Hi,

sieht soweit sauber aus. Nichts auffälliges zu sehen!

Gruss

Zitat von felixx65

sieht soweit sauber aus. Nichts auffälliges zu sehen!

Das muss aber nichts heißen...

@larsz81

Mache bitte mal einen Scan mit eScan.
Alles dazu gibts hier mit Anleitung

Lese Dir diese genau durch und gehe dannach vor.
Poste das LOG mit hilfe der find.zip!


Gruß Mellosun

Hi, Danke erstmal.
Hab hier das log von eScan also nur die Fehler-Meldungen:

Sat Mar 03 12:57:18 2007 => ***** Scanning Registry and File system for Adware/Spyware *****
Sat Mar 03 12:57:18 2007 => Loading Spyware Signatures from new External Database [Name: C:\Bases_X\spydb.avs, Size: 212325].
Sat Mar 03 12:57:21 2007 => Indexed Spyware Databases Successfully Created...

Sat Mar 03 12:57:24 2007 => Offending Key found: HKCU\\magnet !!!
Sat Mar 03 12:57:24 2007 => Object "grokster Spyware/Adware" found in File System! Action Taken: No Action Taken.

Sat Mar 03 12:57:34 2007 => Offending file found: C:\Dokumente und Einstellungen\Lars\Eigene Dateien\downloads\passwortfinder\password.exe
Sat Mar 03 12:57:34 2007 => System found infected with password-finder 2.1 PSWTool (password.exe)! Action taken: No Action Taken.

Sat Mar 03 12:57:41 2007 => Offending file found: C:\Dokumente und Einstellungen\Lars\Eigene Dateien\eigene dokumente\symbolleiste\internet\internet.lnk
Sat Mar 03 12:57:41 2007 => System found infected with ezula Spyware/Adware (internet.lnk)! Action taken: No Action Taken.

Sat Mar 03 12:57:55 2007 => Offending file found: C:\Dokumente und Einstellungen\Lars\Eigene Dateien\symbolleiste\internet\internet.lnk
Sat Mar 03 12:57:55 2007 => System found infected with ezula Spyware/Adware (internet.lnk)! Action taken: No Action Taken.

Sat Mar 03 12:58:05 2007 => Offending file found: C:\Dokumente und Einstellungen\Lars\Eigene Dateien\downloads\passwortfinder\password.exe
Sat Mar 03 12:58:05 2007 => System found infected with password-finder 2.1 PSWTool (password.exe)! Action taken: No Action Taken.

Sat Mar 03 12:58:06 2007 => Offending file found: C:\Dokumente und Einstellungen\Lars\Eigene Dateien\eigene dokumente\symbolleiste\internet\internet.lnk
Sat Mar 03 12:58:06 2007 => System found infected with ezula Spyware/Adware (internet.lnk)! Action taken: No Action Taken.

Sat Mar 03 12:58:07 2007 => Offending file found: C:\Dokumente und Einstellungen\Lars\Eigene Dateien\symbolleiste\internet\internet.lnk
Sat Mar 03 12:58:07 2007 => System found infected with ezula Spyware/Adware (internet.lnk)! Action taken: No Action Taken.

Sat Mar 03 12:58:12 2007 => Checking MountPoints2 Registry Key...
Sat Mar 03 12:58:12 2007 => Invalid Command Found in {0f039ae1-8468-11d9-8a72-001109df9636}\Shell\Autoplay\DropTarget\AutoRun\command: L:\OEMBranding.exe
Sat Mar 03 12:58:12 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0f039ae1-8468-11d9-8a72-001109df9636} !!!
Sat Mar 03 12:58:12 2007 => Object "Possible Fujacks-type Worm" found in File System! Action Taken: No Action Taken.

Sat Mar 03 12:58:12 2007 => Invalid Command Found in {176ebe7a-8522-11d9-8a7e-001109df94c7}\Shell\Autoplay\DropTarget\AutoRun\command: K:\OEMBranding.exe
Sat Mar 03 12:58:12 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{176ebe7a-8522-11d9-8a7e-001109df94c7} !!!
Sat Mar 03 12:58:12 2007 => Object "Possible Fujacks-type Worm" found in File System! Action Taken: No Action Taken.

Sat Mar 03 12:58:12 2007 => Invalid Command Found in {b60dc10a-85ba-11d9-8a81-001109df94c7}\Shell\Autoplay\DropTarget\AutoRun\command: L:\OEMBranding.exe
Sat Mar 03 12:58:12 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b60dc10a-85ba-11d9-8a81-001109df94c7} !!!
Sat Mar 03 12:58:12 2007 => Object "Possible Fujacks-type Worm" found in File System! Action Taken: No Action Taken.

Sat Mar 03 12:58:12 2007 => Checking CLSID Reference Entries...
Sat Mar 03 12:58:13 2007 => Entry "HKCR\AOLCoach.TrainerOCXCtrl.10" refers to invalid object "{E04EAE82-14AD-41CB-BF5A-45556ABB8347}". Action Taken: No Action Taken.

Sat Mar 03 12:58:13 2007 => Entry "HKCR\Automap.Map.EU" refers to invalid object "{A49EEA01-9231-4C77-AA9E-2F89D72B4804}". Action Taken: No Action Taken.

Sat Mar 03 12:58:13 2007 => Entry "HKCR\Automap.Map.EU.12" refers to invalid object "{A49EEA01-9231-4C77-AA9E-2F89D72B4804}". Action Taken: No Action Taken.

Sat Mar 03 12:58:13 2007 => Entry "HKCR\Automap.Template.EU.12" refers to invalid object "{A49EEA01-9231-4C77-AA9E-2F89D72B4804}". Action Taken: No Action Taken.

Sat Mar 03 12:58:13 2007 => Entry "HKCR\CoachDM.WebCoachDownload" refers to invalid object "{E04EAE82-14AD-41CB-BF5A-45556ABB8347}". Action Taken: No Action Taken.

Sat Mar 03 12:58:13 2007 => Entry "HKCR\CoachDM.WebCoachDownload.1" refers to invalid object "{E04EAE82-14AD-41CB-BF5A-45556ABB8347}". Action Taken: No Action Taken.

Sat Mar 03 12:58:13 2007 => Entry "HKCR\ComPlusMetaData.MsCorHost" refers to invalid object "{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}". Action Taken: No Action Taken.

Sat Mar 03 12:58:13 2007 => Entry "HKCR\ComPlusMetaData.MsCorHost.2" refers to invalid object "{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}". Action Taken: No Action Taken.

Sat Mar 03 12:58:13 2007 => Entry "HKCR\DirectAnimation.PathControl" refers to invalid object "{D7A7D7C3-D47F-11D0-89D3-00A0C90833E6}". Action Taken: No Action Taken.

Sat Mar 03 12:58:13 2007 => Entry "HKCR\DirectAnimation.Sequence" refers to invalid object "{4F241DB1-EE9F-11D0-9824-006097C99E51}". Action Taken: No Action Taken.

Sat Mar 03 12:58:13 2007 => Entry "HKCR\DirectAnimation.SequencerControl" refers to invalid object "{B0A6BAE2-AAF0-11D0-A152-00A0C908DB96}". Action Taken: No Action Taken.

Sat Mar 03 12:58:13 2007 => Entry "HKCR\DirectAnimation.SpriteControl" refers to invalid object "{FD179533-D86E-11D0-89D6-00A0C90833E6}". Action Taken: No Action Taken.

Sat Mar 03 12:58:13 2007 => Entry "HKCR\DirectAnimation.StructuredGraphicsControl" refers to invalid object "{369303C2-D7AC-11D0-89D5-00A0C90833E6}". Action Taken: No Action Taken.

Sat Mar 03 12:58:14 2007 => Entry "HKCR\ICQPhone.SipxPhoneManager" refers to invalid object "{82308D15-1A2C-416A-A5BE-21DAF85DDB75}". Action Taken: No Action Taken.

Sat Mar 03 12:58:14 2007 => Entry "HKCR\MailFileAtt" refers to invalid object "{00020D05-0000-0000-C000-000000000046}". Action Taken: No Action Taken.

Sat Mar 03 12:58:14 2007 => Entry "HKCR\mapifvbx.object" refers to invalid object "{41116C00-8B90-101B-96CD-00AA003B14FC}". Action Taken: No Action Taken.

Sat Mar 03 12:58:14 2007 => Entry "HKCR\mapifvbx.object.1" refers to invalid object "{41116C00-8B90-101B-96CD-00AA003B14FC}". Action Taken: No Action Taken.

Sat Mar 03 12:58:14 2007 => Entry "HKCR\MDTDF.Form.1" refers to invalid object "{105B80D2-95F1-11D0-B0A0-00AA00BDCB5C}". Action Taken: No Action Taken.

Sat Mar 03 12:58:16 2007 => Entry "HKCR\SPhoneParser.FoundSkypeNumber" refers to invalid object "{E40A96CC-4A5B-47F4-9957-87CDED1DFF45}". Action Taken: No Action Taken.

Sat Mar 03 12:58:16 2007 => Entry "HKCR\SPhoneParser.FoundSkypeNumber.1" refers to invalid object "{E40A96CC-4A5B-47F4-9957-87CDED1DFF45}". Action Taken: No Action Taken.

Sat Mar 03 12:58:16 2007 => Entry "HKCR\SymWriter.pdb" refers to invalid object "{520DC67A-752E-11D3-8D56-00C04F680B2B}". Action Taken: No Action Taken.

Sat Mar 03 12:58:16 2007 => Checking Module Usage Entries...
Sat Mar 03 12:58:16 2007 => Checking User Trusted External App Entries...
Sat Mar 03 12:58:16 2007 => Entry "HKCU\Software\Netscape\Netscape Navigator\User Trusted External Applications" refers to invalid object "". Action Taken: No Action Taken.

Sat Mar 03 12:58:16 2007 => Checking Shared DLL Entries...
Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Ahead\NeroDigital\settings.xml". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Chs.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Cht.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Csy.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Dan.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Ell.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Esl.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Esp.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Fin.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Fra.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Hun.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Ita.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Jpn.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Kor.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Nld.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Nor.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Plk.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Ptb.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Ptg.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Rus.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Sky.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Slv.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Sve.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Tha.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnap-Trk.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Chs.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Cht.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Csy.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Dan.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Ell.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Esl.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Esp.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Fin.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Fra.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Hun.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Ita.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Jpn.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Kor.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Nld.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Nor.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Plk.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Ptb.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Ptg.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Rus.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Sky.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Slv.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Sve.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Tha.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero PhotoSnap\PhotoSnapViewer-Trk.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-dan.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-cht.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-nld.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-fra.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-ita.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-jpn.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-kor.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-nor.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-ptg.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-rus.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-esp.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-sve.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-fin.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-ptb.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-chs.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-plk.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-csy.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-sky.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-slv.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-hun.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-tha.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-trk.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-ell.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\CoverDesigner\covered-esl.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Chs.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Cht.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Csy.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Dan.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Ell.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Esl.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Esp.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Fin.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Fra.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Hun.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Ita.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Jpn.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-kor.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Plk.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Nld.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Nor.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Ptb.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Ptg.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Rus.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Sky.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Slv.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-sve.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Tha.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\ShowTime-Trk.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero ShowTime\Skins\standard.bmp". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Chs.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Cht.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Csy.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Dan.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Ell.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Esl.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Esp.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Fin.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Fra.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Hun.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Ita.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Jpn.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Kor.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Nld.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Nor.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Plk.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Ptb.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Ptg.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Rus.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Sky.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Slv.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Sve.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Tha.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero Recode\Recode-Trk.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Chs.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Cht.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Esp.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Fra.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Ita.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Kor.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Nld.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Ptg.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Csy.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Dan.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Ell.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Esl.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Fin.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Hun.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Nor.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Plk.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Ptb.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Rus.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Sky.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Slv.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Sve.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Tha.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Trk.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero StartSmart\NeroStartSmart_chs.chm". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero StartSmart\NeroStartSmart_cht.chm". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero StartSmart\NeroStartSmart_esp.chm". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero StartSmart\NeroStartSmart_fra.chm". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero StartSmart\NeroStartSmart_ita.chm". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero StartSmart\NeroStartSmart_jpn.chm". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero StartSmart\NeroStartSmart_kor.chm". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero StartSmart\NeroStartSmart_nld.chm". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero StartSmart\NeroStartSmart_ptg.chm". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero StartSmart\NeroStartSmart_sve.chm". Action Taken: No Action Taken.

Sat Mar 03 12:58:17 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Ahead\Nero BackItUp\BackItUp-Jpn.nls". Action Taken: No Action Taken.

Sat Mar 03 12:58:18 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Gemeinsame Dateien\Microsoft Shared\Textconv\WPEQU532.DLL". Action Taken: No Action Taken.

Sat Mar 03 12:58:19 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\system32\pxsfs.dll". Action Taken: No Action Taken.

Sat Mar 03 12:58:19 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\DOKUME~1\Lars\LOKALE~1\Temp\_ISTMP1.DIR\_ISTMP0.DIR\FileGrp\Msvcrt10.dll". Action Taken: No Action Taken.

Sat Mar 03 12:58:25 2007 => Checking Installer Entries...
Sat Mar 03 12:58:25 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Works\". Action Taken: No Action Taken.

Sat Mar 03 12:58:25 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Picture It! 10\". Action Taken: No Action Taken.

Sat Mar 03 12:58:25 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Encarta\". Action Taken: No Action Taken.

Sat Mar 03 12:58:26 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Antivirus Offer\". Action Taken: No Action Taken.

Sat Mar 03 12:58:26 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\ChemOffice 2005\". Action Taken: No Action Taken.

Sat Mar 03 12:58:28 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\KONAMI\Pro Evolution Soccer 4\". Action Taken: No Action Taken.

Sat Mar 03 12:58:28 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\KONAMI\". Action Taken: No Action Taken.

Sat Mar 03 12:58:28 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Office\Microsoft Office Tools\". Action Taken: No Action Taken.

Sat Mar 03 12:58:28 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Office\". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Checking Shared Tools Entries...
Sat Mar 03 12:58:29 2007 => Checking File Extension Entries...
Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".002". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".004". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".1121274414&cmd=realopen&folder=%2FUnizeug%2F&jobid=&file=SSHSecureShellClient%2D3%2E2%2E9%2Eexe". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".com/pub/". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".com/pub/myeTrust/". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".dmp". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".idx". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".MM_". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".mpga". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".olg". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".out". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".pcf". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".PH". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".pk". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".PQI". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".sdp". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".sdw". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".sim". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".speech". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".ssm". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".tmp". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".trace". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".xpl". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Checking Application Cache Entries...
Sat Mar 03 12:58:29 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "AOL Connectivity Services". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "AOLCoach de". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Mozilla Firefox (2.0.0.1)". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{40CEB0B7-671F-4269-BB20-9388B7BC5FBF}". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{4757E865-0292-4E04-940D-9C51052A5DD6}". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{66D08203-FB46-4D27-A609-FFE9A77FAA1F}". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{8DCBD4B1-DD30-4A9A-ADF7-FA3162B596C4}". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{AC76BA86-7AD7-1031-7B44-A70000000000}". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{AF3CFB9C-A368-43DE-8877-A33B5D91CB71}". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{CC55BD24-C1A6-4397-8EA3-2F30E74BDA2B}". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{CCFD0EBD-252F-42F4-95AE-01E358EFD87A}". Action Taken: No Action Taken.

Sat Mar 03 12:58:29 2007 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{EE9B31BB-1958-48CB-A298-57E3BE72FF2B}". Action Taken: No Action Taken.

Sat Mar 03 13:47:20 2007 => File C:\Dokumente und Einstellungen\Lars\Lokale Einstellungen\Temporary Internet Files\Content.IE5\KTUJ01UN\website.htm infected by "Trojan-Clicker.JS.Linker.h" Virus! Action Taken: No Action Taken.

So, 3geteilt, da die Einträge zu lang waren...

...diese ganzen internet.lnk Sachen kann ich nich glauben, da das ne Verknüpfung mit ir ist, die ich selbst erstellt hab.

Beim Rest, weiß ich nich, die temporary Internetfile hab ich gelöscht

OK, Danke im Voraus

Supi...wers soll das alles lesen?

Schaue nochmal in die Anleitung zu eScan.....fast am Ende findest du einen Punkt [5] , der Dir die find.zip gibt und erklärt......führe das aus und Poste dieses Log!


Gruß Mellosun

Hm, naja, das hab ich mir auch gedacht, aber OK hier noch mal alles mit infected oder tagged:

Sat Mar 03 12:57:24 2007 => Offending Key found: HKCU\\magnet !!!
Sat Mar 03 12:57:24 2007 => Object "grokster Spyware/Adware" found in File System! Action Taken: No Action Taken.

Sat Mar 03 12:57:34 2007 => Offending file found: C:\Dokumente und Einstellungen\Lars\Eigene Dateien\downloads\passwortfinder\password.exe
Sat Mar 03 12:57:34 2007 => System found infected with password-finder 2.1 PSWTool (password.exe)! Action taken: No Action Taken.

Sat Mar 03 12:57:41 2007 => Offending file found: C:\Dokumente und Einstellungen\Lars\Eigene Dateien\eigene dokumente\symbolleiste\internet\internet.lnk
Sat Mar 03 12:57:41 2007 => System found infected with ezula Spyware/Adware (internet.lnk)! Action taken: No Action Taken.

Sat Mar 03 12:57:55 2007 => Offending file found: C:\Dokumente und Einstellungen\Lars\Eigene Dateien\symbolleiste\internet\internet.lnk
Sat Mar 03 12:57:55 2007 => System found infected with ezula Spyware/Adware (internet.lnk)! Action taken: No Action Taken.

Sat Mar 03 12:58:05 2007 => Offending file found: C:\Dokumente und Einstellungen\Lars\Eigene Dateien\downloads\passwortfinder\password.exe
Sat Mar 03 12:58:05 2007 => System found infected with password-finder 2.1 PSWTool (password.exe)! Action taken: No Action Taken.

Sat Mar 03 12:58:06 2007 => Offending file found: C:\Dokumente und Einstellungen\Lars\Eigene Dateien\eigene dokumente\symbolleiste\internet\internet.lnk
Sat Mar 03 12:58:06 2007 => System found infected with ezula Spyware/Adware (internet.lnk)! Action taken: No Action Taken.

Sat Mar 03 12:58:07 2007 => Offending file found: C:\Dokumente und Einstellungen\Lars\Eigene Dateien\symbolleiste\internet\internet.lnk
Sat Mar 03 12:58:07 2007 => System found infected with ezula Spyware/Adware (internet.lnk)! Action taken: No Action Taken.

Sat Mar 03 12:58:12 2007 => Checking MountPoints2 Registry Key...
Sat Mar 03 12:58:12 2007 => Invalid Command Found in {0f039ae1-8468-11d9-8a72-001109df9636}\Shell\Autoplay\DropTarget\AutoRun\command: L:\OEMBranding.exe
Sat Mar 03 12:58:12 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0f039ae1-8468-11d9-8a72-001109df9636} !!!
Sat Mar 03 12:58:12 2007 => Object "Possible Fujacks-type Worm" found in File System! Action Taken: No Action Taken.

Sat Mar 03 12:58:12 2007 => Invalid Command Found in {176ebe7a-8522-11d9-8a7e-001109df94c7}\Shell\Autoplay\DropTarget\AutoRun\command: K:\OEMBranding.exe
Sat Mar 03 12:58:12 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{176ebe7a-8522-11d9-8a7e-001109df94c7} !!!
Sat Mar 03 12:58:12 2007 => Object "Possible Fujacks-type Worm" found in File System! Action Taken: No Action Taken.

Sat Mar 03 12:58:12 2007 => Invalid Command Found in {b60dc10a-85ba-11d9-8a81-001109df94c7}\Shell\Autoplay\DropTarget\AutoRun\command: L:\OEMBranding.exe
Sat Mar 03 12:58:12 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b60dc10a-85ba-11d9-8a81-001109df94c7} !!!
Sat Mar 03 12:58:12 2007 => Object "Possible Fujacks-type Worm" found in File System! Action Taken: No Action Taken.

Sat Mar 03 13:47:20 2007 => File C:\Dokumente und Einstellungen\Lars\Lokale Einstellungen\Temporary Internet Files\Content.IE5\KTUJ01UN\website.htm infected by "Trojan-Clicker.JS.Linker.h" Virus! Action Taken: No Action Taken.

OK, gestern Nacht warn es wohl zu viel Bier, als das ich da noch klar hätte denken können, also hab ich das total verpeilt mit der find.bat... So nu hab ich aber find.bat angewendet und hier das Ergebnis:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Header
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Microsoft Windows XP [Version 5.1.2600]
>
Sat Mar 03 12:36:36 2007 => Virus Database Date: 3/3/2007
Sat Mar 03 12:37:18 2007 => Virus Database Date: 3/3/2007
Sat Mar 03 12:55:05 2007 => Virus Database Date: 3/3/2007
Sat Mar 03 16:21:07 2007 => Virus Database Date: 3/3/2007
Sat Mar 03 19:21:38 2007 => Virus Database Date: 3/3/2007
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Infektionsmeldungen
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Sat Mar 03 12:57:34 2007 => System found infected with password-finder 2.1 PSWTool (password.exe)! Action taken: No Action Taken.
Sat Mar 03 12:57:41 2007 => System found infected with ezula Spyware/Adware (internet.lnk)! Action taken: No Action Taken.
Sat Mar 03 12:57:55 2007 => System found infected with ezula Spyware/Adware (internet.lnk)! Action taken: No Action Taken.
Sat Mar 03 12:58:05 2007 => System found infected with password-finder 2.1 PSWTool (password.exe)! Action taken: No Action Taken.
Sat Mar 03 12:58:06 2007 => System found infected with ezula Spyware/Adware (internet.lnk)! Action taken: No Action Taken.
Sat Mar 03 12:58:07 2007 => System found infected with ezula Spyware/Adware (internet.lnk)! Action taken: No Action Taken.
~~~~~~~~~~~
Dateien
~~~~~~~~~~~
~~~~ Infected files
~~~~~~~~~~~
Sat Mar 03 13:47:20 2007 => File C:\Dokumente und Einstellungen\Lars\Lokale Einstellungen\Temporary Internet Files\Content.IE5\KTUJ01UN\website.htm infected by "Trojan-Clicker.JS.Linker.h" Virus! Action Taken: No Action Taken.
~~~~~~~~~~~
~~~~ Tagged files
~~~~~~~~~~~
Sat Mar 03 13:11:21 2007 => Scanning File C:\Dokumente und Einstellungen\Lars\Eigene Dateien\Adobe Acrobat\Customer Support\Test Files\Untagged.pdf
Sat Mar 03 13:21:54 2007 => File C:\Dokumente und Einstellungen\Lars\Eigene Dateien\Downloads\Passwortfinder\password.exe//data0001//UPX tagged as "not-a-virus:PSWTool.Win32.PasswordFinder.21". No Action Taken.
Sat Mar 03 13:25:13 2007 => File C:\Dokumente und Einstellungen\Lars\Eigene Dateien\Downloads\Tight VNC\tightvnc-1.2.9-setup.exe//data0002 tagged as "not-a-virus:RemoteAdmin.Win32.WinVNC-based.b". No Action Taken.
Sat Mar 03 14:48:20 2007 => File C:\Programme\Screensavers.com\Installer\bin\ScreensaversInst.dll tagged as "not-a-virus:AdWare.Win32.Comet.c". Action Taken: No Action Taken.
Sat Mar 03 15:49:51 2007 => Scanning File F:\Kopie von Eigene Dateien (6.11.05)\Adobe Acrobat\Customer Support\Test Files\Untagged.pdf
Sat Mar 03 15:54:36 2007 => File F:\Kopie von Eigene Dateien (6.11.05)\Downloads\Passwortfinder\password.exe//data0001//UPX tagged as "not-a-virus:PSWTool.Win32.PasswordFinder.21". No Action Taken.
Sat Mar 03 15:57:23 2007 => File F:\Kopie von Eigene Dateien (6.11.05)\Downloads\Tight VNC\tightvnc-1.2.9-setup.exe//data0002 tagged as "not-a-virus:RemoteAdmin.Win32.WinVNC-based.b". No Action Taken.
~~~~~~~~~~~
~~~~ Offending files
~~~~~~~~~~~
Sat Mar 03 12:57:34 2007 => Offending file found: C:\Dokumente und Einstellungen\Lars\Eigene Dateien\downloads\passwortfinder\password.exe
Sat Mar 03 12:57:41 2007 => Offending file found: C:\Dokumente und Einstellungen\Lars\Eigene Dateien\eigene dokumente\symbolleiste\internet\internet.lnk
Sat Mar 03 12:57:55 2007 => Offending file found: C:\Dokumente und Einstellungen\Lars\Eigene Dateien\symbolleiste\internet\internet.lnk
Sat Mar 03 12:58:05 2007 => Offending file found: C:\Dokumente und Einstellungen\Lars\Eigene Dateien\downloads\passwortfinder\password.exe
Sat Mar 03 12:58:06 2007 => Offending file found: C:\Dokumente und Einstellungen\Lars\Eigene Dateien\eigene dokumente\symbolleiste\internet\internet.lnk
Sat Mar 03 12:58:07 2007 => Offending file found: C:\Dokumente und Einstellungen\Lars\Eigene Dateien\symbolleiste\internet\internet.lnk
~~~~~~~~~~~
Ordner
~~~~~~~~~~~
~~~~~~~~~~~
Registry
~~~~~~~~~~~
Sat Mar 03 12:57:24 2007 => Offending Key found: HKCU\\magnet !!!
Sat Mar 03 12:58:12 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0f039ae1-8468-11d9-8a72-001109df9636} !!!
Sat Mar 03 12:58:12 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{176ebe7a-8522-11d9-8a7e-001109df94c7} !!!
Sat Mar 03 12:58:12 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b60dc10a-85ba-11d9-8a81-001109df94c7} !!!
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Statistiken:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

So, nochmals Danke, falls da noch mal wer was zu sagen kann!!!! Und auch wenn derjenige es nicht liest: Danke für die find.bat !!!

Lars