|
Plagegeister aller Art und deren Bekämpfung: Dropper gefunden, kann nicht gelöscht werden - was tun??Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
23.01.2008, 01:32 | #1 |
| Dropper gefunden, kann nicht gelöscht werden - was tun?? Hallo, mein Avira Antivir (neuestes Update) hat mir grad folgenden Fund angezeigt, hab versucht es zu löschen, Zugriff JEGLICHER ART wurde aber verweigert - also auch keine Quarantäne oder sonstiges..was soll ich tun? bitte um schnelle Hilfe, hab echt keine Ahnung davon! danke!! "Die Datei 'C:\WINDOWS.0\Temp\NN_1.tmp\upgrade.exe' enthielt einen Virus oder unerwünschtes Programm 'DR/OneStep.E.1' [dropper]. Durchgeführte Aktion(en): Die Datei konnte nicht gelöscht werden! Zugriff verweigert Die Datei konnte nicht zum Löschen nach dem Neustart markiert werden.Mögliche Ursache: Zugriff verweigert" |
23.01.2008, 13:25 | #2 |
> MalwareDB | Dropper gefunden, kann nicht gelöscht werden - was tun?? keine Panik, poste zunächst ein dss Logfile
__________________Deckards System Scanner (DSS) Hier gibt es das Tool -> dss.exe * Schließe alle AnwendungenWichtig: Durchsuche die Log-Files nach persönlichen Informationen, wie z.B. deinen Realname, und editiere diese, bevor Du es postest. * Alle Links im Log-File sollten wie folgt editiert werden -> z.B. h**p://meine-seite.de. Einfach, damit niemand auf die Idee kommt, auf die Links zu klicken. Was Deckards System Scanner macht: * Es Erstellt einen System Wiederherstellungspunkt |
24.02.2008, 13:21 | #3 |
| Dropper gefunden, kann nicht gelöscht werden - was tun?? Antivir zeigt mir den gleichen Fehler an und kann die Datei wohl auch löschen. Trotzdem wird die Datei neu erzeugt und später wieder gefunden.
__________________Die Logs stehen unten. Deckard's System Scanner v20071014.68 Run by ### on 2008-02-24 13:01:34 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- Successfully created a Deckard's System Scanner Restore Point. -- Last 5 Restore Point(s) -- 5: 2008-02-24 12:01:37 UTC - RP1011 - Deckard's System Scanner Restore Point 4: 2008-02-22 22:56:18 UTC - RP1010 - Systemprüfpunkt 3: 2008-02-21 15:10:10 UTC - RP1009 - Systemprüfpunkt 2: 2008-02-18 21:23:40 UTC - RP1008 - Systemprüfpunkt 1: 2008-02-17 17:37:11 UTC - RP1007 - Systemprüfpunkt Backed up registry hives. Performed disk cleanup. System Drive C: has 2.26 GiB (less than 15%) free. -- HijackThis (run as ###.exe) ------------------------------------------------ Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:05:12, on 24.02.2008 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Programme\AntiVir PersonalEdition Classic\sched.exe C:\Programme\AntiVir PersonalEdition Classic\avguard.exe C:\Programme\Bluetooth Software\bin\btwdins.exe C:\Programme\PowerCinema\Kernel\TV\CLCapSvc.exe C:\WINDOWS\System32\CTsvcCDA.exe C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLService.exe C:\Programme\NewDotNet\nnrun.exe C:\WINDOWS\System32\nbridge.exe C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe C:\WINDOWS\System32\PAStiSvc.exe C:\WINDOWS\System32\svchost.exe C:\BMWgroup\ETKLokal\transbase\tbmux32.exe C:\Programme\VMware\VMware Player\vmware-authd.exe C:\Programme\Gemeinsame Dateien\VMware\VMware Virtual Image Editing\vmount2.exe C:\WINDOWS\System32\vmnat.exe C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe C:\Programme\Gemeinsame Dateien\Softwin\BitDefender Communicator\xcommsvr.exe C:\Programme\PowerCinema\Kernel\TV\CLSched.exe C:\WINDOWS\System32\vmnetdhcp.exe C:\Programme\Gemeinsame Dateien\Softwin\BitDefender Scan Server\bdss.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Programme\Java\jre1.6.0_03\bin\jusched.exe C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe C:\Programme\NewDotNet\nnrun.exe C:\Programme\Logitech\iTouch\iTouch.exe C:\Programme\Adobe\Acrobat 7.0\Distillr\Acrotray.exe C:\Programme\PowerCinema\PCMService.exe C:\Programme\Softwin\BitDefender8\bdnagent.exe C:\WINDOWS\System32\Rundll32.exe C:\WINDOWS\System32\ctfmon.exe C:\Programme\Gemeinsame Dateien\Ahead\lib\NMBgMonitor.exe C:\Programme\Microsoft ActiveSync\wcescomm.exe C:\Programme\PC Connectivity Solution\ServiceLayer.exe C:\PROGRA~1\MICROS~3\rapimgr.exe C:\Programme\PC Connectivity Solution\NclBTHandler.exe C:\Programme\Gemeinsame Dateien\Nokia\MPAPI\MPAPI3s.exe C:\Programme\MSI\Core Center\CoreCenter.exe C:\Programme\Maxthon\Maxthon.exe C:\WINDOWS\System32\wbem\wmiapsrv.exe C:\Dokumente und Einstellungen\###\Desktop\dss.exe C:\PROGRA~1\TRENDM~1\HIJACK~1\###.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.boerse-online.de/tools/boerse/depot_portfolio.htm?&p=6703552&sort=bezeichnung&sektion=drucken&m=0 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: metaspinner media GmbH - {12FC9A49-CFE0-49AA-BE9E-8F4EEAFC9443} - C:\PROGRA~1\klickTel\EBAYST~1\IEBUTT~2.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O2 - BHO: (no name) - {CB65344D-D97B-4046-82DC-37633BAC5FE4} - C:\WINDOWS\System32\ocmanahe.dll (file missing) O2 - BHO: (no name) - {FFFFFFA2-C40D-475D-8C91-9A9876ACFCDD} - C:\PROGRA~1\klickTel\KLICKT~3\KTTOOL~1.DLL O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: &klickTel Toolbar - {FFFF8BAD-BB43-4A08-8258-BFB40A29FBD7} - C:\PROGRA~1\klickTel\KLICKT~3\KTTOOL~1.DLL O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [zBrowser Launcher] C:\Programme\Logitech\iTouch\iTouch.exe O4 - HKLM\..\Run: [WinVNC] "C:\Programme\TightVNC-unstable\WinVNC.exe" -servicehelper O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime Alternative\QTSystem\qttask.exe" -atboottime O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Programme\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" O4 - HKLM\..\Run: [PCMService] "C:\Programme\PowerCinema\PCMService.exe" O4 - HKLM\..\Run: [Systems.exe] "" O4 - HKLM\..\Run: [BDNewsAgent] "C:\Programme\Softwin\BitDefender8\bdnagent.exe" O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Programme\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe" -startup O4 - HKLM\..\Run: [ISUSScheduler] "C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\PROGRA~1\Stardock\WINCUS~1\BootSkin\BootSkin.exe" /StartupJobs O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [Bandwidth Monitor Pro] "C:\Programme\Bandwidth Monitor Pro\Bandwidth Monitor Pro.exe" /minimized O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programme\Gemeinsame Dateien\Ahead\lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programme\Microsoft ActiveSync\wcescomm.exe" O4 - HKCU\..\Run: [System32ppHwÿÿÿÿˆØ] C:\Programme\Spytech Software\Spytech SpyAgent\sysdiag.exe O4 - HKCU\..\Run: [System32ppHwÿÿÿÿˆØ] C:\Programme\Spytech Software\Spytech SpyAgent\sysdiag.exe O4 - HKCU\..\Run: [Systems.exe] "" O4 - HKCU\..\Run: [Mega Sound Recorder] C:\Programme\MegaSoundRecorder\ProMp3Recorder.exe O4 - HKCU\..\Run: [Steganos3] C:\Programme\Steganos 3\Steganos3.exe /booting O4 - HKCU\..\Run: [PcSync] C:\Programme\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETZWERKDIENST') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Adobe Acrobat - Schnellstart.lnk = ? O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: CoreCenter.lnk = C:\Programme\MSI\Core Center\CoreCenter.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: Ausgewählte Verknüpfungen in Adobe PDF konvertieren - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Ausgewählte Verknüpfungen in vorhandene PDF-Datei konvertieren - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Auswahl in Adobe PDF konvertieren - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Auswahl in vorhandene PDF-Datei konvertieren - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: In Adobe PDF konvertieren - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: In vorhandene PDF-Datei konvertieren - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Senden an &Bluetooth - C:\Programme\Bluetooth Software\btsendto_ie_ctx.htm O8 - Extra context menu item: Verknüpfungsziel in Adobe PDF konvertieren - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Verknüpfungsziel in vorhandene PDF-Datei konvertieren - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll O9 - Extra 'Tools' menuitem: Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Programme\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Programme\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\Bluetooth Software\btsendto_ie.htm O15 - Trusted Zone: www.google.be O15 - Trusted Zone: local.google.de O15 - Trusted Zone: maps.google.de O15 - Trusted Zone: www.google.de O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/284f50e4486daed7f120/netzip/RdxIE601_de.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1129649561656 O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - http://photoservice.fujicolor.de/ips-opdata/19780613/activex/IPSUploader.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL O23 - Service: Adobe LM Service - Adobe Systems - C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Programme\Gemeinsame Dateien\Softwin\BitDefender Scan Server\bdss.exe O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Programme\Bluetooth Software\bin\btwdins.exe O23 - Service: CADopia License Manager - Macrovision Corporation - C:\PROGRA~1\CADopia\CADOPI~1\LicenseManager\lmgrd.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Programme\PowerCinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Programme\PowerCinema\Kernel\TV\CLSched.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: ircengnt - Unknown owner - C:\Programme\IRCAS Alarm\Bin\ircengnt.exe (file missing) O23 - Service: konfig - Unknown owner - f:\opt\MBCASE\pm\bin\mcp (file missing) O23 - Service: license - Unknown owner - f:\opt\MBCASE\pm\bin\mcp (file missing) O23 - Service: License Management Service ESD - element5 - C:\Programme\Gemeinsame Dateien\element5 Shared\Service\Licence Manager ESD.exe O23 - Service: mcp - Unknown owner - f:\opt\MBCASE\pm\bin\mcp (file missing) O23 - Service: NNServ - New.net, Inc. - C:\Programme\NewDotNet\nnrun.exe O23 - Service: Nokia Network Bridge - Nokia - C:\WINDOWS\System32\nbridge.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Programme\WinPcap\rpcapd.exe O23 - Service: ServiceLayer - Nokia. - C:\Programme\PC Connectivity Solution\ServiceLayer.exe O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe O23 - Service: Transbase - Transaction Software, D 81737 Munich - C:\BMWgroup\ETKLokal\transbase\tbmux32.exe O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Programme\VMware\VMware Player\vmware-authd.exe O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\System32\vmnetdhcp.exe O23 - Service: VMware Virtual Mount Manager Extended (vmount2) - VMware, Inc. - C:\Programme\Gemeinsame Dateien\VMware\VMware Virtual Image Editing\vmount2.exe O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\System32\vmnat.exe O23 - Service: VNC Server (winvnc) - Constantin Kaplinsky - C:\Programme\TightVNC-unstable\WinVNC.exe O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Programme\Gemeinsame Dateien\Softwin\BitDefender Communicator\xcommsvr.exe O24 - Desktop Component 1: (no name) - C:\Dokumente und Einstellungen\###\Desktop\Wetteronline.html -- End of file - 14385 bytes -- File Associations ----------------------------------------------------------- .js - JSFile - DefaultIcon - C:\WINDOWS\System32\WScript.exe,3 .js - JSFile - shell\open\command - C:\WINDOWS\System32\WScript.exe "%1" %* .vbs - VBSFile - DefaultIcon - C:\WINDOWS\System32\WScript.exe,2 .vbs - VBSFile - shell\open\command - C:\WINDOWS\System32\WScript.exe "%1" %* .vbs - VBSFile - shell\edit\command - C:\WINDOWS\System32\Notepad.exe %1 -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- R0 BTHidEnum (Bluetooth HID Enumerator) - c:\windows\system32\drivers\vbtenum.sys R0 BTHidMgr (Bluetooth HID Manager Service) - c:\windows\system32\drivers\bthidmgr.sys <Not Verified; IVT Corporation; BlueSoleil(c)> R0 ElbyVCD - c:\windows\system32\drivers\elbyvcd.sys <Not Verified; Elaborate Bytes AG; Microsoft® Windows® Operating System> R0 giveio - c:\windows\system32\giveio.sys R0 prohlp02 (StarForce Protection Helper Driver v2) - c:\windows\system32\drivers\prohlp02.sys <Not Verified; Protection Technology; StarForce Protection System> R0 prosync1 (StarForce Protection Synchronization Driver v1) - c:\windows\system32\drivers\prosync1.sys <Not Verified; Protection Technology; StarForce Protection System> R0 sfdrv01 (StarForce Protection Environment Driver (version 1.x)) - c:\windows\system32\drivers\sfdrv01.sys <Not Verified; Protection Technology; StarForce Protection System> R0 sfhlp01 (StarForce Protection Helper Driver) - c:\windows\system32\drivers\sfhlp01.sys <Not Verified; Protection Technology; StarForce Protection System> R0 sfhlp02 (StarForce Protection Helper Driver (version 2.x)) - c:\windows\system32\drivers\sfhlp02.sys <Not Verified; Protection Technology; StarForce Protection System> R0 sfsync02 (StarForce Protection Synchronization Driver (version 2.x)) - c:\windows\system32\drivers\sfsync02.sys <Not Verified; Protection Technology; StarForce Protection System> R0 sfsync03 (StarForce Protection Synchronization Driver (version 3.x)) - c:\windows\system32\drivers\sfsync03.sys <Not Verified; Protection Technology; StarForce Protection System> R0 Vax347b - c:\windows\system32\drivers\vax347b.sys R0 Vax347s - c:\windows\system32\drivers\vax347s.sys R1 hwinterface - c:\windows\system32\drivers\hwinterface.sys <Not Verified; Logix4u; hwinterface Driver Version 1.1> R1 PamelaVirtualCable (Pamela Virtual Cable) - c:\windows\system32\drivers\pvckmd.sys R1 prodrv06 (StarForce Protection Environment Driver v6) - c:\windows\system32\drivers\prodrv06.sys <Not Verified; Protection Technology; StarForce Protection System> R1 uigxrdr - c:\windows\system32\drivers\uigxrdr.sys <Not Verified; GMX GmbH; GMX Upload-Manager> R2 BTSERIAL (Bluetooth Serial Driver) - c:\windows\system32\drivers\btserial.sys R2 BTSLBCSP (Bluetooth Port Client Driver) - c:\windows\system32\drivers\btslbcsp.sys <Not Verified; WIDCOMM, Inc.; Bluetooth Software 1.4.2 Build 10> R2 ElbyCDIO (ElbyCDIO Driver) - c:\windows\system32\drivers\elbycdio.sys <Not Verified; Elaborate Bytes AG; CDRTools> R2 truecrypt - c:\windows\system32\drivers\truecrypt.sys <Not Verified; TrueCrypt Foundation; TrueCrypt> R2 VMnetBridge (VMware Bridge Protocol) - c:\windows\system32\drivers\vmnetbridge.sys <Not Verified; VMware, Inc.; VMware bridge driver (32-bit)> R2 VMnetuserif (VMware Network Application Interface) - c:\windows\system32\drivers\vmnetuserif.sys <Not Verified; VMware, Inc.; VMware network application interface driver (32-bit)> R2 VMparport (VMware VMparport) - c:\windows\system32\drivers\vmparport.sys <Not Verified; VMware, Inc.; VMware parallel port driver> R2 vmx86 (VMware vmx86) - c:\windows\system32\drivers\vmx86.sys <Not Verified; VMware, Inc.; VMware kernel driver> R2 vstor2 (Vstor2 Virtual Storage Driver) - c:\programme\gemeinsame dateien\vmware\vmware virtual image editing\vstor2.sys <Not Verified; VMware, Inc.; VMware Player> R3 BlueletAudio (Bluetooth Audio Service) - c:\windows\system32\drivers\blueletaudio.sys <Not Verified; IVT Corporation; Windows (R) 2000 DDK driver> R3 BlueletSCOAudio (Bluetooth SCO Audio Service) - c:\windows\system32\drivers\blueletscoaudio.sys <Not Verified; IVT Corporation; Windows (R) 2000 DDK driver> R3 dfmirage - c:\windows\system32\drivers\dfmirage.sys <Not Verified; DemoForge, LLC; Mirage Driver> R3 ElbyCDFL - c:\windows\system32\drivers\elbycdfl.sys <Not Verified; SlySoft, Inc.; CloneCD> R3 HCWBT8XX (Hauppauge WinTV 848/9 WDM Video Driver) - c:\windows\system32\drivers\hcwbt8xx.sys <Not Verified; Hauppauge Computer Works; WinTV WDM Driver> R3 Nokia Network Bridge Driver - c:\windows\system32\drivers\nbridge.sys <Not Verified; Nokia; Nokia Network Bridge> R3 PCAlertDriver - c:\programme\msi\core center\ntglm7x.sys <Not Verified; MICRO-STAR INT'L CO., LTD.; MSI PCAlert 4> R3 RushTopDevice - c:\programme\msi\core center\rushtop.sys <Not Verified; MICRO-STAR INT'L CO., LTD.; MSI CoreCenter> R3 VComm (Virtual Serial port driver) - c:\windows\system32\drivers\vcomm.sys <Not Verified; IVT Corporation; BlueSoleil> R3 VcommMgr (Bluetooth VComm Manager Service) - c:\windows\system32\drivers\vcommmgr.sys <Not Verified; IVT Corporation; BlueSoleil> S0 BootScreen - c:\windows\\systemroot\system32\drivers\vidstub.sys (file missing) S1 fwdrv (Firewall Driver) - c:\windows\system32\drivers\fwdrv.sys (file missing) S1 InCDPass - c:\windows\system32\drivers\incdpass.sys (file missing) S1 InCDRm (InCD Reader) - c:\windows\system32\drivers\incdrm.sys (file missing) S1 khips (Kerio HIPS Driver) - c:\windows\system32\drivers\khips.sys (file missing) S3 actser - c:\windows\system32\drivers\actser.sys <Not Verified; Siemens AG; Actser Filter Driver> S3 DFUBTUSB (WIDCOMM USB Bluetooth Driver in DFU State) - c:\windows\system32\drivers\frmupgr.sys S3 GMSIPCI - d:\install\gmsipci.sys (file missing) S3 HwIOctl - c:\programme\setup files\ms-6728 v3.a0\hwioctl.sys (file missing) S3 Memctl - c:\programme\setup files\ms-6728 v3.a0\memctl.sys (file missing) S3 NPF (NetGroup Packet Filter Driver) - c:\windows\system32\drivers\npf.sys <Not Verified; CACE Technologies; WinPcap Netgroup Packet Filter Driver> S3 PSSdk21 - c:\windows\system32\drivers\hnpssdk.drv (file missing) S3 UfasoftSnifDriver4 (Ufasoft Snif Driver v4) - c:\programme\ufasoft\icqsnif\usft_sn4.sys (file missing) S3 vsbus (Virtual Serial Bus Enumerator) - c:\windows\system32\drivers\vsb.sys S3 vserial (ELTIMA Virtual Serial Ports Driver) - c:\windows\system32\drivers\vserial.sys S3 XUIF (X10 USB Wireless Transceiver) - c:\windows\system32\drivers\x10ufx2.sys <Not Verified; X10 Wireless Technology, Inc.; X10 USB Control Interface> S4 InCDFs (InCD File System) - c:\windows\system32\drivers\incdfs.sys (file missing) -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled -------------------- R2 AntiVirScheduler (AntiVir Scheduler) - c:\programme\antivir personaledition classic\sched.exe <Not Verified; Avira GmbH; Scheduler> R2 CLCapSvc (CyberLink Background Capture Service (CBCS)) - "c:\programme\powercinema\kernel\tv\clcapsvc.exe" <Not Verified; ; CLCapSvc Module> R2 CLSched (CyberLink Task Scheduler (CTS)) - "c:\programme\powercinema\kernel\tv\clsched.exe" <Not Verified; ; CLSched Module> R2 CyberLink Media Library Service - "c:\programme\cyberlink\shared files\clml_ntservice\clmlserver.exe" <Not Verified; Cyberlink; Cyberlink Media Library Server> R2 NNServ - "c:\programme\newdotnet\nnrun.exe" "c:\programme\newdotnet\nncore.dll" servicestart <Not Verified; New.net, Inc.; New.net runner> R2 Nokia Network Bridge - c:\windows\system32\nbridge.exe <Not Verified; Nokia; Nokia Network Bridge> R2 Transbase - c:\bmwgroup\etklokal\transbase\tbmux32.exe <Not Verified; Transaction Software, D 81737 Munich; Transbase/CD Database System> R2 VMAuthdService (VMware Authorization Service) - c:\programme\vmware\vmware player\vmware-authd.exe <Not Verified; VMware, Inc.; VMware Player> R2 VMnetDHCP (VMware DHCP Service) - c:\windows\system32\vmnetdhcp.exe <Not Verified; VMware, Inc.; VMware Player> R2 vmount2 (VMware Virtual Mount Manager Extended) - "c:\programme\gemeinsame dateien\vmware\vmware virtual image editing\vmount2.exe" <Not Verified; VMware, Inc.; VMware Player> R2 VMware NAT Service - c:\windows\system32\vmnat.exe <Not Verified; VMware, Inc.; VMware Player> R2 x10nets (X10 Device Network Service) - c:\progra~1\common~1\x10\common\x10nets.exe <Not Verified; X10; x10 Module> R3 ServiceLayer - "c:\programme\pc connectivity solution\servicelayer.exe" <Not Verified; Nokia.; PC Connectivity Solution> |
24.02.2008, 13:24 | #4 |
| Dropper gefunden, kann nicht gelöscht werden - was tun?? S2 CADopia License Manager - c:\progra~1\cadopia\cadopi~1\licensemanager\lmgrd.exe <Not Verified; Macrovision Corporation; > S2 ircengnt - c:\programme\ircas alarm\bin\ircengnt.exe (file missing) S2 mcp - f:\opt\mbcase\pm\bin\mcp (file missing) S2 winvnc (VNC Server) - "c:\programme\tightvnc-unstable\winvnc.exe" -service <Not Verified; Constantin Kaplinsky; TightVNC Win32 Server> S3 konfig - f:\opt\mbcase\pm\bin\mcp (file missing) S3 license - f:\opt\mbcase\pm\bin\mcp (file missing) S3 License Management Service ESD - "c:\programme\gemeinsame dateien\element5 shared\service\licence manager esd.exe" <Not Verified; element5; License Management Service ESD> S3 rpcapd (Remote Packet Capture Protocol v.0 (experimental)) - "c:\programme\winpcap\rpcapd.exe" -d -f "c:\programme\winpcap\rpcapd.ini" <Not Verified; CACE Technologies; Remote Packet Capture Daemon> -- Device Manager: Disabled ---------------------------------------------------- No disabled devices found. -- Scheduled Tasks ------------------------------------------------------------- 2008-02-24 13:00:00 264 --ah----- C:\WINDOWS\Tasks\AE6D964F91BA0CDB.job -- Files created between 2008-01-24 and 2008-02-24 ----------------------------- 2008-02-24 13:05:01 0 d-------- C:\Programme\Trend Micro 2008-02-21 13:59:41 0 d-------- C:\Programme\Visual Basic 6.0 Runtime&Steuerelemente 2008-02-21 13:59:30 290816 -----n--- C:\WINDOWS\Setup1.exe <Not Verified; Microsoft Corporation; Microsoft Visual Basic für Windows> 2008-02-14 11:38:48 0 dr-h----- C:\Dokumente und Einstellungen\###\Recent 2008-02-10 13:29:52 0 d-------- C:\Programme\Gemeinsame Dateien\Stardock 2008-02-10 13:29:50 163712 --a------ C:\WINDOWS\System32\drivers\vidstub.sys 2008-02-10 13:29:50 0 d-------- C:\Programme\Stardock 2008-02-10 12:06:06 0 d-------- C:\Programme\TagRunner -- Find3M Report --------------------------------------------------------------- 2008-02-23 23:32:57 0 d-------- C:\Programme\3GP Video Converter 3 2008-02-23 14:40:35 0 d-------- C:\Programme\POI-Warner TT5 Edition 2008-02-23 14:34:08 13978 --ahs---- C:\WINDOWS\System32\KGyGaAvL.sys 2008-02-23 14:33:39 0 d-------- C:\Dokumente und Einstellungen\###\Anwendungsdaten\Adobe 2008-02-23 13:21:33 0 d-------- C:\Programme\Mozilla Thunderbird 2008-02-20 23:37:07 0 d-------- C:\Programme\PocketInformant 2008-02-16 11:48:37 0 d-a-s---- C:\Programme\NewDotNet 2008-02-11 09:12:20 0 d-------- C:\Programme\RadioTracker 2008-02-10 13:29:52 0 d-------- C:\Programme\Gemeinsame Dateien 2008-02-10 13:20:29 0 d-------- C:\Programme\7-Zip 2008-02-05 19:02:10 0 d-------- C:\Dokumente und Einstellungen\###\Anwendungsdaten\Azureus 2008-01-11 15:50:36 423308 --a------ C:\WINDOWS\System32\perfh007.dat 2008-01-11 15:50:36 78058 --a------ C:\WINDOWS\System32\perfc007.dat 2008-01-09 18:56:20 0 d--h----- C:\Programme\InstallShield Installation Information 2008-01-09 18:55:41 0 d-------- C:\Programme\Creative 2008-01-09 18:54:17 0 d-------- C:\Programme\Gemeinsame Dateien\Creative 2008-01-09 18:54:15 0 d--h----- C:\Programme\Creative Installation Information 2007-12-26 21:33:45 0 d-------- C:\Programme\Azureus 2007-12-08 22:14:55 57632 --a------ C:\PA7311.DAT 2007-12-05 14:17:00 593920 -----n--- C:\WINDOWS\System32\ati2sgag.exe <Not Verified; ; ATI Smart> -- Registry Dump --------------------------------------------------------------- *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{CB65344D-D97B-4046-82DC-37633BAC5FE4}] C:\WINDOWS\System32\ocmanahe.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="C:\Programme\Java\jre1.6.0_03\bin\jusched.exe" [25.09.2007 01:11] "KernelFaultCheck"="C:\WINDOWS\system32\dumprep 0 -k" [] "avgnt"="C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" [11.10.2007 10:35] "zBrowser Launcher"="C:\Programme\Logitech\iTouch\iTouch.exe" [18.03.2004 09:33] "WinVNC"="C:\Programme\TightVNC-unstable\WinVNC.exe" [05.07.2005 18:24] "QuickTime Task"="C:\Programme\QuickTime Alternative\QTSystem\qttask.exe" [05.09.2005 18:35] "Acrobat Assistant 7.0"="C:\Programme\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" [24.09.2005 06:30] "@"="" [] "PCMService"="C:\Programme\PowerCinema\PCMService.exe" [23.05.2005 17:09] "Systems.exe"="" [] "BDNewsAgent"="C:\Programme\Softwin\BitDefender8\bdnagent.exe" [09.05.2005 12:19] "PCSuiteTrayApplication"="C:\Programme\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [28.11.2006 13:12] "ISUSPM Startup"="C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe" [11.08.2005 15:30] "ISUSScheduler"="C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe" [11.08.2005 15:30] "HPDJ Taskbar Utility"="C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe" [03.11.2002 22:57] "P17Helper"="P17.dll" [03.05.2005 12:38 C:\WINDOWS\system32\P17.DLL] "UpdReg"="C:\WINDOWS\UpdReg.EXE" [11.05.2000 01:00] "BootSkin Startup Jobs"="C:\PROGRA~1\Stardock\WINCUS~1\BootSkin\BootSkin.exe" [26.04.2004 16:21] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\System32\ctfmon.exe" [29.08.2002 02:43] "Bandwidth Monitor Pro"="C:\Programme\Bandwidth Monitor Pro\Bandwidth Monitor Pro.exe" [10.02.2004 20:15] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Programme\Gemeinsame Dateien\Ahead\lib\NMBgMonitor.exe" [16.09.2005 09:47] "H/PC Connection Agent"="C:\Programme\Microsoft ActiveSync\wcescomm.exe" [15.11.2005 20:14] "System32ppHwÿÿÿÿˆØ"="C:\Programme\Spytech Software\Spytech SpyAgent\sysdiag.exe" [] "System32ppHwÿÿÿÿˆØ"="C:\Programme\Spytech Software\Spytech SpyAgent\sysdiag.exe" [] "Systems.exe"="" [] "StickSecurity"="" [] "Mega Sound Recorder"="C:\Programme\MegaSoundRecorder\ProMp3Recorder.exe" [] "Steganos3"="C:\Programme\Steganos 3\Steganos3.exe" [29.10.2001 15:16] "PcSync"="C:\Programme\Nokia\Nokia PC Suite 6\PcSync2.exe" [09.11.2006 16:15] [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "PcSync"=C:\Programme\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog C:\Dokumente und Einstellungen\All Users\Startmen\Programme\Autostart\ Adobe Acrobat - Schnellstart.lnk - C:\WINDOWS\Installer\{AC76BA86-1033-F400-7760-000000000002}\SC_Acrobat.exe [09.07.2006 13:49:37] Adobe Gamma Loader.lnk - C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe [09.02.2005 17:11:33] CoreCenter.lnk - C:\Programme\MSI\Core Center\CoreCenter.exe [05.02.2006 19:35:46] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "DisableLockWorkstation"=0 (0x0) "DisableTaskMgr"=0 (0x0) "DisableChangePassword"=0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoBandCustomize"=0 (0x0) "NoToolbarCustomize"=0 (0x0) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoBandCustomize"=0 (0x0) "NoToolbarCustomize"=0 (0x0) "NoLogOff"=0 (0x0) "noclose"=0 (0x0) [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\1] Source= C:\Dokumente und Einstellungen\###\Desktop\Wetteronline.html FriendlyName= [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Adobe Acrobat - Schnellstart.lnk] path=C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Acrobat - Schnellstart.lnk backup=C:\WINDOWS\pss\Adobe Acrobat - Schnellstart.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Adobe Gamma Loader.lnk] path=C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Gamma Loader.lnk backup=C:\WINDOWS\pss\Adobe Gamma Loader.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^AutoCAD Startup Accelerator.lnk] path=C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\AutoCAD Startup Accelerator.lnk backup=C:\WINDOWS\pss\AutoCAD Startup Accelerator.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TVTip] C:\Programme\TV Movie\TV Movie ClickFinder\tvtip.EXE /m [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\zBrowser Launcher] C:\Programme\Logitech\iTouch\iTouch.exe -- End of Deckard's System Scanner: finished at 2008-02-24 13:05:41 ------------ Deckard's System Scanner v20071014.68 Extra logfile - please post this as an attachment with your post. -------------------------------------------------------------------------------- -- System Information ---------------------------------------------------------- Microsoft Windows XP Professional (build 2600) SP 1.0 Architecture: X86; Language: German CPU 0: Intel(R) Celeron(R) CPU 2.66GHz Percentage of Memory in Use: 45% Physical Memory (total/avail): 1023.48 MiB / 561.39 MiB Pagefile Memory (total/avail): 1694.46 MiB / 1318.37 MiB Virtual Memory (total/avail): 2047.88 MiB / 1924.71 MiB A: is Removable (No Media) C: is Fixed (NTFS) - 29.29 GiB total, 2.26 GiB free. D: is CDROM (No Media) E: is Fixed (NTFS) - 97.65 GiB total, 0.54 GiB free. F: is Fixed (NTFS) - 58.59 GiB total, 3.19 GiB free. G: is CDROM (No Media) H: is CDROM (No Media) \\.\PHYSICALDRIVE0 - Maxtor 6B200M0 - 189.92 GiB - 3 partitions \PARTITION0 (bootable) - Installierbares Dateisystem - 29.29 GiB - C: \PARTITION1 - Installierbares Dateisystem - 97.65 GiB - E: \PARTITION2 - Installierbares Dateisystem - 58.59 GiB - F: -- Security Center ------------------------------------------------------------- AUOptions is set to notify before install. -- Environment Variables ------------------------------------------------------- ALLUSERSPROFILE=C:\Dokumente und Einstellungen\All Users APPDATA=C:\Dokumente und Einstellungen\###\Anwendungsdaten BHROOT=C:\bhps\mbxx1 CommonProgramFiles=C:\Programme\Gemeinsame Dateien COMPUTERNAME=BLACKY ComSpec=C:\WINDOWS\system32\cmd.exe HOMEDRIVE=C: HOMEPATH=\Dokumente und Einstellungen\### LM_LICENSE_FILE=C:\Programme\CADopia\CADopia Standard 6\cadopia.dat LOGONSERVER=\\BLACKY NLSPATH=f:\opt\MBCASE\pm\NLS NLSPATH_OLD=H:\wis\nls NUMBER_OF_PROCESSORS=1 OS=Windows_NT Path=C:\Programme\PC Connectivity Solution\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32\wbem;c:\programme\ati technologies\ati control panel;c:\nokia\update_manager\bin;c:\programme\gemeinsame dateien\gis\tools;C:\Programme\MATLAB\R2006a\bin\win32;C:\TRUMPET;C:\ISIS PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH PROCESSOR_ARCHITECTURE=x86 PROCESSOR_IDENTIFIER=x86 Family 15 Model 3 Stepping 4, GenuineIntel PROCESSOR_LEVEL=15 PROCESSOR_REVISION=0304 ProgramFiles=C:\Programme PROMPT=$P$G SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\DOKUME~1\Fire\LOKALE~1\Temp TMP=C:\DOKUME~1\Fire\LOKALE~1\Temp USERDOMAIN=BLACKY USERNAME=Fire USERPROFILE=C:\Dokumente und Einstellungen\Fire windir=C:\WINDOWS -- User Profiles --------------------------------------------------------------- Fire (admin) -- Add/Remove Programs --------------------------------------------------------- --> "C:\Programme\Creative Installation Information\CREATIVE_MEDIASOURCE_U\Setup.exe" /remove /l0x0007 --> "C:\Programme\Creative\SBAudigy\Program\Setup.exe" /S /U /W /L:GER --> C:\Programme\DivX\ConverterUninstall.exe /CONVERTER --> C:\Programme\Gemeinsame Dateien\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0 --> C:\Programme\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL --> C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL --> C:\WINDOWS\UNNeroVision.exe /UNINSTALL --> C:\WINDOWS\UNRecode.exe /UNINSTALL --> MsiExec.exe /X{E9F81423-211E-46B6-9AE0-38568BC5CF6F} --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x7 --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x7 /remove --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{88B1984E-36F0-47B8-B8DC-728966807A9C}\SETUP.EXE" -l0x7 --> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf 10-Sekunden-Haushaltsbuch 3.12 --> C:\WINDOWS\uninstall\10-Sekunden-Haushaltsbuch\setup.exe 7-Zip 4.57 --> "C:\Programme\7-Zip\Uninstall.exe" ActiveHome Scripting --> C:\WINDOWS\UNWISE.EXE C:\PROGRA~1\AHSDK\Install.log Ad-Aware SE Personal --> C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG Adobe Acrobat 7.0.5 Professional - English, Français, Deutsch --> msiexec /I {AC76BA86-1033-F400-7760-000000000002} Adobe Flash Player 9 ActiveX --> C:\WINDOWS\System32\Macromed\Flash\UninstFl.exe -q Adobe Photoshop CS --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}\setup.exe" -l0x7 Adobe Reader for Pocket PC 2.0 --> C:\Programme\Gemeinsame Dateien\InstallShield\Driver\8\Intel 32\IDriver.exe /M{291A772C-FFB9-4681-B720-AB2A0A620896} Advanced ICQ Tools --> C:\Programme\Advanced ICQ Tools\uninstall.exe Advanced PDF Password Recovery Pro --> C:\WINDOWS\UNWISE.EXE |
24.02.2008, 13:25 | #5 |
| Dropper gefunden, kann nicht gelöscht werden - was tun?? C:\WINDOWS\INSTALL.LOG Allway Sync version 6.1.6 --> "C:\Programme\Allway Sync\unins000.exe" Ant Renamer --> "C:\Programme\Ant Renamer\unins000.exe" Anti-Leech Plugin for Internet Explorer --> C:\Programme\Anti-Leech\ALIE_1.0.2.1\iesetup2.exe uninstall Anti-Leech Plugin for Netscape, Mozilla, Opera --> C:\Programme\Anti-Leech\ALNN\setup2.exe -u ATI - Software Uninstall Utility --> C:\Programme\ATI Technologies\UninstallAll\AtiCimUn.exe ATI Control Panel --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe" ATI Display Driver --> rundll32 C:\WINDOWS\System32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_classISPLAY -clean Atomic Mailbox Password Cracker 2.10 --> "C:\Programme\Atomic Mailbox Password Cracker\unins000.exe" Audiograbber 1.83 SE --> C:\WINDOWS\uninstall\Audiograbber\setup.exe AudioRecorder --> C:\PROGRAMME\audiorecorder\UninstalAR.exe AV Voice Changer Software DIAMOND 4.0 --> C:\PROGRA~1\AVVCS4~1.0DI\UNWISE.EXE C:\PROGRA~1\AVVCS4~1.0DI\INSTALL.LOG AvantGo Client --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{A90DCEC1-22DE-11D4-B8A9-0050DAB648C6}\setup.exe" -l0x7 CP Avi2Dvd 0.4.4 beta --> C:\Programme\Avi2Dvd\uninst.exe Avira AntiVir PersonalEdition Classic --> C:\Programme\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE AviSynth 2.5 --> "C:\Programme\AviSynth 2.5\Uninstall.exe" Azureus --> C:\Programme\Azureus\Uninstall.exe Bandwidth Monitor Pro --> C:\WINDOWS\unvise32.exe C:\Programme\Bandwidth Monitor Pro\uninstal.log BF Mines --> C:\Programme\Microsoft ActiveSync\BF Mines\Uninstall.exe BF Mines Biet-O-Matic v2.0.29 --> C:\PROGRA~1\BIET-O~1\UNWISE.EXE C:\PROGRA~1\BIET-O~1\Install.log BitDefender 8 Free Edition --> MsiExec.exe /I{781AECBF-F179-4032-9094-98E600A55ED5} Bluesoleil2.6.0.8 Release 070517 --> MsiExec.exe /X{438BB9B4-65FE-4626-91D9-A8F57B18001D} Bluetooth Remote Control --> MsiExec.exe /I{D7D753B4-678C-4E12-9D17-B277364B80C0} Bluetooth Software --> MsiExec.exe /X{FE90E9E7-A158-4687-8853-DF677A939A61} BootSkin --> C:\PROGRA~1\Stardock\WINCUS~1\BootSkin\UNWISE.EXE C:\PROGRA~1\Stardock\WINCUS~1\BootSkin\INSTALL.LOG CADopia Standard 6 --> C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{81D3275E-C9D2-4390-BCCE-A7CAB2C404B2} Cam4you utilities --> C:\Programme\Cam4you\UnGins.exe "C:\Programme\Cam4you\install.log" Canon IXY 200a, PowerShot S200, IXUS v2 WIA-Treiber --> C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{E6EB54E2-3FEB-4C45-B817-B8BD40E9642C} Canon Utilities RemoteCapture 2.7 --> C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{14220DB1-DD96-4BCD-B3D5-03A4EA6631C4} CARSOFT BMW V6.5 --> C:\WINDOWS\IsUninst.exe -fC:\Programme\CARSOFT\BMW\Uninst.isu CeBIT_2006 --> C:\Programme\Microsoft ActiveSync\CeBIT_2006\Uninstall.exe CeBIT_2006 ClocX (1.5b1) --> "C:\Programme\ClocX\Uninstall.exe" CloneCD --> "C:\Programme\CloneCD\ccd-uninst.exe" /D="C:\Programme\CloneCD" Comanche 4 --> C:\WINDOWS\IsUninst.exe -f"C:\Programme\Comanche 4\Uninst.isu" ControlFreak 2.7 --> C:\Programme\Winamp\Plugins\cfuninst.exe Core Center --> C:\WINDOWS\IsUninst.exe -f"C:\Programme\MSI\Core Center\Uninst.isu" CorelDRAW Graphics Suite 12 --> MsiExec.exe /I{505AFDC0-5E72-4928-8368-5DEA385E3647} CorelDRAW Graphics Suite X3 --> MsiExec.exe /I{7C5123A9-30A8-4C44-89CA-A8C87A1FCC91} Creative MediaSource 5 --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}\SETUP.EXE" -l0x7 /remove Creative Software AutoUpdate --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{88B1984E-36F0-47B8-B8DC-728966807A9C}\SETUP.EXE" -l0x7 /remove CuteFTP 6 Professional --> C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{AB18B0BA-A08F-48B8-8D0E-AA9DDDCA22EA} DATA BECKER DSL Radio-Recorder (Shared Components) --> C:\Programme\Gemeinsame Dateien\element5 Shared\Uninstall\DATA BECKER DSL RadioRecorder\B2D15000\UninstApplet.exe /uninstall DeskTask (remove only) --> "C:\Programme\DeskTask\uninstall.exe" Direct Show Ogg Vorbis Filter (remove only) --> "C:\WINDOWS\System32\OggDSuninst.exe" DivX --> C:\Programme\DivX\DivXCodecUninstall.exe /CODEC DivX Converter --> C:\Programme\DivX\ConverterUninstall.exe /CONVERTER DivX Player --> C:\Programme\DivX\DivXPlayerUninstall.exe /PLAYER DivxToDVD 0.5.2 --> "C:\Programme\DivxToDVD\unins000.exe" Download Accelerator Plus --> C:\PROGRA~1\DAP\DAPREMOVE.EXE Dr. DivX Trial --> C:\Programme\DivX\DrDivXUninstall.exe /DRDIVX DynDNS Updater 3.1 --> "C:\Programme\DynDNS Updater\unins000.exe" EasyGPS --> "C:\Programme\EasyGPS\unins000.exe" EAX4 Unified Redist --> MsiExec.exe /X{89661B04-C646-4412-B6D3-5E19F02F1F37} eBay Startcenter --> "C:\Programme\klickTel\eBay Startcenter\Uninstall.exe" "C:\Programme\klickTel\eBay Startcenter\install.log" ElsterFormular 2004/2005 --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{03EB79B7-2152-4C98-AEA0-254F881A3275}\setup.exe" -l0x7 -removeonly ElsterFormular 2006/2007 --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{CBBCBE04-EA5E-4201-A924-E7ED3E8686AE}\setup.exe" -l0x7 -removeonly eMule Plus 1.2c --> "C:\Programme\eMule\unins000.exe" EPC Flexible Publishing 1.1 --> "C:\bhps\Instlr4\bin\uninstaller.exe" -iMBXX -lg -n"EPC Flexible Publishing 1.1" -p"C:\bhps\mbxx1" -r"C:\bhps\Instlr4" EphPod --> C:\PROGRA~1\EphPod\UNWISE.EXE C:\PROGRA~1\EphPod\INSTALL.LOG ES --> MsiExec.exe /I{CBFAD664-763E-4A7D-BF92-BB0E493F3C66} Etk --> C:\WINDOWS\unin0407.exe -fC:\Programme\BMW95\etk\uninst\DeIsL1.isu ETK (Lokal) --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{EC17C160-E2F0-47CC-86D4-140AE22EC38E}\setup.exe" -l0x7 eXtreme Movie Manager 4.8 (Build 1 SHAREWARE) - Full Installati --> "C:\Programme\eXtreme Movie Manager\unins000.exe" Feiertage --> C:\Programme\Microsoft ActiveSync\Feiertage\Uninstall.exe Feiertage FileZilla (remove only) --> "C:\Programme\FileZilla\uninstall.exe" FinePrint 2000 --> C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpinst4.exe /uninstall FontNav --> MsiExec.exe /I{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE} Free YouTube to Mp3 Converter version 2.4 --> "C:\Programme\ YouTube to Mp3 Converter\unins000.exe" fring --> "C:\Programme\fring\uninstall.exe" Girder 3.2 --> C:\Programme\girder32\unins000.exe GMX NetPhone --> C:\Programme\GMX\GMX NetPhone\uninst.exe GMX Upload-Manager --> C:\Programme\GMX\GMX Upload-Manager\uninst.exe Google Earth --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}\setup.exe" -l0x9 -removeonly Google Earth Pro --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{48EE6C79-1CE2-4CE8-B511-F2140B6781D6}\setup.exe" -l0x9 -removeonly GPS Tuner (remove only) --> "C:\Programme\GPS Tuner\uninst.exe" GPSdash2 (remove only) --> "C:\Programme\GPSdash2\uninst.exe" GpsGate --> C:\Programme\Microsoft ActiveSync\GpsGate\Uninstall.exe GpsGate GpsViewer --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{CE50F917-DF17-4EF9-B391-1B5B0920B73F}\Setup.exe" GpxView --> C:\Programme\Microsoft ActiveSync\GpxView\Uninstall.exe GpxView Graph Paper Printer 5.4.0.2 --> C:\Programme\GraphPap\unins000.exe GXTranscoder MP3 Support --> C:\WINDOWS\GXTranscoder MP3 Support Uninstaller.exe GXTranscoder v2 --> C:\WINDOWS\GXTranscoder v2 Uninstaller.exe h1940-2200 btfix --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{F232FD34-EF82-41C7-A5EA-3B98880E2335}\Setup.exe" Hauppauge WinTV Infrared Remote --> C:\PROGRA~1\WinTV\UNir32.EXE C:\PROGRA~1\WinTV\ir32.LOG Hauppauge WinTV2000 --> C:\PROGRA~1\WinTV\UNTV32.EXE C:\PROGRA~1\WinTV\WINTV2K.LOG hp deskjet 3320 series (nur entfernen) --> C:\Programme\hp deskjet 3320 series\hpfiui.exe -c -vdivid=HPF -vpnum=95 -vinstport=USB001 -vproduct=3320 -huninstall Image Analyzer --> C:\Programme\ImageAnalyzer\Uninstall.exe Image Converter .EXE 2.0.0.77 --> "C:\Programme\Image Converter .EXE\unins000.exe" IMMonitor MSN Spy --> "C:\Programme\IMMonitor\IMMonitor MSN Spy\unins000.exe" Inkscape 0.45.1 --> "C:\Programme\Inkscape\uninst.exe" Interaktive Kartenwerke 3D --> C:\WINDOWS\IsUn0407.exe -f"C:\Programme\Magic Maps\Interaktive Kartenwerke 3D\Uninst.isu" iPod2PC 3.9.2 --> "C:\Programme\iPod2PC\unins000.exe" IRCAS Alarm --> MsiExec.exe /I{2EDDAA1D-9E96-48E4-8B17-3CFFB927D828} J2SE Runtime Environment 5.0 Update 1 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150010} J2SE Runtime Environment 5.0 Update 10 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100} J2SE Runtime Environment 5.0 Update 11 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110} J2SE Runtime Environment 5.0 Update 2 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150020} J2SE Runtime Environment 5.0 Update 5 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150050} J2SE Runtime Environment 5.0 Update 6 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060} J2SE Runtime Environment 5.0 Update 9 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150090} Java(TM) 6 Update 2 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020} Java(TM) 6 Update 3 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030} Java(TM) SE Runtime Environment 6 Update 1 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010} Kalender-Excel 8.3 --> "E:\Kalender-Excel\unins000.exe" Kaminfeuer Titanium Edition --> C:\WINDOWS\ST5UNST.EXE -n "C:\Programme\Kaminfeuer Titanium Edition\ST5UNST.LOG" KC Softwares PhotoToFilm --> C:\Programme\PhotoToFilm\unins000.exe klickTel Herbst 2006 --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{387B3424-154C-4429-BEAE-EAD6C3E32F29}\Setup.exe" -l0x7 -removeonly klickTel Toolbar --> MsiExec.exe /X{09B71899-5174-4995-AD57-B326C128584C} Lame ACM MP3 Codec --> C:\WINDOWS\System32\rundll32.exe setupapi,InstallHinfSection Remove_LameMP3 132 C:\WINDOWS\INF\LameACM.inf Leo's Flight Simulator for PocketPC 0.7 --> "C:\Programme\Leo's Flight Simulator\unins000.exe" ListPro for Pocket PC --> "C:\Programme\Microsoft ActiveSync\ListPro PKT\ListPro\RemovePPC.exe" ListPro PKT Logitech iTouch Software --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{036AA4D4-6D32-11D4-9875-00105ACE7734}\Setup.exe" -l0x7 UNINSTALL MagicMaps2Go --> C:\Programme\Microsoft ActiveSync\MagicMaps2Go\Uninstall.exe MagicMaps2Go Map Calibrator 1.8 --> C:\Programme\Map Calibrator\uninst.exe MathType 5 --> "C:\Programme\MathType\Setup.exe" -R MATLAB R2006a --> C:\Programme\MATLAB\R2006a\uninstall\uninstall.exe C:\Programme\MATLAB\R2006a\ Maxthon Browser (remove only) --> C:\Programme\Maxthon\MaxthonUINST.exe MAZDA EPC2 --> C:\PROGRA~1\MAZEPC\UNINST.EXE C:\PROGRA~1\MAZEPC\INSTALL.LOG Mega Sound Recorder 1.3.0.0 --> "C:\Programme\MegaSoundRecorder\unins000.exe" Mercedes-Benz PM --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{8D727847-8F88-4CC9-875E-A323ED5773C4}\SETUP.EXE" -clean Microsoft .NET Compact Framework 1.0 SP3 --> MsiExec.exe /I{32A0FE82-9DE1-4D5E-B860-8018E725AE37} Microsoft ActiveSync 4.0 --> MsiExec.exe /I{B208806F-A231-4FA0-AB3F-5C1B8979223E} Microsoft Office Professional Edition 2003 --> MsiExec.exe /I{90110407-6000-11D3-8CFE-0150048383C9} Microsoft Windows CE 5.0 Emulator --> MsiExec.exe /X{6C7DDE5A-6A22-4D65-BA0F-AB41289A1E70} Microsoft Windows Script Host --> rundll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\wsh.inf,Uninstall.NT Miranda IM --> "C:\Programme\Miranda IM\Uninstall\unins000.exe" MobiMB Mobile Media Browser --> C:\Programme\MobiMB Mobile Media Browser\_Unins.exe Mosaic Creator 1.0 --> C:\Programme\MosaicCreator\unins000.exe Mosaic Magic --> C:\WINDOWS\IsUninst.exe -f"C:\Programme\Fishsoft\Mosaic Magic\Uninst.isu" Mozilla Firefox (2.0.0.12) --> C:\Programme\Mozilla Firefox\uninstall\helper.exe Mozilla Thunderbird (2.0.0.9) --> C:\Programme\Mozilla Thunderbird\uninstall\helper.exe Mpeg Layer3 Codec FHG-Radium v1.263 --> C:\WINDOWS\UNWISE.EXE C:\PROGRA~1\mp3codec\INSTALL.LOG My Application --> C:\Programme\Microsoft ActiveSync\My Application\Uninstall.exe My Application navigating.de POI-Warner TT5 Edition --> "C:\WINDOWS\epsuninst.exe" "C:\Programme\POI-Warner TT5 Edition\uninst.dat" Navio --> C:\Programme\Microsoft ActiveSync\Navio\Uninstall.exe Navio Nero 7 Premium --> MsiExec.exe /I{4781569D-5404-1F26-4B2B-6DF444441031} New.net Domains 8.0 build 832 --> C:\Programme\NewDotNet\uninstall.exe NGGlobus --> C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{65C01718-8CC4-4C4A-B2BE-6FCE18AFC38C} NH-Top50Trans Version 3.6 --> "C:\Programme\NH-TopTrans\unins000.exe" Niedersachsen/Bremen 3D --> C:\WINDOWS\IsUn0407.exe -f"C:\Programme\Niedersachsen und Bremen 3D\Uninst.isu" Nimo Codecs Pack v5.0 (Remove Only) --> "C:\Programme\NimoCodec Pack\uninstall.exe" Nokia Connectivity Cable Driver --> MsiExec.exe /X{3BFFC6B8-4EC0-4240-858C-998FD4077983} Nokia E-Mail Configuration Tool 1.0 --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{63AF05D4-860D-4FC7-825E-AEF8C66D1266}\setup.exe" -l0x9 Nokia Network Bridge --> C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\10\INTEL3~1\IDriver.exe /M{24F1806B-192F-4E9B-B845-50227B50A159} /l1031 Nokia PC Suite --> MsiExec.exe /I{02091327-B124-4216-9D71-58C0E24F5392} Nokia Series 40 Theme Studio 1.2 --> "C:\Programme\Nokia\Themes\Uninstall Nokia_S40_Theme_Studio_1_2\Uninstall Nokia Series 40 Theme Studio.exe" Nokia Update Manager 2.0 --> "C:\Nokia\Update_Manager\UninstallerData_UM_2_0\Uninstall Nokia Update Manager.exe" Opera 9.24 --> MsiExec.exe /X{16913489-B5E3-403E-AFD3-2B19BBE464D4} Oxygen Phone Manager fuer Handys mit dem Symbian Betriebssystem (Trial-Version) --> C:\PROGRA~1\OXYGEN~1\SYMBIA~1\\UNWISE.EXE C:\PROGRA~1\OXYGEN~1\SYMBIA~1\\INSTALL.LOG Oxygen Phone Manager II fuer Nokia handys --> C:\PROGRA~1\OXYGEN~1\OPM2\\UNWISE.EXE C:\PROGRA~1\OXYGEN~1\OPM2\\INSTALL.LOG P2P TV Recorder --> "C:\Programme\P2PTVRecorder\unins000.exe" Pamela Basic 1.38a --> C:\Programme\Pamela\Uninst.exe PantsOff 2.0 --> C:\Programme\PantsOff\unins000.exe PC Connectivity Solution --> MsiExec.exe /I{04F3BF74-9E34-4D3E-93C3-D3D1F24199C8} PC Inspector smart recovery --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{C9A87D86-FDFD-418B-BF96-EF09320973B3}\Setup.exe" -l0x7 PC VGA Camera --> C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{E2A36CC2-531D-4BD7-BB75-69F51CB31305} /l1031 PDAmill Viewer for PocketPC --> C:\WINDOWS\UnGins.exe "C:\Programme\PDAmill\Pocket PC\Viewer\install.log" PDF Password Remover v2.2 --> "C:\Programme\PDF Password Remover v2.2\unins000.exe" phase5 --> "C:\Programme\phase5\uninstall.exe" Phone Profiles --> "C:\WINDOWS\epsuninst.exe" "C:\Programme\JGUI\PhoneProfiles\uninst.dat" Pocket Backup Plus --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{ABC5404F-F0F3-4221-8DB9-5D34DD866E50}\Setup.exe" -l0x9 Pocket Earth ARM --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{1E85EE4D-7C14-4F17-80D6-6F7208D82096}\Setup.exe" Pocket Informant --> "C:\Programme\PocketInformant\Uninstall.exe" "C:\WINDOWS\install.log" Pocket Informant Pro 2005 --> C:\Programme\Pocket Informant\uninst.exe Pocket Lookout --> C:\Programme\Pocket Lookout\uninstall.exe Pocket PC-Verbindungsassistent --> C:\WINDOWS\IsUn0407.exe -f"C:\Programme\Microsoft ActiveSync\cmdtwiz.isu" pocket Theme Manager --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{D775DBD0-E807-420D-836C-EBBC635E1ECA}\Setup.exe" POIWarner V. 1.22 --> C:\Programme\Microsoft ActiveSync\POIWarner V. 1.22\Uninstall.exe POIWarner V. 1.22 PowerCinema 4.0 --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe" -uninstall PPC 2003 eVB --> C:\Programme\Microsoft ActiveSync\PPC 2003 eVB\Uninstall.exe PPC 2003 eVB QuickBurn BETA v1.0a for Winamp --> "C:\Programme\QuickBurn MP3 BETA\unins000.exe" QuickTime Alternative 1.60 --> "C:\Programme\QuickTime Alternative\unins000.exe" Radiotracker 3.0.0.34 --> "C:\Programme\RadioTracker\unins001.exe" RealPlayer --> C:\Programme\Gemeinsame Dateien\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0 Resco Audio Recorder --> C:\WINDOWS\RSetupCE.exe -uninstC:\Programme\Resco\Audio Recorder\_Install.log Resco File Explorer v3.80 --> "C:\WINDOWS\psuninst2.exe" "C:\Programme\Microsoft ActiveSync\File Explorer v3.80\uninst.dat" River Past Cam In Style --> C:\WINDOWS\Cam In Style Uninstaller.exe RK-WLAN-Keygen --> "C:\Programme\RK-WLAN-Keygen\unins000.exe" Rossmann easy-order 3.03 --> C:\WINDOWS\UnDeploy.exe "C:\Programme\Rossmann\easy-order\Deploy.log" Rossmann Fotoservice --> "C:\Programme\Rossmann Fotoservice\unins000.exe" Search Plugin --> C:\DOKUME~1\Fire\ANWEND~1\HTMREA~1\balm tray.exe -uninstall Security Task Manager 1.6 --> C:\Programme\Security Task Manager\Uninstal.exe "C:\DOKUME~1\ALLUSE~1\Startmenü\Programme\Security Task Manager" ShortcutManager --> C:\Programme\Microsoft ActiveSync\ShortcutManager\Uninstall.exe ShortcutManager Sicherheitsupdate für Windows XP (KB890046) --> "C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB893066) --> "C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB893756) --> "C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB896358) --> "C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB896422) --> "C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB896423) --> "C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB896424) --> "C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB896426) --> "C:\WINDOWS\$NtUninstallKB896426$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB896428) --> "C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB899587) --> "C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB899589) --> "C:\WINDOWS\$NtUninstallKB899589$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB899591) --> "C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB900725) --> "C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB901017) --> "C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe" |
24.02.2008, 13:26 | #6 |
| Dropper gefunden, kann nicht gelöscht werden - was tun?? Sicherheitsupdate für Windows XP (KB901214) --> "C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB902400) --> "C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB904706) --> "C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB905414) --> "C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB905495) --> "C:\WINDOWS\$NtUninstallKB905495$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB905749) --> "C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB908519) --> "C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB908531) --> "C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB911280) --> "C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB911562) --> "C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB911927) --> "C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB912919) --> "C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB913446) --> "C:\WINDOWS\$NtUninstallKB913446$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB913580) --> "C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB914388) --> "C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB914389) --> "C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB914798) --> Sicherheitsupdate für Windows XP (KB917159) --> "C:\WINDOWS\$NtUninstallKB917159$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB917344) --> "C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB917422) --> "C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB917953) --> "C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB919007) --> "C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB920670) --> "C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB920683) --> "C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB920685) --> "C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB921398) --> "C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB921883) --> "C:\WINDOWS\$NtUninstallKB921883$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB922616) --> "C:\WINDOWS\$NtUninstallKB922616$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB922819) --> "C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB923191) --> "C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB923414) --> "C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB924191) --> "C:\WINDOWS\$NtUninstallKB924191$\spuninst\spuninst.exe" Sicherheitsupdate für Windows XP (KB924496) --> "C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe" SkyForce --> C:\Programme\Microsoft ActiveSync\SkyForce\Uninstall.exe SkyForce Skype 3.0 --> "C:\Programme\Skype\Phone\unins000.exe" Skype Plugin Manager --> MsiExec.exe /I{3D5E5C0A-5B36-4F98-99A7-287F7DBDCE03} smart2go Maploader --> C:\Programme\smart2go Maploader\Uninstall.exe SMMesser - Deinstallation --> "C:\Programme\SMMesser\unins000.exe" Sound Blaster Audigy --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{1B1DDAD2-C704-49F8-8FC2-18DAAD9A87C5}\SETUP.EXE" -l0x7 /remove SoundExplorer --> C:\Programme\Microsoft ActiveSync\SoundExplorer\Uninstall.exe SoundExplorer Spb Weather --> C:\Programme\Microsoft ActiveSync\Spb Weather\Uninstall.exe Spb Weather SpbTime --> C:\Programme\Microsoft ActiveSync\Spb Time\Uninstall.exe SpbTime SpeedFan (remove only) --> "C:\Programme\SpeedFan\uninstall.exe" Spoiler Sync --> C:\Programme\SpoilerSync\unins000.exe SqrSoft® Advanced Crossfading (remove only) --> "C:\Programme\Winamp\unout_sqr.exe" Steganos 3 Release 7 Compact Edition --> MsiExec.exe /X{AD030748-5E48-11D4-A2AB-0050BAEF260F} StickSecurity --> "C:\Programme\HomedomSoftware\StickSecurity\uninstall.exe" Streamee 1.1 --> C:\WINDOWS\AKDeInstall.exe "/C:\Programme\Streamee\" StuffIt Standard --> C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\10\INTEL3~1\IDriver.exe /M{40ABF1E0-8B6F-4D32-B343-E19FA2F04B3C} Sysadm --> C:\WINDOWS\unin0407.exe -fC:\BMW95\sysadm\uninst\DeIsL1.isu TagRunner 2.0 --> "C:\Programme\TagRunner\unins000.exe" tcpmon latest release --> C:\WINDOWS\System32\javaws.exe -uninstall "https://tcpmon.dev.java.net/tcpmon.jnlp" THE Rename 2.1.6 --> "C:\Programme\THE Rename\unins000.exe" Theme Generator V2 --> MsiExec.exe /X{4FD05420-333C-4233-94A6-9759430D6C2A} TightVNC 1.2.9 --> C:\Programme\TightVNC\unins000.exe TIPocketEmulator --> C:\Programme\Microsoft ActiveSync\TIPocketEmulator\Uninstall.exe TIPocketEmulator Tis --> C:\WINDOWS\unin0407.exe -fC:\Programme\BMW95\tis\uninst\DeIsL1.isu TreeSize Professional 3 --> "C:\Programme\TreeSize Professional\unins000.exe" TrueCrypt --> C:\WINDOWS\TrueCrypt Setup.exe /u Ufasoft ICQ Snif 2.2.35 --> C:\Programme\Ufasoft\IcqSnif\setup.exe /u "C:\Programme\Ufasoft\IcqSnif\setup.inf" Ultra AVI Converter 1.2.8 --> "C:\Programme\Ultra AVI Converter\unins000.exe" Update für Windows XP (KB835409) --> "C:\WINDOWS\$NtUninstallKB835409$\spuninst\spuninst.exe" Update für Windows XP (KB898461) --> "C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe" Update für Windows XP (KB910437) --> "C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe" Update Manager --> MsiExec.exe /I{F428D0FB-765D-40EB-BDD8-A1E7F5C597FA} VBA --> MsiExec.exe /I{C94E45B0-6AA6-4FB9-9AAE-22085F631880} VBirthday --> C:\Programme\Microsoft ActiveSync\VBirthday\Uninstall.exe VBirthday VeryPDF PDF Editor v2.2 --> "C:\Programme\VeryPDF PDF Editor v2.2\unins000.exe" VeryPDF PDF2Word v2.0 --> "C:\Programme\VeryPDF PDF2Word v2.0\unins000.exe" Video Converter 3 --> C:\Programme\Xilisoft\Video Converter 3\Uninstall.exe VideoLAN VLC media player 0.8.6c --> C:\Programme\VideoLAN\VLC\uninstall.exe Visual Basic 6.0 Runtime&Steuerelemente --> C:\WINDOWS\st6unst.exe -n "C:\Programme\Visual Basic 6.0 Runtime&Steuerelemente\ST6UNST.LOG" VisualGPS --> C:\PROGRA~1\VGPS\VISUAL~1\UNWISE.EXE C:\PROGRA~1\VGPS\VISUAL~1\INSTALL.LOG VitoNavigator2 --> C:\Programme\Microsoft ActiveSync\VitoNavigator2\Uninstall.exe VitoNavigator2 VmNetBrowser --> C:\Programme\Microsoft ActiveSync\VmNetBrowser\Uninstall.exe VmNetBrowser VMware Player --> MsiExec.exe /I{31799B14-B3E7-4522-B393-6206C03EC5D3} Web Stream Recorder Pro 1.61 --> C:\Programme\Sytexis Software\Web Stream Recorder Pro\uninstall.exe WebCamMonitor V2.52 --> "C:\Programme\WebCamMonitor\unins000.exe" WetterplugIN 2 --> "C:\WINDOWS\epsuninst.exe" "C:\Programme\WetterplugIN 2\uninst.dat" Winamp --> "C:\Programme\Winamp\UninstWA.exe" Windows Driver Package - Nokia (WUDFRd) WPD (11/03/2006 6.82.26.2) --> C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe /u C:\WINDOWS\System32\DRVSTORE\pccswpddri_6B630EE2E66584353C6CD8683D447072872F34D8\pccswpddriver.inf Windows Driver Package - Nokia Modem (11/03/2006 6.82.0.1) --> C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe /u C:\WINDOWS\System32\DRVSTORE\nokbtmdm_4EFFAAE27A08EDFDE145390033D8EF099DA65567\nokbtmdm.inf Windows Installer 3.0 (KB884016) --> C:\WINDOWS\$MSI30UninstallMSI30-KB884016$\spuninst\spuninst.exe Windows Media Encoder 9 Series --> msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E} Windows Media Encoder 9 Series --> MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E} Windows XP-Hotfix - KB823182 --> C:\WINDOWS\$NtUninstallKB823182$\spuninst\spuninst.exe Windows XP-Hotfix - KB823559 --> C:\WINDOWS\$NtUninstallKB823559$\spuninst\spuninst.exe Windows XP-Hotfix - KB824105 --> C:\WINDOWS\$NtUninstallKB824105$\spuninst\spuninst.exe Windows XP-Hotfix - KB828035 --> C:\WINDOWS\$NtUninstallKB828035$\spuninst\spuninst.exe Windows XP-Hotfix - KB829558 --> Windows XP-Hotfix - KB833407 --> C:\WINDOWS\$NtUninstallKB833407$\spuninst\spuninst.exe Windows XP-Hotfix - KB833987 --> C:\WINDOWS\$NtUninstallKB833987$\spuninst\spuninst.exe Windows XP-Hotfix - KB835732 --> C:\WINDOWS\$NtUninstallKB835732$\spuninst\spuninst.exe Windows XP-Hotfix - KB837001 --> C:\WINDOWS\$NtUninstallKB837001$\spuninst\spuninst.exe Windows XP-Hotfix - KB839645 --> C:\WINDOWS\$NtUninstallKB839645$\spuninst\spuninst.exe Windows XP-Hotfix - KB840374 --> C:\WINDOWS\$NtUninstallKB840374$\spuninst\spuninst.exe Windows XP-Hotfix - KB840987 --> C:\WINDOWS\$NtUninstallKB840987$\spuninst\spuninst.exe Windows XP-Hotfix - KB841356 --> C:\WINDOWS\$NtUninstallKB841356$\spuninst\spuninst.exe Windows XP-Hotfix - KB841533 --> C:\WINDOWS\$NtUninstallKB841533$\spuninst\spuninst.exe Windows XP-Hotfix - KB841873 --> C:\WINDOWS\$NtUninstallKB841873$\spuninst\spuninst.exe Windows XP-Hotfix - KB842773 --> C:\WINDOWS\$NtUninstallKB842773$\spuninst\spuninst.exe Windows XP-Hotfix - KB871250 --> C:\WINDOWS\$NtUninstallKB871250$\spuninst\spuninst.exe Windows XP-Hotfix - KB873339 --> C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe Windows XP-Hotfix - KB873376 --> C:\WINDOWS\$NtUninstallKB873376$\spuninst\spuninst.exe Windows XP-Hotfix - KB885250 --> C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe Windows XP-Hotfix - KB885835 --> C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe Windows XP-Hotfix - KB885836 --> C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe Windows XP-Hotfix - KB888113 --> C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe Windows XP-Hotfix - KB888302 --> C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe Windows XP-Hotfix - KB890859 --> "C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe" Windows XP-Hotfix - KB891781 --> C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe Windows XP-Hotfix - KB892944 --> "C:\WINDOWS\$NtUninstallKB892944$\spuninst\spuninst.exe" Windows XP-Hotfix - KB896688 --> "C:\WINDOWS\$NtUninstallKB896688-IE6SP1-20051004.130236$\spuninst\spuninst.exe" Windows XP-Hotfix - KB897715 --> "C:\WINDOWS\$NtUninstallKB897715-OE6SP1-20050503.210336$\spuninst\spuninst.exe" Windows XP-Hotfix - KB905915 --> "C:\WINDOWS\$NtUninstallKB905915-IE6SP1-20051122.175908$\spuninst\spuninst.exe" Windows XP-Hotfix - KB912812 --> "C:\WINDOWS\$NtUninstallKB912812-IE6SP1-20060322.182418$\spuninst\spuninst.exe" Windows XP-Hotfix - KB916281 --> "C:\WINDOWS\$NtUninstallKB916281-IE6SP1-20060526.162249$\spuninst\spuninst.exe" Windows XP-Hotfix - KB918439 --> "C:\WINDOWS\$NtUninstallKB918439-IE6SP1-20060530.145346$\spuninst\spuninst.exe" Windows XP-Hotfix - KB918899 --> "C:\WINDOWS\$NtUninstallKB918899-IE6SP1-20060725.123917$\spuninst\spuninst.exe" Windows XP-Hotfix - KB925486 --> "C:\WINDOWS\$NtUninstallKB925486-IE6SP1-20060918.120000$\spuninst\spuninst.exe" Windows XP-Hotfix (SP2) Q329170 --> C:\WINDOWS\$NtUninstallQ329170$\spuninst\spuninst.exe Windows XP-Hotfix (SP2) Q329441 --> C:\WINDOWS\$NtUninstallQ329441$\spuninst\spuninst.exe Windows XP-Hotfix (SP2) Q810565 --> C:\WINDOWS\$NtUninstallQ810565$\spuninst\spuninst.exe Windows XP-Hotfix (SP2) Q810833 --> C:\WINDOWS\$NtUninstallQ810833$\spuninst\spuninst.exe Windows XP-Hotfix (SP2) Q814033 --> C:\WINDOWS\$NtUninstallQ814033$\spuninst\spuninst.exe Windows XP-Hotfix (SP2) Q817606 --> C:\WINDOWS\$NtUninstallQ817606$\spuninst\spuninst.exe Windows XP-Hotfixpaket [Weitere Informationen unter Q329048] --> C:\WINDOWS\$NtUninstallQ329048$\spuninst\spuninst.exe Windows XP-Hotfixpaket [Weitere Informationen unter Q329115] --> C:\WINDOWS\$NtUninstallQ329115$\spuninst\spuninst.exe Windows XP-Hotfixpaket [Weitere Informationen unter Q329390] --> C:\WINDOWS\$NtUninstallQ329390$\spuninst\spuninst.exe Windows XP-Hotfixpaket [Weitere Informationen unter Q329834] --> C:\WINDOWS\$NtUninstallQ329834$\spuninst\spuninst.exe WinHTTrack Website Copier 3.40-2 --> "C:\Programme\WinHTTrack\unins000.exe" WinPcap 3.1 --> C:\Programme\WinPcap\uninstall.exe WinRAR --> C:\Programme\WinRAR\uninstall.exe WisBar Advance --> C:\Programme\Microsoft ActiveSync\WisBar Advance\Uninstall.exe WisBar Advance WisBar Advance 2 --> "C:\Programme\Microsoft ActiveSync\WisBar Advance 2\unins000.exe" X10 Hardware(TM) --> C:\WINDOWS\UNWISE.EXE C:\PROGRA~1\X10HAR~1\Install.log X10Remote Winamp Plugin 0.52 --> C:\Programme\Winamp\Plugins\uninst.exe Xilisoft 3GP Video Converter --> C:\Programme\3GP Video Converter 3\Uninstall.exe XPlite --> "C:\DOKUME~1\Fire\LOKALE~1\Temp\Rar$EX00.610\Xplite 1.0 Gold.exe" /uninstall XviD MPEG-4 Codec --> "C:\Programme\XviD\UninstXviD.exe" YouRipper --> C:\Programme\You Ripper\Uninst.exe ZIP PASSWORD FINDER --> C:\WINDOWS\UnGins.exe "C:\Programme\ZIP PASSWORD FINDER\install.log" -- Application Event Log ------------------------------------------------------- No Errors/Warnings found. -- Security Event Log ---------------------------------------------------------- No Errors/Warnings found. -- System Event Log ------------------------------------------------------------ No Errors/Warnings found. -- End of Deckard's System Scanner: finished at 2008-02-24 13:05:41 ------------ |
24.02.2008, 18:54 | #7 | |
> MalwareDB | Dropper gefunden, kann nicht gelöscht werden - was tun??Zitat:
Im Faq Bereiche findest Du eine Anleitung. |
Themen zu Dropper gefunden, kann nicht gelöscht werden - was tun?? |
1.tmp, ahnung, aktion, angezeigt, antivir, avira, avira antivir, datei, dropper, folge, folgende, fund, gelöscht, jeglicher, kann nicht gelöscht werden, keine ahnung, löschen, neues, neustart, programm, quara, quarantäne, schnelle hilfe, temp, unerwünschtes programm, update, virus, was tun, was tun?, zugriff |