:\WINDOWS\System32\msgsple.dll Fri Mar 17 16:06:33 2006 => File C:\WINDOWS\System32\msgsple.dll tagged as "not-a-virus:AdWare.Win32.Agent.o". Action Taken: No Action Taken. Fri Mar 17 16:06:33 2006 => Scanning File C:\PROGRA~1\GEMEIN~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL Fri Mar 17 16:06:33 2006 => Scanning File C:\PROGRA~1\MICROS~4\Office10\msohev.dll Fri Mar 17 16:06:33 2006 => Scanning File C:\WINDOWS\system32\wmpshell.dll Fri Mar 17 16:06:34 2006 => Scanning File C:\WINDOWS\system32\wmpshell.dll Fri Mar 17 16:06:34 2006 => Scanning File C:\WINDOWS\system32\wmpshell.dll Fri Mar 17 16:06:34 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows Fri Mar 17 16:06:34 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Fri Mar 17 16:06:34 2006 => Scanning File C:\WINDOWS\Explorer.exe Fri Mar 17 16:06:34 2006 => Scanning File C:\WINDOWS\system32\userinit.exe Fri Mar 17 16:06:34 2006 => Scanning File C:\WINDOWS\system32\dskquota.dll Fri Mar 17 16:06:34 2006 => Scanning File C:\WINDOWS\system32\iedkcs32.dll Fri Mar 17 16:06:34 2006 => Scanning File C:\WINDOWS\system32\scecli.dll Fri Mar 17 16:06:34 2006 => Scanning File C:\WINDOWS\system32\iedkcs32.dll Fri Mar 17 16:06:34 2006 => Scanning File C:\WINDOWS\system32\scecli.dll Fri Mar 17 16:06:34 2006 => Scanning File C:\WINDOWS\system32\crypt32.dll Fri Mar 17 16:06:34 2006 => Scanning File C:\WINDOWS\system32\cryptnet.dll Fri Mar 17 16:06:34 2006 => Scanning File C:\WINDOWS\system32\cscdll.dll Fri Mar 17 16:06:34 2006 => Scanning File C:\WINDOWS\system32\wlnotify.dll Fri Mar 17 16:06:34 2006 => Scanning File C:\WINDOWS\system32\wlnotify.dll Fri Mar 17 16:06:34 2006 => Scanning File C:\WINDOWS\system32\sclgntfy.dll Fri Mar 17 16:06:34 2006 => Scanning File C:\WINDOWS\system32\WlNotify.dll Fri Mar 17 16:06:34 2006 => Scanning File C:\WINDOWS\system32\wlnotify.dll Fri Mar 17 16:06:34 2006 => Scanning File C:\WINDOWS\system32\wlnotify.dll Fri Mar 17 16:06:34 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Fri Mar 17 16:06:34 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System Fri Mar 17 16:06:34 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows Fri Mar 17 16:06:34 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AEDEBUG Fri Mar 17 16:06:34 2006 => Scanning File C:\WINDOWS\system32\drwtsn32.exe Fri Mar 17 16:06:35 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options Fri Mar 17 16:06:35 2006 => Scanning File C:\WINDOWS\system32\ntsd.exe Fri Mar 17 16:06:35 2006 => Scanning HKCU\Control Panel\Desktop Fri Mar 17 16:06:35 2006 => Scanning HKLM\SYSTEM\CurrentControlSet\Control\WOW Fri Mar 17 16:06:35 2006 => Scanning File C:\WINDOWS\system32\ntvdm.exe Fri Mar 17 16:06:35 2006 => Scanning File C:\WINDOWS\system32\ntvdm.exe Fri Mar 17 16:06:35 2006 => Scanning HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components Fri Mar 17 16:06:35 2006 => Scanning File C:\WINDOWS\inf\unregmp2.exe Fri Mar 17 16:06:35 2006 => Scanning File C:\WINDOWS\system32\shmgrate.exe Fri Mar 17 16:06:35 2006 => Scanning File C:\WINDOWS\system32\RunDLL32.exe Fri Mar 17 16:06:35 2006 => Scanning File C:\WINDOWS\system32\shmgrate.exe Fri Mar 17 16:06:35 2006 => Scanning File C:\WINDOWS\system32\regsvr32.exe Fri Mar 17 16:06:35 2006 => Scanning File C:\PROGRA~1\OUTLOO~1\setup50.exe Fri Mar 17 16:06:35 2006 => Scanning File C:\WINDOWS\system32\rundll32.exe Fri Mar 17 16:06:35 2006 => Scanning File C:\WINDOWS\system32\rundll32.exe Fri Mar 17 16:06:35 2006 => Scanning File C:\WINDOWS\system32\rundll32.exe Fri Mar 17 16:06:35 2006 => Scanning File C:\PROGRA~1\OUTLOO~1\setup50.exe Fri Mar 17 16:06:35 2006 => Scanning File C:\WINDOWS\system32\regsvr32.exe Fri Mar 17 16:06:35 2006 => Scanning File C:\WINDOWS\system32\ie4uinit.exe Fri Mar 17 16:06:36 2006 => Scanning File C:\WINDOWS\system32\Rundll32.exe Fri Mar 17 16:06:36 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run Fri Mar 17 16:06:36 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run Fri Mar 17 16:06:36 2006 => Scanning HKLM\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Run Fri Mar 17 16:06:36 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Run Fri Mar 17 16:06:36 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Fri Mar 17 16:06:36 2006 => Scanning File C:\WINDOWS\Mixer.exe Fri Mar 17 16:06:36 2006 => Scanning File C:\PROGRA~1\ANTIVI~1\avgnt.exe Fri Mar 17 16:06:36 2006 => Scanning File C:\PROGRA~1\GEMEIN~1\Real\UPDATE~1\REALSC~1.EXE Fri Mar 17 16:06:37 2006 => Scanning File C:\PROGRA~1\GEMEIN~1\SCANSO~1\SSBKGD~1\SSBKGD~1.EXE Fri Mar 17 16:06:37 2006 => Scanning File C:\WINDOWS\system32\rundll32.exe Fri Mar 17 16:06:37 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce Fri Mar 17 16:06:37 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx Fri Mar 17 16:06:37 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices Fri Mar 17 16:06:37 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce Fri Mar 17 16:06:37 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Fri Mar 17 16:06:37 2006 => Scanning File C:\WINDOWS\system32\ctfmon.exe Die Erste Hälfte Und |
|
17.03.2006, 16:19
| #12 |
| | Mein Papierkorb meldet (Dc1 kann nich gelöscht werden) Fri Mar 17 16:06:37 2006 => Scanning File C:\DOKUME~1\Zakaria\EIGENE~1\EIGENE~4\EIGENE~2\libanon\WALLPA~1.EXE Fri Mar 17 16:06:37 2006 => ERROR!!! Invalid Entry Microsoft Works Update Detection = C:\Programme\Microsoft Works\WkDetect.exe (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Run). No Action Taken. Fri Mar 17 16:06:37 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce Fri Mar 17 16:06:37 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx Fri Mar 17 16:06:37 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices Fri Mar 17 16:06:37 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\Setup Fri Mar 17 16:06:37 2006 => Scanning HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Fri Mar 17 16:06:38 2006 => Scanning File C:\WINDOWS\System32\CTFMON.EXE Fri Mar 17 16:06:38 2006 => Scanning HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce Fri Mar 17 16:06:38 2006 => Scanning HKCR\txtfile\shell\open\command Fri Mar 17 16:06:38 2006 => Scanning HKCR\comfile\shell\open\command Fri Mar 17 16:06:38 2006 => Scanning HKCR\exefile\shell\open\command Fri Mar 17 16:06:38 2006 => Scanning HKCR\dllfile\shell\open\command Fri Mar 17 16:06:38 2006 => Scanning HKCR\batfile\shell\open\command Fri Mar 17 16:06:38 2006 => Scanning HKCR\piffile\shell\open\command Fri Mar 17 16:06:38 2006 => Scanning HKCR\scrfile\shell\open\command Fri Mar 17 16:06:38 2006 => Scanning HKCR\scrfile\shell\config\command Fri Mar 17 16:06:38 2006 => Scanning HKCR\regfile\shell\open\command Fri Mar 17 16:06:38 2006 => Scanning HKCR\htmlfile\shell\open\command Fri Mar 17 16:06:38 2006 => Scanning File C:\PROGRA~1\INTERN~1\iexplore.exe Fri Mar 17 16:06:38 2006 => Scanning HKCR\htafile\shell\open\command Fri Mar 17 16:06:38 2006 => Scanning File C:\WINDOWS\System32\mshta.exe Fri Mar 17 16:06:38 2006 => Scanning HKCR\jsfile\shell\open\command Fri Mar 17 16:06:38 2006 => Scanning File C:\WINDOWS\System32\WScript.exe Fri Mar 17 16:06:38 2006 => Scanning HKCR\jsefile\shell\open\command Fri Mar 17 16:06:38 2006 => Scanning File C:\WINDOWS\System32\WScript.exe Fri Mar 17 16:06:38 2006 => Scanning HKCR\vbsfile\shell\open\command Fri Mar 17 16:06:38 2006 => Scanning File C:\WINDOWS\System32\WScript.exe Fri Mar 17 16:06:38 2006 => Scanning HKCR\vbefile\shell\open\command Fri Mar 17 16:06:38 2006 => Scanning File C:\WINDOWS\System32\WScript.exe Fri Mar 17 16:06:38 2006 => Scanning HKCR\wshfile\shell\open\command Fri Mar 17 16:06:38 2006 => Scanning File C:\WINDOWS\System32\WScript.exe Fri Mar 17 16:06:38 2006 => Scanning HKCR\wsffile\shell\open\command Fri Mar 17 16:06:39 2006 => Scanning File C:\WINDOWS\System32\WScript.exe Fri Mar 17 16:06:39 2006 => ***** Scanning Service Files ***** Fri Mar 17 16:06:39 2006 => Scanning HKLM\SYSTEM\CurrentControlSet\Services Fri Mar 17 16:06:39 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ACPI.sys Fri Mar 17 16:06:39 2006 => Scanning File C:\WINDOWS\system32\drivers\aec.sys Fri Mar 17 16:06:39 2006 => Scanning File C:\WINDOWS\System32\drivers\afd.sys Fri Mar 17 16:06:39 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\agp440.sys Fri Mar 17 16:06:39 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:39 2006 => Scanning File C:\WINDOWS\System32\alg.exe Fri Mar 17 16:06:39 2006 => Scanning File C:\PROGRA~1\ANTIVI~1\sched.exe Fri Mar 17 16:06:39 2006 => Scanning File C:\PROGRA~1\ANTIVI~1\avguard.exe Fri Mar 17 16:06:39 2006 => Scanning File C:\WINDOWS\system32\svchost.exe Fri Mar 17 16:06:39 2006 => Scanning File C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe Fri Mar 17 16:06:40 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\asyncmac.sys Fri Mar 17 16:06:40 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\atapi.sys Fri Mar 17 16:06:40 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\atmarpc.sys Fri Mar 17 16:06:40 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:40 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\audstub.sys Fri Mar 17 16:06:40 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\avgntdd.sys Fri Mar 17 16:06:40 2006 => Scanning File C:\WINDOWS\system32\drivers\avgntmgr.sys Fri Mar 17 16:06:40 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:40 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:40 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\CCDECODE.sys Fri Mar 17 16:06:40 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\cdrom.sys Fri Mar 17 16:06:40 2006 => Scanning File C:\WINDOWS\System32\cisvc.exe Fri Mar 17 16:06:40 2006 => Scanning File C:\WINDOWS\system32\clipsrv.exe Fri Mar 17 16:06:40 2006 => Scanning File C:\WINDOWS\system32\drivers\cmaudio.sys Fri Mar 17 16:06:40 2006 => Scanning File C:\WINDOWS\System32\dllhost.exe Fri Mar 17 16:06:41 2006 => Scanning File C:\WINDOWS\system32\svchost.exe Fri Mar 17 16:06:41 2006 => Scanning File C:\WINDOWS\system32\svchost.exe Fri Mar 17 16:06:41 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:41 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\disk.sys Fri Mar 17 16:06:41 2006 => Scanning File C:\WINDOWS\System32\dmadmin.exe Fri Mar 17 16:06:41 2006 => Scanning File C:\WINDOWS\system32\drivers\dmboot.sys Fri Mar 17 16:06:41 2006 => Scanning File C:\WINDOWS\system32\drivers\dmio.sys Fri Mar 17 16:06:41 2006 => Scanning File C:\WINDOWS\system32\drivers\dmload.sys Fri Mar 17 16:06:41 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:41 2006 => Scanning File C:\WINDOWS\system32\drivers\DMusic.sys Fri Mar 17 16:06:41 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:41 2006 => Scanning File C:\WINDOWS\system32\drivers\drmkaud.sys Fri Mar 17 16:06:41 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:41 2006 => Scanning File C:\WINDOWS\system32\services.exe Fri Mar 17 16:06:41 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:41 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:41 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\fdc.sys Fri Mar 17 16:06:41 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\flpydisk.sys Fri Mar 17 16:06:42 2006 => Scanning File C:\WINDOWS\system32\drivers\fltmgr.sys Fri Mar 17 16:06:42 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ftdisk.sys Fri Mar 17 16:06:42 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\gameenum.sys Fri Mar 17 16:06:42 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\msgpc.sys Fri Mar 17 16:06:42 2006 => Scanning File C:\WINDOWS\system32\drivers\HCWBT8XX.sys Fri Mar 17 16:06:42 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:42 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:42 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\hidusb.sys Fri Mar 17 16:06:42 2006 => Scanning File C:\WINDOWS\system32\Drivers\HTTP.sys Fri Mar 17 16:06:42 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:42 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\i8042prt.sys Fri Mar 17 16:06:42 2006 => Scanning File C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\11\INTEL3~1\IDriverT.exe Fri Mar 17 16:06:42 2006 => Scanning File C:\WINDOWS\System32\imapi.exe Fri Mar 17 16:06:42 2006 => ERROR!!! Invalid Entry system32\drivers\InCDFs.sys in SYSTEM\CurrentControlSet\Services\InCDFs... Fri Mar 17 16:06:42 2006 => ERROR!!! Invalid Entry system32\drivers\InCDPass.sys in SYSTEM\CurrentControlSet\Services\InCDPass... Fri Mar 17 16:06:42 2006 => ERROR!!! Invalid Entry system32\drivers\InCDRm.sys in SYSTEM\CurrentControlSet\Services\InCDRm... Fri Mar 17 16:06:42 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\intelide.sys Fri Mar 17 16:06:42 2006 => Scanning File C:\WINDOWS\system32\drivers\ip6fw.sys Fri Mar 17 16:06:43 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys Fri Mar 17 16:06:43 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ipinip.sys Fri Mar 17 16:06:43 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ipnat.sys Fri Mar 17 16:06:43 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ipsec.sys Fri Mar 17 16:06:43 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\irenum.sys Fri Mar 17 16:06:43 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\isapnp.sys Fri Mar 17 16:06:43 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\kbdclass.sys Fri Mar 17 16:06:43 2006 => Scanning File C:\WINDOWS\system32\drivers\kmixer.sys Fri Mar 17 16:06:43 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:43 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:43 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:43 2006 => Scanning File C:\WINDOWS\system32\lxcgcoms.exe Fri Mar 17 16:06:43 2006 => Scanning File C:\PROGRA~1\GEMEIN~1\MICROS~1\VS7Debug\mdm.exe Fri Mar 17 16:06:43 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:43 2006 => Scanning File C:\WINDOWS\System32\mnmsrvc.exe Fri Mar 17 16:06:44 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\mouclass.sys Fri Mar 17 16:06:44 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\mouhid.sys Fri Mar 17 16:06:44 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\mrxdav.sys Fri Mar 17 16:06:44 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\mrxsmb.sys Fri Mar 17 16:06:44 2006 => Scanning File C:\WINDOWS\System32\msdtc.exe Fri Mar 17 16:06:44 2006 => Scanning File C:\WINDOWS\system32\msiexec.exe Fri Mar 17 16:06:44 2006 => Scanning File C:\WINDOWS\system32\drivers\MSKSSRV.sys Fri Mar 17 16:06:44 2006 => Scanning File C:\WINDOWS\system32\drivers\MSPCLOCK.sys Fri Mar 17 16:06:44 2006 => Scanning File C:\WINDOWS\system32\drivers\MSPQM.sys Fri Mar 17 16:06:44 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\mssmbios.sys Fri Mar 17 16:06:45 2006 => Scanning File C:\WINDOWS\system32\drivers\MSTEE.sys Fri Mar 17 16:06:45 2006 => Scanning File C:\WINDOWS\system32\drivers\msmpu401.sys Fri Mar 17 16:06:45 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys Fri Mar 17 16:06:45 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\NdisIP.sys Fri Mar 17 16:06:45 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ndistapi.sys Fri Mar 17 16:06:45 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ndisuio.sys Fri Mar 17 16:06:45 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ndiswan.sys Fri Mar 17 16:06:45 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\netbios.sys Fri Mar 17 16:06:45 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\netbt.sys Fri Mar 17 16:06:45 2006 => Scanning File C:\WINDOWS\system32\netdde.exe Fri Mar 17 16:06:45 2006 => Scanning File C:\WINDOWS\system32\netdde.exe Fri Mar 17 16:06:45 2006 => Scanning File C:\WINDOWS\System32\lsass.exe Fri Mar 17 16:06:45 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:45 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:45 2006 => Scanning File C:\WINDOWS\System32\lsass.exe Fri Mar 17 16:06:45 2006 => Scanning File C:\WINDOWS\system32\svchost.exe Fri Mar 17 16:06:45 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\nv4_mini.sys Fri Mar 17 16:06:46 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys Fri Mar 17 16:06:46 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys Fri Mar 17 16:06:46 2006 => Scanning File C:\WINDOWS\system32\Drivers\ov519vid.sys Fri Mar 17 16:06:46 2006 => ERROR!!! Invalid Entry system32\DRIVERS\P2k.sys in SYSTEM\CurrentControlSet\Services\P2k... Fri Mar 17 16:06:46 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\parport.sys Fri Mar 17 16:06:46 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\pci.sys Fri Mar 17 16:06:46 2006 => Scanning File C:\WINDOWS\system32\drivers\pfc.sys Fri Mar 17 16:06:46 2006 => Scanning File C:\WINDOWS\system32\services.exe Fri Mar 17 16:06:46 2006 => Scanning File C:\WINDOWS\System32\lsass.exe Fri Mar 17 16:06:46 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\raspptp.sys Fri Mar 17 16:06:46 2006 => Scanning File C:\WINDOWS\system32\lsass.exe Fri Mar 17 16:06:46 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\psched.sys Fri Mar 17 16:06:46 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ptilink.sys Fri Mar 17 16:06:46 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\rasacd.sys Fri Mar 17 16:06:46 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:46 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\rasl2tp.sys Fri Mar 17 16:06:46 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:46 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\raspppoe.sys Fri Mar 17 16:06:46 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\raspti.sys Fri Mar 17 16:06:46 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\rdbss.sys Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\RDPCDD.sys Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\system32\sessmgr.exe Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\redbook.sys Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\system32\Drivers\RootMdm.sys Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\System32\locator.exe Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\system32\svchost.exe Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\System32\rsvp.exe Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\RTL8139.SYS Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\system32\lsass.exe Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\System32\SCardSvr.exe Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\system32\drivers\scsiport.sys Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\secdrv.sys Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\system32\svchost.exe Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\serenum.sys Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\serial.sys Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\SLIP.sys Fri Mar 17 16:06:47 2006 => Scanning File C:\WINDOWS\system32\drivers\splitter.sys Fri Mar 17 16:06:48 2006 => Scanning File C:\WINDOWS\system32\spoolsv.exe Fri Mar 17 16:06:48 2006 => Scanning File C:\WINDOWS\System32\DRIVERS\sr.sys Fri Mar 17 16:06:48 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:48 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\srv.sys Fri Mar 17 16:06:48 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:48 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:48 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\StreamIP.sys Fri Mar 17 16:06:48 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\swenum.sys Fri Mar 17 16:06:48 2006 => Scanning File C:\WINDOWS\system32\drivers\swmidi.sys Fri Mar 17 16:06:48 2006 => Scanning File C:\WINDOWS\System32\dllhost.exe Fri Mar 17 16:06:48 2006 => Scanning File C:\WINDOWS\system32\drivers\sysaudio.sys Fri Mar 17 16:06:48 2006 => Scanning File C:\WINDOWS\system32\smlogsvc.exe Fri Mar 17 16:06:48 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:48 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\tcpip.sys Fri Mar 17 16:06:49 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\termdd.sys Fri Mar 17 16:06:49 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:49 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:49 2006 => Scanning File C:\WINDOWS\system32\svchost.exe Fri Mar 17 16:06:49 2006 => Scanning File C:\PROGRA~1\TUNEUP~1\WINSTY~2.EXE Fri Mar 17 16:06:49 2006 => Scanning File C:\WINDOWS\system32\wdfmgr.exe Fri Mar 17 16:06:49 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\update.sys Fri Mar 17 16:06:49 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:49 2006 => Scanning File C:\WINDOWS\System32\ups.exe Fri Mar 17 16:06:49 2006 => Scanning File C:\WINDOWS\system32\drivers\usbaudio.sys Fri Mar 17 16:06:49 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\usbccgp.sys Fri Mar 17 16:06:49 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\usbhub.sys Fri Mar 17 16:06:49 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\usbprint.sys Fri Mar 17 16:06:49 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\usbscan.sys Fri Mar 17 16:06:49 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\usbser.sys Fri Mar 17 16:06:49 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS Fri Mar 17 16:06:49 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\usbuhci.sys Fri Mar 17 16:06:49 2006 => Scanning File C:\WINDOWS\System32\drivers\vga.sys Fri Mar 17 16:06:49 2006 => Scanning File C:\WINDOWS\System32\vssvc.exe Fri Mar 17 16:06:50 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:50 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\wanarp.sys Fri Mar 17 16:06:50 2006 => Scanning File C:\WINDOWS\system32\drivers\wdmaud.sys Fri Mar 17 16:06:50 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:50 2006 => Scanning File C:\WINDOWS\system32\svchost.exe Fri Mar 17 16:06:50 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:50 2006 => Scanning File C:\WINDOWS\System32\wbem\wmiapsrv.exe Fri Mar 17 16:06:50 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:50 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS Fri Mar 17 16:06:50 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:50 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:50 2006 => Scanning File C:\WINDOWS\System32\svchost.exe Fri Mar 17 16:06:50 2006 => Scanning HKLM\SYSTEM\CurrentControlSet\Services\VxD Fri Mar 17 16:06:50 2006 => ***** Scanning Important System Files ***** Fri Mar 17 16:06:50 2006 => Scanning File C:\WINDOWS\system32\winsock.dll Fri Mar 17 16:06:50 2006 => Scanning File C:\WINDOWS\WsBtn.dll Fri Mar 17 16:06:50 2006 => Scanning File C:\WINDOWS\wsutil.exe Fri Mar 17 16:06:51 2006 => Scanning File C:\WINDOWS\system32\ws2help.dll Fri Mar 17 16:06:51 2006 => Scanning File C:\WINDOWS\system32\ws2_32.dll Fri Mar 17 16:06:51 2006 => Scanning File C:\WINDOWS\system32\wscntfy.exe Fri Mar 17 16:06:51 2006 => Scanning File C:\WINDOWS\system32\wscript.exe Fri Mar 17 16:06:51 2006 => Scanning File C:\WINDOWS\system32\wscsvc.dll Fri Mar 17 16:06:51 2006 => Scanning File C:\WINDOWS\system32\wscui.cpl Fri Mar 17 16:06:51 2006 => Scanning File C:\WINDOWS\system32\wshatm.dll Fri Mar 17 16:06:51 2006 => Scanning File C:\WINDOWS\system32\wshbth.dll Fri Mar 17 16:06:51 2006 => Scanning File C:\WINDOWS\system32\wshcon.dll Fri Mar 17 16:06:51 2006 => Scanning File C:\WINDOWS\system32\wshde.dll Fri Mar 17 16:06:51 2006 => Scanning File C:\WINDOWS\system32\wshext.dll Fri Mar 17 16:06:51 2006 => Scanning File C:\WINDOWS\system32\wship6.dll Fri Mar 17 16:06:51 2006 => Scanning File C:\WINDOWS\system32\wshisn.dll Fri Mar 17 16:06:51 2006 => Scanning File C:\WINDOWS\system32\wshnetbs.dll Fri Mar 17 16:06:51 2006 => Scanning File C:\WINDOWS\system32\wshom.ocx Fri Mar 17 16:06:51 2006 => Scanning File C:\WINDOWS\system32\wshrm.dll Fri Mar 17 16:06:52 2006 => Scanning File C:\WINDOWS\system32\wshtcpip.dll Fri Mar 17 16:06:52 2006 => Scanning File C:\WINDOWS\system32\wsnmp32.dll Fri Mar 17 16:06:52 2006 => Scanning File C:\WINDOWS\system32\wsock32.dll Fri Mar 17 16:06:52 2006 => Scanning File C:\WINDOWS\system32\wstdecod.dll Fri Mar 17 16:06:52 2006 => Scanning File C:\WINDOWS\explorer.exe Fri Mar 17 16:06:52 2006 => Scanning File C:\WINDOWS\explorer.scf Fri Mar 17 16:06:52 2006 => Scanning File C:\WINDOWS\system32\rundll32.exe Fri Mar 17 16:06:52 2006 => Scanning File C:\WINDOWS\system32\browseui.dll Fri Mar 17 16:06:52 2006 => Scanning File C:\WINDOWS\notepad.exe Fri Mar 17 16:06:52 2006 => Scanning File C:\WINDOWS\system32\notepad.exe Fri Mar 17 16:06:52 2006 => Scanning File C:\WINDOWS\system32\ctfmon.exe Fri Mar 17 16:06:52 2006 => Scanning File C:\WINDOWS\system32\cmd.exe Fri Mar 17 16:06:52 2006 => Scanning File C:\WINDOWS\system32\kernel32.dll Fri Mar 17 16:06:52 2006 => Scanning File C:\WINDOWS\system32\ntoskrnl.exe Fri Mar 17 16:06:53 2006 => Scanning File C:\WINDOWS\system32\ntkrnlpa.exe Fri Mar 17 16:06:53 2006 => Scanning File C:\WINDOWS\system32\HAL.DLL Fri Mar 17 16:06:53 2006 => Scanning File C:\WINDOWS\system32\win32k.sys Fri Mar 17 16:06:53 2006 => Scanning File C:\WINDOWS\system32\ntdll.dll Fri Mar 17 16:06:53 2006 => Scanning File C:\WINDOWS\system32\advapi32.dll Fri Mar 17 16:06:53 2006 => Scanning File C:\WINDOWS\system32\user32.dll Fri Mar 17 16:06:53 2006 => Scanning File C:\WINDOWS\system32\gdi32.dll Fri Mar 17 16:06:53 2006 => Scanning File C:\WINDOWS\system32\bootvid.dll Fri Mar 17 16:06:53 2006 => Scanning File C:\WINDOWS\system32\command.com Fri Mar 17 16:06:53 2006 => ***** Scanning Registry and File system for Adware/Spyware ***** Fri Mar 17 16:06:53 2006 => Loading Spyware Signatures from new External Database (Size: 153719). Fri Mar 17 16:06:56 2006 => Indexed Spyware Databases Successfully Created... Fri Mar 17 16:06:58 2006 => Offending Key found: HKLM\Software\magnet\handlers\limewire !!! Fri Mar 17 16:06:58 2006 => Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken. Danke im Voraus |
|
17.03.2006, 19:00
| #13 |
| > MalwareDB | Mein Papierkorb meldet (Dc1 kann nich gelöscht werden) Hallo, die Anleitung lesen und das Stichwort find.bat suchen  Gruß Schrulli
__________________ If every computer is running a diverse ecosystem, crackers will have no choice but to resort to small-scale, targetted attacks, and the days of mass-market malware will be over[...]. Stuart Udall |
|
| Themen zu Mein Papierkorb meldet (Dc1 kann nich gelöscht werden) |
| adobe, antivir, avira, bho, desktop, drivers, eigene bilder, einstellungen, explorer, firefox, helper, hijack, hijackthis, icq, internet, internet explorer, microsoft, mozilla, mozilla firefox, neustart, pdf, problem, programme, rundll, software, system, tuneup utilities, windows, windows xp |
Linear-Darstellung
