|
Log-Analyse und Auswertung: Viren nach Umstieg auf DSL: HiJackThis Log-FileWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
15.05.2006, 17:36 | #1 |
| Viren nach Umstieg auf DSL: HiJackThis Log-File Hallo liebe Spezialisten, seit dem ich bei meinem Internetzugang von Modem auf DSL-Verbindung (Arcor-All-Inklusive-Paket) umgestiegen bin, habe ich mir einen Sack voll Viren eingehandelt. Anbei der eScan-Log mit der Bitte um Hilfe. HiJackThis-Log kann ich nachreichen. Spybot habe ich vorher laufen lassen. Vorab 1000 Dank für die professionelle Hilfe !! eScan-Log: Sun May 14 20:43:16 2006 => ***** Scanning complete. ***** Sun May 14 20:43:16 2006 => Total Objects Scanned: 59422 Sun May 14 20:43:16 2006 => Total Virus(es) Found: 19 Sun May 14 20:43:16 2006 => Total Disinfected Files: 0 Sun May 14 20:43:16 2006 => Total Files Renamed: 0 Sun May 14 20:43:16 2006 => Total Deleted Objects: 0 Sun May 14 20:43:16 2006 => Total Errors: 143 Sun May 14 20:43:16 2006 => Time Elapsed: 01:47:03 Sun May 14 20:43:16 2006 => Virus Database Date: 2006/05/06 Sun May 14 20:43:16 2006 => Virus Database Count: 192134 Sun May 14 20:43:16 2006 => Scan Completed. Object "whyppc Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "whyppc Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "180solutions Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "activesearch Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "thelocalsearch Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "fastfind Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "fastfind Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "claria Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "claria Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "whenu.savenow Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "whenu.savenow Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "whenu.savenow Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "whenu.savenow Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "whenu.savenow Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "whenu.savenow Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "whenu.savenow Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "whenu.savenow Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "whenu.savenow Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "whenu.savenow Spyware/Adware" found in File System! Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINDOWS\Downloaded Program Files\HDPlugin1014.dll". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINDOWS\Downloaded Program Files\StarInstall.ocx". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINDOWS\Downloaded Program Files\CONFLICT.3\webdetb.dll". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\SYSTEM\UNIDRV.HLP". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\SYSTEM\UNIDRV.DLL". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\SYSTEM\ICONLIB.DLL". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\SYSTEM\FRITZ32.DRV". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\SYSTEM\FRIDRU32.DLL". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\SYSTEM\XLREC.DLL". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\SYSTEM\RECNCL.DLL". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Office\Assistnt\logo.act". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Office\Assistnt\scribble.act". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Office\Assistnt\dot.act". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Office\Assistnt\mnature.act". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Office\Assistnt\hoverbot.act". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Office\Assistnt\will.act". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Office\Assistnt\powerpup.act". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Office\Assistnt\genius.act". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\NISSAN\Fstengu.hlp". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\NISSAN\Efast.hlp". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\NISSAN\Fast.hlp". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\NISSAN\Partmast.hlp". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\NISSAN\Super.hlp". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\NISSAN\Fstenge.hlp". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\NISSAN\Faste.hlp". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\NISSAN\Pmaste.hlp". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\NISSAN\Supere.hlp". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\NISSAN\OCX16.EXE". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WIN_FAST\OCX16.EXE". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WIN_FAST\Fstengu.hlp". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WIN_FAST\Efast.hlp". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WIN_FAST\Fast.hlp". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WIN_FAST\Partmast.hlp". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WIN_FAST\Super.hlp". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WIN_FAST\Fstenge.hlp". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WIN_FAST\Faste.hlp". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WIN_FAST\Pmaste.hlp". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WIN_FAST\Supere.hlp". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\MSDEV\BIN\FCOUNT.BAT". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\MSDEV\BIN\FCOVER.BAT". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\MSDEV\BIN\FTIME.BAT". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\MSDEV\BIN\LCOUNT.BAT". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\MSDEV\BIN\LCOVER.BAT". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\MSDEV\BIN\PLIST.EXE". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\MSDEV\BIN\PREP.EXE". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\MSDEV\BIN\PROFILE.DLL". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\MSDEV\BIN\PROFILE.EXE". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\MSDEV\BIN\PROFILER.INI". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\MSDEV\BIN\PROFILER.XLM". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\Downloaded Program Files\HDPlugin1014.dll". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\Downloaded Program Files\StarInstall.ocx". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\Downloaded Program Files\CONFLICT.3\webdetb.dll". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\schdpl32.exe" refers to invalid object "C:\Programme\Microsoft Office\Office\schdpl32.exe". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\MsoHtmEd.exe" refers to invalid object "". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\HYPERTRM.EXE" refers to invalid object "". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\yourapp.Exe" refers to invalid object "C:\PROGRA~1\KODAK\USBSMA~1\SCM Device Drivers". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\ldm.exe" refers to invalid object "C:\Programme\Desktop Messenger\ldm.exe". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\UsersGuide.chm" refers to invalid object "". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\FPAdjust" refers to invalid object "C:\Programme\Flat Panel Adjust\FPAdjust". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\PowerDVD" refers to invalid object "". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\ecs_setup.exe" refers to invalid object "C:\Programme\Sony Ericsson\Communications Suite\ecs_setup.exe". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\mmdownload.exe" refers to invalid object "C:\Programme\Sony Ericsson\mmdownload.exe". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\PL-2303 DriverInstaller.exe" refers to invalid object "C:\WINDOWS\PL-2303 DriverInstaller.exe". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\SmartSurfer2.3" refers to invalid object "". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\Createcd50.exe" refers to invalid object "C:\Programme\Gemeinsame Dateien\Adaptec Shared\CreateCD\createcd50.exe". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "c:\WINDOWS\Startmenü\Programme\Microsoft Office Tools\". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\Norton Internet Security\". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Shared Tools\osa.exe" refers to invalid object "C:\Programme\Microsoft Office\Office\OSA.EXE". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Shared Tools\mso97.dll" refers to invalid object "C:\Programme\Microsoft Office\Office\MSO97.DLL". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Shared Tools\msoc.dll" refers to invalid object "C:\Programme\Microsoft Office\Office". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Shared Tools\osaintl.dll" refers to invalid object "C:\Programme\Microsoft Office\Office\OSAINTL.DLL". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Shared Tools\hlink.srg" refers to invalid object "C:\Programme\Microsoft Office\Office\HLINK.SRG". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Shared Tools\misc.srg" refers to invalid object "C:\Programme\Microsoft Office\Office\MISC.SRG". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Shared Tools\clippit.act" refers to invalid object "C:\Programme\Microsoft Office\Office\Actors\CLIPPIT.ACT". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Shared Tools\msroute.dll" refers to invalid object "C:\Programme\Microsoft Office\Office\MSROUTE.DLL". Action Taken: No Action Taken. Entry "HKCR\CLSID\{0482E074-C5B7-101A-82E0-08002B36A333}" refers to invalid object "C:\Programme\Microsoft Office\Office\schdpl32.exe -Automation". Action Taken: No Action Taken. Entry "HKCR\CLSID\{800DD100-DB43-11CE-914E-00A004000162}" refers to invalid object "C:\Programme\Microsoft Office\Office\msspc32.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{59850400-6664-101B-B21C-00AA004BA90B}" refers to invalid object "C:\PROGRAMME\MICROSOFT OFFICE\OFFICE\binder.exe". Action Taken: No Action Taken. Entry "HKCR\CLSID\{B801CA65-A1FC-11D0-85AD-444553540000}" refers to invalid object "G:\ACROBAT\READER\ACRORD32.EXE". Action Taken: No Action Taken. Entry "HKCR\CLSID\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" refers to invalid object "C:\PROGRAMME\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX". Action Taken: No Action Taken. Entry "HKCR\CLSID\{FBE840E5-13A5-4cff-B2A9-4D1E64A17FF2}" refers to invalid object "G:\PLAYER\WMMP.EXE". Action Taken: No Action Taken. Entry "HKCR\CLSID\{F4C6D6E0-A8FB-4281-BE24-1662D646FE2B}" refers to invalid object "G:\PLAYER\WMMP.EXE". Action Taken: No Action Taken. Entry "HKCR\CLSID\{D98E820F-6ACD-4dc0-921E-9841E3D8B4A7}" refers to invalid object "G:\PLAYER\WMMP.EXE". Action Taken: No Action Taken. Entry "HKCR\CLSID\{A6F74643-242A-A7A4-8DD5-DB40B9E25345}" refers to invalid object "C:\WINDOWS\DOWNLOADED PROGRAM FILES\CONFLICT.3\WEBDETB.DLL". Action Taken: No Action Taken. Entry "HKCR\TypeLib\{5F226421-415D-408D-9A09-0DCD94E25B48}" refers to invalid object "C:\PROGRAMME\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX". Action Taken: No Action Taken. Entry "HKCR\TypeLib\{F57B25DE-1945-4BE1-8B3D-A1065F8B31A9}" refers to invalid object "G:\PLAYER\WMMP.EXE". Action Taken: No Action Taken. Entry "HKCR\TypeLib\{317FCEC8-6FC1-4478-802D-CBA70535FFFC}" refers to invalid object "C:\WINDOWS\DOWNLOADED PROGRAM FILES\CONFLICT.3\WEBDETB.DLL". Action Taken: No Action Taken. Entry "HKCR\TypeLib\{DA0AC514-C1AE-11D3-84E7-005004C65534}" refers to invalid object "C:\PROGRAMME\F-SECURE ANTI-VIRUS\BACKWEB\154149\PROGRAM\FSBWCE.DLL". Action Taken: No Action Taken. Entry "HKCR\Overview.Document" refers to invalid object "{DA23B9C9-6893-11D0-8534-00C04FD7AD0C}". Action Taken: No Action Taken. Entry "HKCR\.obd" refers to invalid object "Office.Binder.8". Action Taken: No Action Taken. Entry "HKCR\.obt" refers to invalid object "Office.Binder.Template". Action Taken: No Action Taken. Entry "HKCR\TSHOOT.TSHOOTCtrl.1" refers to invalid object "{4B106874-DD36-11D0-8B44-00A024DD9EFF}". Action Taken: No Action Taken. Entry "HKCR\SchedulePlus.Application.7\shell\open\command" refers to invalid object "C:\Programme\Microsoft Office\Office\schdpl32.exe "%1"". Action Taken: No Action Taken. Entry "HKCR\.acl" refers to invalid object "ACLFile". Action Taken: No Action Taken. Entry "HKCR\.aw" refers to invalid object "AWFile". Action Taken: No Action Taken. Entry "HKCR\.col" refers to invalid object "COLFile". Action Taken: No Action Taken. Entry "HKCR\.det" refers to invalid object "DETFile". Action Taken: No Action Taken. Entry "HKCR\.elm" refers to invalid object "ELMFile". Action Taken: No Action Taken. Entry "HKCR\.ffa" refers to invalid object "FFAFile". Action Taken: No Action Taken. Entry "HKCR\.ffl" refers to invalid object "FFLFile". Action Taken: No Action Taken. Entry "HKCR\.fft" refers to invalid object "FFTFile". Action Taken: No Action Taken. Entry "HKCR\.ffx" refers to invalid object "FFXFile". Action Taken: No Action Taken. Entry "HKCR\.gst" refers to invalid object "MSMap.Datainst.8". Action Taken: No Action Taken. Entry "HKCR\.lex" refers to invalid object "LEXFile". Action Taken: No Action Taken. Entry "HKCR\.opc" refers to invalid object "OPCFile". Action Taken: No Action Taken. Entry "HKCR\.pcb" refers to invalid object "PCBFile". Action Taken: No Action Taken. Entry "HKCR\.pip" refers to invalid object "PIPFile". Action Taken: No Action Taken. Entry "HKCR\.sll" refers to invalid object "SSLFile". Action Taken: No Action Taken. Entry "HKCR\.stf" refers to invalid object "STFFile". Action Taken: No Action Taken. Entry "HKCR\.tuw" refers to invalid object "TUWFile". Action Taken: No Action Taken. Entry "HKCR\htfile\shell\open\command" refers to invalid object "C:\Progra~1\Zubehör\Hypert~1\HYPERTRM.EXE %1". Action Taken: No Action Taken. Entry "HKCR\ImageFormatTest.Document\shell\open\command" refers to invalid object "C:\PROGRA~1\OLYMPUS\CAMEDI~1\OLYMPU~1.EXE /dde". Action Taken: No Action Taken. Entry "HKCR\Film.Dokument\shell\open\command" refers to invalid object "C:\PROGRA~1\OLYMPUS\CAMEDI~1\OLYMPU~1.EXE /dde". Action Taken: No Action Taken. Entry "HKCR\.klnx" refers to invalid object "CLSID\{9E56BE60-C50F-11CF-9A2C-866954AC}". Action Taken: No Action Taken. Entry "HKCR\ed2k\shell\open\command" refers to invalid object "C:\Programme\emule\eMule.exe "%1"". Action Taken: No Action Taken. |
15.05.2006, 17:51 | #2 | ||
| Viren nach Umstieg auf DSL: HiJackThis Log-File @jb_1
__________________Zitat:
Zitat:
Alle eScan-Einträge bezihen sich auf abwesende Objekte (invalid object) , für die Reg-Einträge noch existieren. Beachte bitte in der Anleitung zu eScan die Datei Find.bat. |
21.05.2006, 12:59 | #3 | ||
| Viren nach Umstieg auf DSL: HiJackThis Log-FileZitat:
Danke erstmal für Deine Anwort ! Dann war das wohl nur ein Zufall. Auf jeden Fall hatte eScan vor dem Umstieg nichts gefunden. Zitat:
Sind diese irrelevant ? Der Batch Find.bat funktioniert bei mir nicht. Es wird bei jedem Kommando Befehl oder Dateiname nicht gefunden gemeldet. Der Inhalt von eScan_neu.txt sieht daher so aus: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Infektionsmeldungen ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~ Dateien ~~~~~~~~~~~ ~~~~ Infected files ~~~~~~~~~~~ ~~~~~~~~~~~ ~~~~ Offending files ~~~~~~~~~~~ ~~~~~~~~~~~ ~~~~ Tagged files ~~~~~~~~~~~ ~~~~~~~~~~~ Ordner ~~~~~~~~~~~ ~~~~~~~~~~~ Registry ~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Statistiken: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Kann das an Windows 98SE liegen oder stimmt was bei mir nicht mit meiner Installation ? Gruss jb_1 |
Themen zu Viren nach Umstieg auf DSL: HiJackThis Log-File |
.dll, 1.exe, acrobat, adobe, antivirus, dateien, desktop, drivers, dsl, f-secure, hijack, hijackthis, hijackthis log-file, internet security, load.exe, log-file, messenger, microsoft, modem, norton internet security, office, olympus, programme, quara, security, software, symantec, system, viren, virus, voll, windows |