|
Antiviren-, Firewall- und andere Schutzprogramme: AntiVir ausgeschaltet?Windows 7 Sämtliche Fragen zur Bedienung von Firewalls, Anti-Viren Programmen, Anti Malware und Anti Trojaner Software sind hier richtig. Dies ist ein Diskussionsforum für Sicherheitslösungen für Windows Rechner. Benötigst du Hilfe beim Trojaner entfernen oder weil du dir einen Virus eingefangen hast, erstelle ein Thema in den oberen Bereinigungsforen. |
24.09.2007, 18:23 | #1 |
| AntiVir ausgeschaltet? Hi zusammen mein AntiVir hat sich seit 23.08. nicht mehr ubgedatet, wie zuvor fast täglich passiert ist. Ich vermute mittlerweile das ich wohl nen Plagegeist aufn Rechner habe, der ihn ausgeschaltet hat. Gibt es sowas? Ich habe das Protokoll vom letzten manuellen Versuch mal beigefügt: 24.09.2007,18:59:49 - Installation Directory: C:\Programme\AntiVir PersonalEdition Classic\ 24.09.2007,18:59:49 - Backup Directory: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\BACKUP\ 24.09.2007,18:59:49 - Temp Directory: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\ 24.09.2007,18:59:51 - Update GUI wird gestartet... Displaymode: 0 24.09.2007,18:59:49 - Installation Directory: C:\Programme\AntiVir PersonalEdition Classic\ 24.09.2007,18:59:49 - Backup Directory: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\BACKUP\ 24.09.2007,18:59:49 - Temp Directory: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\ 24.09.2007,18:59:51 - Update GUI wird gestartet... Displaymode: 0 24.09.2007,19:00:14 - Lizenzdatei: OK [Kompletter Modus] 24.09.2007,19:00:14 - Avira AntiVir PersonalEdition Classic 24.09.2007,19:01:55 - Connection failed while downloading the file h*tp://dl1.avgate.net/upd/idx/master.idx. 24.09.2007,19:01:55 - Switching to next update server 24.09.2007,19:02:15 - Master IDX file has changed 24.09.2007,19:02:37 - There was a problem updating from the specified server: Connection failed while downloading the file h*tp://dl3.avgate.net/upd/idx/classic-nt-de.idx. 24.09.2007,19:02:37 - Switching to next update server 24.09.2007,19:02:42 - Master IDX file has changed 24.09.2007,19:02:42 - Downloading the product.info file from h*tp://dl3.avgate.net/upd/idx/classic-nt-de.info.gz 24.09.2007,19:02:45 - File basic-nt/2k/avgntflt.sys's operating system doesn't match the current one. File ignored. 24.09.2007,19:02:45 - File basic-nt/avadmin.exe's operating system doesn't match the current one. File ignored. 24.09.2007,19:02:45 - File basic-nt/avgio64.sys's operating system doesn't match the current one. File ignored. 24.09.2007,19:02:45 - File basic-nt/imp64b.exe's operating system doesn't match the current one. File ignored. 24.09.2007,19:02:45 - File basic-nt/psapi.dll's operating system doesn't match the current one. File ignored. 24.09.2007,19:02:45 - File basic-nt/shlext64.dll's operating system doesn't match the current one. File ignored. 24.09.2007,19:02:45 - File basic-nt/vista64/avgntflt.sys's operating system doesn't match the current one. File ignored. 24.09.2007,19:02:45 - File basic-nt/vista64/avgntflt.sys's operating system doesn't match the current one. File ignored. 24.09.2007,19:02:45 - Downloading the product.info file from h*tp://dl3.avgate.net/upd/idx/vdf.info.gz 24.09.2007,19:02:56 - Lizenzdatei: OK [Kompletter Modus] 24.09.2007,19:02:56 - Downloading the product.info file from ht*p://dl3.avgate.net/upd/idx/specvir-nt.info.gz 24.09.2007,19:03:17 - There was a problem updating from the specified server: Connection failed while downloading the file http://dl3.avgate.net/upd/idx/specvir-nt.info.gz. 24.09.2007,19:03:17 - Switching to next update server 24.09.2007,19:03:28 - Master IDX file has changed 24.09.2007,19:03:28 - Downloading the product.info file from h*tp://dl2.avgate.net/upd/idx/specvir-nt.info.gz 24.09.2007,19:03:29 - Downloading the product.info file from ht*p://dl2.avgate.net/upd/idx/engine.info.gz 24.09.2007,19:03:30 - Downloading the product.info file from ht*p://dl2.avgate.net/upd/idx/engine-nt-de.info.gz 24.09.2007,19:03:33 - Module: SELFUPDATE Source: winwks\de\ Destination: C:\Programme\AntiVir PersonalEdition Classic\ Files: 15 24.09.2007,19:03:33 - C:\Programme\AntiVir PersonalEdition Classic\avinet.dll 7.0.0.3 < 7.0.0.7 24.09.2007,19:03:34 - C:\Programme\AntiVir PersonalEdition Classic\scewxml.dll 0.4.0.0 < 0.4.0.1 24.09.2007,19:03:34 - C:\Programme\AntiVir PersonalEdition Classic\update.exe 1.2.10.6 < 1.2.10.13 24.09.2007,19:03:34 - update_msg.avr 93ebb417bc55e0ae508f10d3da2e456e != 4deed31ce82ba7a627cc0c5fbcb21db1 24.09.2007,19:03:34 - C:\Programme\AntiVir PersonalEdition Classic\updgui.dll 1.2.10.1 < 1.2.10.5 24.09.2007,19:03:34 - C:\Programme\AntiVir PersonalEdition Classic\updguirc.dll 1.2.13.0 < 1.2.14.0 24.09.2007,19:03:34 - C:\Programme\AntiVir PersonalEdition Classic\updlib.dll 1.2.10.11 < 1.2.10.20 24.09.2007,19:03:34 - C:\Programme\AntiVir PersonalEdition Classic\updlibrc.dll 1.2.19.0 < 1.2.23.0 24.09.2007,19:03:34 - antivir.oem e41664e2db62ae80fd0c56f0eda7844e != 5daa91ae9f3cc0cfe424d3053895cbee 24.09.2007,19:03:34 - C:\Programme\AntiVir PersonalEdition Classic\rcimage.dll 7.0.1.15 < 7.0.1.30 24.09.2007,19:03:35 - C:\Programme\AntiVir PersonalEdition Classic\rctext.dll 7.0.45.0 < 7.0.62.0 24.09.2007,19:03:35 - Module: MAIN Source: winwks\de\ Destination: C:\Programme\AntiVir PersonalEdition Classic\ Files: 75 24.09.2007,19:03:35 - C:\Programme\AntiVir PersonalEdition Classic\avarkt.dll 1.0.0.17 < 1.0.0.20 24.09.2007,19:03:35 - C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe 7.0.4.5 < 7.2.0.13 24.09.2007,19:03:35 - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe 7.0.0.52 < 7.0.0.81 24.09.2007,19:03:35 - avipbb.inf 5619f7ea8cf77cfb7875d45ca44713c5 != c0b1ac26ea5f4f285ee712e77ebd9ffe 24.09.2007,19:03:36 - C:\Programme\AntiVir PersonalEdition Classic\avnotify.dll 7.0.3.0 < 7.0.6.0 24.09.2007,19:03:36 - C:\Programme\AntiVir PersonalEdition Classic\avnotify.exe 7.0.1.3 < 7.0.7.0 24.09.2007,19:03:36 - C:\Programme\AntiVir PersonalEdition Classic\avpref.dll 7.0.2.1 < 7.0.2.2 24.09.2007,19:03:36 - C:\Programme\AntiVir PersonalEdition Classic\avreg.dll 7.0.1.2 < 7.0.1.6 24.09.2007,19:03:36 - C:\Programme\AntiVir PersonalEdition Classic\avscan.dll 7.0.4.0 < 7.0.6.0 24.09.2007,19:03:36 - C:\Programme\AntiVir PersonalEdition Classic\avscan.exe 7.0.4.15 < 7.0.6.1 24.09.2007,19:03:36 - C:\Programme\AntiVir PersonalEdition Classic\ccev.dll 7.1.0.2 < 7.2.0.2 24.09.2007,19:03:36 - C:\Programme\AntiVir PersonalEdition Classic\ccevrc.dll 7.1.0.0 < 7.2.1.0 24.09.2007,19:03:36 - C:\Programme\AntiVir PersonalEdition Classic\ccgen.dll 7.1.0.1 < 7.2.0.10 24.09.2007,19:03:36 - C:\Programme\AntiVir PersonalEdition Classic\ccgenrc.dll 7.1.0.0 < 7.2.4.0 24.09.2007,19:03:36 - C:\Programme\AntiVir PersonalEdition Classic\ccgrdrc.dll 7.0.2.0 < 7.0.6.0 24.09.2007,19:03:36 - C:\Programme\AntiVir PersonalEdition Classic\ccguard.dll 7.0.1.21 < 7.0.1.34 24.09.2007,19:03:36 - C:\Programme\AntiVir PersonalEdition Classic\cclic.dll 7.1.0.1 < 7.2.0.4 Classic\ccreport.dll 7.1.0.2 < 7.2.0.2 24.09.2007,19:03:37 - C:\Programme\AntiVir PersonalEdition Classic\ccscanrc.dll 7.1.2.0 < 7.2.3.0 24.09.2007,19:03:37 - C:\Programme\AntiVir PersonalEdition Classic\ccsched.dll 7.1.0.4 < 7.2.0.3 24.09.2007,19:03:37 - C:\Programme\AntiVir PersonalEdition Classic\ccscherc.dll 7.1.1.0 < 7.2.2.0 24.09.2007,19:03:37 - C:\Programme\AntiVir PersonalEdition Classic\ccupdate.dll 7.1.0.1 < 7.2.0.4 24.09.2007,19:03:37 - C:\Programme\AntiVir PersonalEdition Classic\ccupdrc.dll 7.1.0.0 < 7.2.1.0 24.09.2007,19:03:37 - C:\Programme\AntiVir PersonalEdition Classic\guardgui.exe 7.0.4.2 < 7.0.6.0 24.09.2007,19:03:37 - C:\Programme\AntiVir PersonalEdition Classic\guardmsg.dll 7.0.10.0 < 7.0.11.0 24.09.2007,19:03:37 - C:\Programme\AntiVir PersonalEdition Classic\licmgr.dll 7.0.2.0 < 7.0.4.0 24.09.2007,19:03:37 - C:\Programme\AntiVir PersonalEdition Classic\licmgr.exe 7.0.2.0 < 7.0.4.0 24.09.2007,19:03:37 - C:\Programme\AntiVir PersonalEdition Classic\luke.dll 7.0.4.11 < 7.0.5.3 24.09.2007,19:03:37 - C:\Programme\AntiVir PersonalEdition Classic\lukeres.dll 7.0.4.0 < 7.0.6.0 24.09.2007,19:03:38 - C:\Programme\AntiVir PersonalEdition Classic\preupd.exe 7.0.0.25 < 7.0.0.34 24.09.2007,19:03:38 - C:\Programme\AntiVir PersonalEdition Classic\sched.exe 7.0.0.46 < 7.0.0.62 24.09.2007,19:03:38 - C:\Programme\AntiVir PersonalEdition Classic\schedr.dll 7.0.22.0 < 7.0.24.0 24.09.2007,19:03:38 - C:\Programme\AntiVir PersonalEdition Classic\setup.dll 7.0.23.0 < 7.0.30.0 24.09.2007,19:03:38 - C:\Programme\AntiVir PersonalEdition Classic\setup.exe 7.0.2.9 < 7.0.2.35 24.09.2007,19:03:38 - C:\Programme\AntiVir PersonalEdition Classic\smtplib.dll 1.2.0.13 < 1.2.0.17 24.09.2007,19:03:39 - C:\Programme\AntiVir PersonalEdition Classic\sqlite3.dll 3.3.10.0 < 3.3.17.1 24.09.2007,19:03:39 - C:\Programme\AntiVir PersonalEdition Classic\avgntflt.sys 6.39.0.5 < 7.0.0.4 24.09.2007,19:03:39 - build.dat 76e12aa918c51dacf24ca963893f1799 != 4d28a7670218de7f7a4974a467e4e7ea 24.09.2007,19:03:39 - hbedv.key 7766436c351490e043a9d67e645576d2 != 78136059fa067f93380d74db38b4bed9 24.09.2007,19:03:39 - C:\Programme\AntiVir PersonalEdition Classic\rchelp.dll 7.0.0.19 < 7.0.0.20 24.09.2007,19:03:39 - sweb.zip ec7a668f3d98de2608d7ad3308068d28 != 163d416eb24c8a1703d9ad81e66566a4 24.09.2007,19:03:39 - Module: COMMAPPDATA Source: winwks\de\ Destination: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ Files: 1 24.09.2007,19:03:39 - Module: TEXT Source: winwks\de\ Destination: C:\Programme\AntiVir PersonalEdition Classic\ Files: 3 24.09.2007,19:03:41 - avwin.chm ecf7b3da207c7662c6ad7a3eb7a532db != 61eebd9136d5345596ca327f4ab6b153 24.09.2007,19:03:41 - Module: VDF Source: vdf\ Destination: C:\Programme\AntiVir PersonalEdition Classic\ Files: 4 24.09.2007,19:03:42 - C:\Programme\AntiVir PersonalEdition Classic\antivir0.vdf 6.35.0.1 < 6.40.0.0 24.09.2007,19:03:42 - C:\Programme\AntiVir PersonalEdition Classic\antivir1.vdf 6.39.0.129 < 7.0.0.0 24.09.2007,19:03:42 - C:\Programme\AntiVir PersonalEdition Classic\antivir2.vdf 6.39.1.15 < 7.0.0.4 24.09.2007,19:03:42 - C:\Programme\AntiVir PersonalEdition Classic\antivir3.vdf 6.39.1.36 < 7.0.0.8 24.09.2007,19:03:42 - Module: AVREP_NT Source: engine\nt\ Destination: C:\Programme\AntiVir PersonalEdition Classic\ Files: 1 24.09.2007,19:03:42 - Module: ENGINE Source: engine\ Destination: C:\Programme\AntiVir PersonalEdition Classic\ Files: 2 24.09.2007,19:03:42 - C:\Programme\AntiVir PersonalEdition Classic\avewin32.dll 7.4.1.63 < 7.6.0.15 24.09.2007,19:03:42 - Module: ENGINE_NT_DE Source: engine\nt\ Destination: C:\Programme\AntiVir PersonalEdition Classic\ Files: 1 24.09.2007,19:03:43 - Module: DRV Source: winwks\de\ Destination: C:\WINDOWS\SYSTEM32\drivers\ Files: 4 24.09.2007,19:03:43 - C:\WINDOWS\SYSTEM32\drivers\avipbb.sys 1.0.1.9 < 1.0.2.11 24.09.2007,19:03:43 - C:\WINDOWS\SYSTEM32\drivers\avgntdd.sys 6.37.0.2 < 6.39.0.2 24.09.2007,19:03:43 - C:\WINDOWS\SYSTEM32\drivers\avgntmgr.sys 6.37.1.1 < 6.37.1.1 24.09.2007,19:03:45 - Minifilter ist installiert 24.09.2007,19:03:45 - Minifilter ist möglich 24.09.2007,19:03:45 - Registry Eintrag erfolgreich gelesen: Software\H+BEDV\AntiVir PersonalEdition Classic V 7 | FilterType 24.09.2007,19:03:45 - File basic-nt/xp/avgntdd.sys which was recognized as modified, must not be updated 24.09.2007,19:03:45 - File basic-nt/xp/avgntmgr.sys which was recognized as modified, must not be updated 24.09.2007,19:03:45 - Initialisiere avnotify.exe 24.09.2007,19:03:46 - avnotify.exe wurde erfolgreich gestartet 24.09.2007,19:03:46 - Preparing to download files 24.09.2007,19:03:46 - 79 files need to be downloaded / copied from http://dl2.avgate.net/upd/ 24.09.2007,19:03:46 - #1: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/basic-nt/avinet.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/avinet.dll 24.09.2007,19:03:56 - #2: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/basic-nt/scewxml.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/scewxml.dll 24.09.2007,19:03:59 - #3: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/basic-nt/update.exe.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/update.exe 24.09.2007,19:04:07 - #4: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/basic-nt/update_msg.avr.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/update_msg.avr 24.09.2007,19:04:08 - #5: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/basic-nt/updgui.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/updgui.dll 24.09.2007,19:04:11 - #6: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/basic-nt/updguirc.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/updguirc.dll 24.09.2007,19:04:12 - #7: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/basic-nt/updlib.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/updlib.dll 24.09.2007,19:04:22 - #8: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/basic-nt/updlibrc.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/updlibrc.dll 24.09.2007,19:04:24 - #9: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/classic-nt/antivir.oem.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\classic-nt/antivir.oem 24.09.2007,19:04:24 - #10: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/classic-nt/rcimage.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\classic-nt/rcimage.dll 24.09.2007,19:04:51 - #11: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/classic-nt/rctext.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\classic-nt/rctext.dll 24.09.2007,19:04:53 - #12: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/basic-nt/avarkt.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/avarkt.dll 24.09.2007,19:04:59 - #13: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/basic-nt/avcenter.exe.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/avcenter.exe 24.09.2007,19:05:09 - #14: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/basic-nt/avconfig.cpl.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/avconfig.cpl 24.09.2007,19:05:11 - #15: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/basic-nt/avconfig.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/avconfig.dll 24.09.2007,19:05:12 - #16: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/basic-nt/avconfig.exe.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/avconfig.exe 24.09.2007,19:05:17 - #17: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/basic-nt/avevtlog.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/avevtlog.dll 24.09.2007,19:05:22 - #18: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/basic-nt/avgio.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/avgio.dll 24.09.2007,19:05:23 - #19: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/basic-nt/avgnt.exe.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/avgnt.exe 24.09.2007,19:05:27 - #20: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/basic-nt/avguard.exe.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/avguard.exe 24.09.2007,19:05:33 - #21: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/basic-nt/avipbb.inf.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/avipbb.inf 24.09.2007,19:05:34 - #22: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/basic-nt/avipc.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/avipc.dll 24.09.2007,19:05:35 - #23: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/basic-nt/avnotify.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/avnotify.dll 24.09.2007,19:05:36 - #24: Downloading and extracting h*tp://dl2.avgate.net/upd/winwks/de/basic-nt/avnotify.exe.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/avnotify.exe 24.09.2007,19:05:39 - #25: Downloading and extracting h*tp://dl2.avgate.net/upd/winwks/de/basic-nt/avpref.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/avpref.dll 24.09.2007,19:05:40 - #26: Downloading and extracting http://dl2.avgate.net/upd/winwks/de/basic-nt/avreg.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/avreg.dll 24.09.2007,19:05:41 - #27: Downloading and extracting h*tp://dl2.avgate.net/upd/winwks/de/basic-nt/avscan.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/avscan.dll 24.09.2007,19:05:41 - #28: Downloading and extracting h*tp://dl2.avgate.net/upd/winwks/de/basic-nt/avscan.exe.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/avscan.exe 24.09.2007,19:05:46 - #29: Downloading and extracting ht*p://dl2.avgate.net/upd/winwks/de/basic-nt/ccev.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/ccev.dll 24.09.2007,19:05:50 - #30: Downloading and extracting h*tp://dl2.avgate.net/upd/winwks/de/basic-nt/ccevrc.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/ccevrc.dll 24.09.2007,19:05:51 - #31: Downloading and extracting h*tp://dl2.avgate.net/upd/winwks/de/basic-nt/ccgen.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/ccgen.dll 24.09.2007,19:05:56 - #32: Downloading and extracting ht*p://dl2.avgate.net/upd/winwks/de/basic-nt/ccgenrc.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/ccgenrc.dll 24.09.2007,19:05:57 - #33: Downloading and extracting ht*p://dl2.avgate.net/upd/winwks/de/basic-nt/ccgrdrc.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/ccgrdrc.dll 24.09.2007,19:06:02 - #34: Downloading and extracting ht*p://dl2.avgate.net/upd/winwks/de/basic-nt/ccguard.dll.gz to C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\Update\AVUPDATE_46f7ed05\winwks\de\basic-nt/ccguard.dll 24.09.2007,19:06:33 - There was a problem updating from the specified server: Connection failed while downloading the file ht*p://dl2.avgate.net/upd/winwks/de/basic-nt/ccguard.dll.gz. 24.09.2007,19:06:33 - Switching to next update server 24.09.2007,19:06:55 - Connection failed while downloading the file ht*p://dl2.avgate.net/upd/idx/master.idx. 24.09.2007,19:06:55 - Switching to next update server 24.09.2007,19:07:17 - Connection failed while downloading the file h*tp://dl6.avgate.net/upd/idx/master.idx. 24.09.2007,19:07:17 - Switching to next update server 24.09.2007,19:07:30 - Master IDX file has changed 24.09.2007,19:07:30 - File basic-nt/2k/avgntflt.sys's operating system doesn't match the current one. File ignored. 24.09.2007,19:07:30 - File basic-nt/avadmin.exe's operating system doesn't match the current one. File ignored. 24.09.2007,19:07:30 - File basic-nt/avgio64.sys's operating system doesn't match the current one. File ignored. 24.09.2007,19:07:30 - File basic-nt/imp64b.exe's operating system doesn't match the current one. File ignored. 24.09.2007,19:07:30 - File basic-nt/psapi.dll's operating system doesn't match the current one. File ignored. 24.09.2007,19:07:30 - File basic-nt/shlext64.dll's operating system doesn't match the current one. File ignored. 24.09.2007,19:07:30 - File basic-nt/vista64/avgntflt.sys's operating system doesn't match the current one. File ignored. 24.09.2007,19:07:30 - File basic-nt/wsctool.exe's operating system doesn't match the current one. File ignored. 24.09.2007,19:07:30 - File basic-nt/xp64/avgntflt.sys's operating system doesn't match the current one. File ignored. 24.09.2007,19:07:30 - File basic-nt/2k/avgntdd.sys's operating system doesn't match the current one. File ignored. 24.09.2007,19:07:30 - File basic-nt/2k/avgntmgr.sys's operating system doesn't match the current one. File ignored. 24.09.2007,19:07:30 - File basic-nt/nt/avgntdd.sys's operating system doesn't match the current one. File ignored. 24.09.2007,19:07:30 - File basic-nt/nt/avgntmgr.sys's operating system doesn't match the current one. File ignored. 24.09.2007,19:07:30 - File basic-nt/vista64/avgntflt.sys's operating system doesn't match the current one. File ignored. 24.09.2007,19:07:30 - Downloading the product.info file from h*tp://dl1.avgate.net/upd/idx/vdf.info.gz 24.09.2007,19:07:52 - There was a problem updating from the specified server: Connection failed while downloading the file h*tp://dl1.avgate.net/upd/idx/vdf.info.gz. 24.09.2007,19:07:52 - Switching to next update server 24.09.2007,19:08:16 - Master IDX file has changed 24.09.2007,19:08:16 - Downloading the product.info file from ht*p://dl7.avgate.net/upd/idx/vdf.info.gz 24.09.2007,19:08:56 - There was a problem updating from the specified server: Connection failed while downloading the file ht*p://dl7.avgate.net/upd/idx/vdf.info.gz. 24.09.2007,19:08:56 - Switching to next update server 24.09.2007,19:09:17 - There was a problem updating from the specified server: Connection failed while downloading the file ht*p://dl5.avgate.net/upd/idx/master.idx. 24.09.2007,19:09:17 - Switching to next update server 24.09.2007,19:09:39 - There was a problem updating from the specified server: Connection failed while downloading the file ht*p://dl5.avgate.net/upd/idx/master.idx. 24.09.2007,19:09:39 - Switching to next update server 24.09.2007,19:10:00 - There was a problem updating from the specified server: Connection failed while downloading the file h*tp://dl5.avgate.net/upd/idx/master.idx. 24.09.2007,19:10:00 - Switching to next update server 24.09.2007,19:10:12 - Master IDX file has changed 24.09.2007,19:10:12 - Downloading the product.info file from h**p://dl6.avgate.net/upd/idx/vdf.info.gz 24.09.2007,19:10:42 - Der Registryeintrag Software\H+BEDV\AntiVir PersonalEdition Classic V 7 |UpdateInProgress wurde erfolgreich erstellt 24.09.2007,19:10:43 - Critical error: Connection failed while downloading the file h**p://dl6.avgate.net/upd/idx/vdf.info.gz. |
24.09.2007, 19:26 | #2 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | AntiVir ausgeschaltet?Zitat:
Poste bitte mal ein Hijackthis-Logfile.
__________________ |
30.11.2007, 12:13 | #3 |
| AntiVir ausgeschaltet? Hey! Ich habe das selbe Problem. Mein Antivir lässt sich nichtmehr aktualisieren. Ich vermute, dass entweder ein Trojaner daran schuld ist, oder dass mein altes Antivirenprogramm Norton Antivirus, welches sich komischerweise nichtmehr löschen lässt, der Grund dafür sein könnte...
__________________Habe eine HijackThis- Logfile drangehängt. Bitte um eure Hilfe!! christoph Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:58:54, on 30.11.2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16544) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\Explorer.EXE C:\Programme\Lexmark X5100 Series\lxbabmgr.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe C:\Programme\Lexmark X5100 Series\lxbabmon.exe C:\Programme\Winamp\winampa.exe C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\WkUFind.exe C:\WINDOWS\System32\P2P Networking\P2P Networking.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Programme\Java\jre1.5.0_04\bin\jusched.exe C:\Programme\QuickTime\qttask.exe C:\Programme\iTunes\iTunesHelper.exe C:\Programme\Nokia\Nokia PC Suite 6\LaunchApplication.exe C:\WINDOWS\system32\ctfmon.exe C:\Programme\Messenger\msmsgs.exe C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\wkcalrem.exe C:\Programme\FinePixViewer\QuickDCF.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\ccProxy.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe C:\Programme\NewDotNet\nnrun.exe C:\WINDOWS\System32\nvsvc32.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe C:\WINDOWS\System32\svchost.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe C:\Programme\NewDotNet\nnrun.exe C:\Programme\PC Connectivity Solution\ServiceLayer.exe C:\Programme\iPod\bin\iPodService.exe C:\Programme\AntiVir PersonalEdition Classic\sched.exe C:\Programme\AntiVir PersonalEdition Classic\avguard.exe C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe C:\Programme\Internet Explorer\iexplore.exe C:\Dokumente und Einstellungen\Christoph Strasser\Eigene Dateien\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.atptennis.com/1/en/home/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005 O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Programme\MyWay\myBar\1.bin\MYBAR.DLL O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: RXResultTracker Class - {59879FA4-4790-461c-A1CC-4EC4DE4CA483} - C:\Programme\RXToolBar\sfcont.dll (file missing) O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Programme\Gemeinsame Dateien\Symantec Shared\AdBlocking\NISShExt.dll O2 - BHO: (no name) - {BD66B8DC-2900-46A8-B63C-F448608AA1AA} - (no file) O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programme\Norton Internet Security\Norton AntiVirus\NavShExt.dll O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Programme\MyWay\myBar\1.bin\MYBAR.DLL O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Programme\Gemeinsame Dateien\Symantec Shared\AdBlocking\NISShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programme\Norton Internet Security\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Seekmo Toolbar - {53E0B6E8-A51D-448B-B692-40B67B285543} - C:\Program Files\Seekmo Programs\Seekmo Toolbar\SeekmoTB.dll O4 - HKLM\..\Run: [service] C:\WINDOWS\services.exe -serv O4 - HKLM\..\Run: [Lexmark X5100 Series] "C:\Programme\Lexmark X5100 Series\lxbabmgr.exe" O4 - HKLM\..\Run: [ccApp] "C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Programme\Norton Internet Security\UrlLstCk.exe O4 - HKLM\..\Run: [REGSHAVE] C:\Programme\REGSHAVE\REGSHAVE.EXE /AUTORUN O4 - HKLM\..\Run: [WinampAgent] C:\Programme\Winamp\winampa.exe O4 - HKLM\..\Run: [WorksFUD] C:\Programme\Microsoft Works\wkfud.exe O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Programme\Microsoft Works\WksSb.exe /AllUsers O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\WkUFind.exe O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer O4 - HKLM\..\Run: [AltnetPointsManager] C:\Program Files\Altnet\Points Manager\Points Manager.exe -s O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_04\bin\jusched.exe O4 - HKLM\..\Run: [SemanticInsight] C:\Programme\RXToolBar\Semantic Insight\SemanticInsight.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Programme\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETZWERKDIENST') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Programme\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Erinnerungen in Microsoft Works-Kalender.lnk = ? O4 - Global Startup: Exif Launcher.lnk = ? O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O16 - DPF: Yahoo! Chess - http://download.games.yahoo.com/games/clients/y/ct2_x.cab O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) - O16 - DPF: {3BFFE033-BF43-11D5-A271-00A024A51325} (iNotes6 Class) - https://www.at.wiiings.com/rs/iNotes6W.cab O16 - DPF: {7C559105-9ECF-42B8-B3F7-832E75EDD959} (Installer Class) - http://www.tbcode.com/ist/softwares/v4.0/0006_regular.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{2A90A07F-C25A-456A-A480-4496C2060572}: NameServer = 195.3.96.67,195.3.96.68 O18 - Filter hijack: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\Programme\RXToolBar\sfcont.dll O23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccProxy.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Programme\iPod\bin\iPodService.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: Norton AntiVirus Auto-Protect-Dienst (navapsvc) - Symantec Corporation - C:\Programme\Norton Internet Security\Norton AntiVirus\navapsvc.exe O23 - Service: NNServ - New.net, Inc. - C:\Programme\NewDotNet\nnrun.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: SAVScan - Symantec Corporation - C:\Programme\Norton Internet Security\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\GEMEIN~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: ServiceLayer - Nokia. - C:\Programme\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\GEMEIN~1\SONYSH~1\AVLib\Sptisrv.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe -- End of file - 10927 bytes |
Themen zu AntiVir ausgeschaltet? |
antivir, avgnt.exe, avira, avira antivir, avscan.exe, b.exe, c:\windows, critical error, drivers, einstellungen, error, failed, file, files, gen, installation, nicht mehr, opera, problem, programme, rechner, registry, sched.exe, setup.dll, software, system, system32, temp, update, update.exe, windows, windows\system32\drivers |