Winfixer 2005 Problem !

Lufina

So erstmals zu der Datei E:/windows/system32/khfdd.dll

Wenn ich die mit killbox löschen will kommt diese meldung!

PendingFileRenameOperations Registry Data has been Removed by External Process!

Aber die datei gibt es leider immer noch, wenn ich sie z.b. ohne rebbot löschen will, sagt er mir, dass die Datei nicht gelöscht werden kann


Hier erstmal die log von escan (hab natürlich alles befolgt, und das kam bei dem Log der Datei MWAV.txt raus)

Mon Nov 27 14:56:15 2006 => **********************************************************
Mon Nov 27 14:56:15 2006 => eScan AntiVirus Toolkit Utility.
Mon Nov 27 14:56:15 2006 => Copyright © 2003-2006, MicroWorld Technologies Inc.
Mon Nov 27 14:56:15 2006 => **********************************************************
Mon Nov 27 14:56:15 2006 => Version 8.5.1
Mon Nov 27 14:56:15 2006 => Protokolldatei: C:\PROGRA~1\eScan\LOG\MWAV.LOG
Mon Nov 27 14:56:15 2006 => MWAV Registered: TRUE.
Mon Nov 27 14:56:15 2006 => User Account: Soldier
Mon Nov 27 14:56:15 2006 => OS Type: Windows Workstation
Mon Nov 27 14:56:15 2006 => OS: Windows XP
Mon Nov 27 14:56:15 2006 => Ver: Service Pack 2 (Build 2600)
Mon Nov 27 14:56:15 2006 => Windows Root Folder: E:\WINDOWS
Mon Nov 27 14:56:15 2006 => Windows Sys32 Folder: E:\WINDOWS\system32
Mon Nov 27 14:56:15 2006 => Local Fixed Drives: c:\,d:\,e:\
Mon Nov 27 14:56:15 2006 => MWAV Mode: Scan and Clean files (for viruses, adware and spyware).
Mon Nov 27 14:56:15 2006 => Optionen für Kommandozeile: /s
Mon Nov 27 14:56:16 2006 => Database Path in KL Key: C:\PROGRA~1\eScan.
Mon Nov 27 14:56:43 2006 => Letztes Datum der KL key Dateien: 27 Nov 2006 14:21:27.
Mon Nov 27 14:56:44 2006 => Letztes Datum der MWAV Dateien: 27 Nov 2006 14:21:27.
Mon Nov 27 14:56:44 2006 => eScan Installationsverzeichniss: C:\PROGRA~1\eScan\
Mon Nov 27 14:56:44 2006 => MailScan Installationsverzeichniss: C:\PROGRA~1\eScan\
Mon Nov 27 14:57:15 2006 => Setting Database Path to E:\DOKUME~1\Soldier\LOKALE~1\Temp\MWBASES
Mon Nov 27 14:58:03 2006 => ERROR!!! MS_Initialize return 80004005
Mon Nov 27 14:58:35 2006 => ERROR!!! Unable to load AV!

Hier noch zuletzt meine HJT Log!

Logfile of HijackThis v1.99.1
Scan saved at 15:25:51, on 27.11.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
C:\Programme\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\eScan\TRAYSSER.EXE
C:\PROGRA~1\eScan\avpm.exe
E:\Programme\Gemeinsame Dateien\MicroWorld\Agent\MWASER.EXE
E:\Programme\Gemeinsame Dateien\MicroWorld\Agent\MWAgent.exe
E:\WINDOWS\system32\nvsvc32.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\eScan\MAILDISP.EXE
C:\PROGRA~1\eScan\AVPMWrap.EXE
E:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\eScan\MAILSCAN.EXE
C:\PROGRA~1\ESCAN\SPOOLER.EXE
C:\PROGRA~1\eScan\AvpM.exe
C:\PROGRA~1\eScan\kavss.exe
C:\Programme\Mozilla Firefox\firefox.exe
E:\WINDOWS\explorer.exe
E:\Dokumente und Einstellungen\Soldier\Desktop\Downloads\HJT.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {013A653B-49A6-4f76-8B68-E4875EA6BA54} - E:\WINDOWS\system32\fsosvecg.dll
O2 - BHO: (no name) - {79EFF200-477E-4B49-A000-33EF45BACBEE} - E:\WINDOWS\system32\khfdd.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE E:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE E:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LXCCCATS] rundll32 E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCCtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Programme\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [MailScan Dispatcher] "C:\Programme\eScan\LAUNCH.EXE"
O4 - HKLM\..\Run: [eScan Updater] C:\PROGRA~1\eScan\TRAYICOS.EXE /App
O4 - HKLM\..\Run: [eScan Monitor] C:\PROGRA~1\eScan\AVPMWrap.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Programme\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Programme\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - E:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - E:\Programme\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - E:\Programme\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\WINDOWS\system32\shdocvw.dll
O10 - Unknown file in Winsock LSP: e:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: e:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: e:\windows\system32\mwtsp.dll
O20 - AppInit_DLLs: "E:\PROGRA~1\Google\Google Desktop Search\GoogleDesktopNetwork3.dll"
O20 - Winlogon Notify: khfdd - E:\WINDOWS\system32\khfdd.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Programme\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: eScan Server-Updater (eScan-trayicos) - MicroWorld Technologies Inc. - C:\PROGRA~1\eScan\TRAYSSER.EXE
O23 - Service: eScan Monitor Service (KAVMonitorService) - Kaspersky Labs. - C:\PROGRA~1\eScan\avpm.exe
O23 - Service: lxcc_device - Lexmark International, Inc. - E:\WINDOWS\system32\lxcccoms.exe
O23 - Service: MWAgent - MicroWorld Technologies Inc. - E:\Programme\Gemeinsame Dateien\MicroWorld\Agent\MWASER.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - E:\WINDOWS\system32\nvsvc32.exe